On 2024-02-18, Theo de Raadt <dera...@openbsd.org> wrote:
> Kirill A. Korinsky <kir...@korins.ky> wrote:
>
>> On Sat, 17 Feb 2024 22:27:52 +0100,
>> Sonic wrote:
>> > 
>> > Seems it's looking for a 7.5 directory (-current apparently just moved
>> > to 7.5-beta) instead of the snapshot directory.
>> > 
>> 
>> And using snapshot directory fails because wrong signature:
>> 
>>   ~ $ doas fw_update -p http://firmware.openbsd.org/firmware/snapshots 
>>   fw_update: failed.
>>   signify: verification failed: checked against wrong key
>>   Signature check of SHA256.sig failed
>>   ~ $ 
>
> The heuristic in fw_update is weak.  Every 6 months there is a chance
> for someone to dig in and see if there is a better heuristic.

It's not too bad as long as the person building firmware tgz gets a
heads-up before the version number is updated.


Reply via email to