GitLab extends package signing key expiration to 2022
Jun 25, 2020Gerard Hickey

Summary
This post details the extension of the GPG key expiration for signing GitLab Omnibus packages from 2020-07-01 to 2021-07-01. This is a security practice to limit exposure if the key is compromised and to avoid the overhead of generating a new key annually. Users who validate package signatures need to update their copy of the key. Instructions and links to the public key and documentation are provided.