GitLab

GitLab extends Omnibus package signing key expiration to 2025

May 31, 2024Andrew Patterson
GitLab extends Omnibus package signing key expiration to 2025
SummaryAI, from the source post

This post details the extension of the Omnibus package signing key expiration from July 1, 2024, to July 1, 2025. This is a security policy compliance measure to limit exposure should the key be compromised. The extension is preferred over rotation to minimize disruption for users who verify package integrity. Instructions are provided for users who validate package signatures, including how to update their copy of the public key or find it on GPG keyservers and packages.gitlab.com.

More from the GitLab Installation and Updates trail