git: fb9252e66734 - releng/15.0 - Add backup pkgbase signing key held by security-officer.

From: Colin Percival <cperciva_at_FreeBSD.org>
Date: Sun, 23 Nov 2025 16:39:11 UTC
The branch releng/15.0 has been updated by cperciva:

URL: https://cgit.FreeBSD.org/src/commit/?id=fb9252e66734de75f5098e296c455d498d2aaced

commit fb9252e66734de75f5098e296c455d498d2aaced
Author:     Gordon Tetlow <gordon@FreeBSD.org>
AuthorDate: 2025-11-22 08:35:52 +0000
Commit:     Colin Percival <cperciva@FreeBSD.org>
CommitDate: 2025-11-23 16:38:52 +0000

    Add backup pkgbase signing key held by security-officer.
    
    This key was generated by gordon@ (aka security-officer@) on an offline
    system as a backup key should anything happen to the AWS Key
    Management Service that is currently in use for signing pkgbase
    repositories for FreeBSD 15.x.
    
    Approved by:    re (cperciva)
    Reviewed by:    cperciva
    With hat:       so
    
    (cherry picked from commit 12ec49d8fac2eacd40ad235bf73cc585736ee77a)
    (cherry picked from commit 696b0e2209ee81c5a0b27c327cf66eb3c9cfc584)
---
 share/keys/pkgbase-15/trusted/Makefile          | 3 ++-
 share/keys/pkgbase-15/trusted/backup-signing-15 | 2 ++
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/share/keys/pkgbase-15/trusted/Makefile b/share/keys/pkgbase-15/trusted/Makefile
index e6205999b12f..32db72ae368a 100644
--- a/share/keys/pkgbase-15/trusted/Makefile
+++ b/share/keys/pkgbase-15/trusted/Makefile
@@ -1,6 +1,7 @@
 PACKAGE=	pkg-bootstrap
 
-FILES=	awskms-15
+FILES=	awskms-15 \
+	backup-signing-15
 
 FILESDIR=	${SHAREDIR}/keys/pkgbase-15/trusted
 FILESMODE=	644
diff --git a/share/keys/pkgbase-15/trusted/backup-signing-15 b/share/keys/pkgbase-15/trusted/backup-signing-15
new file mode 100644
index 000000000000..a147d6788cf2
--- /dev/null
+++ b/share/keys/pkgbase-15/trusted/backup-signing-15
@@ -0,0 +1,2 @@
+function: "sha256"
+fingerprint: "56a77bdcb6c3cf7984729c6138bd5617c24aa0d466b3b604c96205b2c5629f3c"