Re: OpenSSL release signing key expiration extended

--=-=-=
Content-Type: text/plain; charset="UTF-8"


Blog on OpenSSL Library <[email protected]> wrote:
    > The expiration date of the OpenSSL release signing key with fingerprint
    > `BA5473A2B0587B07FB27CF2D216094DFD0CB81EF` has been extended from `08 Apr
    > 2026` to `14 Jun 2026`.

I've never seen a message like this before, but maybe it was just never announced?
Why such a short extension?
Was there an intent to replace the key, but it won't be possible?

I'm all for having keys which expire within a year, but which are extended if
still safe.  STAR/RFC8739-style.  Three months seems too aggressive if that's
the pattern.
I do the expire key yearly, renewing for 365days on Jan.1. (Except when I
forget)

OpenPGP has a Preferred Key Server attribute.
"keyserver" in the GnuPG uid edit.
I don't know if any clients are willing to check such a URL for a fresh key,
but maybe it could become a thing.

    > Only the key expiration date has changed. The signing key itself remains the
    > same.

    > The updated public key is available at:
    > <https://keys.openpgp.org/search?q=BA5473A2B0587B07FB27CF2D216094DFD0CB81EF>

-- 
You received this message because you are subscribed to the Google Groups "openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/32284.1774114422%40obiwan.sandelman.ca.

--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCgAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAmm+1nYACgkQgItw+93Q
3WUoagf9GmCFj3Gr6rsTMvGGLvoW0M2RkG8O/3QkPJyRZVUpVAIaSy6YY+HfuV1a
SkPLsBfZMMZa5Ozp7HKfl6EUFhMlFD7gzuu7EswDJSyPXTrmh15L3FqNWyIZ8q9a
w/6sinTmiicZFkiN8BUXmUQlPtWzbuwKhZP6qWWXFzNdtLJAimWLqgSe/P6lrDQD
FPS4amevRbpyOF4gg7N9SOaX6IFR4rvKRsaySHPWrJUZofoozA7TJXiBeqa8QcVY
3mAl03GmEcKTQrOQwU5nFb/NALK8Ffjf9XXV6fcVD6v5BYz6wxZXsteENjo4JwqL
gqRtdzBu4qJZsYIfVBn802+jg8i7/g==
=0zTo
-----END PGP SIGNATURE-----
--=-=-=--