keyring.git
6 weeks agousign: add OpenWrt 24.10 release build public key master
Petr Štetiar [Fri, 1 Nov 2024 06:21:13 +0000 (06:21 +0000)]
usign: add OpenWrt 24.10 release build public key

Signed-off-by: Petr Štetiar <ynezz@true.cz>
2 months agoAdd apk Elliptic Curve public key for signing of package indexes
Petr Štetiar [Sat, 28 Sep 2024 12:47:26 +0000 (12:47 +0000)]
Add apk Elliptic Curve public key for signing of package indexes

apk/openwrt-snapshots.pem contains Elliptic Curve based public key which
is going to be used for signing of apk's package.adb package indexes
after the builds using `apk adbsign --sign-key <key> packages.adb`
command.

apk/openwrt-snapshots.pem.gpg is detached GPG signature produced using
following key from Nitrokey 3A Mini dongle:

 pub   ed25519/0x1D53D1877742E911 2023-05-18 [C] [expires: 2033-05-15]
       Key fingerprint = 8A8B C12F 46B8 36C0 F9CD  B36F 1D53 D187 7742 E911
 uid                   [ultimate] OpenWrt Build System (Nitrokey3) <contact@openwrt.org>
 sig 3        0x1D53D1877742E911 2023-05-18  OpenWrt Build System (Nitrokey3) <contact@openwrt.org>
 sig          0xCD84BCED626471F1 2023-05-18  OpenWrt Build System (PGP key for unattended snapshot builds) <pgpsign-snapshots@openwrt.org>
 sig          0xCD54E82DADB3684D 2023-05-18  OpenWrt Build System (GnuPGP key for 22.03 release builds) <pgpsign-22.03@openwrt.org>
 sig          0x88CA59E88F681580 2023-05-18  OpenWrt Build System (PGP key for 21.02 release builds) <pgpsign-21.02@openwrt.org>
 sub   ed25519/0x2B0151090606D1D9 2023-05-18 [S] [expires: 2033-05-15]
       Key fingerprint = 92C5 61DE 55AE 6552 F3C7  36B8 2B01 5109 0606 D1D9
 sig          0x1D53D1877742E911 2023-05-18  OpenWrt Build System (Nitrokey3) <contact@openwrt.org>

References: 6b42a5c8b7dc ("Add new build system signing key stored on Nitrokey 3A Mini dongle")
Signed-off-by: Petr Štetiar <ynezz@true.cz>
8 months agogpg: add my public key
Petr Štetiar [Sat, 13 Apr 2024 06:40:49 +0000 (06:40 +0000)]
gpg: add my public key

Synced with https://github.com/ynezz.gpg and https://gitlab.com/ynezz.gpg

Signed-off-by: Petr Štetiar <ynezz@true.cz>
19 months agoAdd new build system signing key stored on Nitrokey 3A Mini dongle
Petr Štetiar [Thu, 18 May 2023 14:01:25 +0000 (16:01 +0200)]
Add new build system signing key stored on Nitrokey 3A Mini dongle

This key is available only from Nitrokey 3A Mini (nk3) USB security key.

Only 3 such identical nk3 dongles were provisioned[1], one nk3 dongle is
going to be attached to the new buildbot master server, remaining two
nk3 dongles are going to be kept as a backup (ynezz, jow). GnuPG
master/secret keys are not available, only revocation certificate was
generated, just in case.

This new signing key 0x1D53D1877742E911 available only from those three
nk3 dongles was cross signed with 3 previous signing keys (snapshot,
21.02, 22.03):

 pub   ed25519/0x1D53D1877742E911 2023-05-18 [C] [expires: 2033-05-15]
       Key fingerprint = 8A8B C12F 46B8 36C0 F9CD  B36F 1D53 D187 7742 E911
 uid                   [ultimate] OpenWrt Build System (Nitrokey3) <contact@openwrt.org>
 sig 3        0x1D53D1877742E911 2023-05-18  OpenWrt Build System (Nitrokey3) <contact@openwrt.org>
 sig          0xCD84BCED626471F1 2023-05-18  OpenWrt Build System (PGP key for unattended snapshot builds) <pgpsign-snapshots@openwrt.org>
 sig          0xCD54E82DADB3684D 2023-05-18  OpenWrt Build System (GnuPGP key for 22.03 release builds) <pgpsign-22.03@openwrt.org>
 sig          0x88CA59E88F681580 2023-05-18  OpenWrt Build System (PGP key for 21.02 release builds) <pgpsign-21.02@openwrt.org>
 sub   ed25519/0x2B0151090606D1D9 2023-05-18 [S] [expires: 2033-05-15]
       Key fingerprint = 92C5 61DE 55AE 6552 F3C7  36B8 2B01 5109 0606 D1D9
 sig          0x1D53D1877742E911 2023-05-18  OpenWrt Build System (Nitrokey3) <contact@openwrt.org>

nk3 dongle PIN is going to be available to all build infrastructure
admins (needed after server restarts), admin PIN, reset PIN and
revocation certificate to folks having backup key dongles (ynezz, jow).

