2017-12-15 19:16:31 +01:00
|
|
|
## PGP keys of Gitian builders and Developers
|
2016-10-18 15:09:32 +02:00
|
|
|
|
2018-07-05 23:22:47 +02:00
|
|
|
The file `keys.txt` contains fingerprints of the public keys of Gitian builders
|
|
|
|
|
and active developers.
|
2016-10-18 15:09:32 +02:00
|
|
|
|
2018-07-05 23:22:47 +02:00
|
|
|
The associated keys are mainly used to sign git commits or the build results
|
|
|
|
|
of Gitian builds.
|
2016-10-18 15:09:32 +02:00
|
|
|
|
2017-12-15 19:16:31 +01:00
|
|
|
The most recent version of each pgp key can be found on most pgp key servers.
|
|
|
|
|
|
|
|
|
|
Fetch the latest version from the key server to see if any key was revoked in
|
|
|
|
|
the meantime.
|
|
|
|
|
To fetch the latest version of all pgp keys in your gpg homedir,
|
2016-10-18 15:09:32 +02:00
|
|
|
|
|
|
|
|
```sh
|
|
|
|
|
gpg --refresh-keys
|
|
|
|
|
```
|
2017-12-15 19:16:31 +01:00
|
|
|
|
|
|
|
|
To fetch keys of Gitian builders and active developers, feed the list of
|
|
|
|
|
fingerprints of the primary keys into gpg:
|
|
|
|
|
|
|
|
|
|
```sh
|
|
|
|
|
while read fingerprint keyholder_name; do gpg --keyserver hkp://subset.pool.sks-keyservers.net --recv-keys ${fingerprint}; done < ./keys.txt
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
Add your key to the list if you provided Gitian signatures for two major or
|
|
|
|
|
minor releases of Bitcoin Core.
|
