Please add public gpg for F-14 s390x to http://fedoraproject.org/keys

[Karsten Hopp]

  According to 
https://fedoraproject.org/wiki/Create_release_signing_key#fedoraproject.org 
I need to send the attached key to this address.
I've also asked Jesse Keating and Dennis Gilmore to add the key to the 
fedora-release git repository, that still needs to be done.
(Btw, the URL above still points to a CVS repository, that should be 
changed to the git repo)

If there are any questions you can find me as either karsten_ or Kick_ 
in #fedora-devel on freenode IRC

   Thanks
      Karsten Hopp (s390x secondary arch maintainer)

[Todd Zullinger]

Hi Karsten,

Karsten Hopp wrote:
>   According to
> https://fedoraproject.org/wiki/Create_release_signing_key#fedoraproject.org
>  I need to send the attached key to this address.
>  I've also asked Jesse Keating and Dennis Gilmore to add the key to
>  the fedora-release git repository, that still needs to be done.
>  (Btw, the URL above still points to a CVS repository, that should be
>  changed to the git repo)
>
>  If there are any questions you can find me as either karsten_ or
>  Kick_ in #fedora-devel on freenode IRC
>
>    Thanks
>       Karsten Hopp (s390x secondary arch maintainer) 
>  pub  1024D/FDB36B03 2010-12-23 Fedora (14-s390x)
> <fedora(a)fedoraproject.org&gt;
>  sub  2048g/E363096B 2010-12-23 
Just wanted to reply and verify this, in case someone spoofed your
address (since this request wasn't signed with the GPG key on record
for your Fedora account ;).

Also, any reason why the key has an encryption subkey?  The newer
fedora releases use a larger RSA key, signing only.  I'm guessing 1024
DSA with a 2048 Elgamal is just because it's the default in older
versions of GPG?

-- 
Todd        OpenPGP -> KeyID: 0xBEAF0CE3 | URL: www.pobox.com/~tmz/pgp
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Life is like an onion: you peel off layer after layer and then you
find there is nothing in it.
    -- James Gibbons Huneker

[Karsten Hopp]

Am 13.01.2011 19:47, schrieb Todd Zullinger:
>  Hi Karsten,
>
>  Karsten Hopp wrote:
> >   According to
> https://fedoraproject.org/wiki/Create_release_signing_key#fedoraproject.org
> > I need to send the attached key to this address.
> > I've also asked Jesse Keating and Dennis Gilmore to add the key to
> > the fedora-release git repository, that still needs to be done.
> > (Btw, the URL above still points to a CVS repository, that should be
> > changed to the git repo)
> >
> > If there are any questions you can find me as either karsten_ or
> > Kick_ in #fedora-devel on freenode IRC
> >
> >    Thanks
> >       Karsten Hopp (s390x secondary arch maintainer)
>
> > pub  1024D/FDB36B03 2010-12-23 Fedora (14-s390x)<fedora(a)fedoraproject.org>
> > sub  2048g/E363096B 2010-12-23
>
>  Just wanted to reply and verify this, in case someone spoofed your
>  address (since this request wasn't signed with the GPG key on record
>  for your Fedora account ;).
>
>  Also, any reason why the key has an encryption subkey?  The newer
>  fedora releases use a larger RSA key, signing only.  I'm guessing 1024
>  DSA with a 2048 Elgamal is just because it's the default in older
>  versions of GPG?
>  


No, the request really came from me. But thanks for checking instead of blindly adding a 
potential dangerous key to the official list !

I have no idea how I ended ub with a sub-key. I've followed the guide (1) to set up a

signing server with sigul and let sigul create the key instead of running gpg manually.


(1) http://fedoraproject.org/wiki/Create_release_signing_key


     Karsten

[Todd Zullinger]

Karsten Hopp wrote:
>  No, the request really came from me. But thanks for checking instead
>  of blindly adding a potential dangerous key to the official list ! 
And yet paranoia and GPG don't usually mix. :)

>  I have no idea how I ended ub with a sub-key. I've followed the
>  guide (1) to set up a signing server with sigul and let sigul create
>  the key instead of running gpg manually. 
Ahh.  No worries.  The key looks like the EPEL one, so perhaps the
sigul defaults do that.  How the Fedora keys are generated with
different settings via sigul, I don't know.

I'll get things added though, unless you want to poke around and
generate a different key.

-- 
Todd        OpenPGP -> KeyID: 0xBEAF0CE3 | URL: www.pobox.com/~tmz/pgp
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Never was a government that was not composed of liars, malefactors and
thieves.
    -- Cicero, last Free Consul of Rome

[Todd Zullinger]

This is done now.  I uploaded the key to the public keyserver network,
as we generally link to this as well as to a direct download from our
site.  (If doing this is not part of the key creation SOP, it should
be added.)

-- 
Todd        OpenPGP -> KeyID: 0xBEAF0CE3 | URL: www.pobox.com/~tmz/pgp
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
A baby first laughs at the age of four weeks.  By that time his eyes
focus well enough to see you clearly.