18.06.4 signed with LEDE's public key

hi,

i was a bit surprised when noticing that the current release (18.06.4) for my device (d-link dwr921) wasn't signed by the same public key as the last version i downloaded (18.06.2).

18.06.2 was signed by the key 0x0F20257417E1CE16 (referred to as '18.06 Signing Key' on https://openwrt.org/docs/guide-user/security/signatures).

18.06.4 is signed by the key 0xCD84BCED626471F1 (referred to as 'LEDE GnuPG key for unattended build jobs' on https://openwrt.org/docs/guide-user/security/signatures).

is this normal?

2 Likes

Yes, the old GPG key was destroyed when new build master servers were provisioned. Will update the wiki pages later.

4 Likes