Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 23 Nov 2025 16:39:11 +0000
From:      Colin Percival <cperciva@FreeBSD.org>
To:        src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-branches@FreeBSD.org
Cc:        Gordon Tetlow <gordon@FreeBSD.org>
Subject:   git: fb9252e66734 - releng/15.0 - Add backup pkgbase signing key held by security-officer.
Message-ID:  <692338af.3624c.2a241b85@gitrepo.freebsd.org>

index | next in thread | raw e-mail

The branch releng/15.0 has been updated by cperciva:

URL: https://cgit.FreeBSD.org/src/commit/?id=fb9252e66734de75f5098e296c455d498d2aaced

commit fb9252e66734de75f5098e296c455d498d2aaced
Author:     Gordon Tetlow <gordon@FreeBSD.org>
AuthorDate: 2025-11-22 08:35:52 +0000
Commit:     Colin Percival <cperciva@FreeBSD.org>
CommitDate: 2025-11-23 16:38:52 +0000

    Add backup pkgbase signing key held by security-officer.
    
    This key was generated by gordon@ (aka security-officer@) on an offline
    system as a backup key should anything happen to the AWS Key
    Management Service that is currently in use for signing pkgbase
    repositories for FreeBSD 15.x.
    
    Approved by:    re (cperciva)
    Reviewed by:    cperciva
    With hat:       so
    
    (cherry picked from commit 12ec49d8fac2eacd40ad235bf73cc585736ee77a)
    (cherry picked from commit 696b0e2209ee81c5a0b27c327cf66eb3c9cfc584)
---
 share/keys/pkgbase-15/trusted/Makefile          | 3 ++-
 share/keys/pkgbase-15/trusted/backup-signing-15 | 2 ++
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/share/keys/pkgbase-15/trusted/Makefile b/share/keys/pkgbase-15/trusted/Makefile
index e6205999b12f..32db72ae368a 100644
--- a/share/keys/pkgbase-15/trusted/Makefile
+++ b/share/keys/pkgbase-15/trusted/Makefile
@@ -1,6 +1,7 @@
 PACKAGE=	pkg-bootstrap
 
-FILES=	awskms-15
+FILES=	awskms-15 \
+	backup-signing-15
 
 FILESDIR=	${SHAREDIR}/keys/pkgbase-15/trusted
 FILESMODE=	644
diff --git a/share/keys/pkgbase-15/trusted/backup-signing-15 b/share/keys/pkgbase-15/trusted/backup-signing-15
new file mode 100644
index 000000000000..a147d6788cf2
--- /dev/null
+++ b/share/keys/pkgbase-15/trusted/backup-signing-15
@@ -0,0 +1,2 @@
+function: "sha256"
+fingerprint: "56a77bdcb6c3cf7984729c6138bd5617c24aa0d466b3b604c96205b2c5629f3c"


help

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?692338af.3624c.2a241b85>