We have some news to share for the request index beta feature. We’ve added more options to sort your requests, counters to the individual filters and documentation for the search functionality. Checkout the blog post for more details.

Overview

File openSUSE-build-key.changes of Package openSUSE-build-key

-------------------------------------------------------------------
Fri Jan 16 13:43:53 UTC 2026 - Thorsten Kukuk <kukuk@suse.com>

- import-openSUSE-build-key: implement importing all keys from
  /usr/lib/rpm/gnupg/keys

-------------------------------------------------------------------
Fri Sep 26 11:08:15 UTC 2025 - Max Lin <mlin@suse.com>

- fix Backports 15 key is not packaged

-------------------------------------------------------------------
Tue Jul 22 14:48:52 UTC 2025 - Marcus Meissner <meissner@suse.com>

- obsolete gpg-pubkey-ded64f3b, the openSUSE buildservice global
  key which was used mistakenly for repository signing.

-------------------------------------------------------------------
Fri Jul 11 15:22:41 UTC 2025 - Marcus Meissner <meissner@suse.com>

- gpg-pubkey-09d9ea69-68595a8c.asc: renamed uid field to not
  use outdated internal codenames. (bsc#1245223)

-------------------------------------------------------------------
Mon May 26 08:49:32 UTC 2025 - Marcus Meissner <meissner@suse.com>

- added gpg-pubkey-287a0027-682477e3.asc: New RSA 4k Backports 
  for SLE 16.x series.

-------------------------------------------------------------------
Tue May 13 12:18:48 UTC 2025 - Marcus Meissner <meissner@suse.com>

- added gpg-pubkey-25db7ae0-645bae34.asc: RSA 4k SLE15 Backports key.
- removed gpg-pubkey-65176565-61a0ee8f.asc: old RSA 2k Backports key.
  (bsc#1243135)

-------------------------------------------------------------------
Tue Mar 11 10:15:19 UTC 2025 - Marcus Meissner <meissner@suse.com>

- gpg-pubkey-39db7c82-66c5d91a.asc: extended lifetime of SLE12 / 15 
  2048 bit key.

-------------------------------------------------------------------
Wed Mar  5 14:53:48 UTC 2025 - Marcus Meissner <meissner@suse.com>

- changed keys to use SHA256 UIDs instead of SHA1. (bsc#1237294
  bsc#1236779 jsc#PED-12321)
  - gpg-pubkey-3fa1d6ce-67c856ee.asc to gpg-pubkey-09d9ea69-67c857f3.asc
  - gpg-pubkey-09d9ea69-645b99ce.asc to gpg-pubkey-3fa1d6ce-63c9481c.asc

-------------------------------------------------------------------
Fri Jun 21 16:13:28 UTC 2024 - Lubos Kocman <Lubos.Kocman@suse.com>

- Ensure that SLM 6.0 key is installed on Leap Micro and Leap 16
- install SLFO / SLM 6.0 key and SLES 15 SP6+ key by default

-------------------------------------------------------------------
Wed Apr 10 12:59:49 UTC 2024 - Marcus Meissner <meissner@suse.com>

- SLM 6.0 key (ALP / SLF1) RSA 4096 bit key
  - gpg-pubkey-09d9ea69-645b99ce.asc
- 2024 SUSE Linux Enterprise 15 SP6 RSA 4096 bit key
  - gpg-pubkey-3fa1d6ce-63c9481c.asc
- SLM 6.0 key (ALP / SLF1) RSA 4096 bit reserve key
  - gpg-pubkey-73f03759-626bd414.asc
- 2024 SUSE Linux Enterprise 15 SP6 RSA 4096 bit reserve key
  - gpg-pubkey-d588dc46-63c939db.asc
- obsoleted a incorrectly used DSA1024 key (used in Slowroll).

-------------------------------------------------------------------
Tue Mar 26 08:28:45 UTC 2024 - Dominique Leuenberger <dimstar@opensuse.org>

- Fix import-openSUSE-build-key:set proper timer name to try to
  stop (openSUSE-build-key-import.timer, not
  suse-build-key-import.timer) (boo#1221948).

