source: trunk/docs/gpg-setup.rst

Last change on this file was e9ae3aa, checked in by fenn-cs <fenn25.fn@…>, at 2021-11-18T11:04:56Z

move gpg signing instructions to seperate file

Signed-off-by: fenn-cs <fenn25.fn@…>

  • Property mode set to 100644
File size: 997 bytes
Line 
1Preparing to Authenticate Release (Setting up GPG)
2--------------------------------------------------
3
4In other to keep releases authentic it's required that releases are signed before being
5published. This ensure's that users of Tahoe are able to verify that the version of Tahoe
6they are using is coming from a trusted or at the very least known source.
7
8The authentication is done using the ``GPG`` implementation of ``OpenGPG`` to be able to complete
9the release steps you would have to download the ``GPG`` software and setup a key(identity).
10
11- `Download <https://www.gnupg.org/download/>`__ and install GPG for your operating system.
12- Generate a key pair using ``gpg --gen-key``. *Some questions would be asked to personalize your key configuration.*
13
14You might take additional steps including:
15
16- Setting up a revocation certificate (Incase you lose your secret key)
17- Backing up your key pair
18- Upload your fingerprint to a keyserver such as `openpgp.org <https://keys.openpgp.org/>`__
Note: See TracBrowser for help on using the repository browser.