OpenSSH signature support

diff --git a/PUBKEY-SSH.pub b/PUBKEY-SSH.pub
new file mode 100644 (file)
index 0000000..94ba25f
--- /dev/null
+++ b/PUBKEY-SSH.pub
@@ -0,0 +1 @@
+releases@nncpgo.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAN9JzbXHVPouT+atdxhcVgVmCWLm9Dx/mhPWfU4Sceb

diff --git a/PUBKEY-SSH.pub.asc b/PUBKEY-SSH.pub.asc
new file mode 100644 (file)
index 0000000..643f709
--- /dev/null
+++ b/PUBKEY-SSH.pub.asc
@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQFIBAABCgAyFiEEksLwrv5zII5Gv/PeKyWGjnWhqVMFAmTSnBMUHHJlbGVhc2Vz
+QG5uY3Bnby5vcmcACgkQKyWGjnWhqVOiHQgAzMartvzE1En6hMo9kg31/1QKFbgc
++tHOF5L62hpp3BOvbAyHG1IbFRRCUCi/m3i1KJ0BexaNLItDFba2L/w1P554rDqh
+DslQsI3aU91eVLv/x2CTzkK4Sfx1KCH+sq6BfDnwgwR8LOshspvxcLstcao9dzjh
+IVFdVwQT4t3iHy7DUTR8AsMzO4El28Q8BNbU4Vb3SAyp6XWS08woyB2kNztH83h4
+FJrq17OFmxwRjQg3FXHuQDQs89XI7RE5pcw7RmOAcoKZbU+267NgHwW0BeFkPxwF
+NjKv4rmq6mnHUljCaVTR2DWSvvq+uhSy+Z9Ve05TxFPnwL+NdXkbTy8WNg==
+=59zV
+-----END PGP SIGNATURE-----

diff --git a/doc/download.texi b/doc/download.texi
index 1307ab1118fccd55a8d53aab4353e8c152f7e15e..5090ce95b0155ebb8956f7b4bd46b0cc8ae4e526 100644 (file)
--- a/doc/download.texi
+++ b/doc/download.texi
@@ -46,367 +46,439 @@ And additional ones for Yggdrasil support:
 @item @code{gvisor.dev/gvisor} @tab Apache 2.0
 @end multitable
 
-@multitable {XXXXX} {XXXX-XX-XX} {XXXX KiB} {meta4 tar sig}
+@multitable {XXXXX} {XXXX-XX-XX} {XXXX KiB} {meta4 tar pgp ssh}
 @headitem Version @tab Date @tab Size @tab Tarball
 
 @item @ref{Release 8_8_3, 8.8.3} @tab 2023-04-29 @tab 1779 KiB @tab
 @url{download/nncp-8.8.3.tar.xz.meta4, meta4}
 @url{download/nncp-8.8.3.tar.xz, tar}
-@url{download/nncp-8.8.3.tar.xz.asc, sig}
+@url{download/nncp-8.8.3.tar.xz.asc, pgp}
+@url{download/nncp-8.8.3.tar.xz.sig, ssh}
 
 @item @ref{Release 8_8_2, 8.8.2} @tab 2022-11-18 @tab 1752 KiB @tab
 @url{download/nncp-8.8.2.tar.xz.meta4, meta4}
 @url{download/nncp-8.8.2.tar.xz, tar}
-@url{download/nncp-8.8.2.tar.xz.asc, sig}
+@url{download/nncp-8.8.2.tar.xz.asc, pgp}
+@url{download/nncp-8.8.2.tar.xz.sig, ssh}
 
 @item @ref{Release 8_8_1, 8.8.1} @tab 2022-10-30 @tab 1748 KiB @tab
 @url{download/nncp-8.8.1.tar.xz.meta4, meta4}
 @url{download/nncp-8.8.1.tar.xz, tar}
-@url{download/nncp-8.8.1.tar.xz.asc, sig}
+@url{download/nncp-8.8.1.tar.xz.asc, pgp}
+@url{download/nncp-8.8.1.tar.xz.sig, ssh}
 
 @item @ref{Release 8_8_0, 8.8.0} @tab 2022-09-04 @tab 1739 KiB @tab
 @url{download/nncp-8.8.0.tar.xz.meta4, meta4}
 @url{download/nncp-8.8.0.tar.xz, tar}
-@url{download/nncp-8.8.0.tar.xz.asc, sig}
+@url{download/nncp-8.8.0.tar.xz.asc, pgp}
+@url{download/nncp-8.8.0.tar.xz.sig, ssh}
 
 @item @ref{Release 8_7_2, 8.7.2} @tab 2022-03-13 @tab 1673 KiB @tab
 @url{download/nncp-8.7.2.tar.xz.meta4, meta4}
 @url{download/nncp-8.7.2.tar.xz, tar}
-@url{download/nncp-8.7.2.tar.xz.asc, sig}
+@url{download/nncp-8.7.2.tar.xz.asc, pgp}
+@url{download/nncp-8.7.2.tar.xz.sig, ssh}
 
 @item @ref{Release 8_7_1, 8.7.1} @tab 2022-03-09 @tab 1669 KiB @tab
 @url{download/nncp-8.7.1.tar.xz.meta4, meta4}
 @url{download/nncp-8.7.1.tar.xz, tar}
-@url{download/nncp-8.7.1.tar.xz.asc, sig}
+@url{download/nncp-8.7.1.tar.xz.asc, pgp}
+@url{download/nncp-8.7.1.tar.xz.sig, ssh}
 
 @item @ref{Release 8_7_0, 8.7.0} @tab 2022-03-04 @tab 1670 KiB @tab
 @url{download/nncp-8.7.0.tar.xz.meta4, meta4}
 @url{download/nncp-8.7.0.tar.xz, tar}
-@url{download/nncp-8.7.0.tar.xz.asc, sig}
+@url{download/nncp-8.7.0.tar.xz.asc, pgp}
+@url{download/nncp-8.7.0.tar.xz.sig, ssh}
 
