Re: packets signing

This is a cryptographically signed message in MIME format.

--===============0167130068656910624==
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms080301030301060307030704"

This is a cryptographically signed message in MIME format.

--------------ms080301030301060307030704
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Hi

Am 17.01.2019 um 06:03 schrieb Andrew:
> I didn't work earlier with PGP, can you pls write quick cheatsheet how
> to add key to keyring and how to sign packets on build? Just to hide
> annoying warnings at boot of custom image.
>=20

Off the top of my head.....

The steps are actually quite straightforward, I had to look them up as I
don't have access to my development system.

First be reminded that the gpg installation on your development system
will probably be gpg2 with quite an extended command set. The gpg
version used in initerd is gpg1, but for our purposes they are compatible=
=2E

1) generate a gpg keypair, it will probably be placed somewhere in
~yourname/.gnupg.

https://www.gnupg.org/gph/en/manual/c14.html#AEN25

2) use the generated key to inline sign the affected or all packages, be
careful just to sign unsigned packages.

https://www.gnupg.org/gph/en/manual/x135.html

3) export the public key from your keyring and add it to the keyring
which is used to build initrd, you may need to use gpg1 for this purpose.=


https://www.gnupg.org/gph/en/manual/x56.html

I sent the details to KP some time ago.

4) use the newly built initrd to boot your system with the packages
signed with your new key.

5) if you want to make this permanent, save the extended keyring to git.
I guess we will have to define a policy who will add keys to our git
repository but I guess KP is the key person.

regards

ET




--------------ms080301030301060307030704
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature

MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC
A6wwggOoMIICkKADAgECAgEoMA0GCSqGSIb3DQEBBQUAMHUxCzAJBgNVBAYTAkNIMRIwEAYD
VQQHEwlTdGFsbGlrb24xDjAMBgNVBAoTBVRISU5LMRMwEQYDVQQLEwpDQSBTZWN0aW9uMREw
DwYDVQQDEwhUaGluayBDQTEaMBgGCSqGSIb3DQEJARYLY2FAdGhpbmsuY2gwHhcNMTQwMjI0
MDAwMDAwWhcNMTkwMjI0MjM1OTU5WjB/MQswCQYDVQQGEwJDSDESMBAGA1UEBxMJU3RhbGxp
a29uMQ4wDAYDVQQKEwVUSElOSzETMBEGA1UECxMKQ0EgU2VjdGlvbjETMBEGA1UEAxMKRXJp
Y2ggVGl0bDEiMCAGCSqGSIb3DQEJARYTZXJpY2gudGl0bEB0aGluay5jaDCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAMyJFgDhrDejCcqDw4qrn/PJrlyqJycEFBO8HH/Eme7Q
WShwskTLfs3b9vFyNy76H4Kd3q+uxb5UpibExFK9n/1l/YYobKXbL1SKAJGImOe5RyBigcMW
9qkbeb3tfdaj+JaNTCwpA2XiiMU2zSHHm8M7iu6rFNyx/mpbPyVZz1YmbO6ZN6Fzjj/LwAvb
VNKPrfFjjERDAENIZXj8c3OUVI67/lDbgRgLfea/7ovXPIby2hszTISjUEmqie9XjkeFK8Lf
iL2Fh6ui7d4qp7096DeZADqxWMwGj4lWvVcmIpMvLUJHga88j/ziJT0Fy1DDJX4ULX2ZyFgq
pY+PrMAc9VcCAwEAAaM5MDcwCQYDVR0TBAIwADALBgNVHQ8EBAMCBeAwHQYDVR0lBBYwFAYI
KwYBBQUHAwMGCCsGAQUFBwMEMA0GCSqGSIb3DQEBBQUAA4IBAQC++xQWbBXJFP9tHl+Q+oTP
Tkkdp8xom3jdieVTHxKoqV7BD255GoyVu0nu4Y5ZgZxecMm9tuTx3yqJ56oKD2QCwSzewjee
SW27QKmku4+1NVTGCl9dljuKsOCVnw/3MrQDzii2BcpE23MJFOK/mthYP7wB0M0F5kQf/5mH
QukyNj1RFyuY2sFDMH9ZNkw7LluJcxL6iPhZp5yxHell9Qsd+uJwIgPfIKof79CqA0ZYhXum
GrVeS7RsyuRRev+eWwWvF2ntJjpI5O6SHZ8QBTg9AmM92Fev5OszY9v3xH582+Twl8Nl543U
kV9PDLtzCHueowguWdQB5n6LQqgADQBZMYIDmjCCA5YCAQEwejB1MQswCQYDVQQGEwJDSDES
MBAGA1UEBxMJU3RhbGxpa29uMQ4wDAYDVQQKEwVUSElOSzETMBEGA1UECxMKQ0EgU2VjdGlv
bjERMA8GA1UEAxMIVGhpbmsgQ0ExGjAYBgkqhkiG9w0BCQEWC2NhQHRoaW5rLmNoAgEoMA0G
CWCGSAFlAwQCAQUAoIIB8TAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJ
BTEPFw0xOTAxMTcxMzQyNTZaMC8GCSqGSIb3DQEJBDEiBCD9RXa28TfvMxnRO3YxfFaLb6uY
MgZManHFN2k6gqDNIDBsBgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjALBglghkgBZQME
AQIwCgYIKoZIhvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIH
MA0GCCqGSIb3DQMCAgEoMIGJBgkrBgEEAYI3EAQxfDB6MHUxCzAJBgNVBAYTAkNIMRIwEAYD
VQQHEwlTdGFsbGlrb24xDjAMBgNVBAoTBVRISU5LMRMwEQYDVQQLEwpDQSBTZWN0aW9uMREw
DwYDVQQDEwhUaGluayBDQTEaMBgGCSqGSIb3DQEJARYLY2FAdGhpbmsuY2gCASgwgYsGCyqG
SIb3DQEJEAILMXygejB1MQswCQYDVQQGEwJDSDESMBAGA1UEBxMJU3RhbGxpa29uMQ4wDAYD
VQQKEwVUSElOSzETMBEGA1UECxMKQ0EgU2VjdGlvbjERMA8GA1UEAxMIVGhpbmsgQ0ExGjAY
BgkqhkiG9w0BCQEWC2NhQHRoaW5rLmNoAgEoMA0GCSqGSIb3DQEBAQUABIIBAA5ilX+xuLTZ
yMzJCwF9Cnp7pv1fHeHJHBQbzNtUJzt5lw8pEdP0a4RNf+AUYCCJpldDroh1pRP1kYBO7hFX
3L1oaSqlZWy3AhQoNISLNBk+MkCNdMkcMSzh4mB0nD0jLe1JzJOeXmaSMFGDPK+5QAmcsyMc
2eGppM/g8Blf00wAdvAO8DxjOHsHuE5JacPSXVy6ZJNboU9eAWQ8gY0iqLHdxXKZVLDnnzFS
kQTdkZxVCC857jyYAjWBLsbXvYxE4NSoanEo3Zr6ulxxspMQO3QXyJ3bKvOydxlysuWFuYQB
kwiqYYdcJejWSXX7P9DI4rR0uc9Q8RBvCsD6uZRIr/kAAAAAAAA=
--------------ms080301030301060307030704--


--===============0167130068656910624==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline


--===============0167130068656910624==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline


_______________________________________________
leaf-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/leaf-devel

--===============0167130068656910624==--