From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <mark@klomp.org>
Received: from gnu.wildebeest.org (gnu.wildebeest.org [45.83.234.184])
 by sourceware.org (Postfix) with ESMTPS id C33BD3858C27
 for <elfutils-devel@sourceware.org>; Fri, 25 Feb 2022 21:21:14 +0000 (GMT)
DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org C33BD3858C27
Authentication-Results: sourceware.org;
 dmarc=none (p=none dis=none) header.from=klomp.org
Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=klomp.org
Received: by gnu.wildebeest.org (Postfix, from userid 1000)
 id E4B78304F853; Fri, 25 Feb 2022 22:21:12 +0100 (CET)
Date: Fri, 25 Feb 2022 22:21:12 +0100
From: Mark Wielaard <mark@klomp.org>
To: "Frank Ch. Eigler" <fche@redhat.com>
Cc: Michael Przybylski <mike@levo.ai>, elfutils-devel@sourceware.org
Subject: Re: Signing keys for releases?
Message-ID: <20220225212112.GA17594@gnu.wildebeest.org>
References: <0588587cc4efb2a48ee4746f5da9865bc1bb0380.camel@levo.ai>
 <20220225194228.GA2966@redhat.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20220225194228.GA2966@redhat.com>
User-Agent: Mutt/1.5.21 (2010-09-15)
X-Spam-Status: No, score=-3.6 required=5.0 tests=BAYES_00, JMQ_SPF_NEUTRAL,
 KAM_DMARC_STATUS, SPF_HELO_NONE, SPF_PASS, TXREP,
 T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no version=3.4.4
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on
 server2.sourceware.org
X-BeenThere: elfutils-devel@sourceware.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Elfutils-devel mailing list <elfutils-devel.sourceware.org>
List-Unsubscribe: <https://sourceware.org/mailman/options/elfutils-devel>,
 <mailto:elfutils-devel-request@sourceware.org?subject=unsubscribe>
List-Archive: <https://sourceware.org/pipermail/elfutils-devel/>
List-Help: <mailto:elfutils-devel-request@sourceware.org?subject=help>
List-Subscribe: <https://sourceware.org/mailman/listinfo/elfutils-devel>,
 <mailto:elfutils-devel-request@sourceware.org?subject=subscribe>
X-List-Received-Date: Fri, 25 Feb 2022 21:21:17 -0000

Hi,

On Fri, Feb 25, 2022 at 02:42:28PM -0500, Frank Ch. Eigler via Elfutils-devel wrote:
> > Could you please point me toward the PGP/GPG public keys necessary to
> > validate the elfutils release tarballs against their .sig files?
> 
> Try these:
> 
> https://sourceware.org/elfutils/ftp/gpgkey-1AA44BE649DE760A.gpg
> https://sourceware.org/elfutils/ftp/gpgkey-5C1D1AA44BE649DE760A.gpg

There is also the GPG-KEY file inside the tar.gz dists (obviously then
you have to unpack the tarbal first to get at that before you can
check it...)

But you can also get it from git:
https://sourceware.org/git/?p=elfutils.git;a=blob_plain;f=GPG-KEY;hb=HEAD

Cheers,

Mark