@ypid It seems that one of you OpenPGP keys has expired: https://travis-ci.org/debops/debops-keyring/builds/167402145#L197

@drybjed Could be the issue, I will check that in a few hours.

@muelli Can you rebase this PR on latest changes in the repository and push to the same branch? Let's see if it works now.

@muelli Got some progress! Now you just need to use a shorter fingerprint and it should be fine. Seems that the test script doesn't handle that automatically.

@drybjed is right, the keyring format uses full ID but not the fingerprint. But don’t worry, the script will include your fingerprint from the OpenPGP key on https://docs.debops.org/en/latest/debops-keyring/docs/entities.html

Now you just need to use a shorter fingerprint and it should be fine. Seems that the test script doesn't handle that automatically.

hm. you mean in the keyids file?
I can do that, but what's the reasoning there? It seems very arbitrary to me. I mean, for using longids you need to actively configure gnupg. And being a lazy person, I assume there is a reason which justifies performing that extra work. GnuPG seems to easily show either short ids (by default) or full fingerprints (with --fingerprint). I think I can guess why you're not using the easiest of those, the short keyids. You're probably concerned about the security, because short keyids can easily be collided. But then why don't go for the full fingerprint? That's easier to use, due to the --fingerprint flag and also much more secure, because long keyids can also easily be collided. By using the full 160 bit fingerprint, not only does one not have to configure GnuPG, but you also don't fall for non existing security properties.

Simple, as Debian is our role model here: https://anonscm.debian.org/git/keyring/keyring.git/tree/debian-nonupload-gpg

Hm, we have a hard requirement of >= 2048 bits key length (RSA) which your OpenPGP key does not meet. 1024 is not appropriate anymore unfortunately. You should regen it. That is unfortunate, also because your current key has an impressive number of signatures. Great work!

@muelli Did you manage to renew your GPG key? If not, I'll close this PR for now, to allow the merge of the DebOps roles and playbooks into one git repository, we can get back to PR after that happens.

I'm closing this PR in preparation of the project repository merge during weekend. I'm not sure yet what will happen with the keyring repository, we can get back to it later.