| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search | 
| Name: openSUSE-build-key | Distribution: openSUSE Leap 16.0 | 
| Version: 1.0 | Vendor: openSUSE | 
| Release: lp160.15.1 | Build date: Fri Sep 26 13:08:15 2025 | 
| Group: System/Packages | Build host: reproducible | 
| Size: 30273 | Source RPM: openSUSE-build-key-1.0-lp160.15.1.src.rpm | 
| Packager: https://bugs.opensuse.org | |
| Url: https://en.opensuse.org/openSUSE:Security_team | |
| Summary: The public gpg keys for rpm package signature verification | |
This package contains the gpg keys that are used to sign the openSUSE rpm packages. The keys installed here are not actually used by anything. rpm/zypper use the keys in the rpm db instead.
GPL-2.0-or-later
* Fri Sep 26 2025 Max Lin <mlin@suse.com>
  - fix Backports 15 key is not packaged
* Tue Jul 22 2025 Marcus Meissner <meissner@suse.com>
  - obsolete gpg-pubkey-ded64f3b, the openSUSE buildservice global
    key which was used mistakenly for repository signing.
* Fri Jul 11 2025 Marcus Meissner <meissner@suse.com>
  - gpg-pubkey-09d9ea69-68595a8c.asc: renamed uid field to not
    use outdated internal codenames. (bsc#1245223)
* Mon May 26 2025 Marcus Meissner <meissner@suse.com>
  - added gpg-pubkey-287a0027-682477e3.asc: New RSA 4k Backports
    for SLE 16.x series.
* Tue May 13 2025 Marcus Meissner <meissner@suse.com>
  - added gpg-pubkey-25db7ae0-645bae34.asc: RSA 4k SLE15 Backports key.
  - removed gpg-pubkey-65176565-61a0ee8f.asc: old RSA 2k Backports key.
    (bsc#1243135)
* Tue Mar 11 2025 Marcus Meissner <meissner@suse.com>
  - gpg-pubkey-39db7c82-66c5d91a.asc: extended lifetime of SLE12 / 15
    2048 bit key.
* Wed Mar 05 2025 Marcus Meissner <meissner@suse.com>
  - changed keys to use SHA256 UIDs instead of SHA1. (bsc#1237294
    bsc#1236779 jsc#PED-12321)
    - gpg-pubkey-3fa1d6ce-67c856ee.asc to gpg-pubkey-09d9ea69-67c857f3.asc
    - gpg-pubkey-09d9ea69-645b99ce.asc to gpg-pubkey-3fa1d6ce-63c9481c.asc
* Fri Jun 21 2024 Lubos Kocman <Lubos.Kocman@suse.com>
  - Ensure that SLM 6.0 key is installed on Leap Micro and Leap 16
  - install SLFO / SLM 6.0 key and SLES 15 SP6+ key by default
* Wed Apr 10 2024 Marcus Meissner <meissner@suse.com>
  - SLM 6.0 key (ALP / SLF1) RSA 4096 bit key
    - gpg-pubkey-09d9ea69-645b99ce.asc
  - 2024 SUSE Linux Enterprise 15 SP6 RSA 4096 bit key
    - gpg-pubkey-3fa1d6ce-63c9481c.asc
  - SLM 6.0 key (ALP / SLF1) RSA 4096 bit reserve key
    - gpg-pubkey-73f03759-626bd414.asc
  - 2024 SUSE Linux Enterprise 15 SP6 RSA 4096 bit reserve key
    - gpg-pubkey-d588dc46-63c939db.asc
  - obsoleted a incorrectly used DSA1024 key (used in Slowroll).
* Tue Mar 26 2024 Dominique Leuenberger <dimstar@opensuse.org>
  - Fix import-openSUSE-build-key:set proper timer name to try to
    stop (openSUSE-build-key-import.timer, not
    suse-build-key-import.timer) (boo#1221948).
* Sun Mar 24 2024 Giacomo Comes <gcomes.obs@gmail.com>
  - Requires(post): coreutils is missing
    * instead of adding it, change the post scriptlet:
      do not use touch, use shell redirection
* Thu Mar 14 2024 Dominique Leuenberger <dimstar@opensuse.org>
  - Install import-openSUSE-build-key to %{_sbindir}: align to where
    the .service file is launching the script from (boo#1221427).
