summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorKarl Berry <karl@freefriends.org>2019-03-13 21:51:00 +0000
committerKarl Berry <karl@freefriends.org>2019-03-13 21:51:00 +0000
commit752063103091903583253275e807591ffb019ed4 (patch)
tree8d296a6ea44c51ac92cdd6059202c7aca0d22f3e
parent4c071a8150c188103c432ee4b01b85e4a211d103 (diff)
gpg key extension
git-svn-id: svn://tug.org/texlive/trunk@50377 c570f23f-e606-0410-a88d-b1316a301751
-rw-r--r--Master/tlpkg/doc/gpg-extend-key-expiry-howto.txt34
-rw-r--r--Master/tlpkg/doc/releng.txt1
-rw-r--r--Master/tlpkg/gpg/tl-key-extension.txt5
3 files changed, 6 insertions, 34 deletions
diff --git a/Master/tlpkg/doc/gpg-extend-key-expiry-howto.txt b/Master/tlpkg/doc/gpg-extend-key-expiry-howto.txt
deleted file mode 100644
index 913dc6a5b6f..00000000000
--- a/Master/tlpkg/doc/gpg-extend-key-expiry-howto.txt
+++ /dev/null
@@ -1,34 +0,0 @@
-$Id$
-Public domain.
-
-
-Steps to extend TL signing key
-==============================
-This needs to happen every year in August (--list-keys for actual expiration).
-
-* get main key dir from USB stick
-
-* set GNUPGHOME to the respective directory
-
-* gpg1 --edit-key 0x0D5E5D9106BAB6BC
- key 2 # select signing sub key
- expire
- 1y
- save
-
-* export signing key
- gpg1 --export 0x0D5E5D9106BAB6BC > tmpkey
-
-* send to key server
- gpg1 --keyserver hkp://pool.sks-keyservers.net \
- --send-key 0x0D5E5D9106BAB6BC
-
-* import into TL subversion
- gpg1 --homedir .../Master/tlpkg/gpg --import tmpkey
-
-* on the TL side
- gpg --homedir ~texlive/etc \
- --keyserver hkp://pool.sks-keyservers.net \
- --recv-key 0x0D5E5D9106BAB6BC
-
-* after testing push out tlcritical
diff --git a/Master/tlpkg/doc/releng.txt b/Master/tlpkg/doc/releng.txt
index a38832fd558..d05f3b18cee 100644
--- a/Master/tlpkg/doc/releng.txt
+++ b/Master/tlpkg/doc/releng.txt
@@ -135,6 +135,7 @@ force_rebuild=true cron.tl
10. After first rebuild success, undo --recreate. Life goes on.
A. At some point, after tlnet freeze:
+ Update gpg expiration, see tlpkg/gpg/tl-key-extension.txt.
Run tl-update-linked-scripts to ensure consistency.
In Master/tlpkg, update bundled Windows programs as needed:
dviout texworks tlgs tlperl tlpsv
diff --git a/Master/tlpkg/gpg/tl-key-extension.txt b/Master/tlpkg/gpg/tl-key-extension.txt
index ca7634727da..f25ae561b41 100644
--- a/Master/tlpkg/gpg/tl-key-extension.txt
+++ b/Master/tlpkg/gpg/tl-key-extension.txt
@@ -1,6 +1,10 @@
+$Id$
+
How to update TeX Live distribution signing key
===============================================
+this should be done every year during the pretest.
+
shut down networking service
cp gpg directory from USB stick to computer
@@ -12,6 +16,7 @@ gpg --edit-key $KEYID
> key 2
# selects the expiring key, check!
> expire
+> 1y
# choose something after the release of the next TL
> save