#169 add opengpgkeys
Merged by darknao. Opened by msuchy.
fedora-web/ msuchy/websites opengpgkey  into  master

Download 169.patch

This follows the initiative to enable it in DNF.
See http://miroslav.suchy.cz/blog/archives/2021/02/11/verify_package_gpg_signature_using_dnssec/index.html

Disclaimer: I did not test it, because the command in README does not work because F29 is no longer in Fedora's registry.

rebased onto 47e412b85be773f0d2d3f72e21b77bd6faebd62b

Ping. Any feedback on this one?

I think this is a neat idea - my question would be: How do I find/generate/whatever those in the future when I add new keys to release.yaml?

resolvectl openpgp fedora-33@fedoraproject.org

Or using that script email2domain specified in http://miroslav.suchy.cz/blog/archives/2021/02/11/verify_package_gpg_signature_using_dnssec/index.html (chapter Manual Check)

@darknao, @thunderbirdtr Is this PR relevant anymore?

If you would ask me, then yes! :)

$ resolvectl openpgp fedora-33@fedoraproject.org
cf3b4d52266f4e26a1480de7a60141f2dec85fe64a243a13921192c2._openpgpkey.fedoraproject.org: resolve call failed: 'cf3b4d52266f4e26a1480de7a60141f2dec85fe64a243a13921192c2._openpgpkey.fedoraproject.org' not found

Is it still the right command ?
Also, can you rebase your changes and resolve conflicts?

rebased onto bdeb1cce56e9c96525fa54dfab0872ca32790fc8

Rebased. And added the most recent versions of Fedora and EPEL9.

The command is:

resolvectl openpgp fedora-33-primary@fedoraproject.org

I.e. use the email associated with the key.

OK looks good. Thanks!

Pull-Request has been merged by darknao

Metadata