Skip to content

Latest commit

 

History

History
11 lines (11 loc) · 601 Bytes

ROTATING-GPG-KEY.md

File metadata and controls

11 lines (11 loc) · 601 Bytes
  • generate new GPG key:
    gpg --gen-key
  • export private key:
    gpg --export-secret-keys -a $KEY_ID | tr '\n' ',' | sed -e 's#,#\\n#g'
  • change GitHub secrets:
    • OSSRH_GPG_SECRET_KEY to the exported content from above
    • OSSRH_GPG_SECRET_KEY_PASSWORD to the passphrase used during key generation
  • publish public key (cf. https://central.sonatype.org/publish/requirements/gpg/#signing-a-file):
    • gpg --keyserver keyserver.ubuntu.com --send-keys $KEY_ID
    • gpg --keyserver keys.openpgp.org --send-keys $KEY_ID
    • gpg --keyserver pgp.mit.edu --send-keys $KEY_ID