[PATCH keyring] usign: drop personal + outdated keys except 21.02

Hauke Mehrtens hauke at hauke-m.de
Tue Mar 30 19:53:39 BST 2021


On 3/30/21 10:53 AM, Paul Spooren wrote:
> The ./usign folder is added to every OpenWrt image, it should only
> contain the most necessary keys. At this point it contains both a
> selection of personal developer keys and keys of EOL releases.
> 
> Remove them all and only keep the 21.02 key.
> 
> A future commit should add a "next release" key, which is later renamed
> to the next release name (e.g. 21.08). This approach should allow secure
> upgrade between releases.
> 
> Signed-off-by: Paul Spooren <mail at aparcar.org>

Acked-by: Hauke Mehrtens <hauke at hauke-m.de>

> ---
> This commit should be merged into a `openwrt-21.02` branch which is then
> selected by the 21.02 release.

I would like to remove the personal keys also from master and 19.07.

Hauke



More information about the openwrt-devel mailing list