summaryrefslogtreecommitdiff
path: root/Master/tlpkg/doc/gpg-extend-key-expiry-howto.txt
blob: 913dc6a5b6f63b570cfdca53d21ec03ae445a77a (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
$Id$
Public domain.


Steps to extend TL signing key
==============================
This needs to happen every year in August (--list-keys for actual expiration).

* get main key dir from USB stick

* set GNUPGHOME to the respective directory

* gpg1 --edit-key 0x0D5E5D9106BAB6BC
	key 2		# select signing sub key
	expire
	1y
	save

* export signing key
	gpg1 --export 0x0D5E5D9106BAB6BC > tmpkey

* send to key server
	gpg1 --keyserver hkp://pool.sks-keyservers.net \
	  --send-key 0x0D5E5D9106BAB6BC

* import into TL subversion
	gpg1 --homedir .../Master/tlpkg/gpg --import tmpkey

* on the TL side
	gpg --homedir ~texlive/etc \
	  --keyserver hkp://pool.sks-keyservers.net \
	  --recv-key 0x0D5E5D9106BAB6BC

* after testing push out tlcritical