On Tue, Sep 27, 2016 at 10:58:09AM +0200, Ludovic Courtès wrote: > > + (h2 "Release signatures") > > + (p "Releases of Guix and GuixSD are signed using the > > OpenPGP " > > + "key with the fingerprint " > > + "3CE4 6455 8A84 FDC6 9DB4 0CFB 090B 1199 3D9A EBB5. " > > + "This key can be obtained from XXX.") > > Maybe link to > <https://www.gnu.org/software/guix/manual/html_node/Binary-Installation.html> > or copy/paste the text? Though we should give a ‘gpg --recv-keys’ > command that uses the full fingerprint instead of just the 64-bit ID > (which is still too small, some say.)
Here's a patch that uses the fingerprint in guix.texi. What do you think? Also, please verify that I've got it right :)
From 64b1df0a9565154ac2a1bd5289a13572b00bb5e0 Mon Sep 17 00:00:00 2001
From: Leo Famulari <l...@famulari.name>
Date: Tue, 27 Sep 2016 14:12:02 -0400
Subject: [PATCH] doc: Give the full key fingerprint instead of the long key
ID.
* doc/guix.texi (OPENPGP-SIGNING-KEY-ID): Use fingerprint instead of
long key ID.
---
doc/guix.texi | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/doc/guix.texi b/doc/guix.texi
index c159e12..239428a 100644
--- a/doc/guix.texi
+++ b/doc/guix.texi
@@ -10,7 +10,7 @@
@include version.texi
@c Identifier of the OpenPGP key used to sign tarballs and such.
-@set OPENPGP-SIGNING-KEY-ID 090B11993D9AEBB5
+@set OPENPGP-SIGNING-KEY-ID 3CE464558A84FDC69DB40CFB090B11993D9AEBB5
@copying
Copyright @copyright{} 2012, 2013, 2014, 2015, 2016 Ludovic Courtès@*
--
2.10.0
signature.asc
Description: PGP signature
