security/hakurei.app
security/hakurei.app
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

drop key rotation verification instructions

Browse Source 
We moved from signify to OpenSSH on 2024-02-14. These instructions were
useful but are consistently causing confusion for people who are missing
that this is an optional step for people who had the signify public key
saved from previous usage. We provide multiple ways to get the current
public key and don't really need this.
This commit is contained in:
Daniel Micay 2025-02-14 11:49:47 -05:00
parent 7a684a3509
commit a6e3d4bf85
1 changed files with 0 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
static/install/cli.html
View File

@ -428,13 +428,6 @@ Installed as /home/username/platform-tools/fastboot</pre>
<li><a href="https://github.com/GrapheneOS/releases.grapheneos.org/blob/main/static/allowed_signers">GitHub</a></li>
</ul>
<p>The current public key is signed with the previous signify key. If you already
have the previous signify public key (factory.pub) and want to verify the new key
with it:</p>
<pre>curl -O https://releases.grapheneos.org/allowed_signers.sig
signify -V -m allowed_signers -x allowed_signers.sig -p factory.pub</pre>
<p>When the current signing key is replaced, the new key will be signed with it.</p>
<p>Download the factory images for the device from <a href="/releases">the releases