From owner-freebsd-questions@freebsd.org Fri Dec 30 06:56:22 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 8267FC973EC for ; Fri, 30 Dec 2016 06:56:22 +0000 (UTC) (envelope-from felixphew0@gmail.com) Received: from mail-pg0-x22e.google.com (mail-pg0-x22e.google.com [IPv6:2607:f8b0:400e:c05::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 587D91FCD for ; Fri, 30 Dec 2016 06:56:22 +0000 (UTC) (envelope-from felixphew0@gmail.com) Received: by mail-pg0-x22e.google.com with SMTP id g1so135425889pgn.0 for ; Thu, 29 Dec 2016 22:56:22 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:mime-version:subject:message-id:references:to:date; bh=/GTH3KH0FLYqit/ram9lU7JzZPe91v3o7juZKx2WD6I=; b=jKVMzRPS/cNrti2uiqpdtem/EZxCE/rbZuXwdZePirUY0bz+BWvmZqGy5ftMGmkL3V cvT07HDDJQuvOKkVisgrz6ipBjwLg4vg0EQ2HEumG/pl+XSt5ZigrsyI58h8usvGi9qn UZji41hroAaelA/asBFG1glTzRG25YvVDqh08FR6D3igAIAsybf7WWvzHEzvKtDmg7Fx Zmhn7TriOOgBGDzoazF4QSg6hRuPfkJ/u7cOky9OCMmZpNQoAO01wxFKb4o95IYRXMb8 gc81Cn2mUNftO4dxp9PWXlUIPBPC6ohBByQk9lxeIFCRvfSyQarPo3ljQ8/oy49ah0kj 0LPw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:mime-version:subject:message-id:references :to:date; bh=/GTH3KH0FLYqit/ram9lU7JzZPe91v3o7juZKx2WD6I=; b=Emtbkw6xF5EExJ783FAat8vKtd10VdOuAyV1CDy23MTVFSP5+L9v+LRzplxGsfnON/ KTBMg/AjfagTXQkeWMAyPYZu7CxHUj4Wqmj0+QCCdrODwkj1bjAu1FGEB/Xu74/ZKxNa Q49pJUNVrRUHKYY1cjE9WPJaEUQ7PMIccEEkcqjriNomy2SqU0D+X4Ry6v2HEiHawvDm 5XGyncEteV95HFXDi63DmDsrrCD5CDaEbSvGIOPODdZrlCrPK2jakR8gJ4xRkvtH5Lba Dq75XAFAHtH9P2mpwGApZYUAikIhq3v30ssdrMASJcyUOt1Hi+7qH7UVe7tpD3H8htS2 iwSg== X-Gm-Message-State: AIkVDXKAk6vvAotxO9558/0iLf/AvQ2OpXrsMPSgxCPMS+l9TKFMrOloleB4grYRH0sinw== X-Received: by 10.99.55.13 with SMTP id e13mr25362059pga.71.1483080981730; Thu, 29 Dec 2016 22:56:21 -0800 (PST) Received: from [192.168.0.32] (c49-177-162-140.frank4.vic.optusnet.com.au. [49.177.162.140]) by smtp.gmail.com with ESMTPSA id u78sm109436582pfa.53.2016.12.29.22.56.19 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 29 Dec 2016 22:56:21 -0800 (PST) From: Felix Friedlander Content-Type: multipart/signed; boundary="Apple-Mail=_864C4B29-4302-4909-9A9D-1D046A79370E"; protocol="application/pkcs7-signature"; micalg=sha1 Mime-Version: 1.0 (Mac OS X Mail 10.2 \(3259\)) Subject: Fwd: Signatures Message-Id: <6EF4ACC2-DD83-4970-9346-12600DFF2362@gmail.com> References: <995C6DE9-DAAF-47DD-BFF4-9FAC1A917BAA@gmail.com> To: freebsd-questions@freebsd.org Date: Fri, 30 Dec 2016 17:56:15 +1100 X-Mailer: Apple Mail (2.3259) X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Dec 2016 06:56:22 -0000 --Apple-Mail=_864C4B29-4302-4909-9A9D-1D046A79370E Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Re-including the list. > Begin forwarded message: >=20 > From: Felix Friedlander > Subject: Re: Signatures > Date: 30 December 2016 at 5:55:06 pm AEDT > To: Specter >=20 >=20 >> On 30 Dec 2016, at 5:46 pm, Specter = wrote: >>=20 >> Felix, >>=20 >> Thank you for your response all though that comes as quite a = surprise. I've had the impression that BSD is for the security conscious = yet you do not sign your ISO's. I'm a Linux user at the moment and just = about every Linux developer out there signs their ISO's. I just can't = imagine that's the case.=20 >>=20 >> Are you absolutely sure? I have actually found that key before but as = you said, that is not a signing key for the ISO's which is what I need. = I refuse to use anything that has not been properly signed. I am very = security conscious. >>=20 >> Thanks, >> Spectral >>=20 >>=20 >>> -------- Original Message -------- >>> Subject: Re: Signatures >>> Local Time: 29 December 2016 10:40 PM >>> UTC Time: 30 December 2016 06:40 >>> From: felixphew0@gmail.com >>> To: Specter >>> freebsd-questions@freebsd.org >>>=20 >>>> On 30 Dec 2016, at 5:27 pm, Specter via freebsd-questions = wrote: >>>>=20 >>>> Hello, I was wondering where you've posted your public signing = keys? I have not been able to find them anywhere. And where can I find = the signature files for your ISO's? >>>>=20 >>>> Thanks, >>>> Spectral >>>=20 >>> To the best of my knowledge, FreeBSD ISO images are not signed. You = can verify their integrity (to a degree) using the checksums (example: = http://ftp.freebsd.org/pub/FreeBSD/releases/amd64/amd64/ISO-IMAGES/11.0/CH= ECKSUM.SHA256-FreeBSD-11.0-RELEASE-amd64 ). >>>=20 >>> The only =E2=80=9Cofficial=E2=80=9D PGP key for the project (as far = as I=E2=80=99m aware) belongs to the security officer, and is used for = signing security advisories. You can find the key at = https://www.freebsd.org/security/so_public_key.asc and the advisories at = https://www.freebsd.org/security/advisories.html. >>>=20 >>> Feel free to correct me, anyone, if this is out-of-date or = incorrect. >>>=20 >>> --=20 >>> Felix Friedlander >>>=20 >>=20 >=20 > Hi, >=20 > As I suspected my information was quite out-of-date. >=20 > Signed checksums for each release can be found on the website, near = the release announcements, notes, and errata. For example: = https://www.freebsd.org/releases/11.0R/signatures.html contains all the = relevant signatures for FreeBSD 11.0-RELEASE. >=20 > I=E2=80=99m not entirely sure which key these are signed with, but it = should be one of the keys found at = https://www.freebsd.org/doc/en/articles/pgpkeys/ (downloadable as one = file at https://www.freebsd.org/doc/pgpkeyring.txt if you need to = automate this or something). >=20 > --=20 > Felix Friedlander >=20 --=20 Felix Friedlander --Apple-Mail=_864C4B29-4302-4909-9A9D-1D046A79370E Content-Disposition: attachment; filename=smime.p7s Content-Type: application/pkcs7-signature; name=smime.p7s Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIKXzCCBHUw ggNdoAMCAQICEE2xfWfYnPapZH3gLyfQszMwDQYJKoZIhvcNAQELBQAwdTELMAkGA1UEBhMCSUwx FjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24g QXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBDQTAeFw0xNjEyMDQw NjMxNTdaFw0yMDAzMDQwNjMxNTdaMEQxHTAbBgNVBAMMFGZlbGl4cGhldzBAZ21haWwuY29tMSMw IQYJKoZIhvcNAQkBFhRmZWxpeHBoZXcwQGdtYWlsLmNvbTCBmzAQBgcqhkjOPQIBBgUrgQQAIwOB hgAEAMhtbJIxT3FRyNbUxMoZr1FNXVYcnE5+UrfEvw+XE6hQBMPUHbkKNTO60Os04VhNYyMnEtYn +YRe7cI2dh+yOcGfACpKCQ/nonLkaq+Q/FdmZbU3Xk5ZkY4q9iCZ/SAWKkYwTj6HGt0upd9NKEyc 275yQw+0rIRKYUMykJEVryeDWMjXo4IBuDCCAbQwDgYDVR0PAQH/BAQDAgSwMB0GA1UdJQQWMBQG CCsGAQUFBwMCBggrBgEFBQcDBDAJBgNVHRMEAjAAMB0GA1UdDgQWBBS+zvIIqVPcCTdYqSfcqEoU JCgsDTAfBgNVHSMEGDAWgBQkgWw5Yb5JD4+3G0YrySi1J0htaDBvBggrBgEFBQcBAQRjMGEwJAYI KwYBBQUHMAGGGGh0dHA6Ly9vY3NwLnN0YXJ0c3NsLmNvbTA5BggrBgEFBQcwAoYtaHR0cDovL2Fp YS5zdGFydHNzbC5jb20vY2VydHMvc2NhLmNsaWVudDEuY3J0MDgGA1UdHwQxMC8wLaAroCmGJ2h0 dHA6Ly9jcmwuc3RhcnRzc2wuY29tL3NjYS1jbGllbnQxLmNybDAfBgNVHREEGDAWgRRmZWxpeHBo ZXcwQGdtYWlsLmNvbTAjBgNVHRIEHDAahhhodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS8wRwYDVR0g BEAwPjA8BgsrBgEEAYG1NwECBTAtMCsGCCsGAQUFBwIBFh9odHRwczovL3d3dy5zdGFydHNzbC5j b20vcG9saWN5MA0GCSqGSIb3DQEBCwUAA4IBAQAT4r8kYsJk+m2jzIfMg4ntyMtDToPBQsVVGW61 x2VTQQ0yykhDEfinahMnn0Qpj70z1Qk2dJUIIL68E4pK2+1jy4xIxDp68PkUqVIVkPXFFEIZ/e8K NyTgzIrcQqOO4qPV9y5R9mmhR4xmJyn1zvIf525iQ6pIBj3YqIaQZMgCZ0CZc8U2zizm6kjcq0MF rMWBzoLgtIk5CGi3EfPcw0VKaG8SEfF7sOO3TzALYO+xFYkcPlvLsUxmzC7RtneyW3r3bHYPfY2S O94HZFIPioLiswSba5FhHFHjmD/aSbTGj4oZ4TNtLLAlKCjVwEiwnLcZeWwm8CPJFamc1uyt8EZx MIIF4jCCA8qgAwIBAgIQa6eKfQrXiNZRCvlZ5Oe04TANBgkqhkiG9w0BAQsFADB9MQswCQYDVQQG EwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2Vy dGlmaWNhdGUgU2lnbmluZzEpMCcGA1UEAxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3Jp dHkwHhcNMTUxMjE2MDEwMDA1WhcNMzAxMjE2MDEwMDA1WjB1MQswCQYDVQQGEwJJTDEWMBQGA1UE ChMNU3RhcnRDb20gTHRkLjEpMCcGA1UECxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3Jp dHkxIzAhBgNVBAMTGlN0YXJ0Q29tIENsYXNzIDEgQ2xpZW50IENBMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAvX3a98OifYP2W4L921tfrh4bdcC1Ga+YJKy7V3nYNewJHnzMlBsK0Hb8 