<feed xmlns='http://www.w3.org/2005/Atom'>
<title>delta/python-packages/gitpython.git/release-verification-key.asc, branch 3.1.26</title>
<subtitle>github.com: gitpython-developers/GitPython.git
</subtitle>
<link rel='alternate' type='text/html' href='http://trove.baserock.org/cgit/delta/python-packages/gitpython.git/'/>
<entry>
<title>Adjust signature key - please read if you verify installs/packages</title>
<updated>2020-09-04T02:00:48+00:00</updated>
<author>
<name>Sebastian Thiel</name>
<email>sebastian.thiel@icloud.com</email>
</author>
<published>2020-09-04T02:00:48+00:00</published>
<link rel='alternate' type='text/html' href='http://trove.baserock.org/cgit/delta/python-packages/gitpython.git/commit/?id=eb411ee92d30675a8d3d110f579692ea02949ccd'/>
<id>eb411ee92d30675a8d3d110f579692ea02949ccd</id>
<content type='text'>
After a recent 'cleanup' operation that attempted to simplify my
GPG key workflow with Yubikeys, it looks like my GPG installation
has 'forgotten' how to interact with the key I typically used
to sign GitPython releases.

Since I never managed to establish a chain of trust with my only
remaining 'good' key, for you this means you cannot trust new
GitPython releases anymore.

There is nothing I can do about except to apologize for the hassle.

If you want to make constructive suggestions on how to fix this, I am
happy to work with you on that.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
After a recent 'cleanup' operation that attempted to simplify my
GPG key workflow with Yubikeys, it looks like my GPG installation
has 'forgotten' how to interact with the key I typically used
to sign GitPython releases.

Since I never managed to establish a chain of trust with my only
remaining 'good' key, for you this means you cannot trust new
GitPython releases anymore.

There is nothing I can do about except to apologize for the hassle.

If you want to make constructive suggestions on how to fix this, I am
happy to work with you on that.
</pre>
</div>
</content>
</entry>
<entry>
<title>Sign with a different key for now, it's USB-C and can be used</title>
<updated>2020-02-08T03:22:08+00:00</updated>
<author>
<name>Sebastian Thiel</name>
<email>sebastian.thiel@icloud.com</email>
</author>
<published>2020-02-08T03:20:17+00:00</published>
<link rel='alternate' type='text/html' href='http://trove.baserock.org/cgit/delta/python-packages/gitpython.git/commit/?id=7b74a5bb6123b425a370da60bcc229a030e7875c'/>
<id>7b74a5bb6123b425a370da60bcc229a030e7875c</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Add Yarikoptic to allowed release keys</title>
<updated>2017-12-11T15:23:21+00:00</updated>
<author>
<name>Sebastian Thiel</name>
<email>byronimo@gmail.com</email>
</author>
<published>2017-12-11T15:23:21+00:00</published>
<link rel='alternate' type='text/html' href='http://trove.baserock.org/cgit/delta/python-packages/gitpython.git/commit/?id=f14a596a33feaad65f30020759e9f3481a9f1d9c'/>
<id>f14a596a33feaad65f30020759e9f3481a9f1d9c</id>
<content type='text'>
&gt; pub rsa4096/A2DE235062DA33FA 2010-06-07 Yaroslav Halchenko (Yarik) &lt;yoh@onerussian.com&gt;
&gt; Primary key fingerprint: C5B9 05F0 E8D9 FD96 68FF  366F A2DE 2350 62DA 33FA

As per https://github.com/gitpython-developers/GitPython/pull/702#issuecomment-350745673
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
&gt; pub rsa4096/A2DE235062DA33FA 2010-06-07 Yaroslav Halchenko (Yarik) &lt;yoh@onerussian.com&gt;
&gt; Primary key fingerprint: C5B9 05F0 E8D9 FD96 68FF  366F A2DE 2350 62DA 33FA

As per https://github.com/gitpython-developers/GitPython/pull/702#issuecomment-350745673
</pre>
</div>
</content>
</entry>
<entry>
<title>Update signing key to latest version</title>
<updated>2017-10-18T10:10:18+00:00</updated>
<author>
<name>Sebastian Thiel</name>
<email>byronimo@gmail.com</email>
</author>
<published>2017-10-18T10:08:22+00:00</published>
<link rel='alternate' type='text/html' href='http://trove.baserock.org/cgit/delta/python-packages/gitpython.git/commit/?id=c7f657fb20c063dfc2a653f050accc9c40d06a60'/>
<id>c7f657fb20c063dfc2a653f050accc9c40d06a60</id>
<content type='text'>
I rotated my key as the previous one was suffering from
ROCA.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
I rotated my key as the previous one was suffering from
ROCA.
</pre>
</div>
</content>
</entry>
<entry>
<title>docs(README): make it easier to verify gitpython tarballs</title>
<updated>2017-06-17T12:10:55+00:00</updated>
<author>
<name>Sebastian Thiel</name>
<email>byronimo@gmail.com</email>
</author>
<published>2017-06-17T12:04:09+00:00</published>
<link rel='alternate' type='text/html' href='http://trove.baserock.org/cgit/delta/python-packages/gitpython.git/commit/?id=4bd708d41090fbe00acb41246eb22fa8b5632967'/>
<id>4bd708d41090fbe00acb41246eb22fa8b5632967</id>
<content type='text'>
Also provide my public key with this repository, hoping that people
can trust it as this commit is signed with it too :).
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Also provide my public key with this repository, hoping that people
can trust it as this commit is signed with it too :).
</pre>
</div>
</content>
</entry>
</feed>
