Add website-local copy of release signing key

Hosting the key directly on grml.org has the advantage of it being
available over HTTPS. (And it the webserver gets compromised, people
can't trust the link to the offsite public key file anyway.)

diff --git a/download/gnupg-michael-prokop.txt b/download/gnupg-michael-prokop.txt
new file mode 100644 (file)
index 0000000..b8c72b8
--- /dev/null
+++ b/download/gnupg-michael-prokop.txt
@@ -0,0 +1,26 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----\r
+Version: GnuPG v1.0.6 (GNU/Linux)\r
+Comment: Weitere Infos: siehe http://www.gnupg.org\r
+\r
+mQGiBDxQFGkRBACGDa0ogUdUgJH2WRq9IMxMZ0lu6XN59XPkiDqldu+X5lzZNoNH\r
+VOLbrn80Gd4ToWRanvlFJ/tHZEvP9DBsIyfjZQyz6T5rWWBt2UrVW/ROZdo4/U6N\r
+0R/XP3XrPCiSspwz5QeGKCbQQA4wlGZnzDCc5YZQmRwTJJeSg6lgIJ+IwwCghouf\r
+7Y5/6p2kWtTVCpprThEN1isD/0EntvLYWS5oygbVVXOVjSpids4OzqhKoJk5xBBH\r
+T3dUJFLDFehY5i1PCgM6ys9GkQEF0fpkTk/lDGb3R+ditd0FOfzJ6G0qIuD1WWAS\r
+C5peDPlbVScoK+iouBKewWAOiwXsqtWUk0hjc+bUAyC+5GK0utdvpLNhgDHnJrA4\r
+UlELA/9889zCw8Jf1vD/No7Piq2TwB/WTF/9eAs+0FIv767Of6QPEd7gk/n/YMNf\r
+KY+rDQyHAlbHupX7mqnC74vStOH3+J5Lm8LzNnmvUQN1C3xOvhJcWFnOYskKJq9G\r
+OHJT98AqLdGjUmHmWMnenU08W2b85fQ6Q9jINX/2DNzkohoC5bRETWljaGFlbCBQ\r
+cm9rb3AgKFdlYjogd3d3Lm1pY2hhZWwtcHJva29wLmF0KSA8bWFpbEBtaWNoYWVs\r
+LXByb2tvcC5hdD6IVwQTEQIAFwUCPFAUaQULBwoDBAMVAwIDFgIBAheAAAoJENjf\r
+U/s34nLo4owAoIXHI/a016OheMb1FhInYFADnKGBAJ9u6wZORXPUMv73ZGHJo2po\r
+fYYJ3rkBDQQ8UBRvEAQA3Zjml3zd47D774somRCCR28eDqThgKuWc3kyvGHcDKfe\r
+AyxAheDY3pngALz9UwmyDqSBJCKzqdvv1mqYTO+5dS7eHGpWViSQeqjO73ZZnE/8\r
+8svs5LkqS1iV3BtTNiEq0Frhb2IGeh2COZ78Z5inSugl9VPmPba7MD+BeAHKl/cA\r
+AwUD/iHUjsKz4Hnw//VLj/8pvlg6vvBiMdO/WsW+r3m8M9Qbk1QyTglomvWuPJJM\r
+GXVRDhV4XE+jwfZ/f/qmEBokj74db+VEBgYCwTNOtcke+S9pObFQjUlgt/J8FOIC\r
+IAt/2jieAc1i2mL//3DS+MsJFI2hH0e3+bOCoav5CApH7RlJiEYEGBECAAYFAjxQ\r
+FG8ACgkQ2N9T+zficuh7lQCfZrTTCKF8JRMoEJJOiZBrE8P87OoAnRlcr8GQBiJh\r
+BmAEqUpzoYsstfpl\r
+=Xykt\r
+-----END PGP PUBLIC KEY BLOCK-----
\ No newline at end of file

diff --git a/download/index.html.tt2 b/download/index.html.tt2
index 07c6f2b..c6fc595 100644 (file)
--- a/download/index.html.tt2
+++ b/download/index.html.tt2
@@ -208,7 +208,8 @@
 
     <br />
     <br />
-    <a href="http://debian.netcologne.de/grml/gnupg-michael-prokop.txt">Signing Key</a><br />
+    <a href="./gnupg-michael-prokop.txt">Signing Key</a>
+    (<a href="http://debian.netcologne.de/grml/gnupg-michael-prokop.txt">Alternate location</a>)<br />
     <br />
     Please verify all downloads using GnuPG!
     </div></div>