File suse-build-key.changes of Package suse-build-key

Overview Repositories Revisions Requests Users Attributes Meta

File suse-build-key.changes of Package suse-build-key (Revision c86fffdee84e4d9ff0b3a33786b52169)

Currently displaying revision c86fffdee84e4d9ff0b3a33786b52169 , Show latest

-------------------------------------------------------------------
Thu Nov 16 12:50:14 UTC 2023 - Marcus Meissner <meissner@suse.com>

- replace libzypp-post-script based installation with a systemd timer
  and service.
  - suse-build-key-import.service
  - suse-build-key-import.timer

-------------------------------------------------------------------
Fri Sep  8 09:41:33 UTC 2023 - Marcus Meissner <meissner@suse.com>

- add and run a import-suse-build-key scripts, this will be ran
  after installation with libzypp based installers. (jsc#PED-2777)

-------------------------------------------------------------------
Tue Feb  7 10:41:12 UTC 2023 - Marcus Meissner <meissner@suse.com>

- Establish multiple new 4096 RSA keys that we will switch 
  to mid of 2023. (jsc#PED-2777)
  - gpg-pubkey-3fa1d6ce-63c9481c.asc: new 4096 RSA signing key for SLE (RPM+repos).
  - gpg-pubkey-d588dc46-63c939db.asc: new 4096 RSA reserver key for SLE (RPM+repos).
  - suse_ptf_key_4096.asc: new 4096 RSA signing key for PTF RPMs.
  - build-container-8fd6c337-63c94b45.asc/build-container-8fd6c337-63c94b45.pem:
    new RSA 4096 key for the SUSE registry registry.suse.com, installed as
    suse-container-key-2023.pem and suse-container-key-2023.asc
  - suse_ptf_containerkey_2023.asc suse_ptf_containerkey_2023.pem:
    New PTF container signing key for registry.suse.com/ptf/ space.

-------------------------------------------------------------------
Tue Oct 25 12:19:09 UTC 2022 - Marcus Meissner <meissner@suse.com>

- added /usr/share/pki/containers directory for container pem keys
  (cosign/sigstore style), put our PEM key there too (bsc#1204706)

-------------------------------------------------------------------
Thu Apr 21 12:47:26 UTC 2022 - Marcus Meissner <meissner@suse.com>

- still ship the old ptf key (was not added to documentation by mistake).
  (bsc#1198504)

-------------------------------------------------------------------
Thu Mar 24 09:07:52 UTC 2022 - Marcus Meissner <meissner@suse.com>

- No longer install 1024bit keys by default. (bsc#1197293)
  - SLE11 key moved to documentation
  - old PTF (pre March 2022) moved to documentation only

-------------------------------------------------------------------
Thu Feb 17 12:28:49 UTC 2022 - Marcus Meissner <meissner@suse.com>

- extended expiry of SUSE PTF key, move it to suse_ptf_key_old.asc
- added new SUSE PTF key with RSA2048 bit as suse_ptf_key.asc (bsc#1196494)
- extended expiry of SUSE SLES11 key (bsc#1194845)
- added SUSE Contaner signing key in PEM format for use e.g. by cosign.
- SUSE security key replaced with 2022 edition (E-Mail usage only). (bsc#1196495)

-------------------------------------------------------------------
Mon Sep 21 08:30:03 UTC 2020 - Marcus Meissner <meissner@suse.com>

- suse build key extended (bsc#1176759)
  gpg-pubkey-39db7c82-5847eb1f.asc -> gpg-pubkey-39db7c82-5f68629b.asc

-------------------------------------------------------------------
Thu Aug 13 09:32:26 UTC 2020 - Marcus Meissner <meissner@suse.com>

- actually the container key is different from the build signing
  key. (PM-1845 bsc#1170347)

-------------------------------------------------------------------
Thu Apr 23 13:32:45 UTC 2020 - Marcus Meissner <meissner@suse.com>

- add a /usr/share/container-keys/ directory for GPG based Container
  verification.
- Add the SUSE build key as "suse-container-key.asc". (PM-1845 bsc#1170347)

-------------------------------------------------------------------
Wed Mar 11 09:09:42 UTC 2020 - Marcus Meissner <meissner@suse.com>

- created a new security@suse.de communication key (bsc#1166334)

-------------------------------------------------------------------
Tue Nov 13 12:41:24 UTC 2018 - meissner@suse.com

- include ptf key in the key directory to avoid it being
  stripped via %doc stripping. (bsc#1044232)

-------------------------------------------------------------------
Wed Mar 28 14:56:15 UTC 2018 - meissner@suse.com

- created a new security@suse.de communication key. (bsc#1082022)
- extended the PTF key and the SLE10 build@suse.de key. (bsc#1085512)

