summaryrefslogtreecommitdiff
path: root/Master/tlpkg/doc/gpg-extend-key-expiry-howto.txt
diff options
context:
space:
mode:
Diffstat (limited to 'Master/tlpkg/doc/gpg-extend-key-expiry-howto.txt')
-rw-r--r--Master/tlpkg/doc/gpg-extend-key-expiry-howto.txt19
1 files changed, 18 insertions, 1 deletions
diff --git a/Master/tlpkg/doc/gpg-extend-key-expiry-howto.txt b/Master/tlpkg/doc/gpg-extend-key-expiry-howto.txt
index 3a755d27e5a..913dc6a5b6f 100644
--- a/Master/tlpkg/doc/gpg-extend-key-expiry-howto.txt
+++ b/Master/tlpkg/doc/gpg-extend-key-expiry-howto.txt
@@ -1,17 +1,34 @@
+$Id$
+Public domain.
+
+
Steps to extend TL signing key
==============================
+This needs to happen every year in August (--list-keys for actual expiration).
* get main key dir from USB stick
+
* set GNUPGHOME to the respective directory
+
* gpg1 --edit-key 0x0D5E5D9106BAB6BC
key 2 # select signing sub key
expire
1y
save
+
* export signing key
gpg1 --export 0x0D5E5D9106BAB6BC > tmpkey
+
* send to key server
- gpg1 --keyserver hkp://pool.sks-keyservers.net --send-key 06BAB6B
+ gpg1 --keyserver hkp://pool.sks-keyservers.net \
+ --send-key 0x0D5E5D9106BAB6BC
+
* import into TL subversion
gpg1 --homedir .../Master/tlpkg/gpg --import tmpkey
+
+* on the TL side
+ gpg --homedir ~texlive/etc \
+ --keyserver hkp://pool.sks-keyservers.net \
+ --recv-key 0x0D5E5D9106BAB6BC
+
* after testing push out tlcritical