The ./usign folder is added to every OpenWrt image, it should only contain the most necessary keys. At this point it contains both a selection of personal developer keys and keys of EOL releases.
Remove them all and only keep the 21.02 key. A future commit should add a "next release" key, which is later renamed to the next release name (e.g. 21.08). This approach should allow secure upgrade between releases. Signed-off-by: Paul Spooren <m...@aparcar.org> --- This commit should be merged into a `openwrt-21.02` branch which is then selected by the 21.02 release. usign/0b26f36ae0f4106d | 2 -- usign/1035ac73cc4e59e3 | 2 -- usign/5151f69420c3f508 | 2 -- usign/72a57f2191b211e0 | 2 -- usign/792d9d9b39f180dc | 2 -- usign/9ef4694208102c43 | 2 -- usign/b2d571e0880ff617 | 2 -- usign/b5043e70f9a75cde | 2 -- usign/c10b9afab19ee428 | 2 -- usign/dace9d4df16896bf | 2 -- usign/dd6de0d06bbd3d85 | 2 -- usign/f94b9dd6febac963 | 2 -- 12 files changed, 24 deletions(-) delete mode 100644 usign/0b26f36ae0f4106d delete mode 100644 usign/1035ac73cc4e59e3 delete mode 100644 usign/5151f69420c3f508 delete mode 100644 usign/72a57f2191b211e0 delete mode 100644 usign/792d9d9b39f180dc delete mode 100644 usign/9ef4694208102c43 delete mode 100644 usign/b2d571e0880ff617 delete mode 100644 usign/b5043e70f9a75cde delete mode 100644 usign/c10b9afab19ee428 delete mode 100644 usign/dace9d4df16896bf delete mode 100644 usign/dd6de0d06bbd3d85 delete mode 100644 usign/f94b9dd6febac963 diff --git a/usign/0b26f36ae0f4106d b/usign/0b26f36ae0f4106d deleted file mode 100644 index a436c1f..0000000 --- a/usign/0b26f36ae0f4106d +++ /dev/null @@ -1,2 +0,0 @@ -untrusted comment: Public usign key of Stijn Tintel -RWQLJvNq4PQQbSGZ05Az9jXSt/xlw/IfWc6USiB2FHEUoWL7QpMibzv6 diff --git a/usign/1035ac73cc4e59e3 b/usign/1035ac73cc4e59e3 deleted file mode 100644 index 6ae478a..0000000 --- a/usign/1035ac73cc4e59e3 +++ /dev/null @@ -1,2 +0,0 @@ -untrusted comment: Public usign key for 18.06 release builds -RWQQNaxzzE5Z41cVmEh2rilAPKLsyfPKm+S4BJWA1Yv+LP1hKebmGtXi diff --git a/usign/5151f69420c3f508 b/usign/5151f69420c3f508 deleted file mode 100644 index 37de5ff..0000000 --- a/usign/5151f69420c3f508 +++ /dev/null @@ -1,2 +0,0 @@ -untrusted comment: Public usign key of Hans Dedecker -RWRRUfaUIMP1CAL9wvk3ABBHdUM+3SjMvIuJlK68b3b04Pw3wiaiAfxX diff --git a/usign/72a57f2191b211e0 b/usign/72a57f2191b211e0 deleted file mode 100644 index 367ece0..0000000 --- a/usign/72a57f2191b211e0 +++ /dev/null @@ -1,2 +0,0 @@ -untrusted comment: Public usign key of Jo-Philipp Wich -RWRypX8hkbIR4FLhtx5pjXcAIsI1iPUIcI5bMG8jZoiCkrwTstECBPqL diff --git a/usign/792d9d9b39f180dc b/usign/792d9d9b39f180dc deleted file mode 100644 index 089fbaf..0000000 --- a/usign/792d9d9b39f180dc +++ /dev/null @@ -1,2 +0,0 @@ -untrusted comment: Public usign key for 17.01 "Reboot" release builds -RWR5LZ2bOfGA3FGliZosEDhodiAKDOISmQs/mmjo4rhcbFtqkibJqMzo diff --git a/usign/9ef4694208102c43 b/usign/9ef4694208102c43 deleted file mode 100644 index 3757905..0000000 --- a/usign/9ef4694208102c43 +++ /dev/null @@ -1,2 +0,0 @@ -untrusted comment: Public usign key of Álvaro Fernández Rojas -RWSe9GlCCBAsQwI5+wztnWKHfBlvPFP2G00FvZyx+Wfv9AwSViUwo/s2 diff --git a/usign/b2d571e0880ff617 b/usign/b2d571e0880ff617 deleted file mode 100644 index 5bcd5f4..0000000 --- a/usign/b2d571e0880ff617 +++ /dev/null @@ -1,2 +0,0 @@ -untrusted comment: Public usign key of Hauke Mehrtens -RWSy1XHgiA/2F8nrQOTCa0aRCJzueqmDRzhxuwBJuC++Btb37yr7FKG0 diff --git a/usign/b5043e70f9a75cde b/usign/b5043e70f9a75cde deleted file mode 100644 index 82d7677..0000000 --- a/usign/b5043e70f9a75cde +++ /dev/null @@ -1,2 +0,0 @@ -untrusted comment: Public usign key for unattended snapshot builds -RWS1BD5w+adc3j2Hqg9+b66CvLR7NlHbsj7wjNVj0XGt/othDgIAOJS+ diff --git a/usign/c10b9afab19ee428 b/usign/c10b9afab19ee428 deleted file mode 100644 index 006b6c7..0000000 --- a/usign/c10b9afab19ee428 +++ /dev/null @@ -1,2 +0,0 @@ -untrusted comment: Public usign key of Alexander Couzens -RWTBC5r6sZ7kKA/C5VnxUbJw5E0vy3MGo3MP2eXCQlgg65+2si4MKBnf diff --git a/usign/dace9d4df16896bf b/usign/dace9d4df16896bf deleted file mode 100644 index f1fc0ea..0000000 --- a/usign/dace9d4df16896bf +++ /dev/null @@ -1,2 +0,0 @@ -untrusted comment: Public usign key of Ted Hess -RWTazp1N8WiWvy7rYxstJqaMzGiS4XfW1oyYrk2vwJMRBeBF+8xEA+EZ diff --git a/usign/dd6de0d06bbd3d85 b/usign/dd6de0d06bbd3d85 deleted file mode 100644 index a57a150..0000000 --- a/usign/dd6de0d06bbd3d85 +++ /dev/null @@ -1,2 +0,0 @@ -untrusted comment: Public usign key of John Crispin -RWTdbeDQa709heyMmwDZjWmlhcTCUv/q+3TBYDPdJAGRuys6xcxE09fp diff --git a/usign/f94b9dd6febac963 b/usign/f94b9dd6febac963 deleted file mode 100644 index 4c54114..0000000 --- a/usign/f94b9dd6febac963 +++ /dev/null @@ -1,2 +0,0 @@ -untrusted comment: Public usign key for 19.07 release builds -RWT5S53W/rrJY9BiIod3JF04AZ/eU1xDpVOb+rjZzAQBEcoETGx8BXEK -- 2.27.0 _______________________________________________ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel