Update Admin Workstation setup instructions to use keys.openpgp.org #4586
Conversation
eloquence
requested review from
emkll,
kushaldas,
redshiftzero and
zenmonkeykstop
as code owners
Includes instructions for importing the key from securedrop.org as a fallback (may be superseded by WKD fallback in future)
eloquence
force-pushed
the
docs-keys-dot-openpgp-dot-rodeo
branch
from
5cf5923
to
6ebf31d
Compare
|
|
||
| .. code:: sh | ||
|
|
||
| gpg --keyserver hkps://hkps.pool.sks-keyservers.net --recv-key "2224 5C81 E3BA EB41 38B3 6061 310F 5612 00F4 AD77" | ||
| cd ~/Persistent | ||
| torify curl -LO https://securedrop.org/securedrop-release-key.asc |
There was a problem hiding this comment.
Note: This redirect has never been used before; I created it today (using Wagtail's redirect feature), as the official URL (https://securedrop.org/documents/10/securedrop-release-key.asc) is more difficult to type reliably, and subject to change if a new version is uploaded (in which case we'd have to redirect anyway, as we're doing from https://securedrop.org/documents/1/securedrop-release-key.asc). Happy to use an alternative approach if preferable.
| will implicitly verify that the fingerprint of the key received matches the | ||
| argument passed. | ||
| gpg --with-fingerprint --import-options import-show --dry-run \ | ||
| --import securedrop-release-key.asc |
There was a problem hiding this comment.
The short version is gpg securedrop-release-key.asc, but that results in a warning ("gpg: WARNING: no command supplied. Trying to guess what you mean ..."), which suggests to me that we shouldn't rely on this guessing behavior. This same usage also appears in #4522.
Includes instructions for importing the key from securedrop.org as a fallback (may be superseded by WKD fallback in future)
Status
Ready for review
Test plan
Test all modified or added commands in Tails 3.14.2 with an empty keyring, and ensure that they behave as described in the documentation.
Description of Changes
Soldiering on towards #4128
Checklint
make docs-lintis not sad