-------------------------------------------------------------------
Sun Mar 24 11:35:39 UTC 2024 - Giacomo Comes <gcomes.obs@gmail.com>

- Requires(post): coreutils is missing
  * instead of adding it, change the post scriptlet:
    do not use touch, use shell redirection

-------------------------------------------------------------------
Thu Mar 14 16:06:13 UTC 2024 - Dominique Leuenberger <dimstar@opensuse.org>

- Install import-openSUSE-build-key to %{_sbindir}: align to where
  the .service file is launching the script from (boo#1221427).

-------------------------------------------------------------------
Wed Mar  6 09:34:52 UTC 2024 - Marcus Meissner <meissner@suse.com>

- add unexpired openSUSE zSystems key (bsc#1220993)
  - replace gpg-pubkey-f6ab3975-5edd7d4f.asc
  - by gpg-pubkey-f6ab3975-62e9e6fb.asc

-------------------------------------------------------------------
Mon Feb 19 12:30:15 UTC 2024 - Marcus Meissner <meissner@suse.com>

- added new suse container key, moved the old one to -old

-------------------------------------------------------------------
Tue Jun  6 14:59:18 UTC 2023 - Marcus Meissner <meissner@suse.com>

- openSUSE-build-key-import.service,openSUSE-build-key-import.service.timer,
  import-openSUSE-build-key:
  Add systemd timer and service framework that imports new keys.

-------------------------------------------------------------------
Fri Apr 14 14:01:43 UTC 2023 - Marcus Meissner <meissner@suse.com>

- Added a new 4096 openSUSE container key
  - build-container-202304-d684afec-64390cff.asc
  - build-container-202304-d684afec-64390cff.pem
- Removed and obsoleted old 2048 build key of Tumbleweed
  - gpg-pubkey-3dbdc284-53674dd4.asc

-------------------------------------------------------------------
Mon Dec  5 12:28:24 UTC 2022 - Ludwig Nussel <lnussel@suse.de>

- Package OBS project key if available. Useful when forking
  openSUSE-build-key for use in appliances.

-------------------------------------------------------------------
Tue Oct 25 11:43:48 UTC 2022 - Marcus Meissner <meissner@suse.com>

- add the SUSE Container key in PEM format too to new
  /usr/share/pki/containers/ directory. (bsc#1204706)

-------------------------------------------------------------------
Wed Aug 10 09:01:58 UTC 2022 - Dirk Müller <dmueller@suse.com>

- add gpg-pubkey-29b700a4-62b07e22.asc (bsc#1199184)

-------------------------------------------------------------------
Thu Mar 24 15:50:39 UTC 2022 - Marcus Meissner <meissner@suse.com>

- gpg-pubkey-307e3d54-5aaa90a5 is actually "package gpg-pubkey,
  version-release 307e3d54-5aaa90a5"

-------------------------------------------------------------------
Fri Mar 18 14:29:59 UTC 2022 - Marcus Meissner <meissner@suse.com>

- gpg-pubkey-307e3d54-5aaa90a5.asc: remove the RSA 1024bit SLE11 key
  and try to remove it from installed systems via Obsoletes.

-------------------------------------------------------------------
Fri Jan 14 09:52:48 UTC 2022 - Marcus Meissner <meissner@suse.com>

- refresh the openSUSE Backports key (bsc#1193092)
  - gpg-pubkey-65176565-59787af5.asc
  + gpg-pubkey-65176565-61a0ee8f.asc
- removed old security key
- updated security key to 2020 version

-------------------------------------------------------------------
Mon Sep 27 12:59:34 UTC 2021 - Dominique Leuenberger <dimstar@opensuse.org>

- Only add openSUSE Backports key when building for a Leap system
  (sle_version > 0). Tumbleweed does not use Backports.

