From ade6054289e93233cf8cb9cb919d28d0220a0137 Mon Sep 17 00:00:00 2001 From: Sergey Matveev Date: Tue, 8 Aug 2023 22:43:57 +0300 Subject: [PATCH] OpenSSH signature support --- PUBKEY-SSH.pub | 1 + PUBKEY-SSH.pub.asc | 11 +++ doc/download.texi | 218 ++++++++++++++++++++++++++++++--------------- doc/integrity.texi | 36 ++++---- doc/www.do | 16 ++++ makedist | 23 ++--- 6 files changed, 205 insertions(+), 100 deletions(-) create mode 100644 PUBKEY-SSH.pub create mode 100644 PUBKEY-SSH.pub.asc create mode 100644 doc/www.do diff --git a/PUBKEY-SSH.pub b/PUBKEY-SSH.pub new file mode 100644 index 0000000..94ba25f --- /dev/null +++ b/PUBKEY-SSH.pub @@ -0,0 +1 @@ +releases@nncpgo.org ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAN9JzbXHVPouT+atdxhcVgVmCWLm9Dx/mhPWfU4Sceb diff --git a/PUBKEY-SSH.pub.asc b/PUBKEY-SSH.pub.asc new file mode 100644 index 0000000..643f709 --- /dev/null +++ b/PUBKEY-SSH.pub.asc @@ -0,0 +1,11 @@ +-----BEGIN PGP SIGNATURE----- + +iQFIBAABCgAyFiEEksLwrv5zII5Gv/PeKyWGjnWhqVMFAmTSnBMUHHJlbGVhc2Vz +QG5uY3Bnby5vcmcACgkQKyWGjnWhqVOiHQgAzMartvzE1En6hMo9kg31/1QKFbgc ++tHOF5L62hpp3BOvbAyHG1IbFRRCUCi/m3i1KJ0BexaNLItDFba2L/w1P554rDqh +DslQsI3aU91eVLv/x2CTzkK4Sfx1KCH+sq6BfDnwgwR8LOshspvxcLstcao9dzjh +IVFdVwQT4t3iHy7DUTR8AsMzO4El28Q8BNbU4Vb3SAyp6XWS08woyB2kNztH83h4 +FJrq17OFmxwRjQg3FXHuQDQs89XI7RE5pcw7RmOAcoKZbU+267NgHwW0BeFkPxwF +NjKv4rmq6mnHUljCaVTR2DWSvvq+uhSy+Z9Ve05TxFPnwL+NdXkbTy8WNg== +=59zV +-----END PGP SIGNATURE----- diff --git a/doc/download.texi b/doc/download.texi index 1307ab1..5090ce9 100644 --- a/doc/download.texi +++ b/doc/download.texi @@ -46,367 +46,439 @@ And additional ones for Yggdrasil support: @item @code{gvisor.dev/gvisor} @tab Apache 2.0 @end multitable -@multitable {XXXXX} {XXXX-XX-XX} {XXXX KiB} {meta4 tar sig} +@multitable {XXXXX} {XXXX-XX-XX} {XXXX KiB} {meta4 tar pgp ssh} @headitem Version @tab Date @tab Size @tab Tarball @item @ref{Release 8_8_3, 8.8.3} @tab 2023-04-29 @tab 1779 KiB @tab @url{download/nncp-8.8.3.tar.xz.meta4, meta4} @url{download/nncp-8.8.3.tar.xz, tar} -@url{download/nncp-8.8.3.tar.xz.asc, sig} +@url{download/nncp-8.8.3.tar.xz.asc, pgp} +@url{download/nncp-8.8.3.tar.xz.sig, ssh} @item @ref{Release 8_8_2, 8.8.2} @tab 2022-11-18 @tab 1752 KiB @tab @url{download/nncp-8.8.2.tar.xz.meta4, meta4} @url{download/nncp-8.8.2.tar.xz, tar} -@url{download/nncp-8.8.2.tar.xz.asc, sig} +@url{download/nncp-8.8.2.tar.xz.asc, pgp} +@url{download/nncp-8.8.2.tar.xz.sig, ssh} @item @ref{Release 8_8_1, 8.8.1} @tab 2022-10-30 @tab 1748 KiB @tab @url{download/nncp-8.8.1.tar.xz.meta4, meta4} @url{download/nncp-8.8.1.tar.xz, tar} -@url{download/nncp-8.8.1.tar.xz.asc, sig} +@url{download/nncp-8.8.1.tar.xz.asc, pgp} +@url{download/nncp-8.8.1.tar.xz.sig, ssh} @item @ref{Release 8_8_0, 8.8.0} @tab 2022-09-04 @tab 1739 KiB @tab @url{download/nncp-8.8.0.tar.xz.meta4, meta4} @url{download/nncp-8.8.0.tar.xz, tar} -@url{download/nncp-8.8.0.tar.xz.asc, sig} +@url{download/nncp-8.8.0.tar.xz.asc, pgp} +@url{download/nncp-8.8.0.tar.xz.sig, ssh} @item @ref{Release 8_7_2, 8.7.2} @tab 2022-03-13 @tab 1673 KiB @tab @url{download/nncp-8.7.2.tar.xz.meta4, meta4} @url{download/nncp-8.7.2.tar.xz, tar} -@url{download/nncp-8.7.2.tar.xz.asc, sig} +@url{download/nncp-8.7.2.tar.xz.asc, pgp} +@url{download/nncp-8.7.2.tar.xz.sig, ssh} @item @ref{Release 8_7_1, 8.7.1} @tab 