On 2024-02-18, Theo de Raadt <dera...@openbsd.org> wrote: > Kirill A. Korinsky <kir...@korins.ky> wrote: > >> On Sat, 17 Feb 2024 22:27:52 +0100, >> Sonic wrote: >> > >> > Seems it's looking for a 7.5 directory (-current apparently just moved >> > to 7.5-beta) instead of the snapshot directory. >> > >> >> And using snapshot directory fails because wrong signature: >> >> ~ $ doas fw_update -p http://firmware.openbsd.org/firmware/snapshots >> fw_update: failed. >> signify: verification failed: checked against wrong key >> Signature check of SHA256.sig failed >> ~ $ > > The heuristic in fw_update is weak. Every 6 months there is a chance > for someone to dig in and see if there is a better heuristic.
It's not too bad as long as the person building firmware tgz gets a heads-up before the version number is updated.