[PATCH keyring] usign: drop personal + outdated keys except 21.02
Hauke Mehrtens
hauke at hauke-m.de
Tue Mar 30 19:53:39 BST 2021
On 3/30/21 10:53 AM, Paul Spooren wrote:
> The ./usign folder is added to every OpenWrt image, it should only
> contain the most necessary keys. At this point it contains both a
> selection of personal developer keys and keys of EOL releases.
>
> Remove them all and only keep the 21.02 key.
>
> A future commit should add a "next release" key, which is later renamed
> to the next release name (e.g. 21.08). This approach should allow secure
> upgrade between releases.
>
> Signed-off-by: Paul Spooren <mail at aparcar.org>
Acked-by: Hauke Mehrtens <hauke at hauke-m.de>
> ---
> This commit should be merged into a `openwrt-21.02` branch which is then
> selected by the 21.02 release.
I would like to remove the personal keys also from master and 19.07.
Hauke
More information about the openwrt-devel
mailing list