-------------------------------------------------------------------
Wed Dec  7 16:35:05 UTC 2016 - meissner@suse.com

- extend the build@suse.de product key. (bsc#1014151)

pub  2048R/39DB7C82 2013-01-31 [expires: 2020-12-06]
  uid                            SuSE Package Signing Key <build@suse.de>

-------------------------------------------------------------------
Tue Nov 29 12:54:46 CET 2016 - ro@suse.de

- use dumpsigs script from openSUSE to merge code

-------------------------------------------------------------------
Thu Oct  2 12:45:05 UTC 2014 - meissner@suse.com

- renamed security_at_suse_de.asc to security_at_suse_de_old.asc
- security_at_suse_de.asc: new 4096 bit RSA key.
  pub  4096R/317CD502 2014-10-02 SUSE Security Team <security@suse.de>
  bnc#899509

-------------------------------------------------------------------
Fri Aug 29 08:28:03 UTC 2014 - meissner@suse.com

- Went to new method again.
  - suse-build-key.gpg blob dropped
  - ship seperate files

-------------------------------------------------------------------
Mon Feb 10 09:57:50 UTC 2014 - meissner@suse.com

- create suse-build-key.gpg during build.
- Remove old keys from keyring. (fate#314767)
  Keys currently inside the RPM trusted keyring:
  - pub  2048R/39DB7C82 SuSE Package Signing Key <build@suse.de>
  - pub  2048R/50A3DD1C SuSE Package Signing Key (reserve key) <build@suse.de>
- Various keys are moved to the documentation area
  (/usr/share/doc/packages/suse-build-key)
  - build-at-suse-sle11.asc: the old SUSE Linux Enterprise 11 key.
    if SUSE Linux Enterprise 11 packages need to be verified on
    a SUSE Linux Enterprise 12 system.
  - suse_ptf_key.asc: The suse ptf key. For verification of provided PTFs.
  - security_at_suse_de.asc: Use only for email encryption and
    verification purposes when contacting our security contact address
    security@suse.de

-------------------------------------------------------------------
Mon Jan 13 15:01:24 UTC 2014 - meissner@suse.com

- reverted to contain the fullkeyring build SLE12 Alpha.
- also list the old sle11 build@suse.de key temporary

-------------------------------------------------------------------
Thu Jan  9 12:29:53 UTC 2014 - meissner@suse.com

- Merged over logic from openSUSE-build-key.
- Got rid of default importing into roots keyring.
- Removed some old keys.
- Clarify that security@suse.de is a email only key
- PTF key is supplied also as %doc, to not be default
  imported.
- Keys currently inside:
  - pub  2048R/39DB7C82 SuSE Package Signing Key <build@suse.de>
  - pub  2048R/50A3DD1C SuSE Package Signing Key (reserve key) <build@suse.de>
  - pub  1024D/B37B98A9 SUSE PTF Signing Key <support@suse.com>
  - pub  2048R/3D25D3D9 SuSE Security Team <security@suse.de>

-------------------------------------------------------------------
Thu Jan 31 17:11:08 CET 2013 - ro@suse.de

- added future signing key for SLES (fate#314767) (bnc#801055)
  using 2048 bit rsa key

-------------------------------------------------------------------
Mon Jan 14 01:55:36 CET 2013 - ro@suse.de

- added reserve key for SLES (fate#312896)
  50A3DD1C SuSE Package Signing Key (reserve key) <build@suse.de>
  valid until (2017-01-13)

-------------------------------------------------------------------
Sun Oct 21 23:03:01 CEST 2012 - ro@suse.de

- export keys to single files in /usr/lib/rpm/gnupg/keys

-------------------------------------------------------------------
Mon Dec 12 12:02:49 CET 2011 - ro@suse.de

- reduced key list. remaining keys:
  307E3D54 SuSE Package Signing Key <build@suse.de>
  3D25D3D9 SuSE Security Team <security@suse.de>
  9C800ACA SuSE Package Signing Key <build@suse.de>
  B37B98A9 SUSE PTF Signing Key <support@suse.com>

-------------------------------------------------------------------
Fri Jan 28 13:02:42 CET 2011 - ro@suse.de

- if we have to set $HOME, we also have to export the variable
  (bnc#665912)

-------------------------------------------------------------------
Tue May  4 16:11:41 CEST 2010 - ro@suse.de

- updated keys: (bnc#600157,bnc#599167)
  - 307E3D54 build@suse.de "SuSE Package Signing Key" (2014-05-03)
  - 9C800ACA build@suse.de "SuSE Package Signing Key" (2014-05-03)
  - B37B98A9 support@suse.com "SUSE PTF Signing Key" (2014-05-03)
  - 7E2E3B05 novell-provo-build@novell.com "Novell Provo Build"
    (2014-05-06)
- added keys:
  - 1D061A62 support@novell.com
    "build@novell.com (Novell Linux Products)" (2014-05-06)

