Add signed msgs that prove the archive signing keys.

I already posted the signed messages in issue debian-pi#64, but they should be part of the git repo. Fashionably late, but better late then never. The signing key for raspbian.org was provided by 'plugwash'. The signing key for raspberrypi.org was provided by 'shiftplusone'. The KeyIDs are used in update.sh for verifying downloaded packages. Signed-off-by: Diederik de Haas <[email protected]>
diederikdehaas · May 27, 2021 · 0c0f286 · 0c0f286
1 parent aea34e3
commit 0c0f286
Show file tree

Hide file tree

Showing 2 changed files with 41 additions and 0 deletions.
diff --git a/key-raspberrypi-shiftplusone.msg.txt b/key-raspberrypi-shiftplusone.msg.txt
@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA1
+
+I confirm the key being used to sign the raspberrypi.org repository is
+pub   2048R/7FA3303E 2012-06-17
+Key fingerprint = CF8A 1AF5 02A2 AA2D 763B  AE7E 82B1 2992 7FA3 303E
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1
+
+iQEcBAEBAgAGBQJVSO8TAAoJEKQcgohUhKUlTT0H/3lc1X/p3DwgbSrdIiVNLawX
+0dbkLrvvJCrOYaV/xztosDnTPU3AF3HFqjVWmliBMcW0rFBXWz03tfXD38OszEK7
+jzt3oNdoVetCl5K8QCDHqMtwIgIMKg0w0oojFPwFAqxJ4i8QlfC6YwZtW0Wge9Zz
+SwTWnZKbv8gvLRukNjHjGtddDKwX6yqg58McXkZ7VAdUFxujJ7iOnexAXXMz0b1N
+Gzmec/QbE4LuhVKxTmH2howOGeXJ8UDCqDQDzbxbcQnTrk5wnVPrWMuVhSFH8BD+
+ue5Nmc34zV98t2rheUkZZXpIjIcdzYrrakI2p8cWhu8CUivgndkOVCev/PaU7D4=
+=G/So
+-----END PGP SIGNATURE-----
diff --git a/key-raspbian-plugwash.msg.txt b/key-raspbian-plugwash.msg.txt
@@ -0,0 +1,24 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+I confirm the key being used to sign the Raspbian repository as for 2014-06-17 is
+
+pub   2048R/90FDDD2E 2012-04-01
+      Key fingerprint = A0DA 38D0 D76E 8B5D 6388  7281 9165 938D 90FD DD2E
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1.4.10 (GNU/Linux)
+
+iQIcBAEBCAAGBQJToL6hAAoJEAxI6ip6j/17F2UP/AuWP2+2lbphMoAzxbTgd6Hp
+YpuNGgtuXtQXhAWBS6Ml2tTBbOwqPlESbVhVDKunf5TlP2KJvAO4p9nrnRiqwiOl
+5gpJ3RA8zoLuTrIfwSEvzbtDGbAAoHHsGogwurn5TB3EMJY+Kktwwm4JYtJvjkjy
+C4w8kuhuiRosm8FjXchhWbKI4bANfqZ1BpCOkwyP8T7gf0qQTynbWls7VDQTHC2T
+Yhy1G6qQlGylSDr6D/5yin9J1rmAywpSrVU4fIeR3C/V1YeWgZZbDNHrIbvUJ5T8
+ntKSrS1wYLc4dGeLIi2zc3BZWpHxC00GzaC1w6v9aH4qsxmVpM0U0sQ4Rup++8qV
+VCmYJf22BzVhPeYYjRA0M1hnTjXnMT6FqtD9arVob1EJHtMYlDJiowKDhZC5qxND
+q1nKmWWNhTTAieA7VwstADsuAjo2NIF57EQilluhZUdLlsfY8cZomAivAbpCaC7R
+lDYzb/sFa94F1dK5tlBv2/jItZXuUkFadh3ie+ynnZccY4mb31zGmp1/EQOfaisn
+rAvZ6qIgPNHf1O66P4yYsHBKnzLQLkcs4SsI3XmO/6PHXVXG3CQ0DULUISTaiHES
+4D9Os6ryuptmbfRUQOJW7jsSXMn2OyMQVWmySobv5SQK1cydwwrLmgCaKPi1FF3/
++dZEIwZCwzx2E1UiqJRu
+=gc3M
+-----END PGP SIGNATURE-----