[Renew Key] Upcoming expiration of our current sub public key (expire on 20230512)

[peterzhuamazon]

This is a reminder that the new sub public key that we extended in #2040 will expire on 20230512.

We need to take action to extend the key again before that.

Guide: #2040 (comment)

• Upload the key to the production S3 bucket while work with project-website on it.
• Upload to keyserver: [Question] Upcoming expiration of our current sub public key (expire on 20220511) #2040 (comment)
• Update on https://opensearch.org/verify-signatures.html
• Make sure the key will expire in exactly one year on 20240512.

Thanks.

[bbarani]

@peterzhuamazon Can we close this issue as we have extended the key?

[peterzhuamazon]

Hi,
@bbarani this is for 20230512 expiration which is the extension of our extended key.
Thanks.

[bbarani]

@rishabh6788 are we tracking it via current monitoring and alarms?

[peterzhuamazon]

We are on the way to replace the new public key with SHA2 hash.

• SHA-1 GPG keys are deprecated, request to update GPG-keys and RPM repository packages #3124 (comment)

[peterzhuamazon]

Related website changes:

• [Public Key Changes] Adding reminder text on key verification page about the annual key renewal project-website#1562

[peterzhuamazon]

The key is out now to the public:
https://opensearch.org/verify-signatures.html