influxdata / chronograf

Open source monitoring and visualization UI for the TICK stack
https://www.influxdata.com/time-series-platform/chronograf/
Other
1.5k stars 257 forks source link

Linux package signing key rotation #6015

Closed jdstrand closed 1 year ago

jdstrand commented 1 year ago

We're rotating our Linux package signing key on 2023-01-26. Please see https://www.influxdata.com/blog/linux-package-signing-key-rotation/ for details.

jdstrand commented 1 year ago

Fyi, now that everything has been signed with the new key since January and nothing should be using the old key, we have revoked the old signing key (ie, https://repos.influxdata.com/influxdb.key (05CE 1508 5FC0 9D18 E99E FB22 684A 14CF 2582 E0C5)) and updated the keyservers. We're in the process of updating https://repos.influxdata.com/influxdb.key now to contain the updated revoked key.

No changes have been made to the current signing key and since the old key hasn't been used for signing for many months, this change should go unnoticed.

jdstrand commented 1 year ago

We're in the process of updating https://repos.influxdata.com/influxdb.key now to contain the updated revoked key.

This is now done.