Project

General

Profile

Feature #14484

Update our OpenPGP keys in 2018

Added by intrigeri over 1 year ago. Updated 9 months ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
-
Target version:
Start date:
09/01/2017
Due date:
% Done:

100%

QA Check:
Feature Branch:
bugfix/14484-update-openpgp-signing-key
Type of work:
Code
Blueprint:
Starter:
Affected tool:

Description

What we're supposed to do each year:

  • Bump the master key's expiration date by 1 year.
  • Generate a new signing subkey for each RM, and move it onto new smartcards (the old ones are still needed to keep the previous subkey during the transition period).
  • If needed, generate and split a revocation certificate for our signing key. See internal.git for details.
  • Create a ticket about updating our OpenPGP keys next year.

To be done at the summit during northern hemisphere summer.


Subtasks

Feature #14582: Ensure we have enough OpenPGP smartcard/GNUK hardware for our 2018 keys updateResolved


Related issues

Related to Tails - Feature #11747: Update our OpenPGP keys in 2017 Resolved 08/30/2016
Blocks Tails - Feature #15334: Core work 2018Q3: Foundations Team Resolved 02/20/2018
Copied to Tails - Feature #15890: Update our OpenPGP keys in 2019 Confirmed 09/01/2018

Associated revisions

Revision cb7a4417 (diff)
Added by intrigeri 9 months ago

Update our OpenPGP signing key (refs: #14484).

History

#1 Updated by intrigeri over 1 year ago

#2 Updated by intrigeri over 1 year ago

  • Description updated (diff)

Let's try not to forget the master key next year..

#3 Updated by intrigeri 9 months ago

  • Status changed from Confirmed to In Progress
  • Type of work changed from Sysadmin to Code

#4 Updated by intrigeri 9 months ago

#5 Updated by intrigeri 9 months ago

#6 Updated by intrigeri 9 months ago

  • Feature Branch set to bugfix/14484-update-openpgp-signing-key

#7 Updated by intrigeri 9 months ago

  • Assignee changed from intrigeri to sajolida
  • QA Check set to Ready for QA

Can you please review this by Monday night? Otherwise I'll merge this myself (otherwise we'll make upgrades harder than they should be for some users).

#8 Updated by sajolida 9 months ago

  • Status changed from In Progress to Resolved
  • Assignee deleted (sajolida)
  • QA Check deleted (Ready for QA)

It all looks good! Merged.

Also available in: Atom PDF