diff options
| author | fanquake <fanquake@gmail.com> | 2021-08-12 16:40:34 +0800 |
|---|---|---|
| committer | fanquake <fanquake@gmail.com> | 2021-08-17 08:59:04 +0800 |
| commit | 4c43b7d41d11072f382f938379d21cd2e0bcbb47 (patch) | |
| tree | 1870c7a906b0d552b0939eb354de13bd7af98668 /contrib/verify-commits | |
| parent | 820129aee9fdd0b3f238e9feef60330342d61966 (diff) | |
contrib: use hkps://keys.openpgp.org to retrieve builder keys
hkps://hkps.pool.sks-keyservers.net is essentially no-longer functional,
and a number of distributions and GPG tools have since switched to using
this key server as their default.
See this Debian patch for additional context:
https://salsa.debian.org/debian/gnupg2/-/blob/debian/main/debian/patches/Use-hkps-keys.openpgp.org-as-the-default-keyserver.patch
Switch to using keys.openpgp.org in the CI as well.
Diffstat (limited to 'contrib/verify-commits')
| -rw-r--r-- | contrib/verify-commits/README.md | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/contrib/verify-commits/README.md b/contrib/verify-commits/README.md index e95a57586f..b8b15280ba 100644 --- a/contrib/verify-commits/README.md +++ b/contrib/verify-commits/README.md @@ -40,7 +40,7 @@ Import trusted keys In order to check the commit signatures, you must add the trusted PGP keys to your machine. [GnuPG](https://gnupg.org/) may be used to import the trusted keys by running the following command: ```sh -gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys $(<contrib/verify-commits/trusted-keys) +gpg --keyserver hkps://keys.openpgp.org --recv-keys $(<contrib/verify-commits/trusted-keys) ``` Key expiry/revocation |