 @item @ref{Release 8_6_0, 8.6.0} @tab 2022-03-02 @tab 1670 KiB @tab
 @url{download/nncp-8.6.0.tar.xz.meta4, meta4}
 @url{download/nncp-8.6.0.tar.xz, tar}
-@url{download/nncp-8.6.0.tar.xz.asc, sig}
+@url{download/nncp-8.6.0.tar.xz.asc, pgp}
+@url{download/nncp-8.6.0.tar.xz.sig, ssh}
 
 @item @ref{Release 8_5_0, 8.5.0} @tab 2022-01-26 @tab 1685 KiB @tab
 @url{download/nncp-8.5.0.tar.xz.meta4, meta4}
 @url{download/nncp-8.5.0.tar.xz, tar}
-@url{download/nncp-8.5.0.tar.xz.asc, sig}
+@url{download/nncp-8.5.0.tar.xz.asc, pgp}
+@url{download/nncp-8.5.0.tar.xz.sig, ssh}
 
 @item @ref{Release 8_4_0, 8.4.0} @tab 2022-01-25 @tab 1683 KiB @tab
 @url{download/nncp-8.4.0.tar.xz.meta4, meta4}
 @url{download/nncp-8.4.0.tar.xz, tar}
-@url{download/nncp-8.4.0.tar.xz.asc, sig}
+@url{download/nncp-8.4.0.tar.xz.asc, pgp}
+@url{download/nncp-8.4.0.tar.xz.sig, ssh}
 
 @item @ref{Release 8_3_0, 8.3.0} @tab 2022-01-23 @tab 1682 KiB @tab
 @url{download/nncp-8.3.0.tar.xz.meta4, meta4}
 @url{download/nncp-8.3.0.tar.xz, tar}
-@url{download/nncp-8.3.0.tar.xz.asc, sig}
+@url{download/nncp-8.3.0.tar.xz.asc, pgp}
+@url{download/nncp-8.3.0.tar.xz.sig, ssh}
 
 @item @ref{Release 8_2_0, 8.2.0} @tab 2022-01-20 @tab 1669 KiB @tab
 @url{download/nncp-8.2.0.tar.xz.meta4, meta4}
 @url{download/nncp-8.2.0.tar.xz, tar}
-@url{download/nncp-8.2.0.tar.xz.asc, sig}
+@url{download/nncp-8.2.0.tar.xz.asc, pgp}
+@url{download/nncp-8.2.0.tar.xz.sig, ssh}
 
 @item @ref{Release 8_1_0, 8.1.0} @tab 2022-01-16 @tab 1339 KiB @tab
 @url{download/nncp-8.1.0.tar.xz.meta4, meta4}
 @url{download/nncp-8.1.0.tar.xz, tar}
-@url{download/nncp-8.1.0.tar.xz.asc, sig}
+@url{download/nncp-8.1.0.tar.xz.asc, pgp}
+@url{download/nncp-8.1.0.tar.xz.sig, ssh}
 
 @item @ref{Release 8_0_2, 8.0.2} @tab 2021-11-10 @tab 1204 KiB @tab
 @url{download/nncp-8.0.2.tar.xz.meta4, meta4}
 @url{download/nncp-8.0.2.tar.xz, tar}
-@url{download/nncp-8.0.2.tar.xz.asc, sig}
+@url{download/nncp-8.0.2.tar.xz.asc, pgp}
+@url{download/nncp-8.0.2.tar.xz.sig, ssh}
 
 @item @ref{Release 8_0_1, 8.0.1} @tab 2021-11-09 @tab 1206 KiB @tab
 @url{download/nncp-8.0.1.tar.xz.meta4, meta4}
 @url{download/nncp-8.0.1.tar.xz, tar}
-@url{download/nncp-8.0.1.tar.xz.asc, sig}
+@url{download/nncp-8.0.1.tar.xz.asc, pgp}
+@url{download/nncp-8.0.1.tar.xz.sig, ssh}
 
 @item @ref{Release 8_0_0, 8.0.0} @tab 2021-11-08 @tab 1203 KiB @tab
 @url{download/nncp-8.0.0.tar.xz.meta4, meta4}
 @url{download/nncp-8.0.0.tar.xz, tar}
-@url{download/nncp-8.0.0.tar.xz.asc, sig}
+@url{download/nncp-8.0.0.tar.xz.asc, pgp}
+@url{download/nncp-8.0.0.tar.xz.sig, ssh}
 
 @item @ref{Release 7_7_0, 7.7.0} @tab 2021-09-11 @tab 1180 KiB @tab
 @url{download/nncp-7.7.0.tar.xz.meta4, meta4}
 @url{download/nncp-7.7.0.tar.xz, tar}
-@url{download/nncp-7.7.0.tar.xz.asc, sig}
+@url{download/nncp-7.7.0.tar.xz.asc, pgp}
+@url{download/nncp-7.7.0.tar.xz.sig, ssh}
 
 @item @ref{Release 7_6_0, 7.6.0} @tab 2021-08-08 @tab 1153 KiB @tab
 @url{download/nncp-7.6.0.tar.xz.meta4, meta4}
 @url{download/nncp-7.6.0.tar.xz, tar}
-@url{download/nncp-7.6.0.tar.xz.asc, sig}
+@url{download/nncp-7.6.0.tar.xz.asc, pgp}
+@url{download/nncp-7.6.0.tar.xz.sig, ssh}
 
