diff options
| -rw-r--r-- | Master/tlpkg/doc/gpg-extend-key-expiry-howto.txt | 34 | ||||
| -rw-r--r-- | Master/tlpkg/doc/releng.txt | 1 | ||||
| -rw-r--r-- | Master/tlpkg/gpg/tl-key-extension.txt | 5 |
3 files changed, 6 insertions, 34 deletions
diff --git a/Master/tlpkg/doc/gpg-extend-key-expiry-howto.txt b/Master/tlpkg/doc/gpg-extend-key-expiry-howto.txt deleted file mode 100644 index 913dc6a5b6f..00000000000 --- a/Master/tlpkg/doc/gpg-extend-key-expiry-howto.txt +++ /dev/null @@ -1,34 +0,0 @@ -$Id$ -Public domain. - - -Steps to extend TL signing key -============================== -This needs to happen every year in August (--list-keys for actual expiration). - -* get main key dir from USB stick - -* set GNUPGHOME to the respective directory - -* gpg1 --edit-key 0x0D5E5D9106BAB6BC - key 2 # select signing sub key - expire - 1y - save - -* export signing key - gpg1 --export 0x0D5E5D9106BAB6BC > tmpkey - -* send to key server - gpg1 --keyserver hkp://pool.sks-keyservers.net \ - --send-key 0x0D5E5D9106BAB6BC - -* import into TL subversion - gpg1 --homedir .../Master/tlpkg/gpg --import tmpkey - -* on the TL side - gpg --homedir ~texlive/etc \ - --keyserver hkp://pool.sks-keyservers.net \ - --recv-key 0x0D5E5D9106BAB6BC - -* after testing push out tlcritical diff --git a/Master/tlpkg/doc/releng.txt b/Master/tlpkg/doc/releng.txt index a38832fd558..d05f3b18cee 100644 --- a/Master/tlpkg/doc/releng.txt +++ b/Master/tlpkg/doc/releng.txt @@ -135,6 +135,7 @@ force_rebuild=true cron.tl 10. After first rebuild success, undo --recreate. Life goes on. A. At some point, after tlnet freeze: + Update gpg expiration, see tlpkg/gpg/tl-key-extension.txt. Run tl-update-linked-scripts to ensure consistency. In Master/tlpkg, update bundled Windows programs as needed: dviout texworks tlgs tlperl tlpsv diff --git a/Master/tlpkg/gpg/tl-key-extension.txt b/Master/tlpkg/gpg/tl-key-extension.txt index ca7634727da..f25ae561b41 100644 --- a/Master/tlpkg/gpg/tl-key-extension.txt +++ b/Master/tlpkg/gpg/tl-key-extension.txt @@ -1,6 +1,10 @@ +$Id$ + How to update TeX Live distribution signing key =============================================== +this should be done every year during the pretest. + shut down networking service cp gpg directory from USB stick to computer @@ -12,6 +16,7 @@ gpg --edit-key $KEYID > key 2 # selects the expiring key, check! > expire +> 1y # choose something after the release of the next TL > save |