Skip to content

Instantly share code, notes, and snippets.

@adamcik
Created December 19, 2017 16:56
Show Gist options
  • Save adamcik/331418ff6f98d7e0f792e440952a3d74 to your computer and use it in GitHub Desktop.
Save adamcik/331418ff6f98d7e0f792e440952a3d74 to your computer and use it in GitHub Desktop.
GPG transition statement
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
2017-12-19
The following is my delayed transition statement, now that I'm about to revoke
the old key.
The old key was:
pub 1024D/0XB7D57C92BE2C1A8D 2006-09-20 Thomas Kongevold Adamcik <adamcik@samfundet.no>
Fingerprint=BF2A CDE8 452D 5FD8 4F01 3BC9 B7D5 7C92 BE2C 1A8D
The new key is:
pub 4096R/0x9714F97B0CBEE929 2015-08-07 Thomas Adamcik <thomas@adamcik.no>
Fingerprint=BFD4 7D24 FBFD 2692 1058 0923 9714 F97B 0CBE E929
Note that the signing of this message may have been done by a SUBKEY of
that key, which may make the key id listed in the signature not match
the fingerprint listed here. You can verify it by checking the key listed
here for the subkey used in signing this message.
Rest of this statement is just instructions if you for some reason would like
to verify this or carry forward the trust from my old key. But given it's age
I would understand if you just ignore this.
Thomas Adamcik
To fetch the new key from a public key server, you can use the following:
gpg --keyserver pgp.mit.edu --recv-key 9714F97B0CBEE929
If you already know my old key, you can verify that the new key has been
signed by the old one, so the trail of signatures can still be followed:
gpg --check-sigs 9714F97B0CBEE929
If you don't know my old key, or you want to be extra careful, you can
check the fingerprint against the one above:
gpg --fingerprint 9714F97B0CBEE929
You can verify the signatures on this message by downloading the plain
text file as linked and running:
gpg --verify [name of downloaded file]
If you are satisfied that you have the right key, that the UIDs match what
you expect, and you are certain of my identity, I would appreciate it if
you would sign my new key:
gpg --sign-key 9714F97B0CBEE929
And finally, if you have signed it, to upload the signatures:
gpg --keyserver pgp.mit.edu --send-key 9714F97B0CBEE929
-----BEGIN PGP SIGNATURE-----
iJwEAQEKAAYFAlo5S5UACgkQnZhlj0pHEQy3oQP/Ub2JpAF+rZSwhL8dYlxghNWr
MyySALUO+KiZnvnrxFxKRENxkcR31/GQVqp0QGqeX94n8GcTOD+xi2ovSpYvbg0k
8AWvc+A8fJh+xasOOZQvdMImcJ18e+gn0ahJ8aIBS4FTagRZ4jTfd8d8kjjsySDB
/UC+3NzcJgpmaRD06gyJARwEAQEKAAYFAlo5S5UACgkQMDjAFmpgUWi3oQgAhXOz
gPxl/nIcceKxITwpadLUbADPgtfvqVCDu3boFXsmzTQ0rsFkjb4iV80p6+pQQ2L4
xfh+ewMvABTWdqeF1pBl0oYhKEagqaTUUJ0S9fLKLE22RXkgOkLZXa+HuGCyTZ9A
kaYX94W4Cn4sys0k1bH7s44AuLxc1ye3is2CLT0Gy6n7scGXvd96Nzhaczq3R6YK
D7sQ30WcvNY1YcBmud5xGq/6RKPPFNDLjYEGso4mTht5sZMzd6QdXboZUefoR3VC
2R3RU5uLjmA+UNID1jjh61bvTAPt+ys6uT6WlrN3ahBPL5F+RaNHYCjsoTdy3dfC
lQdtj75fjri//UJjjg==
=M26R
-----END PGP SIGNATURE-----
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment