ROS Signing key expiracy

ROS ROS General
1

Hello,

The package signing key for ROS 1 & 2 is to be expired in two weeks. When is the new key supposed to be rolled out? The sooner the better, as it will allow users more time to swap the key file and avoid service disruption.

ROS PMC talked about a ros-archive-keyring package, and there is this ros-apt-source repository containing the key with an updated expiracy date. When the package is due to be released? Will it be released for ROS1 as well?

3 Likes
2

Hi @Hugal31, we are releasing the package this week with the corresponding migration and docs updates.
It will be both for ROS 1 (Noetic) and ROS 2, the supported OS are documented here.
I will link the migration docs on this thread once they are published.

2 Likes
3

Following up here, it took me a bit longer but the migration guide is up!

2 Likes