Open Bug 2062338 Opened 1 month ago

rework rpm signing in a way that doesn't cause problems during rotations

Categories

(Release Engineering :: Release Automation, enhancement)

Product:
Release Engineering
Component:
Release Automation
Type:
enhancement

Tracking

(Not tracked)

People

(Reporter: bhearsum, Unassigned)

Details

We recently did our first GPG rotation since adding RPM signing (https://bugzilla.mozilla.org/show_bug.cgi?id=2061475). As part of it, we discovered some complications in some distributions when an expired or revoked key is present in the keyring (see https://bugzilla.mozilla.org/show_bug.cgi?id=2062327).

We should take a second look at how we're doing GPG signing for RPMs and see if there's improvements or changes we can make to avoid these issues.

You need to log in before you can comment on or make changes to this bug.