Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
Next revisionBoth sides next revision
docs:guide-user:security:signatures [2021/03/02 20:07] – add 21.02 release key aparcardocs:guide-user:security:signatures [2024/11/06 09:35] – Add information about GPG key from Nitrokey 3A key ynezz
Line 12: Line 12:
  
 /* BEGIN GPG KEYS */ /* BEGIN GPG KEYS */
 +---
 +
 +=== Universal GPG signing key from Nitrokey 3A key ===
 +
 +This key is available only from Nitrokey 3A Mini USB security key, [[docs:guide-developer:releases:provision-nitrokey3|Prepare Nitrokey 3A Mini for build artifact signing]] and [[commit>?p=keyring.git;a=commit;h=6b42a5c8b7dc049b899869b2a1b94daf69ceb2f5]] provides more details.
 +Deployed to production build infra since [[https://lists.openwrt.org/pipermail/openwrt-devel/2024-November/043358.html|2024-11-05]]
 +
 +User ID: **OpenWrt Build System (Nitrokey3)** <contact@openwrt.org>\\
 +Public Key: **0x1D53D1877742E911** (ed25519, created 2023-05-18, expires 2033-05-18)\\
 +Fingerprint: ''%%8A8B C12F 46B8 36C0 F9CD  B36F 1D53 D187 7742 E911%%''\\
 +Signing Subkey: **0x2B0151090606D1D9** (ed25519, created 2022-03-25, expires 2025-04-03)\\
 +Fingerprint: ''%%92C5 61DE 55AE 6552 F3C7  36B8 2B01 5109 0606 D1D9%%''\\
 +[[https://git.openwrt.org/?p=keyring.git;a=commit;h=6b42a5c8b7dc049b899869b2a1b94daf69ceb2f5|Last change: 2023-05-18 16:01:25 +0200]] | [[https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/0x1D53D1877742E911.asc|Download]]
  
 --- ---
Line 36: Line 49:
  
 User ID: **OpenWrt Build System** <pgpsign-19.07@openwrt.org>\\ User ID: **OpenWrt Build System** <pgpsign-19.07@openwrt.org>\\
-Public Key: 0x28A39BC3**2074BE7A** (4096 Bit RSA, created 2019-07-14, expires 2021-07-13)\\+Public Key: 0x28A39BC3**2074BE7A** (4096 Bit RSA, created 2019-07-14, expires 2022-08-09)\\
 Fingerprint: ''%%D9C6 901F 45C9 B868 5868  7DFF 28A3 9BC3 2074 BE7A%%''\\ Fingerprint: ''%%D9C6 901F 45C9 B868 5868  7DFF 28A3 9BC3 2074 BE7A%%''\\
-[[https://git.openwrt.org/?p=keyring.git;a=history;f=gpg/2074BE7A.asc|Last change: 2019-07-24 16:55:07 +0200]] | [[https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/2074BE7A.asc|Download]]+[[https://git.openwrt.org/?p=keyring.git;a=history;f=gpg/2074BE7A.asc|Last change: 2021-08-09 21:30:39 +0200]] | [[https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/2074BE7A.asc|Download]]
  
