Return to developer_key_signing.mdwn CVS log

Up to [NetBSD Developer Wiki] / wikisrc

web commit by cyber

    1: # Developer Key Signing
    2: 
    3: Developers need to generate, maintain, and sign keys to keep a web of trust.  The following are shortcut commands to accomplish this.
    4: 
    5: Many of the commands will have various prompts that should be obvious (selecting keys out of a list, entering passphrases, etc).  That verbage has been eliminated from the examples.
    6: 
    7: 
    8: * Key Generation
    9: * Extend Expiration
   10: * Key Uploading
   11: * Key Download
   12: * Key Signing
   13: * Signature Upload
   14: 
   15: ## Key Generation 
   16: *TBD*
   17: 
   18: ## Extending Expiration
   19: 
   20: Your key will eventually expire.  You can extend the key expiration time:
   21: 
   22: netpgp:
   23: [[!template  id=programlisting text="""
   24: unsupported at this time.
   25: """]]
   26: 
   27: gpg:
   28: [[!template  id=programlisting text="""
   29: # gpg --edit-key C631C69E
   30: Command> expire
   31: Key is valid for? (0) 5y
   32: """]]
   33: 
   34: You will need to re-upload to the key-server.
   35: 
   36: ## Key Uploading
   37: 
   38: gpg:
   39: [[!template  id=programlisting text="""
   40: # gpg --keyserver pgp.mit.edu --send-keys C631C69E
   41: """]]
   42: 
   43: 
   44: ## Key Download
   45: 
   46: If you have the fingerprint, it's pretty easy to download the key.  This will import into your keychain.
   47: 
   48: netpgp: (Only if already downloaded from keyserver.)
   49: [[!template  id=programlisting text="""
   50: # netpgpkeys --import-key  file
   51: """]]
   52: 
   53: gpg:
   54: [[!template  id=programlisting text="""
   55: # gpg --keyserver pgp.mit.edu --search-keys C631C69E
   56: """]]
   57: 
   58: 
   59: 
   60: ## Key Signing
   61: 
   62: gpg:
   63: [[!template  id=programlisting text="""
   64: # gpg --default-key cyber@netbsd.org --sign-key C631C69E
   65: """]]
   66: 
   67: 
   68: ## Signature Upload
   69: 
   70: gpg:
   71: [[!template  id=programlisting text="""
   72: # gpg --keyserver pgp.mit.edu --send-keys E361D0FA
   73: """]]