From a6e3d4bf85492e79fac4da8454cce093a5faaab5 Mon Sep 17 00:00:00 2001 From: Daniel Micay Date: Fri, 14 Feb 2025 11:49:47 -0500 Subject: [PATCH] drop key rotation verification instructions We moved from signify to OpenSSH on 2024-02-14. These instructions were useful but are consistently causing confusion for people who are missing that this is an optional step for people who had the signify public key saved from previous usage. We provide multiple ways to get the current public key and don't really need this. --- static/install/cli.html | 7 ------- 1 file changed, 7 deletions(-) diff --git a/static/install/cli.html b/static/install/cli.html index d746d8e6..341f1a82 100644 --- a/static/install/cli.html +++ b/static/install/cli.html @@ -428,13 +428,6 @@ Installed as /home/username/platform-tools/fastboot
  • GitHub
  • -

    The current public key is signed with the previous signify key. If you already - have the previous signify public key (factory.pub) and want to verify the new key - with it:

    - -
    curl -O https://releases.grapheneos.org/allowed_signers.sig
    -signify -V -m allowed_signers -x allowed_signers.sig -p factory.pub
    -

    When the current signing key is replaced, the new key will be signed with it.

    Download the factory images for the device from the releases