From 7a804b6ceec37cecf5f9f32e5210684dae9d7d6a Mon Sep 17 00:00:00 2001 From: Kyle Fazzari Date: Thu, 30 May 2019 11:20:41 -0700 Subject: [PATCH 1/2] keyrings: update ROS signing key The ROS Debian repository signing key was recently compromised and forced a key rotation. Stop trusting the old key, and trust the new one. See https://discourse.ros.org/t/9342 for more information. Signed-off-by: Kyle Fazzari --- keyrings/ros.gpg | Bin 1154 -> 1167 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/keyrings/ros.gpg b/keyrings/ros.gpg index ac18cb4729882a8c40f41bd623c7803c1422729b..be60e15986770270806e121a9fb21cd15b38b870 100644 GIT binary patch literal 1167 zcmV;A1aSMA0u2OQ?Xb_Ic6y^2Z_s}pn0GpBV;g-VNZP%S;dyKnJsj} z;{abY!+~l?(&};RSbdhM3{h?(6PHMj zyv6KL9?O45Vym=r+_!j+3h+&;fDlEy*1Q-`jPL1Jml%0TV`rQxA0cFDMPdq8m0G5{ zJc}|esj`mB?mQ)>Q4;JzgfRdY3-P=$U$qm2&Vsaltr}Jt^OQ)<7@s0-sJYzL=3l&_ z7zMA~m2(V^6+VdyDk_r+U0a=x)|o&3Deij^x-E*T4&l_ZlV_q#^QH8c`um3@sLNcB~sM@FT^Grv8dt5@oe5PC9Df7bhC(Xu9e%P7Pdh3tR0 z6V^@E#s9S?^eF%l0RRECCQoo>ZXi-`VsCV5V{;%pX>Mk3KyPz$W^Z+FWMOn^Z*DGc za%Vn?0#pPO0SW*<79j+|&u%g1y55Lrv2wKZF4p_27sgZt0$lGVmI50C1qlPfX8;8Y z2?z%Q1{Dek2nzxP76JnS0v-VZ7k~f?2@v!y*88g$##E9L5B(O|V^J%-Ar#BVizaVc zN|Ml=Hf84$3p*T{mpWkh$$4$P1d#yi_h;w|2QMw)4JZUn389O~(iW2JgQD}*(-ujr zOtg{!YYf)+`{QPGkNy}BcBV(2F?Hgh3+i^vRB8plARp{BU~(i#Y~QhTF6(o88mRSd<(1AW?he<2Yo)On-FrP? zNb7LxgbYeplF&S=r2|dTa%Q|+^)7*`Y@ev~-{)HYUS z3_FIzH7iLK z=qu-}P`g&Yak5A3XIru3AshGf1)`9taERUa!RIbOIJZ3?4$opF#X`%N)#K5GPl@(t zqk&{u#z?>)@nr($>Rv$Lwd%r$>kE@HpZaXJA-fC;=RV!1jWC`>kNf3a=fWTJDLr5Z h3aU_r?Sm0N<3%Qn=XDYQb8+%aI571j#7tl#w4F=iBhCN- literal 1154 zcmV-|1bzFN0ipy;GUTZd1OUlwG>A%urbNy_18p082Z6d6S|jCJh$URd4|KAxKqHw* zbB%>tGd5|-yvmtsS|_0bql+ouq9VGD8K0GE_C!5Ad!tU2WkV65@M26>g2J>pYVxy| z-r|qL(J@txte(KyP}p7ZP*q)M-Fh_YrDwlFi!Di_y1feq?g##a$KL>;x9`Xga?~lK z39-)mD*-`HF~QJF1OINB*++HR{qC(JayO++T66cWKC!ZESm6sMk-6(8=WfI#0cQT2 zUr?*s=~t5d9~A2Tvy-w?{`1Hq+r}bAhj44{@A`@fSOo#TAY^c`= z`VL(DQZJ;IIc0pcqNO1;c%VVfu zmg?i0+a31ZD6ti-v>sAVQy@ZhX>4R=av(f%Z*yXGX>4Rba&L1kZ*pfoh+qU05dr`p z1p-SlEWalUDJY6*R58K5M@R8BICIN4FpRv?o7JtYNF)ZE33Tz+yi&xdNdt%0&sO%)T#5xx&&tOM?8jW5S8WYx#YKKn>mec}6 z>hjXtrF^tWWJ1S5c}2=)UmkBEX3yz4Up=&GE4?u6g`MjA4X!){9ywt+w+(VWHnN^+ zgB}}o$BNUbIWk?LVvEn5KWN!DAdKpu93aUDZ-8ao%T`^7zl*;|Cn>hDb49k&)qHiiZ0D*`HWa+W-Rw2mf$i zW76ziZ9rA^^eeVb$qto|y$xfBjv0?j|FZt);VqqUSPf zXX6-x0C6mEBOaA}F2_oq3FlVMqz+EL_8I9T4 zh=IUUV8z0dtB(Dbyq Date: Fri, 31 May 2019 15:39:02 -0700 Subject: [PATCH 2/2] Continue trusting old key until rotation is complete Signed-off-by: Kyle Fazzari --- keyrings/ros_old.gpg | Bin 0 -> 1154 bytes snapcraft/plugins/catkin.py | 9 ++++++++- snapcraft/plugins/colcon.py | 9 ++++++++- 3 files changed, 16 insertions(+), 2 deletions(-) create mode 100644 keyrings/ros_old.gpg diff --git a/keyrings/ros_old.gpg b/keyrings/ros_old.gpg new file mode 100644 index 0000000000000000000000000000000000000000..ac18cb4729882a8c40f41bd623c7803c1422729b GIT binary patch literal 1154 zcmV-|1bzFN0ipy;GUTZd1OUlwG>A%urbNy_18p082Z6d6S|jCJh$URd4|KAxKqHw* zbB%>tGd5|-yvmtsS|_0bql+ouq9VGD8K0GE_C!5Ad!tU2WkV65@M26>g2J>pYVxy| z-r|qL(J@txte(KyP}p7ZP*q)M-Fh_YrDwlFi!Di_y1feq?g##a$KL>;x9`Xga?~lK z39-)mD*-`HF~QJF1OINB*++HR{qC(JayO++T66cWKC!ZESm6sMk-6(8=WfI#0cQT2 zUr?*s=~t5d9~A2Tvy-w?{`1Hq+r}bAhj44{@A`@fSOo#TAY^c`= z`VL(DQZJ;IIc0pcqNO1;c%VVfu zmg?i0+a31ZD6ti-v>sAVQy@ZhX>4R=av(f%Z*yXGX>4Rba&L1kZ*pfoh+qU05dr`p z1p-SlEWalUDJY6*R58K5M@R8BICIN4FpRv?o7JtYNF)ZE33Tz+yi&xdNdt%0&sO%)T#5xx&&tOM?8jW5S8WYx#YKKn>mec}6 z>hjXtrF^tWWJ1S5c}2=)UmkBEX3yz4Up=&GE4?u6g`MjA4X!){9ywt+w+(VWHnN^+ zgB}}o$BNUbIWk?LVvEn5KWN!DAdKpu93aUDZ-8ao%T`^7zl*;|Cn>hDb49k&)qHiiZ0D*`HWa+W-Rw2mf$i zW76ziZ9rA^^eeVb$qto|y$xfBjv0?j|FZt);VqqUSPf zXX6-x0C6mEBOaA}F2_oq3FlVMqz+EL_8I9T4 zh=IUUV8z0dtB(Dbyq