 @item @ref{Release 7_5_1, 7.5.1} @tab 2021-08-05 @tab 1147 KiB @tab
 @url{download/nncp-7.5.1.tar.xz.meta4, meta4}
 @url{download/nncp-7.5.1.tar.xz, tar}
-@url{download/nncp-7.5.1.tar.xz.asc, sig}
+@url{download/nncp-7.5.1.tar.xz.asc, pgp}
+@url{download/nncp-7.5.1.tar.xz.sig, ssh}
 
 @item @ref{Release 7_5_0, 7.5.0} @tab 2021-07-28 @tab 1151 KiB @tab
 @url{download/nncp-7.5.0.tar.xz.meta4, meta4}
 @url{download/nncp-7.5.0.tar.xz, tar}
-@url{download/nncp-7.5.0.tar.xz.asc, sig}
+@url{download/nncp-7.5.0.tar.xz.asc, pgp}
+@url{download/nncp-7.5.0.tar.xz.sig, ssh}
 
 @item @ref{Release 7_4_0, 7.4.0} @tab 2021-07-19 @tab 1153 KiB @tab
 @url{download/nncp-7.4.0.tar.xz.meta4, meta4}
 @url{download/nncp-7.4.0.tar.xz, tar}
-@url{download/nncp-7.4.0.tar.xz.asc, sig}
+@url{download/nncp-7.4.0.tar.xz.asc, pgp}
+@url{download/nncp-7.4.0.tar.xz.sig, ssh}
 
 @item @ref{Release 7_3_2, 7.3.2} @tab 2021-07-12 @tab 1141 KiB @tab
 @url{download/nncp-7.3.2.tar.xz.meta4, meta4}
 @url{download/nncp-7.3.2.tar.xz, tar}
-@url{download/nncp-7.3.2.tar.xz.asc, sig}
+@url{download/nncp-7.3.2.tar.xz.asc, pgp}
+@url{download/nncp-7.3.2.tar.xz.sig, ssh}
 
 @item @ref{Release 7_3_1, 7.3.1} @tab 2021-07-11 @tab 1142 KiB @tab
 @url{download/nncp-7.3.1.tar.xz.meta4, meta4}
 @url{download/nncp-7.3.1.tar.xz, tar}
-@url{download/nncp-7.3.1.tar.xz.asc, sig}
+@url{download/nncp-7.3.1.tar.xz.asc, pgp}
+@url{download/nncp-7.3.1.tar.xz.sig, ssh}
 
 @item @ref{Release 7_3_0, 7.3.0} @tab 2021-07-10 @tab 1141 KiB @tab
 @url{download/nncp-7.3.0.tar.xz.meta4, meta4}
 @url{download/nncp-7.3.0.tar.xz, tar}
-@url{download/nncp-7.3.0.tar.xz.asc, sig}
+@url{download/nncp-7.3.0.tar.xz.asc, pgp}
+@url{download/nncp-7.3.0.tar.xz.sig, ssh}
 
 @item @ref{Release 7_2_1, 7.2.1} @tab 2021-07-09 @tab 1139 KiB @tab
 @url{download/nncp-7.2.1.tar.xz.meta4, meta4}
 @url{download/nncp-7.2.1.tar.xz, tar}
-@url{download/nncp-7.2.1.tar.xz.asc, sig}
+@url{download/nncp-7.2.1.tar.xz.asc, pgp}
+@url{download/nncp-7.2.1.tar.xz.sig, ssh}
 
 @item @ref{Release 7_2_0, 7.2.0} @tab 2021-07-08 @tab 1136 KiB @tab
 @url{download/nncp-7.2.0.tar.xz.meta4, meta4}
 @url{download/nncp-7.2.0.tar.xz, tar}
-@url{download/nncp-7.2.0.tar.xz.asc, sig}
+@url{download/nncp-7.2.0.tar.xz.asc, pgp}
+@url{download/nncp-7.2.0.tar.xz.sig, ssh}
 
 @item @ref{Release 7_1_1, 7.1.1} @tab 2021-07-06 @tab 1132 KiB @tab
 @url{download/nncp-7.1.1.tar.xz.meta4, meta4}
 @url{download/nncp-7.1.1.tar.xz, tar}
-@url{download/nncp-7.1.1.tar.xz.asc, sig}
+@url{download/nncp-7.1.1.tar.xz.asc, pgp}
+@url{download/nncp-7.1.1.tar.xz.sig, ssh}
 
 @item @ref{Release 7_1_0, 7.1.0} @tab 2021-07-04 @tab 1142 KiB @tab
 @url{download/nncp-7.1.0.tar.xz.meta4, meta4}
 @url{download/nncp-7.1.0.tar.xz, tar}
-@url{download/nncp-7.1.0.tar.xz.asc, sig}
+@url{download/nncp-7.1.0.tar.xz.asc, pgp}
+@url{download/nncp-7.1.0.tar.xz.sig, ssh}
 
 @item @ref{Release 7_0_0, 7.0.0} @tab 2021-06-30 @tab 1123 KiB @tab
 @url{download/nncp-7.0.0.tar.xz.meta4, meta4}
 @url{download/nncp-7.0.0.tar.xz, tar}
-@url{download/nncp-7.0.0.tar.xz.asc, sig}
+@url{download/nncp-7.0.0.tar.xz.asc, pgp}
+@url{download/nncp-7.0.0.tar.xz.sig, ssh}
 
 @item @ref{Release 6_6_0, 6.6.0} @tab 2021-06-26 @tab 1041 KiB @tab
 @url{download/nncp-6.6.0.tar.xz.meta4, meta4}
 @url{download/nncp-6.6.0.tar.xz, tar}
-@url{download/nncp-6.6.0.tar.xz.asc, sig}
+@url{download/nncp-6.6.0.tar.xz.asc, pgp}
+@url{download/nncp-6.6.0.tar.xz.sig, ssh}
 
