I took the new sysupgrade for a spin on an old laptop running OpenBSD 6.7 The 6.7 sysupgrade has no idea how to get or test new signing keys. No problem, the current sysupgrade knows.
So, I grabbed the current sysupgrade script from cvsweb.openbsd.org to my laptop Then, I ran sysupgrade -s It automatically downloaded the new public keys as "sigbundle-67.tgz". Before putting the new keys it place, it verified the new signing keys against the 6.7 key. Then, it put the new bsd.upgrade and xxx76.tgz files in place. It grabbed the latest firmwares. It rebooted, it upgraded. Wow, that was easy.
