OpenWrt 23.05.5 was signed with the wrong signing keys

For Developers
1

There were few topics before:

Every 23.05 release contains the same note and promises that later release will have different key.

Could someone explain why the latest 23.05.5 has been signed with the wrong key?

1 Like
2

That didn't mean version 24?

1 Like
3

Release notes:

2 Likes
4

So, does anybody know whether or not we are going to have any 23.05 release with the correct keys? And why the wrong keys have been used for a long period?

1 Like
6

This seems very much a question worth asking. Anybody able to answer this?

1 Like
7

I asked the same thing on .3

No one is fixing the release workflow so it will continue to be wrong.

1 Like
8

Here's the answer:

And documentation:
https://openwrt.org/docs/guide-developer/releases/provision-nitrokey3

@ynezz do you want any assistance with the artifact signing REST API service?

3 Likes
9

Thanks for pointing. At least I understand now what is the root of issue.

@ynezz, how can I help you to have correct keys used for the latest OpenWRT release?