Opened 5 years ago

Closed 5 years ago

Last modified 5 years ago

#13238 closed defect (fixed)

BridgeDB's GnuPG online signing key is expired

Reported by: txt.file Owned by: isis
Priority: High Milestone:
Component: Circumvention/BridgeDB Version:
Severity: Keywords: bridgedb-reportbug, bridgedb-email, isis2014Q3Q4
Cc: isis Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

The key for bridges email service is expired since the 11th of this month. Please provide a new key.

Child Tickets

Change History (4)

comment:1 Changed 5 years ago by isis

Keywords: bridgedb-email added
Priority: criticalmajor
Summary: email gpg key is expiredBridgeDB's GnuPG online signing key is expired

comment:2 Changed 5 years ago by isis

Resolution: fixed
Status: newclosed

Rather, the expirations of the "old" "online" keys, since they were never in use on the live, online server (do to problems with the key usage of the GPGME library in #5463) have been updated for one year forward from their original expiration date:

(bdb)∃!isisⒶwintermute:(fix/9380-stem_r6 *$<>)~/code/torproject/bridgedb ∴ gpg2 --list-keys 21B554E95938F4D0
pub   4096R/8DC43A2848821E32 2013-09-11 [expires: 2015-09-11]
      Key fingerprint = DF81 1109 E17C 8BF1 34B5  EEB6 8DC4 3A28 4882 1E32
uid               [ unknown] BridgeDB <bridges@bridges.torproject.org>
sub   4096R/21B554E95938F4D0 2013-09-11 [expires: 2015-09-11]
      Key fingerprint = 9FE3 9D1A 7438 9223 3B3F  66F2 21B5 54E9 5938 F4D0
sub   4096R/E7793047C5B54232 2013-09-11 [expires: 2015-09-11]
      Key fingerprint = CFFB 8469 9048 37E7 8CAE  322C E779 3047 C5B5 4232

If issue is taken with my management of these keys, please reopen this ticket. (I would normally feel a bit squicky about updating key expirations, were it not for the fact that these keys have literally been completely dormant for this period, and thus, hopefully less subject to compromise.)

comment:3 Changed 5 years ago by isis

Keywords: Isis2014Q3Q4 added

comment:4 Changed 5 years ago by isis

Keywords: isis2014Q3Q4 added; Isis2014Q3Q4 removed
Note: See TracTickets for help on using tickets.