Merge ~dviererbe/simplestreams:rotate-example-gpg-keys into simplestreams:master

Proposed by Dominik Viererbe
Status: Merged
Merged at revision: 68414193c3fe27538cec757bafbfe3ce83f0ce80
Proposed branch: ~dviererbe/simplestreams:rotate-example-gpg-keys
Merge into: simplestreams:master
Diff against target: 73 lines (+28/-28)
2 files modified
examples/keys/example.pub (+10/-10)
examples/keys/example.sec (+18/-18)
Reviewer Review Type Date Requested Status
Paride Legovini Approve
Server Team CI bot continuous-integration Needs Fixing
Robie Basak Needs Fixing
Review via email: mp+439831@code.launchpad.net

Commit message

test: rotate example gpg keys

examples/keys/example.pub and examples/keys/example.sec expired on 2023-02-24. (See LP: #2013081)

To post a comment you must log in.
Revision history for this message
Robie Basak (racb) wrote :

Thank you for the fix!

While this will presumably work for the moment, please could we avoid just kicking the can down the road?

For example, with dynamic key generation in the test, or I think we can just set the key not to expire? You could even just edit the existing key and set it not to expire.

review: Needs Fixing
Revision history for this message
Server Team CI bot (server-team-bot) wrote :
review: Needs Fixing (continuous-integration)
Revision history for this message
Dominik Viererbe (dviererbe) wrote :

@Robie Basak I changed the key to one that does not expire. I also recommended dynamic key creation in the bug ticket, but I don't want to introduce big delta with lunar lobster release around the corner.

As far as I can tell: The CI Tests does not fail, because of my changes. CI tests were failing before. I tested the change on the lunar lobster version that is currently not building.

Revision history for this message
Server Team CI bot (server-team-bot) wrote :
review: Needs Fixing (continuous-integration)
Revision history for this message
Paride Legovini (paride) wrote :

CI fails in master because a MP was merged without waiting for CI results [1], and that introduced changes that made flake8 unhappy. Luckily the issue is fairly trivial:

tools/make-test-data:700:80: E501 line too long (84 > 79 characters)
tools/make-test-data:701:80: E501 line too long (82 > 79 characters)
tools/make-test-data:708:80: E501 line too long (82 > 79 characters)
tools/make-test-data:709:80: E501 line too long (80 > 79 characters)
tools/make-test-data:713:80: E501 line too long (83 > 79 characters)

Given that the CI failure we have here is clearly a linting issue I'm +1 with manually merging this MP, and then fix linting in a separate MP. (We could fix linting first, but we'd hit the key expiration issue, which is less obvious.)

I have a branch where I applied black and isort to master [2]. If we agree on that approach let's land it soon after this one.

[1] https://code.launchpad.net/~toabctl/simplestreams/+git/simplestreams/+merge/437132
[2] https://code.launchpad.net/~paride/simplestreams/+git/simplestreams/+ref/apply-black

