Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Cameron Garnham (da2ce7) pgp key into the keys.txt file. #52

Draft
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

da2ce7
Copy link
Contributor

@da2ce7 da2ce7 commented Oct 7, 2021

Relates to #50
Do not merge before #51

Before merging, Please:

  1. Import the key into your local gpg database:
    $ gpg --keyserver hkps://keys.openpgp.org --recv-keys 0x2835ADF6240F6032A72BA1775096293864DA5C9E

  2. Print the full-key info:
    $ gpg --with-subkey-fingerprint --list-key 0x2835ADF6240F6032A72BA1775096293864DA5C9E

  3. Print the commit author info, commit signature details, and diff:
    $ git show --show-signature [git commit]

and then Verify:

  • The commit keys.txt' diff fingerprint is identical to: the pub` fingerprint in the gpg key info.

  • The commit `keys.txt' diff has the same name as the:
    the commit author name.
    the gpg key info.

  • The commit `keys.txt' diff has the same username (in brackets) as:
    the github username for the pull-request.

  • The commit signing key fingerprint is listed in:
    the gpg key info.

  • The commit author email address is listed in:
    the gpg key info.

@da2ce7 da2ce7 added the security Improve Project Security and Related Aspects label Oct 7, 2021
@da2ce7 da2ce7 requested review from josecelano and MCM-Mike October 7, 2021 19:15
@da2ce7 da2ce7 force-pushed the issue-50-da2ce7-pgp-key branch 2 times, most recently from 2f0bba3 to 8707b5d Compare October 7, 2021 20:09
@da2ce7 da2ce7 force-pushed the issue-50-da2ce7-pgp-key branch from 8707b5d to ab756ba Compare October 8, 2021 11:22
Before merging, Please:

1. Import the key into your local gpg database:
$ gpg --keyserver hkps://keys.openpgp.org --recv-keys 0x2835ADF6240F6032A72BA1775096293864DA5C9E

2. Print the full-key info:
$ gpg --with-subkey-fingerprint --list-key 0x2835ADF6240F6032A72BA1775096293864DA5C9E

3. Print the commit author info, commit signature details, and diff:
$ git show --show-signature [git commit]

and then Verify:

* The commit `keys.txt' diff fingerprint is identical to:
    the `pub` fingerprint in the gpg key info.

* The commit `keys.txt' diff has the same name as the:
    the commit author name.
    the gpg key info.

* The commit `keys.txt' diff has the same username (in brackets) as:
    the github username for the pull-request.

* The commit signing key fingerprint is listed in:
    the gpg key info.

* The commit author email address is listed in:
    the gpg key info.
@da2ce7 da2ce7 force-pushed the issue-50-da2ce7-pgp-key branch from ab756ba to 81b25f5 Compare October 8, 2021 11:23
@da2ce7 da2ce7 changed the title Add Cameron Garnham (da2ce7) Personal Key keys.txt Add Cameron Garnham (da2ce7) pgp key into the keys.txt file. Oct 8, 2021
@josecelano
Copy link
Member

Hi, @da2ce7 @MCM-Mike I've created another PR with my PGP key. Once @MCM-Mike reviews this one I can merge it and then you can review and merge mine.

@josecelano
Copy link
Member

hi @MCM-Mike can we merge this? I think we were waiting for your review.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security Improve Project Security and Related Aspects
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants