Hey gang,

I was looking at fedmsg, and noticed somebody signing f23 packages with the fedora-24 signing key.

for example:

[12:15:56] <fedmsg-bot> buildsys.rpm.sign -- Koji build gimp-data-extras-2.0.2-12.fc23.noarch.rpm signed with sigkey '81b46521' http://koji.fedoraproject.org/koji/buildinfo?buildID=649772

Is that on purpose?
It confused me this morning as I began to sign the f23 testing push. (two different keys were signing f23 packages at the same time)

My understanding of the keys:
  81b46521 == fedora-24
and
  34ec9cba == fedora-23

I'm guessing somebody might be using an older script from before this commit  [1] ?


Have a great day!



[1] https://pagure.io/releng/0fb583f0fdaa6eab6c1be2245ad2bf52c9866e41




--

-Jon Disnard