Add apk Elliptic Curve public key for signing of package indexes
authorPetr Štetiar <ynezz@true.cz>
Sat, 28 Sep 2024 12:47:26 +0000 (12:47 +0000)
committerPetr Štetiar <ynezz@true.cz>
Sat, 28 Sep 2024 13:01:24 +0000 (13:01 +0000)
commit3c066ce24e80d8f537d582406930d60c7cafb251
treec0542510a40d59a514b1760e469ea9970a3d598a
parent05282cb8c3233104297253bd5a1647785eb90786
Add apk Elliptic Curve public key for signing of package indexes

apk/openwrt-snapshots.pem contains Elliptic Curve based public key which
is going to be used for signing of apk's package.adb package indexes
after the builds using `apk adbsign --sign-key <key> packages.adb`
command.

apk/openwrt-snapshots.pem.gpg is detached GPG signature produced using
following key from Nitrokey 3A Mini dongle:

 pub   ed25519/0x1D53D1877742E911 2023-05-18 [C] [expires: 2033-05-15]
       Key fingerprint = 8A8B C12F 46B8 36C0 F9CD  B36F 1D53 D187 7742 E911
 uid                   [ultimate] OpenWrt Build System (Nitrokey3) <contact@openwrt.org>
 sig 3        0x1D53D1877742E911 2023-05-18  OpenWrt Build System (Nitrokey3) <contact@openwrt.org>
 sig          0xCD84BCED626471F1 2023-05-18  OpenWrt Build System (PGP key for unattended snapshot builds) <pgpsign-snapshots@openwrt.org>
 sig          0xCD54E82DADB3684D 2023-05-18  OpenWrt Build System (GnuPGP key for 22.03 release builds) <pgpsign-22.03@openwrt.org>
 sig          0x88CA59E88F681580 2023-05-18  OpenWrt Build System (PGP key for 21.02 release builds) <pgpsign-21.02@openwrt.org>
 sub   ed25519/0x2B0151090606D1D9 2023-05-18 [S] [expires: 2033-05-15]
       Key fingerprint = 92C5 61DE 55AE 6552 F3C7  36B8 2B01 5109 0606 D1D9
 sig          0x1D53D1877742E911 2023-05-18  OpenWrt Build System (Nitrokey3) <contact@openwrt.org>

References: 6b42a5c8b7dc ("Add new build system signing key stored on Nitrokey 3A Mini dongle")
Signed-off-by: Petr Štetiar <ynezz@true.cz>
apk/openwrt-snapshots.pem [new file with mode: 0644]
apk/openwrt-snapshots.pem.gpg [new file with mode: 0644]