I'm in the process of moving an existing installation to a new machine, with the possibility that the hostname will change. I also noted that my "master gpg key" of the buildservice is old and small (1024bit RSA), so I thought it would be a good idea to replace this with an new, larger one that's also issued to the proper address "firstname.lastname@example.org".
I tried this in a test instance and it has given me a profound amount of trouble (it only worked after creating the new key and then additionally importing the old privkey).
Today I read https://openbuildservice.org/help/manuals/obs-admin-guide/obs.cha.security_c... and this states that the gpg key is only used by signd to encrypt / decrypt the project keys and thus it should be of absolutely no concern (for my users) what email account etc. is used in that key. Am I correct with that assumption? In that case creating a new key would be indeed a useless endeavor from my side and I'd just skip that ;-)
Thanks for any insight
P.S.: the OBS admin documentation has greatly improved since I last looked (which was some time ago I have to admit) which is great and another Thank You! for that.