upgrade tarballs are signed with deprecated 2004 key, instead of 2012 key

Bug #1628852 reported by Dimitri John Ledkov
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
ubuntu-archive-publishing
Fix Released
Undecided
Dimitri John Ledkov

Bug Description

Over at:

http://archive.ubuntu.com/ubuntu/ubuntu/dists/yakkety/main/dist-upgrader-all/current/

yakkety.tar.gz appears to be signed with ubuntu-keyring-2004-archive.gpg key, old 1024 DSA key.

please sign upgrade tarballs with ubuntu-keyring-2012-archive.gpg key only, the new 4096 RSA key.

Tags: gnupg2

Related branches

Changed in ubuntu-release-upgrader (Ubuntu):
assignee: nobody → Brian Murray (brian-murray)
affects: ubuntu-release-upgrader (Ubuntu) → ubuntu-archive-publishing
Changed in ubuntu-archive-publishing:
assignee: Brian Murray (brian-murray) → nobody
Changed in ubuntu-archive-publishing:
assignee: nobody → Dimitri John Ledkov (xnox)
Changed in ubuntu-archive-publishing:
status: New → Confirmed
Revision history for this message
Dimitri John Ledkov (xnox) wrote :
Changed in ubuntu-archive-publishing:
status: Confirmed → Fix Committed
Revision history for this message
Dimitri John Ledkov (xnox) wrote :

Verified that -proposed upgrade tarballs are correctly signed.

Changed in ubuntu-archive-publishing:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.