Hi all, we're using on own deployment of the Open Build Service to package our software. Unfortunately we used a very weak key in the past, to sign our packages. This key is stored within GPG of the root user of the deployment. We like to increase now the security with this package signing key. Currently we're using a 1024 bit RSA key and we would like to use a 4096 bit RSA key as other mechanisms do not be seem to be supported on the Linux distributions we want to build packages for. Is there a possibility to store two package signing keys in the root user of the deployment and select then for some project one of both keys? This would allow us to still maintain old releases of our software with patches - built always in separate projects - with the old package signing key while we can sign packages of a new release with a 4096 bit RSA key. I read about the possibility to create a key for a project but we need a key for several projects. Is this possible somehow? -- kind regards, Marcus Klein Release Management Cell: +49 151 64908963 Phone: +49 2761 75252 00 Fax: +49 2761 75252 30 Email: marcus.klein@open-xchange.com ------------------------------------------------------------------------------------- Open-Xchange AG, Rollnerstr. 14, 90408 Nuremberg, District Court Nuremberg HRB 24738 Managing Board: Rafael Laguna de la Vera, Carsten Dirks, Michael Knapstein, Stephan Martin Chairman of the Board: Richard Seibt European Office: Open-Xchange GmbH, Olper Huette 5f, D-57462 Olpe, Germany, District Court Siegen, HRB 8718 Managing Director: Frank Hoberg US Office: Open-Xchange. Inc., 530 Lytton Avenue, Palo Alto, CA 94301, USA -------------------------------------------------------------------------------------