 @item @ref{Release 6_5_0, 6.5.0} @tab 2021-05-30 @tab 1041 KiB @tab
 @url{download/nncp-6.5.0.tar.xz.meta4, meta4}
 @url{download/nncp-6.5.0.tar.xz, tar}
-@url{download/nncp-6.5.0.tar.xz.asc, sig}
+@url{download/nncp-6.5.0.tar.xz.asc, pgp}
+@url{download/nncp-6.5.0.tar.xz.sig, ssh}
 
 @item @ref{Release 6_4_0, 6.4.0} @tab 2021-04-22 @tab 1042 KiB @tab
 @url{download/nncp-6.4.0.tar.xz.meta4, meta4}
 @url{download/nncp-6.4.0.tar.xz, tar}
-@url{download/nncp-6.4.0.tar.xz.asc, sig}
+@url{download/nncp-6.4.0.tar.xz.asc, pgp}
+@url{download/nncp-6.4.0.tar.xz.sig, ssh}
 
 @item @ref{Release 6_3_0, 6.3.0} @tab 2021-04-14 @tab 1042 KiB @tab
 @url{download/nncp-6.3.0.tar.xz.meta4, meta4}
 @url{download/nncp-6.3.0.tar.xz, tar}
-@url{download/nncp-6.3.0.tar.xz.asc, sig}
+@url{download/nncp-6.3.0.tar.xz.asc, pgp}
+@url{download/nncp-6.3.0.tar.xz.sig, ssh}
 
 @item @ref{Release 6_2_1, 6.2.1} @tab 2021-03-26 @tab 1038 KiB @tab
 @url{download/nncp-6.2.1.tar.xz.meta4, meta4}
 @url{download/nncp-6.2.1.tar.xz, tar}
-@url{download/nncp-6.2.1.tar.xz.asc, sig}
+@url{download/nncp-6.2.1.tar.xz.asc, pgp}
+@url{download/nncp-6.2.1.tar.xz.sig, ssh}
 
 @item @ref{Release 6_2_0, 6.2.0} @tab 2021-03-07 @tab 1038 KiB @tab
 @url{download/nncp-6.2.0.tar.xz.meta4, meta4}
 @url{download/nncp-6.2.0.tar.xz, tar}
-@url{download/nncp-6.2.0.tar.xz.asc, sig}
+@url{download/nncp-6.2.0.tar.xz.asc, pgp}
+@url{download/nncp-6.2.0.tar.xz.sig, ssh}
 
 @item @ref{Release 6_1_0, 6.1.0} @tab 2021-02-24 @tab 1040 KiB @tab
 @url{download/nncp-6.1.0.tar.xz.meta4, meta4}
 @url{download/nncp-6.1.0.tar.xz, tar}
-@url{download/nncp-6.1.0.tar.xz.asc, sig}
+@url{download/nncp-6.1.0.tar.xz.asc, pgp}
+@url{download/nncp-6.1.0.tar.xz.sig, ssh}
 
 @item @ref{Release 6_0_0, 6.0.0} @tab 2021-01-23 @tab 1028 KiB @tab
 @url{download/nncp-6.0.0.tar.xz.meta4, meta4}
 @url{download/nncp-6.0.0.tar.xz, tar}
-@url{download/nncp-6.0.0.tar.xz.asc, sig}
+@url{download/nncp-6.0.0.tar.xz.asc, pgp}
+@url{download/nncp-6.0.0.tar.xz.sig, ssh}
 
 @item @ref{Release 5_6_0, 5.6.0} @tab 2021-01-17 @tab 1024 KiB @tab
 @url{download/nncp-5.6.0.tar.xz.meta4, meta4}
 @url{download/nncp-5.6.0.tar.xz, tar}
-@url{download/nncp-5.6.0.tar.xz.asc, sig}
+@url{download/nncp-5.6.0.tar.xz.asc, pgp}
+@url{download/nncp-5.6.0.tar.xz.sig, ssh}
 
 @item @ref{Release 5_5_1, 5.5.1} @tab 2021-01-11 @tab 1165 KiB @tab
 @url{download/nncp-5.5.1.tar.xz.meta4, meta4}
 @url{download/nncp-5.5.1.tar.xz, tar}
-@url{download/nncp-5.5.1.tar.xz.asc, sig}
+@url{download/nncp-5.5.1.tar.xz.asc, pgp}
+@url{download/nncp-5.5.1.tar.xz.sig, ssh}
 
 @item @ref{Release 5_5_0, 5.5.0} @tab 2021-01-07 @tab 1161 KiB @tab
 @url{download/nncp-5.5.0.tar.xz.meta4, meta4}
 @url{download/nncp-5.5.0.tar.xz, tar}
-@url{download/nncp-5.5.0.tar.xz.asc, sig}
+@url{download/nncp-5.5.0.tar.xz.asc, pgp}
+@url{download/nncp-5.5.0.tar.xz.sig, ssh}
 
 @item @ref{Release 5_4_1, 5.4.1} @tab 2020-09-28 @tab 1143 KiB @tab
 @url{download/nncp-5.4.1.tar.xz.meta4, meta4}
 @url{download/nncp-5.4.1.tar.xz, tar}
-@url{download/nncp-5.4.1.tar.xz.asc, sig}
+@url{download/nncp-5.4.1.tar.xz.asc, pgp}
+@url{download/nncp-5.4.1.tar.xz.sig, ssh}
 
 @item @ref{Release 5_3_3, 5.3.3} @tab 2020-01-23 @tab 1116 KiB @tab
 @url{download/nncp-5.3.3.tar.xz.meta4, meta4}
 @url{download/nncp-5.3.3.tar.xz, tar}
-@url{download/nncp-5.3.3.tar.xz.asc, sig}
+@url{download/nncp-5.3.3.tar.xz.asc, pgp}
+@url{download/nncp-5.3.3.tar.xz.sig, ssh}
 