* Wed Mar 06 2024 Marcus Meissner <meissner@suse.com>
  - add unexpired openSUSE zSystems key (bsc#1220993)
    - replace gpg-pubkey-f6ab3975-5edd7d4f.asc
    - by gpg-pubkey-f6ab3975-62e9e6fb.asc
* Mon Feb 19 2024 Marcus Meissner <meissner@suse.com>
  - added new suse container key, moved the old one to -old
* Tue Jun 06 2023 Marcus Meissner <meissner@suse.com>
  - openSUSE-build-key-import.service,openSUSE-build-key-import.service.timer,
    import-openSUSE-build-key:
    Add systemd timer and service framework that imports new keys.
* Fri Apr 14 2023 Marcus Meissner <meissner@suse.com>
  - Added a new 4096 openSUSE container key
    - build-container-202304-d684afec-64390cff.asc
    - build-container-202304-d684afec-64390cff.pem
  - Removed and obsoleted old 2048 build key of Tumbleweed
    - gpg-pubkey-3dbdc284-53674dd4.asc
* Mon Dec 05 2022 Ludwig Nussel <lnussel@suse.de>
  - Package OBS project key if available. Useful when forking
    openSUSE-build-key for use in appliances.
* Tue Oct 25 2022 Marcus Meissner <meissner@suse.com>
  - add the SUSE Container key in PEM format too to new
    /usr/share/pki/containers/ directory. (bsc#1204706)
* Wed Aug 10 2022 Dirk Müller <dmueller@suse.com>
  - add gpg-pubkey-29b700a4-62b07e22.asc (bsc#1199184)
* Thu Mar 24 2022 Marcus Meissner <meissner@suse.com>
  - gpg-pubkey-307e3d54-5aaa90a5 is actually "package gpg-pubkey,
    version-release 307e3d54-5aaa90a5"
* Fri Mar 18 2022 Marcus Meissner <meissner@suse.com>
  - gpg-pubkey-307e3d54-5aaa90a5.asc: remove the RSA 1024bit SLE11 key
    and try to remove it from installed systems via Obsoletes.
* Fri Jan 14 2022 Marcus Meissner <meissner@suse.com>
  - refresh the openSUSE Backports key (bsc#1193092)
    - gpg-pubkey-65176565-59787af5.asc
    + gpg-pubkey-65176565-61a0ee8f.asc
  - removed old security key
  - updated security key to 2020 version
* Mon Sep 27 2021 Dominique Leuenberger <dimstar@opensuse.org>
  - Only add openSUSE Backports key when building for a Leap system
    (sle_version > 0). Tumbleweed does not use Backports.
* Fri Jun 11 2021 Dirk Müller <dmueller@suse.com>
  - remove dumpsigs, unused since SLE12+ (rpm 4.x) (bsc#1186827)
* Fri Jun 11 2021 Dirk Müller <dmueller@suse.com>
  - add URL
  - spec-cleaner run
* Sat Jun 05 2021 Neal Gompa <ngompa13@gmail.com>
  - Merge changes from openSUSE Leap 15.3 for rpm-repos-openSUSE (boo#1186593)
* Fri May 21 2021 Yuchen Lin <mlin+factory@suse.de>
  - Refresh the SLE15 build@suse.de key
    * Updated gpg-pubkey-39db7c82-5847eb1f.asc
* Sat Apr 24 2021 Marcus Meissner <meissner@suse.com>
  - fixed s390x key install (bsc#1185245)
* Thu Jan 28 2021 Lubos Kocman <lubos.kocman@suse.com>
  - Add openSUSE Backports key to openSUSE Leap (bsc#1181344)
    This is needed because most of Leap 15.3+ packages are in fact
    build in openSUSE Backport (Closing The Leap Gap)
* Fri Jan 08 2021 Dirk Müller <dmueller@suse.com>
  - update openSUSE:Factory:zSystems signing key to current version:
    pub   rsa2048 2016-02-17 [SC] [expires: 2022-08-16]
      F00C20EF1E1114C9B5F69B2276CA4244F6AB3975
    openSUSE:Factory:zSystems OBS Project <openSUSE:Factory:zSystems@build.opensuse.org>
* Tue Sep 22 2020 Marcus Meissner <meissner@suse.com>
  - the container keys for openSUSE and SUSE Linux Enterprise are actually
    not the build keys. (bsc#1176818)
  - build@suse.de key for SLE12 was extended. (bsc#1176759)
* Mon Apr 27 2020 Thorsten Kukuk <kukuk@suse.com>
  - Remove PreRequires for removed post section with outdated
    package names.
* Thu Apr 23 2020 Marcus Meissner <meissner@suse.com>
  - use /usr/share/container-keys/ for container keys.
