Bump actions/github-script from 6.1.0 to 6.1.1
[daffodil.git] / KEYS
diff --git a/KEYS b/KEYS
index c32c11cd75714215f363f1cd8c01459e7969c124..1db5645143ab3f45c8ac478780ecd9bf27b0b280 100644 (file)
--- a/KEYS
+++ b/KEYS
@@ -1,30 +1,48 @@
 This file contains the GPG keys of Apache Daffodil developers.
 
-Users:    gpg --import KEYS
+Users:
+
+    gpg --import KEYS
 
 Developers:
-  Create a key: 
-    Per Apache guidelines (https://www.apache.org/dev/openpgp.html#key-gen-generate-key)
-      - RSA and RSA key with keysize 4096, and no expiration
-      - Use your apache email
-    
+
+  Add some lines to your gpg.conf file:
+
+    # https://keys.openpgp.org/about/usage#gnupg
+    keyserver hkps://keys.openpgp.org
+
+    # https://infra.apache.org/openpgp.html#sha-defaults
+    personal-digest-preferences SHA512
+    cert-digest-algo SHA512
+    default-preference-list SHA512 SHA384 SHA256 SHA224 AES256 AES192 AES CAST5 ZLIB BZIP2 ZIP Uncompressed
+
+  Create a code signing key:
+
+    # Per https://infra.apache.org/openpgp.html#key-gen-generate-key
+    # - RSA and RSA key with keysize 4096, and no expiration
+    # - Use your apache email
     gpg --full-generate-key
 
+  Add your key to this file:
 
-  Adding your key to this file:
-    (gpg --list-sigs <key id> && gpg --armor --export <key id>) >> this file.
+    echo >> KEYS
+    gpg --list-sigs <key id> >> KEYS
+    gpg --armor --export <key id> >> KEYS
 
-  Publish the key:
-    gpg --keyserver pgp.mit.edu --send-keys <key id>
+  Publish your key so you can revoke it later if necessary:
 
-  Signing another developers key:
-    gpg --keyserver pgp.mit.edu --search-keys <name or email>
-    gpg --keyserver pgp.mit.edu --recv-keys <key id>
-    gpg --sign-key <key id>
-    gpg --keyserver pgp.mit.edu --send-keys <key id>
+    # Per https://infra.apache.org/release-signing.html#keyserver
+    # - Use OpenPGP Public Key Server
+    gpg --export <key id> > mykey.pgp
+    # Per https://keys.openpgp.org/about/faq#older-gnupg
+    # - Verify your email address when uploading your key
+    Go to https://keys.openpgp.org/upload, upload mykey.pgp, verify your email address
 
   Additional Information:
-    http://www.apache.org/dev/openpgp.html#generate-key
+
+    https://infra.apache.org/openpgp.html
+    https://keys.openpgp.org/about/usage
+    https://keys.openpgp.org/about/privacy
 
 ********************************* PLEASE NOTE **********************************
 
@@ -151,6 +169,7 @@ qIpenMsTA9TFms/EVMkvvyqllMVjjbLRlg0UMhnf/DzgrErp646LkAU0m4jSzGVn
 QDM28gGyQYTRoMudTseM7Q2//F9LF9pz4tzK0g==
 =09Ch
 -----END PGP PUBLIC KEY BLOCK-----
+
 pub   rsa4096 2020-04-01 [SC]
       EA0B5228201A90CD1BBCE006639637FDA8049411
 uid           [ultimate] Olabusayo Kilo <olabusayo@apache.org>
@@ -210,3 +229,122 @@ KZd9BT4L/Legj/Z5RsN4j9dNfNOsYTVMw4Mk0VnUq7X1UxV1k9WbTyUm/ldRwPcf
 fA==
 =Grso
 -----END PGP PUBLIC KEY BLOCK-----
+
+pub   rsa4096 2021-10-12 [SC]
+      85849EC0374262C7110CA74404A735FC1A36AE84
+uid           [ultimate] John Interrante (Code Signing Key) <jinterrante@apache.org>
+sig 3        04A735FC1A36AE84 2021-10-12  John Interrante (Code Signing Key) <jinterrante@apache.org>
+sub   rsa4096 2021-10-12 [E]
+sig          04A735FC1A36AE84 2021-10-12  John Interrante (Code Signing Key) <jinterrante@apache.org>
+
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=qmBp
+-----END PGP PUBLIC KEY BLOCK-----
+
+pub   rsa4096 2022-03-02 [SC]
+      86DDE7B41291E380237934F007570D3ADC76D51B
+uid           [ultimate] Shane Dell <shanedell@apache.org>
+sig 3        07570D3ADC76D51B 2022-03-02  Shane Dell <shanedell@apache.org>
+sub   rsa4096 2022-03-02 [E]
+sig          07570D3ADC76D51B 2022-03-02  Shane Dell <shanedell@apache.org>
+
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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6KN5
+-----END PGP PUBLIC KEY BLOCK-----