-------------------------------------------------------------------
Fri Jun 11 09:49:11 UTC 2021 - Dirk Müller <dmueller@suse.com>

- remove dumpsigs, unused since SLE12+ (rpm 4.x) (bsc#1186827)

-------------------------------------------------------------------
Fri Jun 11 09:40:22 UTC 2021 - Dirk Müller <dmueller@suse.com>

- add URL
- spec-cleaner run 

-------------------------------------------------------------------
Sat Jun  5 12:21:52 UTC 2021 - Neal Gompa <ngompa13@gmail.com>

- Merge changes from openSUSE Leap 15.3 for rpm-repos-openSUSE (boo#1186593)

-------------------------------------------------------------------
Fri May 21 20:17:19 UTC 2021 - Yuchen Lin <mlin+factory@suse.de>

- Refresh the SLE15 build@suse.de key
  * Updated gpg-pubkey-39db7c82-5847eb1f.asc

-------------------------------------------------------------------
Sat Apr 24 09:33:04 UTC 2021 - Marcus Meissner <meissner@suse.com>

- fixed s390x key install (bsc#1185245)

-------------------------------------------------------------------
Thu Jan 28 15:19:48 UTC 2021 - Lubos Kocman <lubos.kocman@suse.com>

- Add openSUSE Backports key to openSUSE Leap (bsc#1181344)
  This is needed because most of Leap 15.3+ packages are in fact
  build in openSUSE Backport (Closing The Leap Gap)

-------------------------------------------------------------------
Fri Jan  8 17:21:23 UTC 2021 - Dirk Müller <dmueller@suse.com>

- update openSUSE:Factory:zSystems signing key to current version:
  pub   rsa2048 2016-02-17 [SC] [expires: 2022-08-16]
         F00C20EF1E1114C9B5F69B2276CA4244F6AB3975
  openSUSE:Factory:zSystems OBS Project <openSUSE:Factory:zSystems@build.opensuse.org>

-------------------------------------------------------------------
Tue Sep 22 14:36:22 UTC 2020 - Marcus Meissner <meissner@suse.com>

- the container keys for openSUSE and SUSE Linux Enterprise are actually
  not the build keys. (bsc#1176818)
- build@suse.de key for SLE12 was extended. (bsc#1176759)

-------------------------------------------------------------------
Mon Apr 27 14:44:02 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>

- Remove PreRequires for removed post section with outdated
  package names.

-------------------------------------------------------------------
Thu Apr 23 12:54:12 UTC 2020 - Marcus Meissner <meissner@suse.com>

- use /usr/share/container-keys/ for container keys.

-------------------------------------------------------------------
Thu Apr  2 13:18:26 UTC 2020 - Marcus Meissner <meissner@suse.com>

- mark the opensuse-container-key and the suse-container-key
  for openSUSE:Containers and SUSE:Containers space.
  (same as the build keys for SLE15 and openSUSE respectively.)
- Replace the old security@suse.de email comm key by the new, move
  the old one to the oldkey. (bsc#1166334)

-------------------------------------------------------------------
Mon Mar 25 12:33:16 UTC 2019 - Guillaume GARDET <guillaume.gardet@opensuse.org>

- Fix previous commit

-------------------------------------------------------------------
Tue Mar  5 15:30:23 UTC 2019 - Adrian Schröter <adrian@suse.de>

- drop arm specific key again
  => ARM sub project is considered to be equal trustworthy

-------------------------------------------------------------------
Tue Feb 26 15:26:53 UTC 2019 - Adrian Schröter <adrian@suse.de>

- add project keys for architecture ports projects
  gpg-pubkey-bbac6b14-5c755908.asc: openSUSE:Factory:ARM
  gpg-pubkey-697ba1e5-5c755904.asc: openSUSE:Factory:RISCV
  gpg-pubkey-8ede3e07-5c755f3a.asc: openSUSE:Factory:PowerPC
  gpg-pubkey-f6ab3975-5ad08cb7.asc: openSUSE:Factory:zSystems
- package needs to become arch specific again to avoid the import
  of foreign ports projects

-------------------------------------------------------------------
Wed Mar 28 15:45:07 UTC 2018 - meissner@suse.com

