Portable OpenSSH release signing key rotation

Damien Miller djm at mindrot.org
Wed Jan 27 18:02:41 AEDT 2021


Hi,

The OpenPGP key used to sign OpenSSH releases expired on 2021-01-01, so
it is necessary to rotate it ahead of the next release. The replacement
key is now available at:            
https://cdn.openbsd.org/pub/OpenBSD/OpenSSH/RELEASE_KEY.asc

The replacement key is signed with the previous release key, so some            continuity is available, but I think it makes sense to publicise the            new key well in advance of its first use.
                                                                                
-d


More information about the openssh-unix-dev mailing list