 @item @ref{Release 5_3_2, 5.3.2} @tab 2019-12-28 @tab 1118 KiB @tab
 @url{download/nncp-5.3.2.tar.xz.meta4, meta4}
 @url{download/nncp-5.3.2.tar.xz, tar}
-@url{download/nncp-5.3.2.tar.xz.asc, sig}
+@url{download/nncp-5.3.2.tar.xz.asc, pgp}
+@url{download/nncp-5.3.2.tar.xz.sig, ssh}
 
 @item @ref{Release 5_3_1, 5.3.1} @tab 2019-12-25 @tab 1117 KiB @tab
 @url{download/nncp-5.3.1.tar.xz.meta4, meta4}
 @url{download/nncp-5.3.1.tar.xz, tar}
-@url{download/nncp-5.3.1.tar.xz.asc, sig}
+@url{download/nncp-5.3.1.tar.xz.asc, pgp}
+@url{download/nncp-5.3.1.tar.xz.sig, ssh}
 
 @item @ref{Release 5_3_0, 5.3.0} @tab 2019-12-22 @tab 1112 KiB @tab
 @url{download/nncp-5.3.0.tar.xz.meta4, meta4}
 @url{download/nncp-5.3.0.tar.xz, tar}
-@url{download/nncp-5.3.0.tar.xz.asc, sig}
+@url{download/nncp-5.3.0.tar.xz.asc, pgp}
+@url{download/nncp-5.3.0.tar.xz.sig, ssh}
 
 @item @ref{Release 5_2_1, 5.2.1} @tab 2019-12-15 @tab 1109 KiB @tab
 @url{download/nncp-5.2.1.tar.xz.meta4, meta4}
 @url{download/nncp-5.2.1.tar.xz, tar}
-@url{download/nncp-5.2.1.tar.xz.asc, sig}
+@url{download/nncp-5.2.1.tar.xz.asc, pgp}
+@url{download/nncp-5.2.1.tar.xz.sig, ssh}
 
 @item @ref{Release 5_2_0, 5.2.0} @tab 2019-12-14 @tab 1109 KiB @tab
 @url{download/nncp-5.2.0.tar.xz.meta4, meta4}
 @url{download/nncp-5.2.0.tar.xz, tar}
-@url{download/nncp-5.2.0.tar.xz.asc, sig}
+@url{download/nncp-5.2.0.tar.xz.asc, pgp}
+@url{download/nncp-5.2.0.tar.xz.sig, ssh}
 
 @item @ref{Release 5_1_2, 5.1.2} @tab 2019-12-13 @tab 1106 KiB @tab
 @url{download/nncp-5.1.2.tar.xz.meta4, meta4}
 @url{download/nncp-5.1.2.tar.xz, tar}
-@url{download/nncp-5.1.2.tar.xz.asc, sig}
+@url{download/nncp-5.1.2.tar.xz.asc, pgp}
+@url{download/nncp-5.1.2.tar.xz.sig, ssh}
 
 @item @ref{Release 5_1_1, 5.1.1} @tab 2019-12-01 @tab 1103 KiB @tab
 @url{download/nncp-5.1.1.tar.xz.meta4, meta4}
 @url{download/nncp-5.1.1.tar.xz, tar}
-@url{download/nncp-5.1.1.tar.xz.asc, sig}
+@url{download/nncp-5.1.1.tar.xz.asc, pgp}
+@url{download/nncp-5.1.1.tar.xz.sig, ssh}
 
 @item @ref{Release 5_1_0, 5.1.0} @tab 2019-11-24 @tab 1103 KiB @tab
 @url{download/nncp-5.1.0.tar.xz.meta4, meta4}
 @url{download/nncp-5.1.0.tar.xz, tar}
-@url{download/nncp-5.1.0.tar.xz.asc, sig}
+@url{download/nncp-5.1.0.tar.xz.asc, pgp}
+@url{download/nncp-5.1.0.tar.xz.sig, ssh}
 
 @item @ref{Release 5_0_0, 5.0.0} @tab 2019-11-15 @tab 1099 KiB @tab
 @url{download/nncp-5.0.0.tar.xz.meta4, meta4}
 @url{download/nncp-5.0.0.tar.xz, tar}
-@url{download/nncp-5.0.0.tar.xz.asc, sig}
+@url{download/nncp-5.0.0.tar.xz.asc, pgp}
+@url{download/nncp-5.0.0.tar.xz.sig, ssh}
 
 @item @ref{Release 4_1, 4.1} @tab 2019-05-01 @tab 1227 KiB @tab
 @url{download/nncp-4.1.tar.xz.meta4, meta4}
 @url{download/nncp-4.1.tar.xz, tar}
-@url{download/nncp-4.1.tar.xz.asc, sig}
+@url{download/nncp-4.1.tar.xz.asc, pgp}
+@url{download/nncp-4.1.tar.xz.sig, ssh}
 
 @item @ref{Release 4_0, 4.0} @tab 2019-04-28 @tab 1227 KiB @tab
 @url{download/nncp-4.0.tar.xz.meta4, meta4}
 @url{download/nncp-4.0.tar.xz, tar}
-@url{download/nncp-4.0.tar.xz.asc, sig}
+@url{download/nncp-4.0.tar.xz.asc, pgp}
+@url{download/nncp-4.0.tar.xz.sig, ssh}
 
 @item @ref{Release 3_4, 3.4} @tab 2018-06-10 @tab 1154 KiB @tab
 @url{download/nncp-3.4.tar.xz.meta4, meta4}
 @url{download/nncp-3.4.tar.xz, tar}
-@url{download/nncp-3.4.tar.xz.asc, sig}
+@url{download/nncp-3.4.tar.xz.asc, pgp}
+@url{download/nncp-3.4.tar.xz.sig, ssh}
 
