From 1fd0c5bf2d3301b77467b3be28ae7cfc6e9712c2 Mon Sep 17 00:00:00 2001 From: Gary Verhaegen Date: Wed, 11 Jan 2023 22:13:16 +0100 Subject: [PATCH] update docs to mention the new key (#16042) Note: this is only going to affect 2.6.0 docs and later; the existing, published documentation will be updated manually to match. --- ci/bash-lib.yml | 112 ++++++++++++----- .../getting-started/manual-download.rst | 119 +++++++++++++----- 2 files changed, 172 insertions(+), 59 deletions(-) diff --git a/ci/bash-lib.yml b/ci/bash-lib.yml index 71649b8530..2d646914c2 100644 --- a/ci/bash-lib.yml +++ b/ci/bash-lib.yml @@ -122,34 +122,90 @@ steps: cat > $key <``, created on 2019-05-16 and expiring on @@ -35,11 +35,12 @@ To do that: gpg: assuming signed data in 'daml-sdk-2.0.0-macos.tar.gz' gpg: Signature made Wed Aug 12 13:30:49 2020 CEST - gpg: using RSA key E8372C0C1C734C51 + gpg: using RSA key CADC3D1E3B5C4C5F94A65D78A7BF65AAADBBC494 gpg: Good signature from "Digital Asset Holdings, LLC " [unknown] gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. - Primary key fingerprint: 4911 A8DF E976 ACDF A071 30DB E837 2C0C 1C73 4C51 + Primary key fingerprint: F26D 8A0A ADF6 66CC B28F 2AB1 650E C325 3B6A 8FF5 + Subkey fingerprint: CADC 3D1E 3B5C 4C5F 94A6 5D78 A7BF 65AA ADBB C494 Note: This warning means you have not told gnupg that you trust this key actually belongs to Digital Asset. The ``[unknown]`` tag next to the key has the same meaning: ``gpg`` relies on a web of trust, and you have not told it how far you trust this key. Nevertheless, at this point you have verified that this is indeed the key that has been used to sign the archive. @@ -59,34 +60,90 @@ copy-paste the following Bash command:: gpg --import < <(cat <