keyring, branch master

apk: add OpenWrt 25.12 release build public key

2025-12-10T20:18:45Z

Add apk Elliptic Curve public key for signing of package indexes for upcoming OpenWrt 25.12 release. apk/openwrt-25.12.pem.gpg is detached GPG signature produced using following key from Nitrokey 3A Mini dongle: pub ed25519/0x1D53D1877742E911 2023-05-18 [C] [expires: 2033-05-15] Key fingerprint = 8A8B C12F 46B8 36C0 F9CD B36F 1D53 D187 7742 E911 uid [ultimate] OpenWrt Build System (Nitrokey3) sig 3 0x1D53D1877742E911 2023-05-18 OpenWrt Build System (Nitrokey3) sig 0xCD84BCED626471F1 2023-05-18 OpenWrt Build System (PGP key for unattended snapshot builds) sig 0xCD54E82DADB3684D 2023-05-18 OpenWrt Build System (GnuPGP key for 22.03 release builds) sig 0x88CA59E88F681580 2023-05-18 OpenWrt Build System (PGP key for 21.02 release builds) sub ed25519/0x2B0151090606D1D9 2023-05-18 [S] [expires: 2033-05-15] Key fingerprint = 92C5 61DE 55AE 6552 F3C7 36B8 2B01 5109 0606 D1D9 sig 0x1D53D1877742E911 2023-05-18 OpenWrt Build System (Nitrokey3) Signed-off-by: Petr Štetiar

usign: add OpenWrt 24.10 release build public key

2024-11-01T06:21:13Z

Signed-off-by: Petr Štetiar

Add apk Elliptic Curve public key for signing of package indexes

2024-09-28T13:01:24Z

apk/openwrt-snapshots.pem contains Elliptic Curve based public key which is going to be used for signing of apk's package.adb package indexes after the builds using `apk adbsign --sign-key packages.adb` command. apk/openwrt-snapshots.pem.gpg is detached GPG signature produced using following key from Nitrokey 3A Mini dongle: pub ed25519/0x1D53D1877742E911 2023-05-18 [C] [expires: 2033-05-15] Key fingerprint = 8A8B C12F 46B8 36C0 F9CD B36F 1D53 D187 7742 E911 uid [ultimate] OpenWrt Build System (Nitrokey3) sig 3 0x1D53D1877742E911 2023-05-18 OpenWrt Build System (Nitrokey3) sig 0xCD84BCED626471F1 2023-05-18 OpenWrt Build System (PGP key for unattended snapshot builds) sig 0xCD54E82DADB3684D 2023-05-18 OpenWrt Build System (GnuPGP key for 22.03 release builds) sig 0x88CA59E88F681580 2023-05-18 OpenWrt Build System (PGP key for 21.02 release builds) sub ed25519/0x2B0151090606D1D9 2023-05-18 [S] [expires: 2033-05-15] Key fingerprint = 92C5 61DE 55AE 6552 F3C7 36B8 2B01 5109 0606 D1D9 sig 0x1D53D1877742E911 2023-05-18 OpenWrt Build System (Nitrokey3) References: 6b42a5c8b7dc ("Add new build system signing key stored on Nitrokey 3A Mini dongle") Signed-off-by: Petr Štetiar

gpg: add my public key

2024-04-13T06:40:49Z

Synced with https://github.com/ynezz.gpg and https://gitlab.com/ynezz.gpg Signed-off-by: Petr Štetiar

Add new build system signing key stored on Nitrokey 3A Mini dongle

2023-05-18T14:01:25Z

This key is available only from Nitrokey 3A Mini (nk3) USB security key. Only 3 such identical nk3 dongles were provisioned[1], one nk3 dongle is going to be attached to the new buildbot master server, remaining two nk3 dongles are going to be kept as a backup (ynezz, jow). GnuPG master/secret keys are not available, only revocation certificate was generated, just in case. This new signing key 0x1D53D1877742E911 available only from those three nk3 dongles was cross signed with 3 previous signing keys (snapshot, 21.02, 22.03): pub ed25519/0x1D53D1877742E911 2023-05-18 [C] [expires: 2033-05-15] Key fingerprint = 8A8B C12F 46B8 36C0 F9CD B36F 1D53 D187 7742 E911 uid [ultimate] OpenWrt Build System (Nitrokey3) sig 3 0x1D53D1877742E911 2023-05-18 OpenWrt Build System (Nitrokey3) sig 0xCD84BCED626471F1 2023-05-18 OpenWrt Build System (PGP key for unattended snapshot builds) sig 0xCD54E82DADB3684D 2023-05-18 OpenWrt Build System (GnuPGP key for 22.03 release builds) sig 0x88CA59E88F681580 2023-05-18 OpenWrt Build System (PGP key for 21.02 release builds) sub ed25519/0x2B0151090606D1D9 2023-05-18 [S] [expires: 2033-05-15] Key fingerprint = 92C5 61DE 55AE 6552 F3C7 36B8 2B01 5109 0606 D1D9 sig 0x1D53D1877742E911 2023-05-18 OpenWrt Build System (Nitrokey3) nk3 dongle PIN is going to be available to all build infrastructure admins (needed after server restarts), admin PIN, reset PIN and revocation certificate to folks having backup key dongles (ynezz, jow). Signed-off-by: Petr Štetiar

gpg: add Daniel's public key

2023-04-09T22:10:15Z

Add my PGP public key. It's a 4096 bit key which is stored on a OpenPGP 2.0 smartcard. It may be replaced once I get my NitroKey 3 mini working with GnuPG because the OpenPGP smartcard is annoyingly slow... Signed-off-by: Daniel Golle

gpg: update 22.03 signing key

2023-04-04T10:33:03Z

Extend the key validity by another year. Signed-off-by: Jo-Philipp Wich

gpg: update 21.02 signing key

2023-04-04T10:32:24Z

Extend the key validity by another year. Signed-off-by: Jo-Philipp Wich

usign: add 22.03 release build public key

2022-03-25T12:59:44Z

Signed-off-by: Petr Štetiar

gpg: add OpenWrt 22.03 signing key

2022-03-25T12:55:57Z

pub rsa4096 2022-03-25 [SCEA] [expires: 2024-03-24] BF856781A01293C8409ABE72CD54E82DADB3684D uid [ultimate] OpenWrt Build System (GnuPGP key for 22.03 release builds) sub rsa4096 2022-03-25 [SEA] [expires: 2024-03-24] Signed-off-by: Petr Štetiar