aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMichał Górny <mgorny@gentoo.org>2019-07-05 07:17:20 +0200
committerMichał Górny <mgorny@gentoo.org>2019-07-05 07:39:33 +0200
commited2a826f8d2fc5b74a714e0e37561cec25abc79b (patch)
tree38b3e0b8bc3160a8f731c9586cd004663a664597
parentsync: Split key refresh into explicit WKD/keyserver phases (diff)
downloadgentoo-portage-ed2a826f8d2fc5b74a714e0e37561cec25abc79b.tar.xz
gentoo-portage-ed2a826f8d2fc5b74a714e0e37561cec25abc79b.zip
repos.conf: Default to using Gentoo keyservers
Default to using hkps://keys.gentoo.org which are guaranteed to hold the newest copies of Gentoo keys, are secured against key poisoning and are more reliable than SKS. Reviewed-by: Zac Medico <zmedico@gentoo.org> Signed-off-by: Michał Górny <mgorny@gentoo.org>
-rw-r--r--cnf/repos.conf1
1 files changed, 1 insertions, 0 deletions
diff --git a/cnf/repos.conf b/cnf/repos.conf
index e84840bf2..2d73b3e35 100644
--- a/cnf/repos.conf
+++ b/cnf/repos.conf
@@ -10,6 +10,7 @@ sync-rsync-verify-jobs = 1
sync-rsync-verify-metamanifest = yes
sync-rsync-verify-max-age = 24
sync-openpgp-key-path = /usr/share/openpgp-keys/gentoo-release.asc
+sync-openpgp-keyserver = hkps://keys.gentoo.org
sync-openpgp-key-refresh-retry-count = 40
sync-openpgp-key-refresh-retry-overall-timeout = 1200
sync-openpgp-key-refresh-retry-delay-exp-base = 2