[OpenWrt-Devel] Missing GPG signatures

Jo-Philipp Wich jo at mein.io
Mon Dec 17 13:28:28 EST 2018


> It seems only Robert Call of the LibreCMC fork is consistently signing releases
> with the same key. But how is he verifying upstream...?

probably by trusting https://openwrt.org/docs/guide-user/security/signatures

I cross-signed the 18.06 key with the 17.01 one now and signed both
using my personal key.

~ Jo

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.infradead.org/pipermail/openwrt-devel/attachments/20181217/26d8aee3/attachment.sig>
-------------- next part --------------
openwrt-devel mailing list
openwrt-devel at lists.openwrt.org

More information about the openwrt-devel mailing list