Debian Archive Signing Key to be changed

[Garfield WTF]

---------- Forwarded message ----------
From: Alexander Reichle-Schmehl <tol...@debian.org>
Date: Thu, Feb 10, 2011 at 5:02 AM
Subject: Debian Archive Signing Key to be changed
To: debian-...@lists.debian.org


------------------------------------------------------------------------
The Debian Project                                http://www.debian.org/
Debian Archive Signing Key to be changed                pr...@debian.org
February 9th, 2011              http://www.debian.org/News/2011/20110209
------------------------------------------------------------------------

Debian Archive Signing Key to be changed

The Debian Project wishes to announce the change of the GNU Privacy
Guard key used to digitally sign the archive reference files.
Signatures are used to ensure that packages installed by users are the
very same originally distributed by Debian and have not been exchanged
or tempered with.

Affected distributions are the Debian unstable branch (codenamed "Sid")
as well as the testing branch (codenamed "Wheezy"). The Debian Security
(security.debian.org) and Backports (backports.debian.org) archive also
start using the new key now.  The current stable version Debian
GNU/Linux 6.0 (codenamed "Squeeze") and the current oldstable version
Debian GNU/Linux 5.0 (codenamed "Lenny") will have their ftpmaster
signature updated with their next point release.

The new key has already been distributed via the debian-archive-keyring
[1] package and is included in all current releases of Debian.

 1: http://packages.debian.org/debian-archive-keyring

Starting with the next mirror update this evening only the new key will
be used.

For reference, the old key is:

 pub   4096R/55BE302B 2009-01-27 [expires: 2012-12-31]
       Key fingerprint = 150C 8614 919D 8446 E01E  83AF 9AA3 8DCD 55BE 302B
 uid                  Debian Archive Automatic Signing Key (5.0/lenny) <ftpm...@debian.org>

and the new one:

 pub   4096R/473041FA 2010-08-27 [expires: 2018-03-05]
       Key fingerprint = 9FED 2BCB DCD2 9CDF 7626  78CB AED4 B06F 4730 41FA
 uid                  Debian Archive Automatic Signing Key (6.0/squeeze) <ftpm...@debian.org>

This key rollover is a normal maintainance task and was started in
August 2010 [2].  For security reasons Debian's archive signing keys
regularily expire after three years.

 2: http://lists.debian.org/87d3t3a...@gkar.ganneff.de


About Debian
------------

The Debian Project was founded in 1993 by Ian Murdock to be a truly
free community project. Since then the project has grown to be one of
the largest and most influential open source projects.  Over a thousand
volunteers from all over the world work together to create and maintain
Debian software. Available in 70 languages, and supporting a huge range
of computer types, Debian calls itself the "universal operating
system".


Contact Information
-------------------

For further information, please visit the Debian web pages at
http://www.debian.org/ or send mail to <pr...@debian.org>.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
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=0MD7
-----END PGP SIGNATURE-----

--
GarfieldWTF
Debian User Community (Malaysia)
http://debmal.my