Signed-off-by: Petr Štetiar <ynezz@true.cz>
20 months agogpg: add Daniel's public key
Daniel Golle [Sun, 9 Apr 2023 22:07:55 +0000 (23:07 +0100)]
gpg: add Daniel's public key

Add my PGP public key. It's a 4096 bit key which is stored on a OpenPGP
2.0 smartcard. It may be replaced once I get my NitroKey 3 mini working
with GnuPG because the OpenPGP smartcard is annoyingly slow...

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
20 months agogpg: update 22.03 signing key
Jo-Philipp Wich [Tue, 4 Apr 2023 10:32:39 +0000 (12:32 +0200)]
gpg: update 22.03 signing key

Extend the key validity by another year.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
20 months agogpg: update 21.02 signing key
Jo-Philipp Wich [Tue, 4 Apr 2023 10:32:24 +0000 (12:32 +0200)]
gpg: update 21.02 signing key

Extend the key validity by another year.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2 years agousign: add 22.03 release build public key
Petr Štetiar [Fri, 25 Mar 2022 12:59:44 +0000 (13:59 +0100)]
usign: add 22.03 release build public key

Signed-off-by: Petr Štetiar <ynezz@true.cz>
2 years agogpg: add OpenWrt 22.03 signing key
Petr Štetiar [Fri, 25 Mar 2022 12:55:57 +0000 (13:55 +0100)]
gpg: add OpenWrt 22.03 signing key

 pub   rsa4096 2022-03-25 [SCEA] [expires: 2024-03-24]
       BF856781A01293C8409ABE72CD54E82DADB3684D
 uid           [ultimate] OpenWrt Build System (GnuPGP key for 22.03 release builds) <pgpsign-22.03@openwrt.org>
 sub   rsa4096 2022-03-25 [SEA] [expires: 2024-03-24]

Signed-off-by: Petr Štetiar <ynezz@true.cz>
3 years agogpg: update OpwnWrt 19.07 signing key
Jo-Philipp Wich [Mon, 9 Aug 2021 21:30:39 +0000 (23:30 +0200)]
gpg: update OpwnWrt 19.07 signing key

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
3 years agousign: add 21.02 release build pubkey openwrt-21.02
Petr Štetiar [Sat, 20 Feb 2021 14:04:56 +0000 (15:04 +0100)]
usign: add 21.02 release build pubkey

Signed-off-by: Petr Štetiar <ynezz@true.cz>
3 years agogpg: add OpenWrt 21.02 signing key
Petr Štetiar [Sat, 20 Feb 2021 13:56:58 +0000 (14:56 +0100)]
gpg: add OpenWrt 21.02 signing key

Signed-off-by: Petr Štetiar <ynezz@true.cz>
5 years agousign: add 19.07 release build pubkey
Jo-Philipp Wich [Thu, 25 Jul 2019 17:32:16 +0000 (19:32 +0200)]
usign: add 19.07 release build pubkey

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
5 years agousign: use distro agnostic comments
Jo-Philipp Wich [Thu, 25 Jul 2019 17:16:14 +0000 (19:16 +0200)]
usign: use distro agnostic comments

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
5 years agousign: fix filename of Stijn's usign key
Jo-Philipp Wich [Wed, 24 Jul 2019 19:36:42 +0000 (21:36 +0200)]
usign: fix filename of Stijn's usign key

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
5 years agogpg: update snapshots public signing key
Jo-Philipp Wich [Wed, 24 Jul 2019 18:05:02 +0000 (20:05 +0200)]
gpg: update snapshots public signing key

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
5 years agogpg: replace my public GPG key
Jo-Philipp Wich [Wed, 24 Jul 2019 17:42:06 +0000 (19:42 +0200)]
gpg: replace my public GPG key

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
5 years agogpg: add OpenWrt 19.07 signing key
Jo-Philipp Wich [Wed, 24 Jul 2019 16:50:20 +0000 (18:50 +0200)]
gpg: add OpenWrt 19.07 signing key

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
5 years agogpg: add OpenWrt 18.06 v2 signing key
Jo-Philipp Wich [Wed, 24 Jul 2019 07:18:29 +0000 (09:18 +0200)]
gpg: add OpenWrt 18.06 v2 signing key

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
5 years agogpg: update LEDE 17.01 public signing key
Jo-Philipp Wich [Wed, 24 Jul 2019 07:15:01 +0000 (09:15 +0200)]
gpg: update LEDE 17.01 public signing key

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
6 years agoAdd my public GPG and usign key
Hauke Mehrtens [Sun, 15 Jul 2018 17:25:50 +0000 (19:25 +0200)]
Add my public GPG and usign key

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
6 years agoAdd public GPG key used by the 18.06 release builds
Jo-Philipp Wich [Fri, 18 May 2018 07:48:41 +0000 (09:48 +0200)]
Add public GPG key used by the 18.06 release builds

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
6 years agoAdd public usign key used for the 18.06 release builds
Jo-Philipp Wich [Fri, 18 May 2018 07:41:21 +0000 (09:41 +0200)]
Add public usign key used for the 18.06 release builds

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
7 years agoAdd my public usign key
Stijn Tintel [Tue, 3 Oct 2017 11:46:46 +0000 (14:46 +0300)]
Add my public usign key

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
7 years agoAdd my public GPG key
Stijn Tintel [Tue, 3 Oct 2017 11:43:33 +0000 (14:43 +0300)]
Add my public GPG key

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
7 years agoAdd my public key for gpg and usign
Alexander Couzens [Fri, 9 Jun 2017 10:06:11 +0000 (12:06 +0200)]
Add my public key for gpg and usign

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
7 years agoAdd public GPG key used by the 17.01 release builds
Jo-Philipp Wich [Fri, 20 Jan 2017 09:06:22 +0000 (10:06 +0100)]
Add public GPG key used by the 17.01 release builds

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
7 years agoAdd public usign key used by the 17.01 release builds
Jo-Philipp Wich [Fri, 20 Jan 2017 08:59:11 +0000 (09:59 +0100)]
Add public usign key used by the 17.01 release builds

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
7 years agoAdd my public GPG key
Florian Fainelli [Sun, 15 Jan 2017 04:17:20 +0000 (20:17 -0800)]
Add my public GPG key

Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
8 years agoAdd my public usign key
Hans Dedecker [Wed, 7 Dec 2016 20:35:29 +0000 (21:35 +0100)]
Add my public usign key

8 years agoAdd my public key
Hans Dedecker [Wed, 7 Dec 2016 20:27:23 +0000 (21:27 +0100)]
Add my public key

8 years agoAdd unattended GnuPG build key
Jo-Philipp Wich [Tue, 26 Jul 2016 13:54:36 +0000 (15:54 +0200)]
Add unattended GnuPG build key

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
8 years agoAdd unattended usign build key
Jo-Philipp Wich [Sat, 30 Apr 2016 16:58:47 +0000 (18:58 +0200)]
Add unattended usign build key

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
8 years agoAdd my public usign key
Ted Hess [Tue, 26 Apr 2016 18:22:18 +0000 (14:22 -0400)]
Add my public usign key

Signed-off-by: Ted Hess <thess@kitschensync.net>
8 years agoAdd my public gpg key
Ted Hess [Tue, 26 Apr 2016 18:18:19 +0000 (14:18 -0400)]
Add my public gpg key

Signed-off-by: Ted Hess <thess@kitschensync.net>
8 years agoMove my public key to the correct directory
Álvaro Fernández Rojas [Sat, 16 Apr 2016 09:59:03 +0000 (11:59 +0200)]
Move my public key to the correct directory

I imported it to the wrong directory :/

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
8 years agoAdd my public usign key
Álvaro Fernández Rojas [Sat, 16 Apr 2016 09:58:31 +0000 (11:58 +0200)]
Add my public usign key

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
8 years agoAdd my public key
Álvaro Fernández Rojas [Sat, 16 Apr 2016 09:54:11 +0000 (11:54 +0200)]
Add my public key

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
8 years agoAdd my public usign key
John Crispin [Thu, 14 Apr 2016 12:43:59 +0000 (14:43 +0200)]
Add my public usign key

Signed-off-by: John Crispin <john@phrozen.org>
8 years agoAdd my public key
John Crispin [Thu, 14 Apr 2016 12:40:51 +0000 (14:40 +0200)]
Add my public key

Signed-off-by: John Crispin <john@phrozen.org>
8 years agoAdd my public usign key
Jo-Philipp Wich [Tue, 5 Apr 2016 17:18:02 +0000 (19:18 +0200)]
Add my public usign key

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
8 years agoAdd my public key
Jo-Philipp Wich [Tue, 5 Apr 2016 17:03:17 +0000 (19:03 +0200)]
Add my public key

Signed-off-by: Jo-Philipp Wich <jo@mein.io>