When to publish the release key

[Kevin Fenzi]

On Tue, 19 Mar 2013 21:24:22 +0100
Björn Persson <bjorn at xn--rombobjrn-67a.se> wrote:

> Is there a date in the release schedule when the new release key shall
> be added to <https://fedoraproject.org/keys>? It seems logical to me
> to publish the key as soon as it has been generated, or at least
> before it's used to sign any packages.

I don't know of any formal task for this. 

I have asked the websites folks to do so, but they have been busy 
(as have I). 

Perhaps you would like to help out? 

> Signed Fedora 19 packages have started showing up on the mirrors, and
> on the keyservers there is a key that claims to be the Fedora 19
> release key, generated on the first of December, but since the key
> isn't signed and isn't on the web page I have no way of verifying it.

It's in the fedora-release-18 package as well. 
Go to your fedora 18 machine and look at: 

/etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-19-primary

kevin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: not available
URL: <http://lists.fedoraproject.org/pipermail/devel/attachments/20130319/250e7ed1/attachment.sig>