From 42f863863fd11c84c65eb11f35cc7025c387e056 Mon Sep 17 00:00:00 2001 From: Ceki Gulcu Date: Sat, 20 Aug 2022 21:56:31 +0200 Subject: [PATCH] upodate gpg key information Signed-off-by: Ceki Gulcu --- SECURITY.md | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) diff --git a/SECURITY.md b/SECURITY.md index ba81ece2..9c361c27 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -7,12 +7,35 @@ following email address: support(at)qos.ch + + ## Verifying contents All SLF4J project artifacts published on Maven central are signed. For each artifact, there is an associated signature file with the .asc suffix. +### After 2022-08-08 + +To verify the signature use [this public key](https://www.slf4j.org/public-keys/60200AC4AE761F1614D6C46766D68DAA073BE985.gpg). Here is its fingerprint: +``` +pub nistp521 2022-08-08 [SC] + 60200AC4AE761F1614D6C46766D68DAA073BE985 +uid Ceki Gulcu +sub nistp521 2022-08-08 [E] +``` + +A copy of this key is stored on the +[keys.openpgp.org](https://keys.openpgp.org) keyserver. To add it to +your public key ring use the following command: + +``` +> FINGER_PRINT=60200AC4AE761F1614D6C46766D68DAA073BE985 +> gpg --keyserver hkps://keys.openpgp.org --recv-keys $FINGER_PRINT +``` + +### Before 2022-08-08 + To verify the signature use [this public key](https://www.slf4j.org/public-keys/ceki-public-key.pgp). Here is its fingerprint: ```