- refreshed the SLE11 build@suse.de key (bsc#1085512)
- added the SLE12 and SLE15 build@suse.de key (bsc#1087276)
  gpg-pubkey-39db7c82-5847eb1f.asc
  pub   rsa2048/0x70AF9E8139DB7C82 2013-01-31 [SC] [expires: 2020-12-06]
        Key fingerprint = FEAB 5025 39D8 46DB 2C09  61CA 70AF 9E81 39DB 7C82
  uid                             SuSE Package Signing Key <build@suse.de>

- A new security@suse.de key has been established. (bsc#1082022)

-------------------------------------------------------------------
Tue Nov 29 12:50:35 CET 2016 - ro@suse.de

- modify dumpsigs to deal with fingerprint lines in gpg output 

-------------------------------------------------------------------
Thu Oct  2 13:31:28 UTC 2014 - meissner@suse.com

- renamed security_at_suse_de.asc to security_at_suse_de_old.asc
- security_at_suse_de.asc: new 4096 bit RSA key.
  pub  4096R/317CD502 2014-10-02 SUSE Security Team <security@suse.de>
  bnc#899509

-------------------------------------------------------------------
Thu May 22 14:34:18 UTC 2014 - adrian@suse.de

- replace openSUSE gpg key with extended key.

-------------------------------------------------------------------
Wed Apr 18 13:49:34 UTC 2012 - lnussel@suse.de

- install the security@suse.de key as %doc for offline import

-------------------------------------------------------------------
Tue Apr 17 14:13:26 UTC 2012 - lnussel@suse.de

- remove generated key rings, no longer needed by
  installation-images and linuxrc (bnc#724625)
- remove security@suse.de key, never used for package signing
- remove old build@suse.de key, was used on sle10
- remove openSUSE\x3aFactory@build.opensuse.org key, not used anymore
- leave sle11 build@suse.de key as backup

-------------------------------------------------------------------
Tue Oct 25 07:30:21 UTC 2011 - lnussel@suse.de

- add /usr/lib/rpm/gnupg/suse-build-key.gpg again. Needed by
  installation-images and linuxrc.

-------------------------------------------------------------------
Fri Oct 21 12:21:04 UTC 2011 - lnussel@suse.de

- remove no longer used keys from (bnc#724625)
- clean up packaging for easier maintenance

-------------------------------------------------------------------
Wed May  5 17:36:47 CEST 2010 - ro@suse.de

- updated keys:
  - 307E3D54 build@suse.de "SuSE Package Signing Key" (2014-05-03)
  - 7E2E3B05 novell-provo-build@novell.com "Novell Provo Build"
    (2014-05-06)
  - 9C800ACA build@suse.de "SuSE Package Signing Key" (2014-05-03)
  - 56B4177A openSUSE:Factory@build.opensuse.org
    "openSUSE:Factory OBS Project" (2014-05-04)
  - 3DBDC284 opensuse@opensuse.org "openSUSE Project Signing Key"
    (2014-05-04)

-------------------------------------------------------------------
Mon Nov 10 10:30:21 CET 2008 - adrian@suse.de

- add the new openSUSE build key for real

-------------------------------------------------------------------
Fri Nov  7 16:30:45 CET 2008 - ro@suse.de

- added new openSUSE build key 2048R/3DBDC284 expiring 2010-11-07

-------------------------------------------------------------------
Thu Sep 18 10:44:04 CEST 2008 - adrian@suse.de

- Branch package from suse-build-key and create it as openSUSE-build-key
- Add openSUSE:Factory key as official distribution key

-------------------------------------------------------------------
Mon Jun  2 15:45:33 CEST 2008 - ro@suse.de

- update keys again: for collaboration with rpm, the current
  self-signature needs to be the first signature found in a key 

-------------------------------------------------------------------
Mon May  5 18:31:20 CEST 2008 - ro@suse.de

- updated keys
  9C800ACA,8495160C,307E3D54: extend expiration by 2 years
  until 2010-05-05
  7E2E3B05: extend expiration by 2 years until 2010-05-24 