review: Approve

Preview Diff

[H/L] Next/Prev Comment, [J/K] Next/Prev File, [N/P] Next/Prev Hunk
1diff --git a/examples/keys/example.pub b/examples/keys/example.pub
2index a0d4f86..cb984eb 100644
3--- a/examples/keys/example.pub
4+++ b/examples/keys/example.pub
5@@ -1,14 +1,14 @@
6 -----BEGIN PGP PUBLIC KEY BLOCK-----
7-Version: GnuPG v1.4.11 (GNU/Linux)
8
9-mI0EUSw66gEEAM6AjeB/KtvuLbkbn6F0Whew2sYx5O2j2smSgwJ0oevnlRzneyXh
10-kUIR+wH5KBDIz5Ikp35ZrZFYoP++7VMALDTp9l+OOlrbz4rQzwI8HvXumkhT+BgE
11-lfN10eu0rBkVNxqt9lXuMNYwgJJtfBPzXVBQju6QDYx5Uodxk9C9TXapABEBAAG0
12+mI0EZCL9pgEEALjMscvUXnyoFeP9McF+0yW4SFQsl8WwpXosSae3DSInIJSoEOG7
13+HBewSS3dOK0lHIYnDZLtA0kSuC/a43mzgRLnY2paGKRL/cC/M2z66Dib83kZgOG8
14+phVZH2HEMJxhb9XLibfTeIUvSgYLSnE4a00xLmlUjI11mCk36RYh4xhhABEBAAG0
15 XFNpbXBsZSBTdHJlYW1zIFRlc3QgVXNlciAoVGVzdCBVc2FnZSBPbmx5LiBEbyBO
16-b3QgSW1wb3J0LikgPHNpbXBsZXN0cmVhbXNAYm9ndXMuZXhhbXBsZS5jb20+iL4E
17-EwECACgFAlEsOuoCGy8FCRLMAwAGCwkIBwMCBhUIAgkKCwQWAgMBAh4BAheAAAoJ
18-EKlxSiA5Z1NuK0ID/R8iBwVt/9tqFy7eeJzCDK0O7QcpmhvKyjPLLmsUhysx8kC7
19-S89yuWyr6iQcjAoAMK6EkOZgRoFfOIA+hZkFC0blFHLCrdSghSQQm6hL/XJuWtkf
20-HBdu7yKudGzGyYmpGYYG69zz+he5EZUtY1fR9PSGSM+ZwCLznHdCJix7bNi0
21-=HEJL
22+b3QgSW1wb3J0LikgPHNpbXBsZXN0cmVhbXNAYm9ndXMuZXhhbXBsZS5jb20+iM4E
23+EwEKADgWIQQkk5C2cpQTdyB9ZpY4cK3qoW5CfAUCZCL9pgIbLwULCQgHAgYVCgkI
24+CwIEFgIDAQIeAQIXgAAKCRA4cK3qoW5CfP9KBACxeVNSRzLHOLvthMxvqoqB/775
25+AmJOPH2OiEfQOAr9C04zcW4FseBDXTS+6vydk5WsG3M7QA7p+zPiKy1atXhUOHY1
26+VySd2AAB0u2RWUAWgg2DaQfbzfuxztqGBqlxPsGXgpobvumXf2pNehoBH9J9T4W4
27+8NH75blul5zZaFvkmA==
28+=C/S4
29 -----END PGP PUBLIC KEY BLOCK-----
30diff --git a/examples/keys/example.sec b/examples/keys/example.sec
31index 0e5add1..6108d82 100644
32--- a/examples/keys/example.sec
33+++ b/examples/keys/example.sec
34@@ -1,21 +1,21 @@
35 -----BEGIN PGP PRIVATE KEY BLOCK-----
36-Version: GnuPG v1.4.11 (GNU/Linux)
37
38-lQHXBFEsOuoBBADOgI3gfyrb7i25G5+hdFoXsNrGMeTto9rJkoMCdKHr55Uc53sl
39-4ZFCEfsB+SgQyM+SJKd+Wa2RWKD/vu1TACw06fZfjjpa28+K0M8CPB717ppIU/gY
40-BJXzddHrtKwZFTcarfZV7jDWMICSbXwT811QUI7ukA2MeVKHcZPQvU12qQARAQAB
