obssigner gpg key question
Hi, I'm in the process of moving an existing installation to a new machine, with the possibility that the hostname will change. I also noted that my "master gpg key" of the buildservice is old and small (1024bit RSA), so I thought it would be a good idea to replace this with an new, larger one that's also issued to the proper address "obsrun@new.host.name". I tried this in a test instance and it has given me a profound amount of trouble (it only worked after creating the new key and then additionally importing the old privkey). Today I read https://openbuildservice.org/help/manuals/obs-admin-guide/obs.cha.security_c... and this states that the gpg key is only used by signd to encrypt / decrypt the project keys and thus it should be of absolutely no concern (for my users) what email account etc. is used in that key. Am I correct with that assumption? In that case creating a new key would be indeed a useless endeavor from my side and I'd just skip that ;-) Thanks for any insight seife P.S.: the OBS admin documentation has greatly improved since I last looked (which was some time ago I have to admit) which is great and another Thank You! for that. -- Stefan Seyfried "For a successful technology, reality must take precedence over public relations, for nature cannot be fooled." -- Richard Feynman
participants (1)
-
Stefan Seyfried