Re: [gentoo-project] Gentoo Authority Keys are deployed now for testing!

[Michał Górny]

On Thu, 2019-04-18 at 10:04 -0400, Aaron W. Swenson wrote:
> On 2019-04-13 21:37, Michał Górny wrote:
> > I'd like to announce that the experimental deployment of Gentoo
> > Authority Keys is now in place.  If someone would like to give them
> > a try, Wiki includes instructions for using them [1].
> >
> > ...
> >
> > [1]:https://wiki.gentoo.org/wiki/Project:Infrastructure/Authority_Keys
>
> Unfortunately, the local trust doesn't work for my laptop where I only have the
> subkeys. However, the instructions worked fine on my desktop where I have the
> full key.

You need the primary key to be available in order to create
the certification signature.  However, a trick to avoid that is to
create a separate certification key for local-only usage.  Just make
sure you won't export it accidentally or use for some other purpose.

-- 
Best regards,
Michał Górny