From 828be0071ea1fd41808b56d3a0024637091198bd Mon Sep 17 00:00:00 2001 From: Will Greenberg Date: Thu, 28 Apr 2022 11:04:43 -0700 Subject: Add new signing key (#9288) * Add new signing key * Update certbot/CHANGELOG.md --- certbot/CHANGELOG.md | 2 ++ certbot/docs/packaging.rst | 3 ++- tools/_release.sh | 1 + 3 files changed, 5 insertions(+), 1 deletion(-) diff --git a/certbot/CHANGELOG.md b/certbot/CHANGELOG.md index 9a24b8bf1..cfb18cd6e 100644 --- a/certbot/CHANGELOG.md +++ b/certbot/CHANGELOG.md @@ -10,6 +10,8 @@ Certbot adheres to [Semantic Versioning](https://semver.org/). ### Changed +* The PGP key `F2871B4152AE13C49519111F447BF683AA3B26C3` was added as an + additional trusted key to sign our PyPI packages * When `certonly` is run with an installer specified (e.g. `--nginx`), `certonly` will now also run `restart` for that installer diff --git a/certbot/docs/packaging.rst b/certbot/docs/packaging.rst index 89b368d65..a1fb23100 100644 --- a/certbot/docs/packaging.rst +++ b/certbot/docs/packaging.rst @@ -33,12 +33,13 @@ example: `v0.11.1`. .. _`Semantic Versioning`: https://semver.org/ -Since version 1.21.0, our packages are cryptographically signed by one of three +Since version 1.21.0, our packages are cryptographically signed by one of four PGP keys: - ``BF6BCFC89E90747B9A680FD7B6029E8500F7DB16`` - ``86379B4F0AF371B50CD9E5FF3402831161D1D280`` - ``20F201346BF8F3F455A73F9A780CC99432A28621`` +- ``F2871B4152AE13C49519111F447BF683AA3B26C3``` These keys can be found on major key servers and at https://dl.eff.org/certbot.pub. diff --git a/tools/_release.sh b/tools/_release.sh index d78b2ee96..a9ed017a7 100755 --- a/tools/_release.sh +++ b/tools/_release.sh @@ -36,6 +36,7 @@ if [ "$RELEASE_GPG_KEY" = "" ]; then BF6BCFC89E90747B9A680FD7B6029E8500F7DB16 86379B4F0AF371B50CD9E5FF3402831161D1D280 20F201346BF8F3F455A73F9A780CC99432A28621 + F2871B4152AE13C49519111F447BF683AA3B26C3 " for key in $TRUSTED_KEYS; do if gpg2 --with-colons --card-status | grep -q "$key"; then -- cgit v1.2.3