-------------------------------------------------------------------
Mon Mar 19 16:49:05 CET 2007 - rguenther@suse.de

- merge suse-build-key keyring to roots gpg pubring

-------------------------------------------------------------------
Mon May 29 17:20:45 CEST 2006 - ro@suse.de

- added new official provo dsa autobuild key ID 7E2E3B05

-------------------------------------------------------------------
Fri May 19 14:02:59 CEST 2006 - ro@suse.de

- removed unused provo autobuild key
- added new official provo autobuild key ID A1912208 

-------------------------------------------------------------------
Thu Apr 20 12:47:18 CEST 2006 - ro@suse.de

- add dumpsigs script here to have _one_ place for the script 

-------------------------------------------------------------------
Fri Mar 31 16:53:02 CEST 2006 - ro@suse.de

- added build@suse.de rsa key ID 307E3D54

-------------------------------------------------------------------
Wed Jan 25 21:47:54 CET 2006 - mls@suse.de

- converted neededforbuild to BuildRequires

-------------------------------------------------------------------
Tue Oct 18 17:47:07 CEST 2005 - ro@suse.de

- use correct provo autobuild key 

-------------------------------------------------------------------
Tue Oct 18 12:28:04 CEST 2005 - ro@suse.de

- added provo autobuild signing key (#128128)
- removed jds key 

-------------------------------------------------------------------
Fri May 27 14:47:30 CEST 2005 - mls@suse.de

- added mktemp to PreReqs [#86177]

-------------------------------------------------------------------
Thu Apr 28 11:45:36 CEST 2005 - ro@suse.de

- added JDS public key (15c17deb) 

-------------------------------------------------------------------
Tue Jan 25 18:10:26 CET 2005 - ro@suse.de

- added OES public key (0dfb3188)

-------------------------------------------------------------------
Tue Jun 22 12:28:07 CEST 2004 - ro@suse.de

- updated build key (expiration changed to 2008-06-21) (#42326)

-------------------------------------------------------------------
Tue Feb 24 12:19:49 CET 2004 - hmacht@suse.de

- building as non-root

-------------------------------------------------------------------
Tue Sep  9 18:51:02 CEST 2003 - ro@suse.de

- ignore return code from first gpg calls

-------------------------------------------------------------------
Tue Sep  9 18:23:07 MEST 2003 - draht@suse.de

- call gpg twice without any arguments for proper initialization
  inside postinstall

-------------------------------------------------------------------
Tue Sep  9 17:43:55 MEST 2003 - draht@suse.de

- use temp file instead of pipe due to resource race between two
  instances of gpg in %post.

-------------------------------------------------------------------
Thu Sep  5 04:56:32 CEST 2002 - draht@suse.de

- package now installs key from package-owned file into the rpm
  pubring in %post to allow other key packages to add their keys.

-------------------------------------------------------------------
Tue Aug 20 10:46:52 CEST 2002 - mmj@suse.de

- Correct PreReq

-------------------------------------------------------------------
Fri Jul 26 09:50:14 CEST 2002 - kukuk@suse.de

- Change Provides from suse-build-key to build-key

-------------------------------------------------------------------
Thu Feb 21 00:10:52 MET 2002 - draht@suse.de

- directory permission problem: 644 -> 755.

-------------------------------------------------------------------
Mon Feb 18 12:16:34 CET 2002 - ro@suse.de

- moved to /usr/lib/rpm/gnupg/pubring.pgp
  rpm needs a directory as gpg_path and will use pubring.gpg
  in that directory 

-------------------------------------------------------------------
Wed Feb 13 20:45:46 MET 2002 - draht@suse.de

- initial package. Contains 
  - pub  2048R/3D25D3D9 1999-03-06 SuSE Security Team <security@suse.de>

  - pub  1024D/9C800ACA 2000-10-19 SuSE Package Signing Key <build@suse.de>
  - sub  2048g/8495160C 2000-10-19 [expires: 2006-02-12]
openSUSE Build Service is sponsored by
Places