Dm4Wo3FZpylcYa1MJGT10QMGWaLER3xCIuRR+8eklf/EqeZWRLojJ7zBRtjMywPOCelrOU+DX12d Kp+Ez4J6919rz1UudTO1GvZyCYJ/I7062uHsskM8b7gPxmcCoO1UHwwpgkvpCArJWGFoFzjLdsZb ErJcS3HtAhlkbE/BKTMrdYg35Uo12SLBO5tbk8h2imbKTC8iMs+pskrvI/AVlh6QoTTXk6xboVX6 zgMgzxSVVLymQiygYYm0y5aMsvi2raFhC643SOGvErWWPPnSEfbeAD1xswIDAQABo4IBZDCCAWAw DgYDVR0PAQH/BAQDAgEGMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDASBgNVHRMBAf8E CDAGAQH/AgEAMDIGA1UdHwQrMCkwJ6AloCOGIWh0dHA6Ly9jcmwuc3RhcnRzc2wuY29tL3Nmc2Nh LmNybDBmBggrBgEFBQcBAQRaMFgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLnN0YXJ0c3NsLmNv bTAwBggrBgEFBQcwAoYkaHR0cDovL2FpYS5zdGFydHNzbC5jb20vY2VydHMvY2EuY3J0MB0GA1Ud DgQWBBQkgWw5Yb5JD4+3G0YrySi1J0htaDAfBgNVHSMEGDAWgBROC+8apEBbpRdphzDKNGhD0EGu 8jA/BgNVHSAEODA2MDQGBFUdIAAwLDAqBggrBgEFBQcCARYeaHR0cDovL3d3dy5zdGFydHNzbC5j b20vcG9saWN5MA0GCSqGSIb3DQEBCwUAA4ICAQCL4/eH7AGLhK0PAQJbnOEjJyMEvTTwcAJuUh/b odjQl06u4putYOxdSyIjSP/sKt+31LmjG8+IO1WqykE4H/Lm7NKezWVnCHuwb3ptgFmlwbMbGkU2 MOZBtwzfKXdYUhFLhaE2uw5jXhXvLYitQay962wP5uPI6eAIhV4L8aaya1u4s7MnrTq0Rz25FuGN O79vTHYWj797tSRC8rM16js4yGKOLFpQvIg0F8IElv57b1stp+C7omqM5Qn15dePbSnqr8Jb65Wt mJJbnv6rlqfY/aLuE/zmNAlzLmPgfMDStKIXdg+EoYBZTEo8wBUaBxihfNbJ069ndQOxMNNqBelE MgpAtmjTbCuXFjqIwWq+XOx6ZV/Wh2FAmaLsSHlNvEjjSQMZwE4EeHCdo66ZmEs/5JYlCeOkulKV Q6P3m5/XOj2jP17Q2AgmjP+11+sHN7PvrG0OwrQp9QMe3X+rn0G8MjtFfqBWvR9CgLIxzM3MJNxF dgdjS2rYnShP5uxvqwfZvhZVYCIkqdJhpYON0DvSodfiar0wiM79mySZJjzC0CTbiisBzS/BeBhq eo2wFfli/iw3hn1XKvAx0ty6w/scmBF0AYqmRHYj1TjMSw0lAl7AztLglqWjUPI+sukvadMRPxmt KXlS2nVR4an/Z16imsZ69+fFYH68c1CK7zmjozGCAtQwggLQAgEBMIGJMHUxCzAJBgNVBAYTAklM MRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSkwJwYDVQQLEyBTdGFydENvbSBDZXJ0aWZpY2F0aW9u IEF1dGhvcml0eTEjMCEGA1UEAxMaU3RhcnRDb20gQ2xhc3MgMSBDbGllbnQgQ0ECEE2xfWfYnPap ZH3gLyfQszMwCQYFKw4DAhoFAKCCAZkwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG 9w0BCQUxDxcNMTYxMjMwMDY1NjE2WjAjBgkqhkiG9w0BCQQxFgQU0Y4aI/C6FgdumBphf63XfGBx nycwgZoGCSsGAQQBgjcQBDGBjDCBiTB1MQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20g THRkLjEpMCcGA1UECxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxIzAhBgNVBAMT GlN0YXJ0Q29tIENsYXNzIDEgQ2xpZW50IENBAhBNsX1n2Jz2qWR94C8n0LMzMIGcBgsqhkiG9w0B CRACCzGBjKCBiTB1MQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjEpMCcGA1UE CxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxIzAhBgNVBAMTGlN0YXJ0Q29tIENs YXNzIDEgQ2xpZW50IENBAhBNsX1n2Jz2qWR94C8n0LMzMAkGByqGSM49AgEEgYswgYgCQgCEn+NI IEOwLgYJHAy6uohsmfZykUklKbiZKdneOhKgmButsJJxt+LJArFviWXynLlmWNh4w/m5wJnL5gss QRwfggJCAYVmvHvcc/kjiEpCpQP6mfjH95nHV6yMwUMbpeSeU+a74OO9TX7nT+QfNqj5b7cHtS/7 c2Hdb6FRTX6GKlOVJ5WfAAAAAAAA --Apple-Mail=_864C4B29-4302-4909-9A9D-1D046A79370E--