OpenPGP (PPA) uid not changed after renaming project

Asked by Mario Kemper (Romario)

After renaming our project ( see https://answers.launchpad.net/launchpad/+question/59124 ) the OpenPGP uid was not changed for our PPA:

PPA: https://launchpad.net/~shutter/+archive/ppa
PGP Search: http://keyserver.ubuntu.com:11371/pks/lookup?search=0x5017D4931D0ACADE295B68ADFC6D7D9D009ED615&op=index

The uid is still named Launchpad PPA for GScrot Team. It should be Launchpad PPA for Shutter Team. Users that use alternative key servers might have some trouble when searching the key...

Thanks and greetings
Mario

Question information

Language:
English Edit question
Status:
Answered
For:
Launchpad itself Edit question
Assignee:
Celso Providelo Edit question
Last query:
Last reply:
Whiteboard:
2009-03-12 henninge Poked Celso about it, said he is still considering options.
Revision history for this message
Celso Providelo (cprov) said :
#1

I've added the new UID and removed the old one.

Apparently keyservers won't stop to show the deleted UID, let me know if your workflow will be severely disrupted by that.

Revision history for this message
Mario Kemper (Romario) (mario-kemper) said :
#2

Ok, will this change in the future or is this a persistent problem?

Revision history for this message
Celso Providelo (cprov) said :
#3

It's a persistent problem and should be dealt manually (as the repository path) for all ppa renaming.

Revision history for this message
Mario Kemper (Romario) (mario-kemper) said :
#4

Ok, is there any chance of getting the key servers show the new UIDs or is this just a matter of time?

Thank you very much for your effort.

Revision history for this message
Celso Providelo (cprov) said :
#5

Mario,

http://keyserver.ubuntu.com:11371/pks/lookup?search=0x5017D4931D0ACADE295B68ADFC6D7D9D009ED615&op=index does already, but it's the second in the list.

At this point there is nothing else we can do about it, except generating a new key.

I'm not sure if any other keyserver syncs from keyserver.ubuntu.com, I can only see some PPA keys in other servers and it's very likely they were manually uploaded.

Sorry for all this inconvenience.

Revision history for this message
Mario Kemper (Romario) (mario-kemper) said :
#6

Is it possible to generate a new key then?
Thank you very much.

Revision history for this message
Julian Edwards (julian-edwards) said :
#7

I think your best option is to make a new PPA, rather than renaming an existing one. You can copy over the old packages & binaries and you get everything you need and you won't get these key problems.

Revision history for this message
Celso Providelo (cprov) said :
#8

Mario,

I've edited you key properly this week (we were doing some experiments to solve this reassignment problem propertly).

Now the 'gscrot' UID is properly revoked, anywhere the key is presented it only shows the 'shutter' UID. The problem with the keyserver persists, i.e. revoked UID are not excluded, but that's a general problem with SKS.

Could you please refresh your key locally and verify if `gpg` and `apt-key` display the correct UID, so users don't get confused.

We really want to avoid getting into a situation where we make orphan signing keys, I hope you understand that.

Thanks.

Can you help with this problem?

Provide an answer of your own, or ask Mario Kemper (Romario) for more information if necessary.

To post a message you must log in.