Gentoo Archives: gentoo-dev

From: Markos Chandras <hwoarang@g.o>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] RFC: Gentoo GPG key policies
Date: Thu, 21 Feb 2013 09:41:59
Message-Id: CAG2jQ8icxqF_gWaHvFU2rRo4UDY=ZMKPQ0jB0m+rLqkyegm3CA@mail.gmail.com
In Reply to: Re: [gentoo-dev] RFC: Gentoo GPG key policies by "Michał Górny"
1 On 21 February 2013 09:09, Michał Górny <mgorny@g.o> wrote:
2 > On Mon, 18 Feb 2013 23:27:46 +0000
3 > "Robin H. Johnson" <robbat2@g.o> wrote:
4 >
5 >> Recommendations:
6 >> ----------------
7 >> 3. Dedicated Gentoo signing subkey of EITHER:
8 >> 3.1. DSA 2048 bits
9 >> 3.2. RSA 4096 bits
10 >
11 > As a note for those who didn't know this; to make gpg use the dedicated
12 > subkey, you need to append an exclamation mark (!) to it. Like:
13 >
14 > PORTAGE_GPG_KEY="9627F456F9DA7643!"
15 >
16 > Otherwise, GPG will just use this as a reference to the whole key,
17 > and may use other subkey.
18 >
19 > --
20 > Best regards,
21 > Michał Górny
22
23 Thanks for that. I didn't know it and I couldn't find any references
24 in the manpages.
25
26 --
27 Regards,
28 Markos Chandras - Gentoo Linux Developer
29 http://dev.gentoo.org/~hwoarang