openwrt-keyring: fix missing 24.10 usign key by installing it
authorPetr Štetiar <ynezz@true.cz>
Mon, 4 Nov 2024 07:33:37 +0000 (07:33 +0000)
committerPetr Štetiar <ynezz@true.cz>
Mon, 4 Nov 2024 07:33:37 +0000 (07:33 +0000)
@KA2107 reported that opkg is not able to verify the artifact signatures
produced by buildbot using the usign 24.10 release keys. So lets fix it
by actually adding the 24.10 usign key with d310c6f2833e97f7 fingerprint
into the openwrt-keyring package.

Fixes: #16850
Reported-by: @KA2107
Fixes: a535cfc09e1c ("openwrt-keyring: add OpenWrt 24.10 release build usign key")
Signed-off-by: Petr Štetiar <ynezz@true.cz>
package/system/openwrt-keyring/Makefile

index 029463817b85ddeebd8e694cbf802b6be042a4b7..e499fc0beb5d4591582ae22d15626f7af7f8131a 100644 (file)
@@ -3,7 +3,7 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=openwrt-keyring
-PKG_RELEASE:=1
+PKG_RELEASE:=2
 
 PKG_SOURCE_PROTO:=git
 PKG_SOURCE_URL=$(PROJECT_GIT)/keyring.git
@@ -40,6 +40,8 @@ define Package/openwrt-keyring/install
        $(INSTALL_DIR) $(1)/etc/opkg/keys/
        # Public usign key for unattended snapshot builds
        $(INSTALL_DATA) $(PKG_BUILD_DIR)/usign/b5043e70f9a75cde $(1)/etc/opkg/keys/
+       # Public usign key for 24.10 release builds
+       $(INSTALL_DATA) $(PKG_BUILD_DIR)/usign/d310c6f2833e97f7 $(1)/etc/opkg/keys/
 endef
 endif