F10 pgp keys

[Todd Zullinger]

Sam Varshavchik wrote:
> Feeding SHA1SUM from F10 to gpg results in a "public key not found"
> complaint.
>
> Which key signed F10's SHA1SUM, and where is that info on
> www.fedoraproject.org?

The keys used are listed at https://fedoraproject.org/keys

There is also the path at https://fedoraproject.org/verify, which is
not yet updated for F10.  (I sent a patch to update it, but it didn't
make it in before the infrastructure was frozen for translation and
the release.  It should get updated soon though.)

You can, however, fetch the current fedora.gpg file linked on the
verify page.  It has been updated with the F10 keys.

https://fedoraproject.org/static/fedora.gpg

-- 
Todd        OpenPGP -> KeyID: 0xBEAF0CE3 | URL: www.pobox.com/~tmz/pgp
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
In the beginning the Universe was created. This has made a lot of
people very angry and has been widely regarded as a bad move.
    -- Douglas Adams

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 542 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20081126/350538aa/attachment-0001.sig>