git: fb9252e66734 - releng/15.0 - Add backup pkgbase signing key held by security-officer.
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Sun, 23 Nov 2025 16:39:11 UTC
The branch releng/15.0 has been updated by cperciva:
URL: https://cgit.FreeBSD.org/src/commit/?id=fb9252e66734de75f5098e296c455d498d2aaced
commit fb9252e66734de75f5098e296c455d498d2aaced
Author: Gordon Tetlow <gordon@FreeBSD.org>
AuthorDate: 2025-11-22 08:35:52 +0000
Commit: Colin Percival <cperciva@FreeBSD.org>
CommitDate: 2025-11-23 16:38:52 +0000
Add backup pkgbase signing key held by security-officer.
This key was generated by gordon@ (aka security-officer@) on an offline
system as a backup key should anything happen to the AWS Key
Management Service that is currently in use for signing pkgbase
repositories for FreeBSD 15.x.
Approved by: re (cperciva)
Reviewed by: cperciva
With hat: so
(cherry picked from commit 12ec49d8fac2eacd40ad235bf73cc585736ee77a)
(cherry picked from commit 696b0e2209ee81c5a0b27c327cf66eb3c9cfc584)
---
share/keys/pkgbase-15/trusted/Makefile | 3 ++-
share/keys/pkgbase-15/trusted/backup-signing-15 | 2 ++
2 files changed, 4 insertions(+), 1 deletion(-)
diff --git a/share/keys/pkgbase-15/trusted/Makefile b/share/keys/pkgbase-15/trusted/Makefile
index e6205999b12f..32db72ae368a 100644
--- a/share/keys/pkgbase-15/trusted/Makefile
+++ b/share/keys/pkgbase-15/trusted/Makefile
@@ -1,6 +1,7 @@
PACKAGE= pkg-bootstrap
-FILES= awskms-15
+FILES= awskms-15 \
+ backup-signing-15
FILESDIR= ${SHAREDIR}/keys/pkgbase-15/trusted
FILESMODE= 644
diff --git a/share/keys/pkgbase-15/trusted/backup-signing-15 b/share/keys/pkgbase-15/trusted/backup-signing-15
new file mode 100644
index 000000000000..a147d6788cf2
--- /dev/null
+++ b/share/keys/pkgbase-15/trusted/backup-signing-15
@@ -0,0 +1,2 @@
+function: "sha256"
+fingerprint: "56a77bdcb6c3cf7984729c6138bd5617c24aa0d466b3b604c96205b2c5629f3c"