-------------------------------------------------------------------
Fri Oct 31 14:28:18 CET 2008 - ro@suse.de

- added ptf key, expiring 2010-07-02

-------------------------------------------------------------------
Mon Jun  2 15:45:33 CEST 2008 - ro@suse.de

- update keys again: for collaboration with rpm, the current
  self-signature needs to be the first signature found in a key

-------------------------------------------------------------------
Mon May  5 18:31:20 CEST 2008 - ro@suse.de

- updated keys
  9C800ACA,8495160C,307E3D54: extend expiration by 2 years
  until 2010-05-05
  7E2E3B05: extend expiration by 2 years until 2010-05-24

-------------------------------------------------------------------
Mon Mar 19 16:49:05 CET 2007 - rguenther@suse.de

- merge suse-build-key keyring to roots gpg pubring

-------------------------------------------------------------------
Mon May 29 17:20:45 CEST 2006 - ro@suse.de

- added new official provo dsa autobuild key ID 7E2E3B05

-------------------------------------------------------------------
Fri May 19 14:02:59 CEST 2006 - ro@suse.de

- removed unused provo autobuild key
- added new official provo autobuild key ID A1912208

-------------------------------------------------------------------
Thu Apr 20 12:47:18 CEST 2006 - ro@suse.de

- add dumpsigs script here to have _one_ place for the script

-------------------------------------------------------------------
Fri Mar 31 16:53:02 CEST 2006 - ro@suse.de

- added build@suse.de rsa key ID 307E3D54

-------------------------------------------------------------------
Wed Jan 25 21:47:54 CET 2006 - mls@suse.de

- converted neededforbuild to BuildRequires

-------------------------------------------------------------------
Tue Oct 18 17:47:07 CEST 2005 - ro@suse.de

- use correct provo autobuild key

-------------------------------------------------------------------
Tue Oct 18 12:28:04 CEST 2005 - ro@suse.de

- added provo autobuild signing key (#128128)
- removed jds key

-------------------------------------------------------------------
Fri May 27 14:47:30 CEST 2005 - mls@suse.de

- added mktemp to PreReqs [#86177]

-------------------------------------------------------------------
Thu Apr 28 11:45:36 CEST 2005 - ro@suse.de

- added JDS public key (15c17deb)

-------------------------------------------------------------------
Tue Jan 25 18:10:26 CET 2005 - ro@suse.de

- added OES public key (0dfb3188)

-------------------------------------------------------------------
Tue Jun 22 12:28:07 CEST 2004 - ro@suse.de

- updated build key (expiration changed to 2008-06-21) (#42326)

-------------------------------------------------------------------
Tue Feb 24 12:19:49 CET 2004 - hmacht@suse.de

- building as non-root

-------------------------------------------------------------------
Tue Sep  9 18:51:02 CEST 2003 - ro@suse.de

- ignore return code from first gpg calls

-------------------------------------------------------------------
Tue Sep  9 18:23:07 MEST 2003 - draht@suse.de

- call gpg twice without any arguments for proper initialization
  inside postinstall

-------------------------------------------------------------------
Tue Sep  9 17:43:55 MEST 2003 - draht@suse.de

- use temp file instead of pipe due to resource race between two
  instances of gpg in %post.

-------------------------------------------------------------------
Thu Sep  5 04:56:32 CEST 2002 - draht@suse.de

- package now installs key from package-owned file into the rpm
  pubring in %post to allow other key packages to add their keys.

-------------------------------------------------------------------
Tue Aug 20 10:46:52 CEST 2002 - mmj@suse.de

- Correct PreReq

-------------------------------------------------------------------
Fri Jul 26 09:50:14 CEST 2002 - kukuk@suse.de

- Change Provides from suse-build-key to build-key

-------------------------------------------------------------------
Thu Feb 21 00:10:52 MET 2002 - draht@suse.de

- directory permission problem: 644 -> 755.

-------------------------------------------------------------------
Mon Feb 18 12:16:34 CET 2002 - ro@suse.de

- moved to /usr/lib/rpm/gnupg/pubring.pgp
  rpm needs a directory as gpg_path and will use pubring.gpg
  in that directory

-------------------------------------------------------------------
Wed Feb 13 20:45:46 MET 2002 - draht@suse.de

- initial package. Contains 
  - pub  2048R/3D25D3D9 1999-03-06 SuSE Security Team <security@suse.de>

- pub  1024D/9C800ACA 2000-10-19 SuSE Package Signing Key <build@suse.de>
  - sub  2048g/8495160C 2000-10-19 [expires: 2006-02-12]

Places

File suse-build-key.changes of Package suse-build-key (Revision c86fffdee84e4d9ff0b3a33786b52169)

Places