* Thu Apr 02 2020 Marcus Meissner <meissner@suse.com>
  - mark the opensuse-container-key and the suse-container-key
    for openSUSE:Containers and SUSE:Containers space.
    (same as the build keys for SLE15 and openSUSE respectively.)
  - Replace the old security@suse.de email comm key by the new, move
    the old one to the oldkey. (bsc#1166334)
* Mon Mar 25 2019 Guillaume GARDET <guillaume.gardet@opensuse.org>
  - Fix previous commit
* Tue Mar 05 2019 Adrian Schröter <adrian@suse.de>
  - drop arm specific key again
    => ARM sub project is considered to be equal trustworthy
* Tue Feb 26 2019 Adrian Schröter <adrian@suse.de>
  - add project keys for architecture ports projects
    gpg-pubkey-bbac6b14-5c755908.asc: openSUSE:Factory:ARM
    gpg-pubkey-697ba1e5-5c755904.asc: openSUSE:Factory:RISCV
    gpg-pubkey-8ede3e07-5c755f3a.asc: openSUSE:Factory:PowerPC
    gpg-pubkey-f6ab3975-5ad08cb7.asc: openSUSE:Factory:zSystems
  - package needs to become arch specific again to avoid the import
    of foreign ports projects
* Wed Mar 28 2018 meissner@suse.com
  - refreshed the SLE11 build@suse.de key (bsc#1085512)
  - added the SLE12 and SLE15 build@suse.de key (bsc#1087276)
    gpg-pubkey-39db7c82-5847eb1f.asc
    pub   rsa2048/0x70AF9E8139DB7C82 2013-01-31 [SC] [expires: 2020-12-06]
      Key fingerprint = FEAB 5025 39D8 46DB 2C09  61CA 70AF 9E81 39DB 7C82
    uid                             SuSE Package Signing Key <build@suse.de>
  - A new security@suse.de key has been established. (bsc#1082022)
* Tue Nov 29 2016 ro@suse.de
  - modify dumpsigs to deal with fingerprint lines in gpg output
* Thu Oct 02 2014 meissner@suse.com
  - renamed security_at_suse_de.asc to security_at_suse_de_old.asc
  - security_at_suse_de.asc: new 4096 bit RSA key.
    pub  4096R/317CD502 2014-10-02 SUSE Security Team <security@suse.de>
    bnc#899509
* Thu May 22 2014 adrian@suse.de
  - replace openSUSE gpg key with extended key.
* Wed Apr 18 2012 lnussel@suse.de
  - install the security@suse.de key as %doc for offline import
* Tue Apr 17 2012 lnussel@suse.de
  - remove generated key rings, no longer needed by
    installation-images and linuxrc (bnc#724625)
  - remove security@suse.de key, never used for package signing
  - remove old build@suse.de key, was used on sle10
  - remove openSUSE\x3aFactory@build.opensuse.org key, not used anymore
  - leave sle11 build@suse.de key as backup
* Tue Oct 25 2011 lnussel@suse.de
  - add /usr/lib/rpm/gnupg/suse-build-key.gpg again. Needed by
    installation-images and linuxrc.
* Fri Oct 21 2011 lnussel@suse.de
  - remove no longer used keys from (bnc#724625)
  - clean up packaging for easier maintenance
* Wed May 05 2010 ro@suse.de
  - updated keys:
    - 307E3D54 build@suse.de "SuSE Package Signing Key" (2014-05-03)
    - 7E2E3B05 novell-provo-build@novell.com "Novell Provo Build"
      (2014-05-06)
    - 9C800ACA build@suse.de "SuSE Package Signing Key" (2014-05-03)
    - 56B4177A openSUSE:Factory@build.opensuse.org
      "openSUSE:Factory OBS Project" (2014-05-04)
    - 3DBDC284 opensuse@opensuse.org "openSUSE Project Signing Key"
      (2014-05-04)
* Mon Nov 10 2008 adrian@suse.de
  - add the new openSUSE build key for real
* Fri Nov 07 2008 ro@suse.de
  - added new openSUSE build key 2048R/3DBDC284 expiring 2010-11-07
* Thu Sep 18 2008 adrian@suse.de
  - Branch package from suse-build-key and create it as openSUSE-build-key
  - Add openSUSE:Factory key as official distribution key
* Mon Jun 02 2008 ro@suse.de
  - update keys again: for collaboration with rpm, the current
    self-signature needs to be the first signature found in a key
