Skip to content

Yearly signing of Hackage root keys #20

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jul 30, 2024
Merged

Conversation

jmct
Copy link
Contributor

@jmct jmct commented Jul 29, 2024

I would really appreciate some careful eyes on this as this is my first time doing anything like this.

The root.json file has been changed in the following ways:

  • Mathieu B's keys have been removed
  • The expiration has been set to 2025-07-31
  • The version number has been bumped

The quorum for signing was reached via:

  • John Wiegley
  • Gershom Bazerman
  • Adam Gundry

The following key holders did not object to the signing:

  • Joachim Breitner
  • Norman Ramsey

The following key holder did not respond

  • Mathieu B.

The root.json file has been changed in the following ways:

* Mathieu B's keys have been removed
* The expiration has been set to 2025-07-31
* The version number has been bumped

The quorum for signing was reached via:

* John Wiegley
* Gershom Bazerman
* Adam Gundry

The following key holders did not object to the signing:

* Joachim Breitner
* Norman Ramsey

The following key holder did not respond

* Mathieu B.
@jmct
Copy link
Contributor Author

jmct commented Jul 29, 2024

Is there any way to test this before rolling it out? (Sorry for my ignorance)

I did use the test script in scripts/check-root-json.hs but my understanding is that this is only a syntactic check.

@gbaz
Copy link
Contributor

gbaz commented Jul 30, 2024

Just replaced in the file from this PR into running hackage and a cabal update worked, so this seems ok for now. Thanks!

@gbaz gbaz merged commit 9e1e1bd into haskell-infra:master Jul 30, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants