1 |
Signed-off-by: Mike Gilbert <floppym@g.o> |
2 |
--- |
3 |
glep-0063.rst | 24 ++++++++++++++++++++---- |
4 |
1 file changed, 20 insertions(+), 4 deletions(-) |
5 |
|
6 |
diff --git a/glep-0063.rst b/glep-0063.rst |
7 |
index 82541bd..4191709 100644 |
8 |
--- a/glep-0063.rst |
9 |
+++ b/glep-0063.rst |
10 |
@@ -7,10 +7,10 @@ Author: Robin H. Johnson <robbat2@g.o>, |
11 |
Michał Górny <mgorny@g.o> |
12 |
Type: Standards Track |
13 |
Status: Final |
14 |
-Version: 2.1 |
15 |
+Version: 2.2 |
16 |
Created: 2013-02-18 |
17 |
-Last-Modified: 2019-11-07 |
18 |
-Post-History: 2013-11-10, 2018-07-03, 2018-07-21, 2019-02-24 |
19 |
+Last-Modified: 2020-12-17 |
20 |
+Post-History: 2013-11-10, 2018-07-03, 2018-07-21, 2019-02-24, 2020-12-17 |
21 |
Content-Type: text/x-rst |
22 |
--- |
23 |
|
24 |
@@ -28,6 +28,9 @@ OpenPGP key management policies for the Gentoo Linux distribution. |
25 |
Changes |
26 |
======= |
27 |
|
28 |
+v2.2 |
29 |
+ Added "Gentoo Keyserver" section under "Gentoo Infrastructure" chapter. |
30 |
+ |
31 |
v2.1 |
32 |
A requirement for an encryption key has been added, in order to extend |
33 |
the GLEP beyond commit signing and into use of OpenPGP for dev-to-dev |
34 |
@@ -135,8 +138,11 @@ their primary key). |
35 |
|
36 |
5. Encrypted backup of your secret keys. |
37 |
|
38 |
+Gentoo Infrstructure |
39 |
+==================== |
40 |
+ |
41 |
Gentoo LDAP |
42 |
-=========== |
43 |
+----------- |
44 |
|
45 |
All Gentoo developers must list the complete fingerprint for their primary |
46 |
keys in the "``gpgfingerprint``" LDAP field. It must be exactly 40 hex digits, |
47 |
@@ -147,6 +153,16 @@ of the fingerprint field. In any place that presently displays |
48 |
the "``gpgkey``" field, the last 16 hex digits of the fingerprint should |
49 |
be displayed instead. |
50 |
|
51 |
+Gentoo Keyserver |
52 |
+---------------- |
53 |
+ |
54 |
+Gentoo infrastructure uses a keyserver that is isolated from the SKS pool. |
55 |
+This keyserver is restricted to accepting uploads from authorized Gentoo hosts. |
56 |
+A script is provided on dev.gentoo.org to allow developers to upload their |
57 |
+keys. |
58 |
+ |
59 |
+``gpg --export KEYID | ssh dev.gentoo.org /usr/local/bin/openpgp-key-upload`` |
60 |
+ |
61 |
Backwards Compatibility |
62 |
======================= |
63 |
|
64 |
-- |
65 |
2.29.2 |