Updated my GPG key

September 29, 2010

linux gpg

I realized today, after having a conversation with someone at work about gpg keys and rpm support, that I haven’t updated my GPG key in about 6 years.

Then I realized I harped on CERT not too long ago about not doing things right. =) Granted, my key hasn’t been compromised and I have no established schedule for rotating keys, but 6 years is a long time. So I’ve generated a new key, and revoked the old key. Direct link to the new key/revocation certificate: http://linsec.ca/vdanen.asc".

It has been signed with my old key and a few others. If anyone out there has signed my old key (0xFEE30AD4), I would surely appreciate you signing the new key as well. I think a trail of trust has been established with the new key. The particulars:


pub   2048R/B86380FC 2010-09-29 [expires: 2013-09-28]
uid                  Vincent Danen <[email protected]>
sig 3        B86380FC 2010-09-29  Vincent Danen <[email protected]>
sig          FEE30AD4 2010-09-29  Vincent Danen <[email protected]>
sig          CA57AD7C 2010-09-29  PGP Global Directory Verification Key
sig          CA57AD7C 2010-09-29  PGP Global Directory Verification Key
uid                  Vincent Danen <[email protected]>
sig 3        B86380FC 2010-09-29  Vincent Danen <[email protected]>
sig          FEE30AD4 2010-09-29  Vincent Danen <[email protected]>
sig          CA57AD7C 2010-09-29  PGP Global Directory Verification Key
uid                  Vincent Danen <[email protected]>
sig 3        B86380FC 2010-09-29  Vincent Danen <[email protected]>
sig          FEE30AD4 2010-09-29  Vincent Danen <[email protected]>
sig          CA57AD7C 2010-09-29  PGP Global Directory Verification Key
sig          CA57AD7C 2010-09-29  PGP Global Directory Verification Key
sub   2048R/729BAAE4 2010-09-29 [expires: 2013-09-28]
sig          B86380FC 2010-09-29  Vincent Danen <[email protected]>

And the fingerprint info:

pub   2048R/B86380FC 2010-09-29 [expires: 2013-09-28]
      Key fingerprint = 786F 8AA3 A608 8CA2 33A3  4D8E 5179 17ED B863 80FC
uid                  Vincent Danen <[email protected]>
uid                  Vincent Danen <[email protected]>
uid                  Vincent Danen <[email protected]>
sub   2048R/729BAAE4 2010-09-29 [expires: 2013-09-28]

Neato… wordpress hides email addresses, so the above output is missing any email addresses listed. I’ve also sent the new key and revocation of the old key to the keyservers.