Skip to content

Submit public PGP key

Cédric Clerget edited this page Feb 8, 2021 · 1 revision

Submit public PGP key

In this example we assume that keyserver public URL is http://spks.example.com and the mail verification is enabled:

  1. Create a new keypair with Singularity:

    singularity key newpair --email=user@example.com --name="John Doe" --comment="Signing key" --push=false
    Enter a passphrase: ****
    Retype your passphrase: ****
    Generating Entity and OpenPGP Key Pair... done
    NOT pushing newly created key to: https://keys.sylabs.io
    
  2. Retrieve key fingerprint:

    singularity key list
    Public key listing (/home/user/.singularity/sypgp/pgp-public):
    
    0) U: John Doe (Signing key) <user@example.com>
       C: 2020-07-28 14:22:19 +0200 CEST
       F: D1B2B32B87D65FB39D2C9908B84B5CE669411080
       L: 4096
       --------
    
  3. First push of the key to http://spks.example.com for validation:

    singularity key push -u http://spks.example.com D1B2B32B87D65FB39D2C9908B84B5CE669411080
    

    During this first push, the keyserver send a mail to user@example.com containing the key push command to execute to finalize the key submission.

  4. Second push of the key to http://spks.example.com for:

    The server has sent a key push command with a token associated to validate the key submission, the command should be of the form :

    singularity key push -u http://f71dbe52628a3f83a77ab494817525c6@spks.example.com B84B5CE669411080
    
Clone this wiki locally