Gentoo Archives: gentoo-dev

From: Ulrich Mueller <ulm@g.o>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] [PATCH v5 03/16] glep-0063: 'Gentoo subkey' → 'Signing subkey'
Date: Wed, 25 Jul 2018 07:26:29
Message-Id: 23384.9727.421657.161675@a1i15.kph.uni-mainz.de
In Reply to: Re: [gentoo-dev] [PATCH v5 03/16] glep-0063: 'Gentoo subkey' → 'Signing subkey' by Aaron Bauman
1 >>>>> On Wed, 25 Jul 2018, Aaron Bauman wrote:
2
3 > The whole, "I am not doing one year..." and then the "anvil doesn't
4 > count" seems uncooperative and contradictory.
5
6 > Is there some obstacle stopping you from updating your key
7 > expiration once a year? It takes at most 20 minutes.
8
9 It is *not* one year. Patch 10 of the series updates it:
10
11 +4. Expiration date on key and all subkeys set to no more than 900 days
12 + into the future
13
14 900 days are 2.46 years. So the expiry time can be renewed every two
15 years to the same month and day, with an ample time window of about
16 five months for renewal.
17
18 Ulrich