 @item @ref{Release 3_3, 3.3} @tab 2018-06-02 @tab 1152 KiB @tab
 @url{download/nncp-3.3.tar.xz.meta4, meta4}
 @url{download/nncp-3.3.tar.xz, tar}
-@url{download/nncp-3.3.tar.xz.asc, sig}
+@url{download/nncp-3.3.tar.xz.asc, pgp}
+@url{download/nncp-3.3.tar.xz.sig, ssh}
 
 @item @ref{Release 3_2, 3.2} @tab 2018-05-27 @tab 1147 KiB @tab
 @url{download/nncp-3.2.tar.xz.meta4, meta4}
 @url{download/nncp-3.2.tar.xz, tar}
-@url{download/nncp-3.2.tar.xz.asc, sig}
+@url{download/nncp-3.2.tar.xz.asc, pgp}
+@url{download/nncp-3.2.tar.xz.sig, ssh}
 
 @item @ref{Release 3_1, 3.1} @tab 2018-02-18 @tab 1145 KiB @tab
 @url{download/nncp-3.1.tar.xz.meta4, meta4}
 @url{download/nncp-3.1.tar.xz, tar}
-@url{download/nncp-3.1.tar.xz.asc, sig}
+@url{download/nncp-3.1.tar.xz.asc, pgp}
+@url{download/nncp-3.1.tar.xz.sig, ssh}
 
 @item @ref{Release 3_0, 3.0} @tab 2017-12-30 @tab 993 KiB @tab
 @url{download/nncp-3.0.tar.xz.meta4, meta4}
 @url{download/nncp-3.0.tar.xz, tar}
-@url{download/nncp-3.0.tar.xz.asc, sig}
+@url{download/nncp-3.0.tar.xz.asc, pgp}
+@url{download/nncp-3.0.tar.xz.sig, ssh}
 
 @item @ref{Release 2_0, 2.0} @tab 2017-12-02 @tab 986 KiB @tab
 @url{download/nncp-2.0.tar.xz.meta4, meta4}
 @url{download/nncp-2.0.tar.xz, tar}
-@url{download/nncp-2.0.tar.xz.asc, sig}
+@url{download/nncp-2.0.tar.xz.asc, pgp}
+@url{download/nncp-2.0.tar.xz.sig, ssh}
 
 @item @ref{Release 1_0, 1.0} @tab 2017-12-02 @tab 987 KiB @tab
 @url{download/nncp-1.0.tar.xz.meta4, meta4}
 @url{download/nncp-1.0.tar.xz, tar}
-@url{download/nncp-1.0.tar.xz.asc, sig}
+@url{download/nncp-1.0.tar.xz.asc, pgp}
+@url{download/nncp-1.0.tar.xz.sig, ssh}
 
 @item @ref{Release 0_12, 0.12} @tab 2017-10-08 @tab 978 KiB @tab
 @url{download/nncp-0.12.tar.xz.meta4, meta4}
 @url{download/nncp-0.12.tar.xz, tar}
-@url{download/nncp-0.12.tar.xz.asc, sig}
+@url{download/nncp-0.12.tar.xz.asc, pgp}
+@url{download/nncp-0.12.tar.xz.sig, ssh}
 
 @item @ref{Release 0_11, 0.11} @tab 2017-08-21 @tab 1031 KiB @tab
 @url{download/nncp-0.11.tar.xz.meta4, meta4}
 @url{download/nncp-0.11.tar.xz, tar}
-@url{download/nncp-0.11.tar.xz.asc, sig}
+@url{download/nncp-0.11.tar.xz.asc, pgp}
+@url{download/nncp-0.11.tar.xz.sig, ssh}
 
 @item @ref{Release 0_10, 0.10} @tab 2017-07-04 @tab 949 KiB @tab
 @url{download/nncp-0.10.tar.xz.meta4, meta4}
 @url{download/nncp-0.10.tar.xz, tar}
-@url{download/nncp-0.10.tar.xz.asc, sig}
+@url{download/nncp-0.10.tar.xz.asc, pgp}
+@url{download/nncp-0.10.tar.xz.sig, ssh}
 
 @item @ref{Release 0_9, 0.9} @tab 2017-05-17 @tab 942 KiB @tab
 @url{download/nncp-0.9.tar.xz.meta4, meta4}
 @url{download/nncp-0.9.tar.xz, tar}
-@url{download/nncp-0.9.tar.xz.asc, sig}
+@url{download/nncp-0.9.tar.xz.asc, pgp}
+@url{download/nncp-0.9.tar.xz.sig, ssh}
 
 @item @ref{Release 0_8, 0.8} @tab 2017-04-30 @tab 932 KiB @tab
 @url{download/nncp-0.8.tar.xz.meta4, meta4}
 @url{download/nncp-0.8.tar.xz, tar}
-@url{download/nncp-0.8.tar.xz.asc, sig}
+@url{download/nncp-0.8.tar.xz.asc, pgp}
+@url{download/nncp-0.8.tar.xz.sig, ssh}
 
 @item @ref{Release 0_7, 0.7} @tab 2017-04-02 @tab 783 KiB @tab
 @url{download/nncp-0.7.tar.xz.meta4, meta4}
 @url{download/nncp-0.7.tar.xz, tar}
-@url{download/nncp-0.7.tar.xz.asc, sig}
+@url{download/nncp-0.7.tar.xz.asc, pgp}
+@url{download/nncp-0.7.tar.xz.sig, ssh}
 
 @item @ref{Release 0_6, 0.6} @tab 2017-02-05 @tab 746 KiB @tab
 @url{download/nncp-0.6.tar.xz.meta4, meta4}
 @url{download/nncp-0.6.tar.xz, tar}
-@url{download/nncp-0.6.tar.xz.asc, sig}
+@url{download/nncp-0.6.tar.xz.asc, pgp}
+@url{download/nncp-0.6.tar.xz.sig, ssh}
 
