summaryrefslogtreecommitdiff
path: root/systems/texlive/tlnet/tlpkg/gpg/tl-key-extension.txt
diff options
context:
space:
mode:
Diffstat (limited to 'systems/texlive/tlnet/tlpkg/gpg/tl-key-extension.txt')
-rw-r--r--systems/texlive/tlnet/tlpkg/gpg/tl-key-extension.txt47
1 files changed, 47 insertions, 0 deletions
diff --git a/systems/texlive/tlnet/tlpkg/gpg/tl-key-extension.txt b/systems/texlive/tlnet/tlpkg/gpg/tl-key-extension.txt
new file mode 100644
index 0000000000..7f9bb998fd
--- /dev/null
+++ b/systems/texlive/tlnet/tlpkg/gpg/tl-key-extension.txt
@@ -0,0 +1,47 @@
+$Id: tl-key-extension.txt 51076 2019-05-10 22:23:09Z karl $
+(Public domain.)
+
+How to update TeX Live distribution signing key
+===============================================
+
+this should be done every year during the pretest.
+
+shut down networking service
+
+cp gpg directory from USB stick to computer
+
+
+export GNUPGHOME=.....
+export KEYID=0xC78B82D8C79512F79CC0D7C80D5E5D9106BAB6BC
+gpg --edit-key $KEYID
+> key 2
+ # selects the expiring key, check!
+> expire
+> 1y
+ # choose something after the release of the next TL
+> save
+
+gpg -a --export $KEYID > texlive.asc
+
+# update USB drive with new stuff, remove from home,
+
+rm -rf $GNUPGHOME
+unset GNUPGHOME
+
+gpg --send-keys $KEYID
+
+
+# update TeX Live repository
+export GNUPGHOME=/path/to/Master/tlpkg/gpg
+# use gpg version 1 here!!!
+gpg1 --import texlive.rsa
+
+svn/git commit
+
+
+# on the TUG server
+ gpg --homedir ~texlive/etc \
+ --keyserver hkp://pool.sks-keyservers.net \
+ --recv-key $KEYID
+
+# or import from texlive.asc