RPM-GPG-KEY-fedora-test-11-primary keyID: 0xD22E77F2 not on the "Verify your download" link or elsewhere.

Todd Zullinger tmz at pobox.com
Wed Apr 1 17:51:53 UTC 2009


Hi Bram,

Bram_Gro wrote:
> People who would like to be able to verify a CHECKSUM file with GPG,
> of the new beta releases before the actual SHA-256 comparison, from
> within other operating systems, are unable to do so this time,
> because the new public key that was created for this purpose is
> currently not on the "Verify your download" link on the "Get Fedora"
> page.
>
> RPM-GPG-KEY-fedora-test-11-primary
> keyID: 0xD22E77F2
> fingerprint: AEE4 0C04 E345 60A7 1F04 3D7C 1DC5 C758 D22E 77F2
>
> Also not here: https://fedoraproject.org/keys
> Or included inside this multiple keyfile:
> https://fedoraproject.org/static/fedora.gpg
>
> It will be appreciated if this key was added to one of these links.

We've added the key information and download link to the keys page and
to the fedora.gpg.  The verify page will require a bit more rewording.
Perhaps it's best to leave that until the F11 release?  Then we can
make changes that will reflect the new check sum file name and the use
of sha256sum, and note that older releases used SHA1SUM and the
sha1sum program.

-- 
Todd        OpenPGP -> KeyID: 0xBEAF0CE3 | URL: www.pobox.com/~tmz/pgp
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
To err is human; to blame it on somebody else is even more human.
    -- John Nadeau

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 542 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-websites-list/attachments/20090401/00548dd7/attachment.sig>


More information about the Fedora-websites-list mailing list