41-AAP2KSNzIEY1Q5svgLEAHCoRyKZy7wkBklYSQBXwA404tMZt7lQvNFy7k24Bk2MP
42-mEhpEbQ7qfAzo8EEUe63WNGv/H6yl37pcS2rKxGdar9/dFV2t/TbJaehKotIvG9D
43-x1CvuT/7DQRj9rGWrDrhx2XIz8hpD21bxrDb2TEF5WjfAQIA05tN+7zxTXSKq7Wt
44-215ba4kBhKKuvrYMN5m871O/cNJfVh9ABea4xRFOOTkcpXsHAl1JPV52wRlHpBoe
45-b36goQIA+dMapApF9zYflJ5rp3RLCwH0YwmY55+MBL5OTN7PM6DFs61rQG1ZO3x8
46-VJ1GNvpVhEuIBUmsD2O4BVYekDsxCQIAuqMgVMVDfj7P2MeMKZ888XphQuYeJdIq
47-IckpdKnZSKSU0oXKiB9y0AyptB1Aih8IhF00EIURWjMI//19JkBXuJNetFxTaW1w
48-bGUgU3RyZWFtcyBUZXN0IFVzZXIgKFRlc3QgVXNhZ2UgT25seS4gRG8gTm90IElt
49-cG9ydC4pIDxzaW1wbGVzdHJlYW1zQGJvZ3VzLmV4YW1wbGUuY29tPoi+BBMBAgAo
50-BQJRLDrqAhsvBQkSzAMABgsJCAcDAgYVCAIJCgsEFgIDAQIeAQIXgAAKCRCpcUog
51-OWdTbitCA/0fIgcFbf/bahcu3nicwgytDu0HKZobysozyy5rFIcrMfJAu0vPcrls
52-q+okHIwKADCuhJDmYEaBXziAPoWZBQtG5RRywq3UoIUkEJuoS/1yblrZHxwXbu8i
53-rnRsxsmJqRmGBuvc8/oXuRGVLWNX0fT0hkjPmcAi85x3QiYse2zYtA==
54-=svaP
55+lQHYBGQi/aYBBAC4zLHL1F58qBXj/THBftMluEhULJfFsKV6LEmntw0iJyCUqBDh
56+uxwXsEkt3TitJRyGJw2S7QNJErgv2uN5s4ES52NqWhikS/3AvzNs+ug4m/N5GYDh
57+vKYVWR9hxDCcYW/Vy4m303iFL0oGC0pxOGtNMS5pVIyNdZgpN+kWIeMYYQARAQAB
58+AAP9HOQzr9BF7WtB8OD21G+Fh1ImTLKkD84sMMuXwFbIANzpJRSZfxEHtVRkPH1n
59+jPpOWVLltmDDsLryfNjV04MS3KOtCHnfM9poK+CdlLcrH6pg5QyATgktAQZdR6qA
60+fWZY7aKoO43bWkpj7iKg1F/eGNA//WJehZLRyZzZSQ/cvyECANFfzcJ/BlFOVrho
61+9s92JjGQDLVjYjrgSyGhqQr1NZptpBWbCXyaSPqCJJ+ulRz/W7/JKF1RBHdaw0Ug
62++sjcB3UCAOHz6sYUs60hSlNPQCH0hk9j4y/DFm51O2qNtiFqxrNDDn3eVdbFPwLN
63+9r5vqR6bpe2z3eoxSuVe0V6Ylj8/W70CAI4ecsC4cBJkT83yiqWuNwndGZ1zt8+q
64+12THqYUZ6KSBRHrCYOt8LT5QKFzvAzAJ6oNwYk+DMbMX24mpYo+0eQ6gxbRcU2lt
65+cGxlIFN0cmVhbXMgVGVzdCBVc2VyIChUZXN0IFVzYWdlIE9ubHkuIERvIE5vdCBJ
66+bXBvcnQuKSA8c2ltcGxlc3RyZWFtc0Bib2d1cy5leGFtcGxlLmNvbT6IzgQTAQoA
67+OBYhBCSTkLZylBN3IH1mljhwreqhbkJ8BQJkIv2mAhsvBQsJCAcCBhUKCQgLAgQW
68+AgMBAh4BAheAAAoJEDhwreqhbkJ8/0oEALF5U1JHMsc4u+2EzG+qioH/vvkCYk48
69+fY6IR9A4Cv0LTjNxbgWx4ENdNL7q/J2TlawbcztADun7M+IrLVq1eFQ4djVXJJ3Y
70+AAHS7ZFZQBaCDYNpB9vN+7HO2oYGqXE+wZeCmhu+6Zd/ak16GgEf0n1Phbjw0fvl
71+uW6XnNloW+SY
72+=uILn
73 -----END PGP PRIVATE KEY BLOCK-----

Subscribers

People subscribed via source and target branches