Am 18.10.2021 um 08:38 schrieb Adrian Schröter
: On Montag, 18. Oktober 2021, 08:34:17 CEST Adrian Schröter wrote:
On Sonntag, 17. Oktober 2021, 21:04:18 CEST Felder, Christian wrote: Hi all,
I am sorry for reviving this old thread, but unfortunately this is still a thing.
The science gpg key is still using dsa1024 which is considered too weak especially by Ubuntu systems.
As the key will expire soon (2021-11-11), is there any chance to upgrade to another signature algorithm?
pub dsa1024 2008-01-22 [SC] [expires: 2021-11-11] D1DD7ACD6D68A0B43081B15801DB7302943D8BB8 uid science OBS Project
mailto:science@build.opensuse.org> any maintainer could call
osc signkey --create science
to create a new key. But there is no way to migrate a key from dsa to rsa.
just to be explicit here: A new key will of course mean that every repository user of the repository will be prompted about the change.
So any kind of announcement might be necessary ....
The key will be due soon (2021-11-11). I don‘t ask to renew before that, but it would be nice to renew with rsa this time.
--
Adrian Schroeter
Build Infrastructure Project Manager SUSE Software Solutions Germany GmbH, Maxfeldstr. 5, 90409 Nuernberg, Germany (HRB 247165, AG München), Geschäftsführer: Felix Imendörffer
------------------------------------------------------------------------------------------------ ------------------------------------------------------------------------------------------------ Forschungszentrum Juelich GmbH 52425 Juelich Sitz der Gesellschaft: Juelich Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498 Vorsitzender des Aufsichtsrats: MinDir Volker Rieke Geschaeftsfuehrung: Prof. Dr.-Ing. Wolfgang Marquardt (Vorsitzender), Karsten Beneke (stellv. Vorsitzender), Dr. Astrid Lambrecht, Prof. Dr. Frauke Melchior ------------------------------------------------------------------------------------------------ ------------------------------------------------------------------------------------------------