[PATCH keyring] usign: drop personal + outdated keys except 21.02

Paul Spooren mail at aparcar.org
Tue Mar 30 09:53:20 BST 2021


The ./usign folder is added to every OpenWrt image, it should only
contain the most necessary keys. At this point it contains both a
selection of personal developer keys and keys of EOL releases.

Remove them all and only keep the 21.02 key.

A future commit should add a "next release" key, which is later renamed
to the next release name (e.g. 21.08). This approach should allow secure
upgrade between releases.

Signed-off-by: Paul Spooren <mail at aparcar.org>
---
This commit should be merged into a `openwrt-21.02` branch which is then
selected by the 21.02 release.

 usign/0b26f36ae0f4106d | 2 --
 usign/1035ac73cc4e59e3 | 2 --
 usign/5151f69420c3f508 | 2 --
 usign/72a57f2191b211e0 | 2 --
 usign/792d9d9b39f180dc | 2 --
 usign/9ef4694208102c43 | 2 --
 usign/b2d571e0880ff617 | 2 --
 usign/b5043e70f9a75cde | 2 --
 usign/c10b9afab19ee428 | 2 --
 usign/dace9d4df16896bf | 2 --
 usign/dd6de0d06bbd3d85 | 2 --
 usign/f94b9dd6febac963 | 2 --
 12 files changed, 24 deletions(-)
 delete mode 100644 usign/0b26f36ae0f4106d
 delete mode 100644 usign/1035ac73cc4e59e3
 delete mode 100644 usign/5151f69420c3f508
 delete mode 100644 usign/72a57f2191b211e0
 delete mode 100644 usign/792d9d9b39f180dc
 delete mode 100644 usign/9ef4694208102c43
 delete mode 100644 usign/b2d571e0880ff617
 delete mode 100644 usign/b5043e70f9a75cde
 delete mode 100644 usign/c10b9afab19ee428
 delete mode 100644 usign/dace9d4df16896bf
 delete mode 100644 usign/dd6de0d06bbd3d85
 delete mode 100644 usign/f94b9dd6febac963

diff --git a/usign/0b26f36ae0f4106d b/usign/0b26f36ae0f4106d
deleted file mode 100644
index a436c1f..0000000
--- a/usign/0b26f36ae0f4106d
+++ /dev/null
@@ -1,2 +0,0 @@
-untrusted comment: Public usign key of Stijn Tintel
-RWQLJvNq4PQQbSGZ05Az9jXSt/xlw/IfWc6USiB2FHEUoWL7QpMibzv6
diff --git a/usign/1035ac73cc4e59e3 b/usign/1035ac73cc4e59e3
deleted file mode 100644
index 6ae478a..0000000
--- a/usign/1035ac73cc4e59e3
+++ /dev/null
@@ -1,2 +0,0 @@
-untrusted comment: Public usign key for 18.06 release builds
-RWQQNaxzzE5Z41cVmEh2rilAPKLsyfPKm+S4BJWA1Yv+LP1hKebmGtXi
diff --git a/usign/5151f69420c3f508 b/usign/5151f69420c3f508
deleted file mode 100644
index 37de5ff..0000000
--- a/usign/5151f69420c3f508
+++ /dev/null
@@ -1,2 +0,0 @@
-untrusted comment: Public usign key of Hans Dedecker
-RWRRUfaUIMP1CAL9wvk3ABBHdUM+3SjMvIuJlK68b3b04Pw3wiaiAfxX
diff --git a/usign/72a57f2191b211e0 b/usign/72a57f2191b211e0
deleted file mode 100644
index 367ece0..0000000
--- a/usign/72a57f2191b211e0
+++ /dev/null
@@ -1,2 +0,0 @@
-untrusted comment: Public usign key of Jo-Philipp Wich
-RWRypX8hkbIR4FLhtx5pjXcAIsI1iPUIcI5bMG8jZoiCkrwTstECBPqL
diff --git a/usign/792d9d9b39f180dc b/usign/792d9d9b39f180dc
deleted file mode 100644
index 089fbaf..0000000
--- a/usign/792d9d9b39f180dc
+++ /dev/null
@@ -1,2 +0,0 @@
-untrusted comment: Public usign key for 17.01 "Reboot" release builds
-RWR5LZ2bOfGA3FGliZosEDhodiAKDOISmQs/mmjo4rhcbFtqkibJqMzo
diff --git a/usign/9ef4694208102c43 b/usign/9ef4694208102c43
deleted file mode 100644
index 3757905..0000000
--- a/usign/9ef4694208102c43
+++ /dev/null
@@ -1,2 +0,0 @@
-untrusted comment: Public usign key of Álvaro Fernández Rojas
-RWSe9GlCCBAsQwI5+wztnWKHfBlvPFP2G00FvZyx+Wfv9AwSViUwo/s2
diff --git a/usign/b2d571e0880ff617 b/usign/b2d571e0880ff617
deleted file mode 100644
index 5bcd5f4..0000000
--- a/usign/b2d571e0880ff617
+++ /dev/null
@@ -1,2 +0,0 @@
-untrusted comment: Public usign key of Hauke Mehrtens
-RWSy1XHgiA/2F8nrQOTCa0aRCJzueqmDRzhxuwBJuC++Btb37yr7FKG0
diff --git a/usign/b5043e70f9a75cde b/usign/b5043e70f9a75cde
deleted file mode 100644
index 82d7677..0000000
--- a/usign/b5043e70f9a75cde
+++ /dev/null
@@ -1,2 +0,0 @@
-untrusted comment: Public usign key for unattended snapshot builds
-RWS1BD5w+adc3j2Hqg9+b66CvLR7NlHbsj7wjNVj0XGt/othDgIAOJS+
diff --git a/usign/c10b9afab19ee428 b/usign/c10b9afab19ee428
deleted file mode 100644
index 006b6c7..0000000
--- a/usign/c10b9afab19ee428
+++ /dev/null
@@ -1,2 +0,0 @@
-untrusted comment: Public usign key of Alexander Couzens
-RWTBC5r6sZ7kKA/C5VnxUbJw5E0vy3MGo3MP2eXCQlgg65+2si4MKBnf
diff --git a/usign/dace9d4df16896bf b/usign/dace9d4df16896bf
deleted file mode 100644
index f1fc0ea..0000000
--- a/usign/dace9d4df16896bf
+++ /dev/null
@@ -1,2 +0,0 @@
-untrusted comment: Public usign key of Ted Hess
-RWTazp1N8WiWvy7rYxstJqaMzGiS4XfW1oyYrk2vwJMRBeBF+8xEA+EZ
diff --git a/usign/dd6de0d06bbd3d85 b/usign/dd6de0d06bbd3d85
deleted file mode 100644
index a57a150..0000000
--- a/usign/dd6de0d06bbd3d85
+++ /dev/null
@@ -1,2 +0,0 @@
-untrusted comment: Public usign key of John Crispin
-RWTdbeDQa709heyMmwDZjWmlhcTCUv/q+3TBYDPdJAGRuys6xcxE09fp
diff --git a/usign/f94b9dd6febac963 b/usign/f94b9dd6febac963
deleted file mode 100644
index 4c54114..0000000
--- a/usign/f94b9dd6febac963
+++ /dev/null
@@ -1,2 +0,0 @@
-untrusted comment: Public usign key for 19.07 release builds
-RWT5S53W/rrJY9BiIod3JF04AZ/eU1xDpVOb+rjZzAQBEcoETGx8BXEK
-- 
2.27.0




More information about the openwrt-devel mailing list