diff options
Diffstat (limited to 'systems/texlive/tlnet/tlpkg/gpg/tl-key-extension.txt')
| -rw-r--r-- | systems/texlive/tlnet/tlpkg/gpg/tl-key-extension.txt | 16 |
1 files changed, 13 insertions, 3 deletions
diff --git a/systems/texlive/tlnet/tlpkg/gpg/tl-key-extension.txt b/systems/texlive/tlnet/tlpkg/gpg/tl-key-extension.txt index c4e3dc4331..9c05d9db39 100644 --- a/systems/texlive/tlnet/tlpkg/gpg/tl-key-extension.txt +++ b/systems/texlive/tlnet/tlpkg/gpg/tl-key-extension.txt @@ -1,4 +1,4 @@ -$Id: tl-key-extension.txt 54986 2020-05-03 15:10:31Z karl $ +$Id: tl-key-extension.txt 55147 2020-05-15 14:58:16Z karl $ (Public domain.) How to update TeX Live distribution signing key @@ -43,7 +43,17 @@ svn/git commit # texlive.asc, see above how to export it) gpg --homedir ~texlive/.gnupg --import texlive.asc +# can view that .asc with: +gpg --show-keyring texlive.asc + +# update web-accessible public key, keeping old files but updating symlink: +cp texlive.asc ~www/texlive/files/texlive`date +%Y`.asc +ln -s texlive`date +%Y`.asc ~www/texlive/files/texlive.asc More info: -. we use tlpkg/bin/tl-sign-file to sign texlive.tlpdb. -. gpg --verify --verbose foo.asc for info on signature of file. +. we use tlpkg/bin/tl-sign-file to sign texlive.tlpdb.sha512. +. gpg --verify --verbose foo.asc for info on signature file. +. but exit status is zero even with expired keys; to check, + use --status-file and inspect: +gpg --verify --verbose --status-file=/tmp/st foo.asc +. see tl-sign-file or TLCrypto.pm for full implementation. |