drop key rotation verification instructions
We moved from signify to OpenSSH on 2024-02-14. These instructions were useful but are consistently causing confusion for people who are missing that this is an optional step for people who had the signify public key saved from previous usage. We provide multiple ways to get the current public key and don't really need this.
This commit is contained in:
@@ -428,13 +428,6 @@ Installed as /home/username/platform-tools/fastboot</pre>
|
|||||||
<li><a href="https://github.com/GrapheneOS/releases.grapheneos.org/blob/main/static/allowed_signers">GitHub</a></li>
|
<li><a href="https://github.com/GrapheneOS/releases.grapheneos.org/blob/main/static/allowed_signers">GitHub</a></li>
|
||||||
</ul>
|
</ul>
|
||||||
|
|
||||||
<p>The current public key is signed with the previous signify key. If you already
|
|
||||||
have the previous signify public key (factory.pub) and want to verify the new key
|
|
||||||
with it:</p>
|
|
||||||
|
|
||||||
<pre>curl -O https://releases.grapheneos.org/allowed_signers.sig
|
|
||||||
signify -V -m allowed_signers -x allowed_signers.sig -p factory.pub</pre>
|
|
||||||
|
|
||||||
<p>When the current signing key is replaced, the new key will be signed with it.</p>
|
<p>When the current signing key is replaced, the new key will be signed with it.</p>
|
||||||
|
|
||||||
<p>Download the factory images for the device from <a href="/releases">the releases
|
<p>Download the factory images for the device from <a href="/releases">the releases
|
||||||
|
|||||||
Reference in New Issue
Block a user