summary |
shortlog | log |
commit |
commitdiff |
tree
first ⋅ prev ⋅ next
Petr Štetiar [Sat, 28 Sep 2024 12:47:26 +0000 (12:47 +0000)]
Add apk Elliptic Curve public key for signing of package indexes
apk/openwrt-snapshots.pem contains Elliptic Curve based public key which
is going to be used for signing of apk's package.adb package indexes
after the builds using `apk adbsign --sign-key <key> packages.adb`
command.
apk/openwrt-snapshots.pem.gpg is detached GPG signature produced using
following key from Nitrokey 3A Mini dongle:
pub
ed25519/0x1D53D1877742E911 2023-05-18 [C] [expires: 2033-05-15]
Key fingerprint = 8A8B C12F 46B8 36C0 F9CD B36F 1D53 D187 7742 E911
uid [ultimate] OpenWrt Build System (Nitrokey3) <contact@openwrt.org>
sig 3 0x1D53D1877742E911 2023-05-18 OpenWrt Build System (Nitrokey3) <contact@openwrt.org>
sig 0xCD84BCED626471F1 2023-05-18 OpenWrt Build System (PGP key for unattended snapshot builds) <pgpsign-snapshots@openwrt.org>
sig 0xCD54E82DADB3684D 2023-05-18 OpenWrt Build System (GnuPGP key for 22.03 release builds) <pgpsign-22.03@openwrt.org>
sig 0x88CA59E88F681580 2023-05-18 OpenWrt Build System (PGP key for 21.02 release builds) <pgpsign-21.02@openwrt.org>
sub
ed25519/0x2B0151090606D1D9 2023-05-18 [S] [expires: 2033-05-15]
Key fingerprint = 92C5 61DE 55AE 6552 F3C7 36B8 2B01 5109 0606 D1D9
sig 0x1D53D1877742E911 2023-05-18 OpenWrt Build System (Nitrokey3) <contact@openwrt.org>
References:
6b42a5c8b7dc ("Add new build system signing key stored on Nitrokey 3A Mini dongle")
Signed-off-by: Petr Štetiar <ynezz@true.cz>
Petr Štetiar [Sat, 13 Apr 2024 06:40:49 +0000 (06:40 +0000)]
gpg: add my public key
Synced with https://github.com/ynezz.gpg and https://gitlab.com/ynezz.gpg
Signed-off-by: Petr Štetiar <ynezz@true.cz>
Petr Štetiar [Thu, 18 May 2023 14:01:25 +0000 (16:01 +0200)]
Add new build system signing key stored on Nitrokey 3A Mini dongle
This key is available only from Nitrokey 3A Mini (nk3) USB security key.
Only 3 such identical nk3 dongles were provisioned[1], one nk3 dongle is
going to be attached to the new buildbot master server, remaining two
nk3 dongles are going to be kept as a backup (ynezz, jow). GnuPG
master/secret keys are not available, only revocation certificate was
generated, just in case.
This new signing key 0x1D53D1877742E911 available only from those three
nk3 dongles was cross signed with 3 previous signing keys (snapshot,
21.02, 22.03):
pub
ed25519/0x1D53D1877742E911 2023-05-18 [C] [expires: 2033-05-15]
Key fingerprint = 8A8B C12F 46B8 36C0 F9CD B36F 1D53 D187 7742 E911
uid [ultimate] OpenWrt Build System (Nitrokey3) <contact@openwrt.org>
sig 3 0x1D53D1877742E911 2023-05-18 OpenWrt Build System (Nitrokey3) <contact@openwrt.org>
sig 0xCD84BCED626471F1 2023-05-18 OpenWrt Build System (PGP key for unattended snapshot builds) <pgpsign-snapshots@openwrt.org>
sig 0xCD54E82DADB3684D 2023-05-18 OpenWrt Build System (GnuPGP key for 22.03 release builds) <pgpsign-22.03@openwrt.org>
sig 0x88CA59E88F681580 2023-05-18 OpenWrt Build System (PGP key for 21.02 release builds) <pgpsign-21.02@openwrt.org>
sub
ed25519/0x2B0151090606D1D9 2023-05-18 [S] [expires: 2033-05-15]
Key fingerprint = 92C5 61DE 55AE 6552 F3C7 36B8 2B01 5109 0606 D1D9
sig 0x1D53D1877742E911 2023-05-18 OpenWrt Build System (Nitrokey3) <contact@openwrt.org>
nk3 dongle PIN is going to be available to all build infrastructure
admins (needed after server restarts), admin PIN, reset PIN and
revocation certificate to folks having backup key dongles (ynezz, jow).