 --- ---
  
-=== PGP key for unattended snapshot builds ===+=== PGP key for 21.02 release builds === 
 + 
 +User ID: **OpenWrt Build System** <pgpsign-21.02@openwrt.org>\\ 
 +Public Key: 0x88CA59E8**8F681580** (4096 Bit RSA, created 2021-02-20, expires 2024-04-03)\\ 
 +Fingerprint: ''%%6672 05E3 79BA F348 863A  5C66 88CA 59E8 8F68 1580%%''\\ 
 +Signing Subkey: 0xD3867007 **F801C9B3** (4096 Bit RSA, created 2021-02-20, expires 2024-04-03)\\ 
 +Fingerprint: ''%%EF36 6A7C D0AD B704 3094  11E6 D386 7007 F801 C9B3%%''\\ 
 +[[https://git.openwrt.org/?p=keyring.git;a=history;f=gpg/88CA59E8.asc|Last change: 2023-04-04 10:32:24 +0200]] | [[https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/88CA59E8.asc|Download]] 
 + 
 +--- 
 + 
 +=== PGP key for 22.03 release builds === 
 + 
 +User ID: **OpenWrt Build System** <pgpsign-22.03@openwrt.org>\\ 
 +Public Key: 0xCD54E82D**ADB3684D** (4096 Bit RSA, created 2022-03-25, expires 2025-04-03)\\ 
 +Fingerprint: ''%%BF85 6781 A012 93C8 409A  BE72 CD54 E82D ADB3 684D%%''\\ 
 +Signing Subkey: 0xAB3F4049 **13AA0D5A** (4096 Bit RSA, created 2022-03-25, expires 2025-04-03)\\ 
 +Fingerprint: ''%%1FDF CF69 F6FB 7776 B14D  D61D AB3F 4049 13AA 0D5A%%''\\ 
 +[[https://git.openwrt.org/?p=keyring.git;a=history;f=gpg/CD54E82DADB3684D.asc|Last change: 2023-04-04 10:33:03 +0200]] | [[https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/CD54E82DADB3684D.asc|Download]] 
 + 
 +--- 
 + 
 +=== PGP key for unattended snapshot builds (deprecated) ===
  
 User ID: **OpenWrt Build System** <pgpsign-snapshots@openwrt.org>\\ User ID: **OpenWrt Build System** <pgpsign-snapshots@openwrt.org>\\
Line 50: Line 85:
 Fingerprint: ''%%6D92 78A3 3A9A B314 6262  DCEC F935 25A8 8B69 9029%%''\\ Fingerprint: ''%%6D92 78A3 3A9A B314 6262  DCEC F935 25A8 8B69 9029%%''\\
 [[https://git.openwrt.org/?p=keyring.git;a=history;f=gpg/626471F1.asc|Last change: 2019-07-24 18:05:02 +0200]] | [[https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/626471F1.asc|Download]] [[https://git.openwrt.org/?p=keyring.git;a=history;f=gpg/626471F1.asc|Last change: 2019-07-24 18:05:02 +0200]] | [[https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/626471F1.asc|Download]]
- 
---- 
  
 === 18.06 Signing Key === === 18.06 Signing Key ===
Line 203: Line 236:
   * Key-Data: ''%%RWQviwuY4IMGvwLfs6842A0m4EZU1IjczTxKMSk3BQP8DAQLHBwdQiaU%%''   * Key-Data: ''%%RWQviwuY4IMGvwLfs6842A0m4EZU1IjczTxKMSk3BQP8DAQLHBwdQiaU%%''
  
-[[https://git.openwrt.org/?p=keyring.git;a=history;f=usign/2f8b0b98e08306bf|Last change: 2021-02-20 15:04:56 +0100]] | [[https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=usign/2f8b0b98e08306bf|Download]]+[[https://git.openwrt.org/?p=keyring.git;a=history;f=usign/2f8b0b98e08306bf|Last change: 2021-02-20 14:04:56 +0100]] | [[https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=usign/2f8b0b98e08306bf|Download]] 
 + 
 +--- 
 + 
 +=== Public usign key for 22.03 release builds === 
 + 
 +  * Key-ID: ''%%4d017e6f1ed5d616%%'' 
 +  * Key-Data: ''%%RWRNAX5vHtXWFmt+n5di7XX8rTu0w+c8X7Ihv4oCyD6tzsUwmH0A6kO0%%'' 
 + 
 +[[https://git.openwrt.org/?p=keyring.git;a=history;f=usign/4d017e6f1ed5d616|Last change: 2022-03-25 12:59:44 +0100]] | [[https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=usign/4d017e6f1ed5d616|Download]]
  
 --- ---
  • Last modified: 2024/11/06 10:08
  • by ynezz