lnd/scripts/keys/README.md
Oliver Gugger f6c66ca980
scripts: add signing keys to repo
Instead of importing the keys from Keybase, we add all the signing keys
to the repository. In addition to having the key file present each key's
ID must also be added to the verification script. This acts as a double
check that the correct key is added and makes a key change more
explicit.
2021-09-27 15:49:08 +02:00

682 B

Release verification keys

This directory contains all keys that are currently signing lnd releases.

The name of the file must match exactly the suffix that user is going to use when signing a release. For example, if the key is called eugene_.asc then that user must upload a signature file called manifest-eugene_-v0.xx.yy-beta.sig, otherwise the verification will fail. See the release documentation for details on how to create the signature.

In addition to adding the key file here as a .asc file the scripts/verify-install.sh file must also be updated with the key ID and the reference to the key file.