[apparmor] AppArmor Signing Key Transition

[Steve Beattie]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1,SHA512

Fri, 17 Apr 2015 00:38:49 -0700

Recently, the OpenPGP key used to sign AppArmor releases expired. This
is notification of a transition to a new OpenPGP signing key. This
message is signed by both keys, as well as by my personal key, to
certify the transition.

The old key was:

pub   1024D/813798B9AC931271 2006-02-13 [expired: 2015-02-17]
      Key fingerprint = 31C1 A553 DAC7 2D85 DDEE  5BF7 8137 98B9 AC93 1271

The new key is:

pub   4096R/6689E64E3D3664BB 2015-04-16 [expires: 2023-04-14]
      Key fingerprint = 3ECD CBA5 FB34 D254 961C  C53F 6689 E64E 3D36 64BB

My personal key is:

pub   4096R/2F099E8D005E81F4 2010-06-08 [expires: 2020-06-05]
      Key fingerprint = A606 3BB5 6023 09A4 3C8E  BBD4 2F09 9E8D 005E 81F4

To fetch the full key, you can get it from a public key server:

  gpg --keyserver pgp.mit.edu --recv-key 6689E64E3D3664BB
  gpg --keyserver keyserver.ubuntu.com --recv-key 6689E64E3D3664BB

You can verify that the new key is signed by the old one and by my
personal key by doing:

  gpg --check-sigs 6689E64E3D3664BB

You can also check the fingerprint against the one above:

  gpg --fingerprint 6689E64E3D3664BB

Future releases of AppArmor will be signed with the new key, and the old
key will no longer be used.

Please let me know if there is any trouble, and sorry for the
inconvenience.

You can also find this signed message at the following locations:

  https://launchpad.net/apparmor/+announcement/13404
  http://wiki.apparmor.net/index.php/AppArmor_Key_Transition-2015-04-17

- --
Steve Beattie <steve at nxnw.org>, on behalf of the AppArmor development team.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=qOHg
-----END PGP SIGNATURE-----

-- 
Steve Beattie
<sbeattie at ubuntu.com>
http://NxNW.org/~steve/