Text only | Text with Images

OPNsense Forum

English Forums => Development and Code Review => Topic started by: sreekupm on November 23, 2023, 12:16:59 PM

Title: How to sign changelog.txz and generate signature file changelog.txz.sig
Post by: sreekupm on November 23, 2023, 12:16:59 PM
Hi,

How can I sign the changelog.txz file and create the corresponding signature file, changelog.txz.sig?

Thank you in advance.
Title: Re: How to sign changelog.txz and generate signature file changelog.txz.sig
Post by: netnut on November 24, 2023, 06:26:22 PM
Code Select
gpg --output changelog.txz.sig --sign changelog.txz
Title: Re: How to sign changelog.txz and generate signature file changelog.txz.sig
Post by: franco on November 24, 2023, 08:28:51 PM
Not quite. See here https://github.com/opnsense/update#opnsense-sign-opnsense-verify -- the tools are part of the opnsense-update package, but are technically stand-alone tools.


Cheers,
Franco
Title: Re: How to sign changelog.txz and generate signature file changelog.txz.sig
Post by: sreekupm on November 25, 2023, 06:57:59 AM
Dear Franco,

Thanks for your reply,

How can I sign with opnsense-sign ?

tried but getting error Cannot find private key:
Code Select

./opnsense-sign changelog.txz             
Cannot find private key:
Title: Re: How to sign changelog.txz and generate signature file changelog.txz.sig
Post by: sreekupm on November 27, 2023, 04:56:39 AM
Dear Franco

Am I correct?

Code Select
./opnsense-sign.sh -c public.crt -k private.key /path/tochangelog.txz
Title: Re: How to sign changelog.txz and generate signature file changelog.txz.sig
Post by: franco on November 27, 2023, 09:37:30 AM
No, maybe you should look at the manual page provided:

# man opnsense-sign


Cheers,
Franco
Text only | Text with Images