* Mon May 05 2008 ro@suse.de
  - updated keys
    9C800ACA,8495160C,307E3D54: extend expiration by 2 years
    until 2010-05-05
    7E2E3B05: extend expiration by 2 years until 2010-05-24
* Mon Mar 19 2007 rguenther@suse.de
  - merge suse-build-key keyring to roots gpg pubring
* Mon May 29 2006 ro@suse.de
  - added new official provo dsa autobuild key ID 7E2E3B05
* Fri May 19 2006 ro@suse.de
  - removed unused provo autobuild key
  - added new official provo autobuild key ID A1912208
* Thu Apr 20 2006 ro@suse.de
  - add dumpsigs script here to have _one_ place for the script
* Fri Mar 31 2006 ro@suse.de
  - added build@suse.de rsa key ID 307E3D54
* Wed Jan 25 2006 mls@suse.de
  - converted neededforbuild to BuildRequires
* Tue Oct 18 2005 ro@suse.de
  - use correct provo autobuild key
* Tue Oct 18 2005 ro@suse.de
  - added provo autobuild signing key (#128128)
  - removed jds key
* Fri May 27 2005 mls@suse.de
  - added mktemp to PreReqs [#86177]
* Thu Apr 28 2005 ro@suse.de
  - added JDS public key (15c17deb)
* Tue Jan 25 2005 ro@suse.de
  - added OES public key (0dfb3188)
* Tue Jun 22 2004 ro@suse.de
  - updated build key (expiration changed to 2008-06-21) (#42326)
* Tue Feb 24 2004 hmacht@suse.de
  - building as non-root
* Tue Sep 09 2003 ro@suse.de
  - ignore return code from first gpg calls
* Tue Sep 09 2003 draht@suse.de
  - call gpg twice without any arguments for proper initialization
    inside postinstall
* Tue Sep 09 2003 draht@suse.de
  - use temp file instead of pipe due to resource race between two
    instances of gpg in %post.
* Thu Sep 05 2002 draht@suse.de
  - package now installs key from package-owned file into the rpm
    pubring in %post to allow other key packages to add their keys.
* Tue Aug 20 2002 mmj@suse.de
  - Correct PreReq
* Fri Jul 26 2002 kukuk@suse.de
  - Change Provides from suse-build-key to build-key
* Wed Feb 20 2002 draht@suse.de
  - directory permission problem: 644 -> 755.
* Mon Feb 18 2002 ro@suse.de
  - moved to /usr/lib/rpm/gnupg/pubring.pgp
    rpm needs a directory as gpg_path and will use pubring.gpg
    in that directory
* Wed Feb 13 2002 draht@suse.de
  - initial package. Contains
    - pub  2048R/3D25D3D9 1999-03-06 SuSE Security Team <security@suse.de>
    - pub  1024D/9C800ACA 2000-10-19 SuSE Package Signing Key <build@suse.de>
    - sub  2048g/8495160C 2000-10-19 [expires: 2006-02-12]
/usr/lib/rpm/gnupg /usr/lib/rpm/gnupg/keys /usr/lib/rpm/gnupg/keys/gpg-pubkey-09d9ea69-68595a8c.asc /usr/lib/rpm/gnupg/keys/gpg-pubkey-25db7ae0-645bae34.asc /usr/lib/rpm/gnupg/keys/gpg-pubkey-287a0027-682477e3.asc /usr/lib/rpm/gnupg/keys/gpg-pubkey-29b700a4-62b07e22.asc /usr/lib/rpm/gnupg/keys/gpg-pubkey-39db7c82-66c5d91a.asc /usr/lib/rpm/gnupg/keys/gpg-pubkey-3fa1d6ce-67c856ee.asc /usr/lib/systemd/system/openSUSE-build-key-import.service /usr/lib/systemd/system/openSUSE-build-key-import.timer /usr/sbin/import-openSUSE-build-key /usr/share/container-keys /usr/share/container-keys/opensuse-container-key-2023.asc /usr/share/container-keys/opensuse-container-key.asc /usr/share/container-keys/suse-container-key-old.asc /usr/share/container-keys/suse-container-key.asc /usr/share/doc/packages/openSUSE-build-key /usr/share/doc/packages/openSUSE-build-key/security_at_suse_de.asc /usr/share/pki /usr/share/pki/containers /usr/share/pki/containers/opensuse-container-key-2023.pem /usr/share/pki/containers/suse-container-key-old.pem /usr/share/pki/containers/suse-container-key.pem /var/lib/openSUSE-build-key /var/lib/openSUSE-build-key/imported
Generated by rpm2html 1.8.1
Fabrice Bellet, Fri Oct 31 22:45:09 2025