Signed-off-by: Petr Štetiar <ynezz@true.cz>
Daniel Golle [Sun, 9 Apr 2023 22:07:55 +0000 (23:07 +0100)]
gpg: add Daniel's public key
Add my PGP public key. It's a 4096 bit key which is stored on a OpenPGP
2.0 smartcard. It may be replaced once I get my NitroKey 3 mini working
with GnuPG because the OpenPGP smartcard is annoyingly slow...
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Jo-Philipp Wich [Tue, 4 Apr 2023 10:32:39 +0000 (12:32 +0200)]
gpg: update 22.03 signing key
Extend the key validity by another year.
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Jo-Philipp Wich [Tue, 4 Apr 2023 10:32:24 +0000 (12:32 +0200)]
gpg: update 21.02 signing key
Extend the key validity by another year.
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Petr Štetiar [Fri, 25 Mar 2022 12:59:44 +0000 (13:59 +0100)]
usign: add 22.03 release build public key
Signed-off-by: Petr Štetiar <ynezz@true.cz>
Petr Štetiar [Fri, 25 Mar 2022 12:55:57 +0000 (13:55 +0100)]
gpg: add OpenWrt 22.03 signing key
pub rsa4096 2022-03-25 [SCEA] [expires: 2024-03-24]
BF856781A01293C8409ABE72CD54E82DADB3684D
uid [ultimate] OpenWrt Build System (GnuPGP key for 22.03 release builds) <pgpsign-22.03@openwrt.org>
sub rsa4096 2022-03-25 [SEA] [expires: 2024-03-24]
Signed-off-by: Petr Štetiar <ynezz@true.cz>
Jo-Philipp Wich [Mon, 9 Aug 2021 21:30:39 +0000 (23:30 +0200)]
gpg: update OpwnWrt 19.07 signing key
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Petr Štetiar [Sat, 20 Feb 2021 14:04:56 +0000 (15:04 +0100)]
usign: add 21.02 release build pubkey
Signed-off-by: Petr Štetiar <ynezz@true.cz>
Petr Štetiar [Sat, 20 Feb 2021 13:56:58 +0000 (14:56 +0100)]
gpg: add OpenWrt 21.02 signing key
Signed-off-by: Petr Štetiar <ynezz@true.cz>
Jo-Philipp Wich [Thu, 25 Jul 2019 17:32:16 +0000 (19:32 +0200)]
usign: add 19.07 release build pubkey
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Jo-Philipp Wich [Thu, 25 Jul 2019 17:16:14 +0000 (19:16 +0200)]
usign: use distro agnostic comments
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Jo-Philipp Wich [Wed, 24 Jul 2019 19:36:42 +0000 (21:36 +0200)]
usign: fix filename of Stijn's usign key
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Jo-Philipp Wich [Wed, 24 Jul 2019 18:05:02 +0000 (20:05 +0200)]
gpg: update snapshots public signing key
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Jo-Philipp Wich [Wed, 24 Jul 2019 17:42:06 +0000 (19:42 +0200)]
gpg: replace my public GPG key
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Jo-Philipp Wich [Wed, 24 Jul 2019 16:50:20 +0000 (18:50 +0200)]
gpg: add OpenWrt 19.07 signing key
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Jo-Philipp Wich [Wed, 24 Jul 2019 07:18:29 +0000 (09:18 +0200)]
gpg: add OpenWrt 18.06 v2 signing key
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Jo-Philipp Wich [Wed, 24 Jul 2019 07:15:01 +0000 (09:15 +0200)]
gpg: update LEDE 17.01 public signing key
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Hauke Mehrtens [Sun, 15 Jul 2018 17:25:50 +0000 (19:25 +0200)]
Add my public GPG and usign key
