AppSuite:Importing OX Buildkey

From Open-Xchange
Revision as of 13:11, 22 November 2012 by Khgras (talk | contribs)


Importing the Open-Xchange Buildkey

Open-Xchange rpm packages are signed with the Open-Xchange build gpg public key and the apt repository is signed according to http://wiki.debian.org/SecureApt.

Key ID: EED949F0
Key fingerprint: 8416 454E 1646 F085 9651  8FDE DD1A 5E9C EED9 49F0

The public key can be downloaded from the public pgp keyservers or from http://software.open-xchange.com/oxbuildkey.pub

Note: If you're using the Community packages, you need to import this key:

http://software.open-xchange.com/oxbuildkey-community.pub

Importing key into apt based systems

To import the key into the apt keyring, run

$ wget http://software.open-xchange.com/oxbuildkey.pub -O - | apt-key add -

If this command returns "OK", you're done importing the buildkey and can go on with the installation. In case that does not work, split it into two steps:

$ wget http://software.open-xchange.com/oxbuildkey.pub
$ apt-key add - < oxbuildkey.pub

To verify the success, run

$ apt-key list

The following or similar output should appear:

/etc/apt/trusted.gpg
--------------------
pub   1024D/2D230C5F 2006-01-03 [expired: 2007-02-07]
uid                  Debian Archive Automatic Signing Key (2006) <ftpmaster@debian.org>

pub   1024D/6070D3A1 2006-11-20 [expires: 2009-07-01]
uid                  Debian Archive Automatic Signing Key (4.0/etch) <ftpmaster@debian.org>

pub   1024D/ADB11277 2006-09-17
uid                  Etch Stable Release Key <debian-release@lists.debian.org>

pub   1024D/BBE55AB3 2007-03-31 [expires: 2010-03-30]
uid                  Debian-Volatile Archive Automatic Signing Key (4.0/etch)
sub   2048g/36CA98F3 2007-03-31 [expires: 2010-03-30] 

pub   1024D/EED949F0 2005-04-15
uid                  RPM BUILD (OPEN-XCHANGE) <rpmbuild@open-xchange.org>

Importing Key into rpm based systems

To import that key into the rpm database, use the following command (as root):

$ rpm --import http://software.open-xchange.com/oxbuildkey.pub

to verify the success, use

$ rpm -qi gpg-pubkey-eed949f0-425f910e

that should give an output similar to this one:

Name        : gpg-pubkey                   Relocations: (not relocatable)
Version     : eed949f0                          Vendor: (none)
Release     : 425f910e                      Build Date: Tue Jan 13 14:42:33  2009
Install Date: Tue Jan 13 14:42:33 2009      Build Host: localhost
Group       : Public Keys                   Source RPM: (none)
Size        : 0                                License: pubkey
Signature   : (none)
Summary     : gpg(RPM BUILD (OPEN-XCHANGE) <rpmbuild@open-xchange.org>)
Description :
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: rpm-4.4.2 (beecrypt-4.1.2)
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=VluO
-----END PGP PUBLIC KEY BLOCK-----

Distribution: (none)