...
- Keep your private key file on a safe, secure computer, and make sure you have a secure backup.
- Never use this key for purposes other than code signing or signing other keys.
1. Generating Your Key
Carefully follow the instructions here to generate your key and check that SHA1 is avoided.
NoteTip: Popular binaries for GnuPG 2.x can be found here:
Note: After initially generating your key with GnuPG 2.x (gpg2), you can work with it using the more commonly-available 1.4.9 release (gpg).
2. Publishing Your Public Key
To enable people to find your public key, you should publish it. This is a simple command with gpg:
| Wiki Markup |
|---|
gpg \--send-key \[keyID\] |
This will upload your public key to a well-known keyserver, which will then trigger other connected keyservers to get a copy. You can verify the availability of your public key by searching for your name in one of the keyservers in the SKS network.