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
Jo-Philipp Wich [Fri, 18 May 2018 07:48:41 +0000 (09:48 +0200)]
Add public GPG key used by the 18.06 release builds
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Jo-Philipp Wich [Fri, 18 May 2018 07:41:21 +0000 (09:41 +0200)]
Add public usign key used for the 18.06 release builds
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Stijn Tintel [Tue, 3 Oct 2017 11:46:46 +0000 (14:46 +0300)]
Add my public usign key
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
Stijn Tintel [Tue, 3 Oct 2017 11:43:33 +0000 (14:43 +0300)]
Add my public GPG key
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
Alexander Couzens [Fri, 9 Jun 2017 10:06:11 +0000 (12:06 +0200)]
Add my public key for gpg and usign
Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
Jo-Philipp Wich [Fri, 20 Jan 2017 09:06:22 +0000 (10:06 +0100)]
Add public GPG key used by the 17.01 release builds
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Jo-Philipp Wich [Fri, 20 Jan 2017 08:59:11 +0000 (09:59 +0100)]
Add public usign key used by the 17.01 release builds
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Florian Fainelli [Sun, 15 Jan 2017 04:17:20 +0000 (20:17 -0800)]
Add my public GPG key
Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
Hans Dedecker [Wed, 7 Dec 2016 20:35:29 +0000 (21:35 +0100)]
Add my public usign key
Hans Dedecker [Wed, 7 Dec 2016 20:27:23 +0000 (21:27 +0100)]
Add my public key
Jo-Philipp Wich [Tue, 26 Jul 2016 13:54:36 +0000 (15:54 +0200)]
Add unattended GnuPG build key
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Jo-Philipp Wich [Sat, 30 Apr 2016 16:58:47 +0000 (18:58 +0200)]
Add unattended usign build key
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Ted Hess [Tue, 26 Apr 2016 18:22:18 +0000 (14:22 -0400)]
Add my public usign key
Signed-off-by: Ted Hess <thess@kitschensync.net>
Ted Hess [Tue, 26 Apr 2016 18:18:19 +0000 (14:18 -0400)]
Add my public gpg key
Signed-off-by: Ted Hess <thess@kitschensync.net>
Álvaro Fernández Rojas [Sat, 16 Apr 2016 09:59:03 +0000 (11:59 +0200)]
Move my public key to the correct directory
I imported it to the wrong directory :/
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
Álvaro Fernández Rojas [Sat, 16 Apr 2016 09:58:31 +0000 (11:58 +0200)]
Add my public usign key
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
Álvaro Fernández Rojas [Sat, 16 Apr 2016 09:54:11 +0000 (11:54 +0200)]
Add my public key
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
John Crispin [Thu, 14 Apr 2016 12:43:59 +0000 (14:43 +0200)]
Add my public usign key
Signed-off-by: John Crispin <john@phrozen.org>
John Crispin [Thu, 14 Apr 2016 12:40:51 +0000 (14:40 +0200)]
Add my public key
Signed-off-by: John Crispin <john@phrozen.org>
Jo-Philipp Wich [Tue, 5 Apr 2016 17:18:02 +0000 (19:18 +0200)]
Add my public usign key
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Jo-Philipp Wich [Tue, 5 Apr 2016 17:03:17 +0000 (19:03 +0200)]
Add my public key
Signed-off-by: Jo-Philipp Wich <jo@mein.io>