New signing key for TaskJuggler releases

46 views
Skip to first unread message

Chris Schlaeger

unread,
Oct 25, 2011, 8:10:03 AM10/25/11
to taskjuggle...@googlegroups.com
Hi TaskJuggler Users,

In the past, TaskJuggler releases, git tags, to be specific have been
signed with my GPG with key ID 0500838B. This was a 1024 bit DSA key
and is no longer up to today's security standards.

Starting with the upcoming 3.0 release, git tags will be signed with my new key:

pub 4096R/2AD38B49 2011-10-06
Key fingerprint = D14D 6742 89C2 A5D1 E38B 008C CEC1 9DC2 2AD3 8B49

Unfortunately, Ruby gem still does not fully support signed releases.
Until this has been fixed, the gem packages will not be signed. If you
are concerned about security, you should get TaskJuggler from the Git
repository and check the release tag against the above key.

Chris

Reply all
Reply to author
Forward
0 new messages