#6286: Please sign all RC and TC images
--------------------------+-----------------------
Reporter: genodeftest | Owner: rel-eng@…
Type: enhancement | Status: reopened
Milestone: | Component: koji
Resolution: | Keywords:
Blocked By: | Blocking:
--------------------------+-----------------------
Comment (by robatino):
The one key that's currently being used for each release is also being
used to certify Gold release, in addition to signing the RPMs. That's why
https://getfedora.org/verify refers to it - that page is intended to be
used to check that an ISO is a Gold release (the ones announced to the
general public), not just that it came from Fedora. If the TCs/RCs were
also to be signed, it would have to be with a different key, or else the
Verify page instructions wouldn't guarantee that people had the announced
(Gold) images. The updates-testing RPMs used to be signed with a separate
key, so there's precedent for it.
--
Ticket URL: <
https://fedorahosted.org/rel-eng/ticket/6286#comment:7>
Fedora Release Engineering <
http://fedorahosted.org/rel-eng>
Release Engineering for the Fedora Project