 @item @ref{Release 0_5, 0.5} @tab 2017-01-19 @tab 743 KiB @tab
 @url{download/nncp-0.5.tar.xz.meta4, meta4}
 @url{download/nncp-0.5.tar.xz, tar}
-@url{download/nncp-0.5.tar.xz.asc, sig}
+@url{download/nncp-0.5.tar.xz.asc, pgp}
+@url{download/nncp-0.5.tar.xz.sig, ssh}
 
 @item @ref{Release 0_4, 0.4} @tab 2017-01-17 @tab 741 KiB @tab
 @url{download/nncp-0.4.tar.xz.meta4, meta4}
 @url{download/nncp-0.4.tar.xz, tar}
-@url{download/nncp-0.4.tar.xz.asc, sig}
+@url{download/nncp-0.4.tar.xz.asc, pgp}
+@url{download/nncp-0.4.tar.xz.sig, ssh}
 
 @item @ref{Release 0_3, 0.3} @tab 2017-01-17 @tab 741 KiB @tab
 @url{download/nncp-0.3.tar.xz.meta4, meta4}
 @url{download/nncp-0.3.tar.xz, tar}
-@url{download/nncp-0.3.tar.xz.asc, sig}
+@url{download/nncp-0.3.tar.xz.asc, pgp}
+@url{download/nncp-0.3.tar.xz.sig, ssh}
 
 @item @ref{Release 0_2, 0.2} @tab 2017-01-17 @tab 740 KiB @tab
 @url{download/nncp-0.2.tar.xz.meta4, meta4}
 @url{download/nncp-0.2.tar.xz, tar}
-@url{download/nncp-0.2.tar.xz.asc, sig}
+@url{download/nncp-0.2.tar.xz.asc, pgp}
+@url{download/nncp-0.2.tar.xz.sig, ssh}
 
 @item 0.1 @tab 2017-01-10 @tab 720 KiB @tab
 @url{download/nncp-0.1.tar.xz.meta4, meta4}
 @url{download/nncp-0.1.tar.xz, tar}
-@url{download/nncp-0.1.tar.xz.asc, sig}
+@url{download/nncp-0.1.tar.xz.asc, pgp}
+@url{download/nncp-0.1.tar.xz.sig, ssh}
 
 @end multitable

diff --git a/doc/integrity.texi b/doc/integrity.texi
index 5547ef9bc90cf89111ef0cb29ca8400af5963e36..f09b5e8ad4c516efb7635b1b5ce6dc8f7b9c6e2f 100644 (file)
--- a/doc/integrity.texi
+++ b/doc/integrity.texi
@@ -5,16 +5,20 @@
 @cindex gpg
 @cindex GnuPG
 @cindex WKD
+@cindex OpenSSH
 @section Tarballs integrity check
 
-You @strong{have to} check downloaded archives integrity and verify
-their signature to be sure that you have got trusted, untampered
-software. For integrity and authentication of downloaded binaries
-@url{https://www.gnupg.org/, GNU Privacy Guard} is used. You must
-download signature (@file{.asc}) provided with the tarball.
+You @strong{have to} verify downloaded tarballs authenticity to be sure
+that you retrieved trusted and untampered software. There are two options:
 
-For the very first time you need to import signing public key. It is
-provided below, but it is better to check alternative resources with it.
+@table @asis
+
+@item @url{https://www.openpgp.org/, OpenPGP} @file{.asc} signature
+    Use @url{https://www.gnupg.org/, GNU Privacy Guard} free software
+    implementation.
+    For the very first time it is necessary to get signing public key and
+    import it. It is provided @url{.well-known/openpgpkey/nncpgo.org/hu/i4cdqgcarfjdjnba6y4jnf498asg8c6p.asc, here}, but you should
+    check alternate resources.
 
 @verbatim
 pub   rsa2048/0x2B25868E75A1A953 2017-01-10
@@ -22,21 +26,19 @@ pub   rsa2048/0x2B25868E75A1A953 2017-01-10
 uid   NNCP releases <releases at nncpgo dot org>
 @end verbatim
 
-@itemize
-
-@item
 @example
 $ gpg --auto-key-locate dane --locate-keys releases at nncpgo dot org
 $ gpg --auto-key-locate  wkd --locate-keys releases at nncpgo dot org
 @end example
 
-@item
-@verbatiminclude .well-known/openpgpkey/nncpgo.org/hu/i4cdqgcarfjdjnba6y4jnf498asg8c6p.asc
-
-@end itemize
-
-Then you could verify tarballs signature:
+@item @url{https://www.openssh.com/, OpenSSH} @file{.sig} signature
+    @url{PUBKEY-SSH.pub, Public key} and its OpenPGP
+    @url{PUBKEY-SSH.pub.asc, signature} made with the key above.
+    Its fingerprint: @code{SHA256:FRiWawVNBkyS3jFn8uZ/JlT+PWKSFbhWe5XSixp1+SY}.
 
