regenerate_gpg_key.md

Key Generation

gpg --full-generate-key

Real name: QMK Firmware

Email address: [email protected]

Comment: Official QMK GPG Signing Key

Key is valid for? 3y

No passphrase

Key Propagation

Run the following to get the old fingerprint (long hexadecimal string in the output):

cat gpg_pubkey.txt | gpg --import-options show-only --import

Export the public key:

gpg --export --armor 'QMK Firmware' | tee gpg_pubkey.txt
gpg --export-secret-keys --armor 'QMK Firmware' | tee gpg_private_key.txt

Update GitHub organization secrets:

• QMK_GPG_PUBLIC_KEY
• QMK_GPG_PRIVATE_KEY

Upload gpg_pubkey.txt to https://linux.qmk.fm/gpg_pubkey.txt (on DigitalOcean Spaces)

Run the following to get the new fingerprint (long hexadecimal string in the output):

cat gpg_pubkey.txt | gpg --import-options show-only --import

Update all instances of the old fingerprint in build_deb_repo.sh.