Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Code Block
# Generate RSA Keys
 mkdir ~/.ssh
 chmod 700 ~/.ssh
 ssh-keygen -t rsa -b 4096

# Note: This will create ~/.ssh/id_rsa and ~/.ssh/id_rsa.pub files will be generated
 
# Upload Public RSA Key
Login at http://id.apache.org
Add Public SSH Key to your profile from ~/.ssh/id_rsa.pub 
SSH Key (authorized_keys line):  
Submit changes
 
# SSH to people.apache.org
ssh {username}@people.apache.org
mkdir public_html
cd public_html
touch test
Verify URL http://people.apache.org/{username}/test

Generate OpenGPG Key

You should get a signing key, keep it in a safe place, upload the public key to apache, and build a web of trust.

Ref: http://zacharyvoase.com/2009/08/20/openpgp/

 

Code Block
gpg2 --gen-key
gpg2 --keyserver pgp.mit.edu --send-key CD23CAA
gpg2 --armor --export {username}@apache.org > {username}.asc
scp {username}.asc {username}@people.apache.org:public_html/~{username}.asc
Verify URL http://people.apache.org/~{username}/{username}.asc
Query PGP KeyServer http://pgp.mit.edu:11371/pks/lookup?search=0xCD23CAAE&op=vindex
 
Web of Trust:
Request others to sign your PGP key.

Login at http://id.apache.org
Add OpenPGP Fingerprint to your profile
OpenPGP Public Key Primary Fingerprint: CD23CAA
Submit changes
Verify that the public PGP key is exported to http://people.apache.org/keys/committer/{username}.asc

 

...