901 B
901 B
GPG Keys
GPG keys are a way to verify who you are online.
They can be integrated with git and dev tools such as Jetbrain's IDE's
Using Keys
Command Line
This site is a good site for info. https://gock.net/blog/2020/gpg-cheat-sheet
GUI tools
I use Kleopatra as a GUI tool.
It has Windows and Linux versions (including NixOS)
Security
{Add section on keeping keys secure ehre, such as only using subkeys on devices}
Open Governance Signing
{add stuff about open governance signing here}
Troubleshooting
Forgejo GPG verification failure
If you are trying to verify a gpg key on Forgejo and it keeps failing it may be because your key has more than one subkey.
The solution is:
- Make a backup of your gpg key.
- Delete all but one subkey
- This key must be a signing key
- Run the command Forgejo gives ye
- Restore the original key (if ye desire)