Re: Archive signing key for 2007?

2007-02-15 Thread Goswin von Brederlow
Frans Pop <[EMAIL PROTECTED]> writes: > On Thursday 15 February 2007 13:44, Goswin von Brederlow wrote: >> > This includes my (partial) local mirror. Let's just say that this >> > would seriously impact my work on D-I and the release. >> >> Slightly off the topic but does that (still) work fine fo

Re: Archive signing key for 2007?

2007-02-15 Thread Frans Pop
On Thursday 15 February 2007 13:44, Goswin von Brederlow wrote: > > This includes my (partial) local mirror. Let's just say that this > > would seriously impact my work on D-I and the release. > > Slightly off the topic but does that (still) work fine for you? Yes, debmirror works fine here. Appar

Re: Archive signing key for 2007?

2007-02-15 Thread Goswin von Brederlow
Frans Pop <[EMAIL PROTECTED]> writes: > On Monday 05 February 2007 22:14, Joey Hess wrote: >> If this is being used as an empirical way to find out what breakas, >> fine. So far all I know of is debmirror << 20070123. > > Which means all Sarge and Etch boxes running debmirror > > This includes my

Re: Archive signing key for 2007?

2007-02-06 Thread Joey Hess
Steve Langasek wrote: > FWIW, an additional problem was brought up on IRC last night -- apparently > the new key is not yet being used to sign the security.d.o archive, only the > old key that will be expiring shortly. So that turns out to not be true (at least now) for the etch suite on security.

Re: Archive signing key for 2007?

2007-02-06 Thread Joey Hess
Frans Pop wrote: > Which means all Sarge and Etch boxes running debmirror > > This includes my (partial) local mirror. Let's just say that this would > seriously impact my work on D-I and the release. You can work around the debmirror problem by running it with --ignore-release-gpg It does seem

Re: Archive signing key for 2007?

2007-02-05 Thread Steve Langasek
On Mon, Feb 05, 2007 at 04:14:07PM -0500, Joey Hess wrote: > Seems you have still missed replying to this. > The 2006 key expires on the 7th and is still being used to sign the > archive. > If this is being used as an empirical way to find out what breakas, fine. > So far all I know of is debmirr

Re: Archive signing key for 2007?

2007-02-05 Thread Frans Pop
On Monday 05 February 2007 22:14, Joey Hess wrote: > If this is being used as an empirical way to find out what breakas, > fine. So far all I know of is debmirror << 20070123. Which means all Sarge and Etch boxes running debmirror This includes my (partial) local mirror. Let's just say that this

Re: Archive signing key for 2007?

2007-02-05 Thread Joey Hess
Seems you have still missed replying to this. The 2006 key expires on the 7th and is still being used to sign the archive. If this is being used as an empirical way to find out what breakas, fine. So far all I know of is debmirror << 20070123. But I wish you could at least answer my mails about i

Re: Archive signing key for 2007?

2007-01-20 Thread Martin Zobel-Helas
Hi, On Sat Jan 20, 2007 at 13:51:49 +0100, Goswin von Brederlow wrote: > Martin Zobel-Helas <[EMAIL PROTECTED]> writes: > > > Stable will be signed by both, online and offline key. Also every point > > release will be signed by both keys. > > > > Greetings > > Martin > > Ok, then where is the "

Re: Archive signing key for 2007?

2007-01-20 Thread Goswin von Brederlow
Martin Zobel-Helas <[EMAIL PROTECTED]> writes: > Stable will be signed by both, online and offline key. Also every point > release will be signed by both keys. > > Greetings > Martin Ok, then where is the "Debian Archive offline Signing Key (4.0/etch) <[EMAIL PROTECTED]>"? Isn't is high time to

Re: Archive signing key for 2007?

2007-01-19 Thread Martin Zobel-Helas
Hi, On Fri Jan 19, 2007 at 13:01:45 +0100, Goswin von Brederlow wrote: > Anthony Towns writes: > > > On Thu, Jan 11, 2007 at 11:51:21PM +0100, Javier Fern?ndez-Sanguino Pe?a > > wrote: > >> I thought that the 2007 key was (based on [1]) supposed to be available > >> early in January and availa

Re: Archive signing key for 2007?

2007-01-19 Thread Goswin von Brederlow
Anthony Towns writes: > On Thu, Jan 11, 2007 at 11:51:21PM +0100, Javier Fern?ndez-Sanguino Pe?a > wrote: >> I thought that the 2007 key was (based on [1]) supposed to be available >> early in January and available in the debian-archive-keyring package. Which >> doesn't seem to be the case. > >

Re: Archive signing key for 2007?

2007-01-18 Thread Florian Weimer
* Anthony Towns: > The key we'll be using (and indeed are already using) is available as: > > http://ftp-master.debian.org/archive-key-4.0.asc > > It's expected to be valid until sometime after lenny is released. Thanks a lot for stopping the yearly key rollover madness. -- To UNSUBSCRIB

Re: Archive signing key for 2007?

2007-01-18 Thread Javier Fernández-Sanguino Peña
On Fri, Jan 19, 2007 at 01:55:06AM +1100, Anthony Towns wrote: > The key we'll be using (and indeed are already using) is available as: > > http://ftp-master.debian.org/archive-key-4.0.asc Thanks for the info. Maybe I've missed something, but I though there was going to be one key per year

Re: Archive signing key for 2007?

2007-01-18 Thread Simon Josefsson
Anthony Towns writes: > On Thu, Jan 11, 2007 at 11:51:21PM +0100, Javier Fern?ndez-Sanguino Pe?a > wrote: >> I thought that the 2007 key was (based on [1]) supposed to be available >> early in January and available in the debian-archive-keyring package. Which >> doesn't seem to be the case. > >

Re: Archive signing key for 2007?

2007-01-18 Thread Joey Hess
Anthony Towns wrote: > The key we'll be using (and indeed are already using) is available as: > > http://ftp-master.debian.org/archive-key-4.0.asc > > It's expected to be valid until sometime after lenny is released. I feel that we've been pretty miserable at communicating this stuff to ou

Re: Archive signing key for 2007?

2007-01-18 Thread Anthony Towns
On Thu, Jan 11, 2007 at 11:51:21PM +0100, Javier Fern?ndez-Sanguino Pe?a wrote: > I thought that the 2007 key was (based on [1]) supposed to be available > early in January and available in the debian-archive-keyring package. Which > doesn't seem to be the case. The key we'll be using (and indeed

Re: Archive signing key for 2007?

2007-01-11 Thread Julien Cristau
On Thu, Jan 11, 2007 at 23:51:21 +0100, Javier Fernández-Sanguino Peña wrote: > Could the ftpmaster team, after creating the key, do any (or all) of the > following? > You know the contact address for ftp-master is not debian-devel@lists.debian.org, right? Cheers, Julien signature.asc Descript

Archive signing key for 2007?

2007-01-11 Thread Javier Fernández-Sanguino Peña
There seems not to be any 2007 archive signing key in the archive yet. That is http://ftp-master.debian.org/ziyi_key_2007.asc does not exist. I thought that the 2007 key was (based on [1]) supposed to be available early in January and available in the debian-archive-keyring package. Which doesn'