diff --git a/_pages/download.md b/_pages/download.md index b2a78ec..b9d0356 100644 --- a/_pages/download.md +++ b/_pages/download.md @@ -69,9 +69,18 @@ reproduce the binaries on this page from source. + + + + + + + + +
Signer
Keyssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL460KIEccS4881p7PPpiiQBsxF+H5tgC6De6crw9rbU
FingerprintSHA256:iTDjRHSIaoL8dpHbQ0mv+y0IQqPufGl2hQwk4TbXFlw
Ownercloudhead@radicle.xyz
Keyssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBrJyJTwj/xG7F7qY0HDFXbb8A+xNNH8eILQ8hlvKW7/
FingerprintSHA256:MOkcQvljDqQn8y+zlHFssx6gdH0rXdC+Wn88bsTPp6g
Ownererik@radicle.xyz
Keyssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEFsaRqAJ1r6bBFwlcWzJKN7DdjItQDumCNc0wqw6Dvk
FingerprintSHA256:vV38nW5eSWfTMITdAoMCBOFzEEr0bDMXjSWHpwrpsKY
Ownerfintan@radicle.xyz
Keyssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFhK7CqgIIbSthoNn8ea32krOnMzC807Z+PpBkR2YOVj
FingerprintSHA256:xX6bpr+AeF5G0wIvU8nLisgYRM6XjQVNJs3hkMGt+T0
Ownerlorenz@radicle.xyz

diff --git a/install b/install index 070f0b3..fabe989 100644 --- a/install +++ b/install @@ -7,7 +7,9 @@ set -e # SSH signing key for the release archives. This is currently cloudhead and fintan's keys. # FIXME: Technically, there should be a release signing key, with a shamir threshold of > 1, with the secret encrypted by something like SOPS. CLOUDHEAD="ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL460KIEccS4881p7PPpiiQBsxF+H5tgC6De6crw9rbU" +ERIK="ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBrJyJTwj/xG7F7qY0HDFXbb8A+xNNH8eILQ8hlvKW7/" FINTAN="ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEFsaRqAJ1r6bBFwlcWzJKN7DdjItQDumCNc0wqw6Dvk" +LORENZ="ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFhK7CqgIIbSthoNn8ea32krOnMzC807Z+PpBkR2YOVj" url() { echo "https://files.radicle.xyz/releases/$1/radicle-$2.tar.xz" @@ -126,8 +128,10 @@ verify() { archive="$1" signers="$(dirname $archive)/signers" # Add the signer key to the allowed signers file we pass to ssh-keygen. - printf "radicle $FINTAN\n" > $signers - printf "radicle $CLOUDHEAD\n" >> $signers + printf "radicle $CLOUDHEAD\n" > $signers + printf "radicle $ERIK\n" >> $signers + printf "radicle $FINTAN\n" >> $signers + printf "radicle $LORENZ\n" >> $signers # Verify that `$archive` was signed by a key in `$signers`, identified by the # pattern "*@radicle.xyz", using the signature in `$archive.sig`.