 @example
-$ gpg --verify nncp-@value{VERSION}.tar.xz.asc nncp-@value{VERSION}.tar.xz
+$ ssh-keygen -Y verify -f PUBKEY-SSH.pub -I releases@@nncpgo.org -n file \
+    -s nncp-@value{VERSION}.tar.zst.sig < nncp-@value{VERSION}.tar.zst
 @end example
+
+@end table

diff --git a/doc/www.do b/doc/www.do
new file mode 100644 (file)
index 0000000..672456c
--- /dev/null
+++ b/doc/www.do
@@ -0,0 +1,16 @@
+html=nncp.html
+redo $html
+cp -a .well-known $html/
+cp -a download $html/
+cp ../PUBKEY-* $html/
+(
+    cd $html/download
+    export ATOM_ID="e33cb83e-bf33-46f8-b9b1-6115f46e1218"
+    export NAME=NNCP
+    export BASE_URL=http://www.nncpgo.org/download
+    export AUTHOR_EMAIL=releases@nncpgo.org
+    ~/work/releases-feed/releases.atom.zsh
+)
+perl -i -npe 'print "<link rel=\"alternate\" title=\"Releases\" href=\"download/releases.atom\" type=\"application/atom+xml\">\n" if /^<\/head>/' $html/Tarballs.html
+find nncp.html -type d -exec chmod 755 {} +
+find nncp.html -type f -exec chmod 644 {} +

diff --git a/makedist b/makedist
index f833a7f78e99e1e8ae0e47842028e581e8aa7f1a..cc9cbc38f52c01619e3801990253da35dde00a6a 100755 (executable)
--- a/makedist
+++ b/makedist
@@ -46,9 +46,7 @@ You can obtain releases source code prepared tarballs from
 @url{http://www.nncpgo.org/Mirrors.html, mirrors}.
 EOF
 perl -i -ne 'print unless /include pedro/' doc/index.texi doc/about.ru.texi
-perl -p -i -e 's/^(.verbatiminclude) .*$/$1 PUBKEY.asc/g' doc/integrity.texi
-mv doc/.well-known/openpgpkey/nncpgo.org/hu/i4cdqgcarfjdjnba6y4jnf498asg8c6p.asc PUBKEY.asc
-ln -s ../PUBKEY.asc doc
+mv doc/.well-known/openpgpkey/nncpgo.org/hu/i4cdqgcarfjdjnba6y4jnf498asg8c6p.asc PUBKEY-PGP.asc
 redo doc/all
 
 ########################################################################
@@ -122,8 +120,10 @@ cd ..
 tar cvf nncp-"$release".tar --uid=0 --gid=0 --numeric-owner nncp-"$release"
 xz -9v nncp-"$release".tar
 tarball=nncp-"$release".tar.xz
+ssh-keygen -Y sign -f ~/.ssh/sign/releases@nncpgo.org -n file $tarball
 gpg --armor --detach-sign --sign --local-user releases@nncpgo.org "$tarball"
-meta4-create -fn "$tarball" -mtime "$tarball" -sig "$tarball".asc \
+meta4-create -fn "$tarball" -mtime "$tarball" \
+    -sig-pgp "$tarball".asc -sig-ssh "$tarball".sig \
     http://www.nncpgo.org/download/"$tarball" \
     http://y.www.nncpgo.org/download/"$tarball" \
     https://nncp.mirrors.quux.org/download/"$tarball" < "$tarball" > "$tarball".meta4
@@ -131,7 +131,7 @@ meta4-create -fn "$tarball" -mtime "$tarball" -sig "$tarball".asc \
 size=$(( $(stat -f %z $tarball) / 1024 ))
 release_date=$(date "+%Y-%m-%d")
 
-mv -v $tmp/"$tarball" $tmp/"$tarball".asc $tmp/"$tarball".meta4 $cur/doc/download
+mv -v $tmp/"$tarball" $tmp/"$tarball".asc $tmp/"$tarball".sig $tmp/"$tarball".meta4 $cur/doc/download
 
 release_underscored=`echo $release | tr . _`
 cat <<EOF
@@ -139,7 +139,8 @@ An entry for documentation:
 @item @ref{Release $release_underscored, $release} @tab $release_date @tab $size KiB @tab
 @url{download/nncp-${release}.tar.xz.meta4, meta4}
 @url{download/nncp-${release}.tar.xz, tar}
-@url{download/nncp-${release}.tar.xz.asc, sig}
+@url{download/nncp-${release}.tar.xz.asc, pgp}
+@url{download/nncp-${release}.tar.xz.sig, ssh}
 EOF
 
 cd $cur
@@ -180,8 +181,9 @@ Source code and its signature for that version can be found here:
     http://www.nncpgo.org/download/nncp-${release}.tar.xz ($size KiB)
     http://www.nncpgo.org/download/nncp-${release}.tar.xz.asc
 
-GPG key ID: 0x2B25868E75A1A953 NNCP releases <releases@nncpgo.org>
-Fingerprint: 92C2 F0AE FE73 208E 46BF  F3DE 2B25 868E 75A1 A953
+OpenPGP key: 92C2 F0AE FE73 208E 46BF  F3DE 2B25 868E 75A1 A953
+             NNCP releases <releases@nncpgo.org>
+OpenSSH key: SHA256:FRiWawVNBkyS3jFn8uZ/JlT+PWKSFbhWe5XSixp1+SY
 
 There are mirrors where you can also get the source code tarballs:
 http://www.nncpgo.org/Mirrors.html
@@ -234,8 +236,9 @@ $(git cat-file -p v$release | sed -n '6,/^.*BEGIN/p' | sed '$d')
     http://www.nncpgo.org/download/nncp-${release}.tar.xz ($size KiB)
     http://www.nncpgo.org/download/nncp-${release}.tar.xz.asc
 
-Идентификатор GPG ключа: 0x2B25868E75A1A953 NNCP releases <releases@nncpgo.org>
-Отпечаток: 92C2 F0AE FE73 208E 46BF  F3DE 2B25 868E 75A1 A953
+OpenPGP ключ: 92C2 F0AE FE73 208E 46BF  F3DE 2B25 868E 75A1 A953
+              NNCP releases <releases@nncpgo.org>
+OpenSSH ключ: SHA256:FRiWawVNBkyS3jFn8uZ/JlT+PWKSFbhWe5XSixp1+SY
 
 Есть и зеркала где вы также можете получить архивы с исходным кодом:
 http://www.nncpgo.org/Mirrors.html