2022-03-09 @tab 1669 KiB @tab @url{download/nncp-8.7.1.tar.xz.meta4, meta4} @url{download/nncp-8.7.1.tar.xz, tar} -@url{download/nncp-8.7.1.tar.xz.asc, sig} +@url{download/nncp-8.7.1.tar.xz.asc, pgp} +@url{download/nncp-8.7.1.tar.xz.sig, ssh} @item @ref{Release 8_7_0, 8.7.0} @tab 2022-03-04 @tab 1670 KiB @tab @url{download/nncp-8.7.0.tar.xz.meta4, meta4} @url{download/nncp-8.7.0.tar.xz, tar} -@url{download/nncp-8.7.0.tar.xz.asc, sig} +@url{download/nncp-8.7.0.tar.xz.asc, pgp} +@url{download/nncp-8.7.0.tar.xz.sig, ssh} @item @ref{Release 8_6_0, 8.6.0} @tab 2022-03-02 @tab 1670 KiB @tab @url{download/nncp-8.6.0.tar.xz.meta4, meta4} @url{download/nncp-8.6.0.tar.xz, tar} -@url{download/nncp-8.6.0.tar.xz.asc, sig} +@url{download/nncp-8.6.0.tar.xz.asc, pgp} +@url{download/nncp-8.6.0.tar.xz.sig, ssh} @item @ref{Release 8_5_0, 8.5.0} @tab 2022-01-26 @tab 1685 KiB @tab @url{download/nncp-8.5.0.tar.xz.meta4, meta4} @url{download/nncp-8.5.0.tar.xz, tar} -@url{download/nncp-8.5.0.tar.xz.asc, sig} +@url{download/nncp-8.5.0.tar.xz.asc, pgp} +@url{download/nncp-8.5.0.tar.xz.sig, ssh} @item @ref{Release 8_4_0, 8.4.0} @tab 2022-01-25 @tab 1683 KiB @tab @url{download/nncp-8.4.0.tar.xz.meta4, meta4} @url{download/nncp-8.4.0.tar.xz, tar} -@url{download/nncp-8.4.0.tar.xz.asc, sig} +@url{download/nncp-8.4.0.tar.xz.asc, pgp} +@url{download/nncp-8.4.0.tar.xz.sig, ssh} @item @ref{Release 8_3_0, 8.3.0} @tab 2022-01-23 @tab 1682 KiB @tab @url{download/nncp-8.3.0.tar.xz.meta4, meta4} @url{download/nncp-8.3.0.tar.xz, tar} -@url{download/nncp-8.3.0.tar.xz.asc, sig} +@url{download/nncp-8.3.0.tar.xz.asc, pgp} +@url{download/nncp-8.3.0.tar.xz.sig, ssh} @item @ref{Release 8_2_0, 8.2.0} @tab 2022-01-20 @tab 1669 KiB @tab @url{download/nncp-8.2.0.tar.xz.meta4, meta4} @url{download/nncp-8.2.0.tar.xz, tar} -@url{download/nncp-8.2.0.tar.xz.asc, sig} +@url{download/nncp-8.2.0.tar.xz.asc, pgp} +@url{download/nncp-8.2.0.tar.xz.sig, ssh} @item @ref{Release 8_1_0, 8.1.0} @tab 2022-01-16 @tab 1339 KiB @tab @url{download/nncp-8.1.0.tar.xz.meta4, meta4} @url{download/nncp-8.1.0.tar.xz, tar} -@url{download/nncp-8.1.0.tar.xz.asc, sig} +@url{download/nncp-8.1.0.tar.xz.asc, pgp} +@url{download/nncp-8.1.0.tar.xz.sig, ssh} @item @ref{Release 8_0_2, 8.0.2} @tab 2021-11-10 @tab 1204 KiB @tab @url{download/nncp-8.0.2.tar.xz.meta4, meta4} @url{download/nncp-8.0.2.tar.xz, tar} -@url{download/nncp-8.0.2.tar.xz.asc, sig} +@url{download/nncp-8.0.2.tar.xz.asc, pgp} +@url{download/nncp-8.0.2.tar.xz.sig, ssh} @item @ref{Release 8_0_1, 8.0.1} @tab 2021-11-09 @tab 1206 KiB @tab @url{download/nncp-8.0.1.tar.xz.meta4, meta4} @url{download/nncp-8.0.1.tar.xz, tar} -@url{download/nncp-8.0.1.tar.xz.asc, sig} +@url{download/nncp-8.0.1.tar.xz.asc, pgp} +@url{download/nncp-8.0.1.tar.xz.sig, ssh} @item @ref{Release 8_0_0, 8.0.0} @tab 2021-11-08 @tab 1203 KiB @tab @url{download/nncp-8.0.0.tar.xz.meta4, meta4} @url{download/nncp-8.0.0.tar.xz, tar} -@url{download/nncp-8.0.0.tar.xz.asc, sig} +@url{download/nncp-8.0.0.tar.xz.asc, pgp} +@url{download/nncp-8.0.0.tar.xz.sig, ssh} @item @ref{Release 7_7_0, 7.7.0} @tab 2021-09-11 @tab 1180 KiB @tab @url{download/nncp-7.7.0.tar.xz.meta4, meta4} @url{download/nncp-7.7.0.tar.xz, tar} -@url{download/nncp-7.7.0.tar.xz.asc, sig} +@url{download/nncp-7.7.0.tar.xz.asc, pgp} +@url{download/nncp-7.7.0.tar.xz.sig, ssh} @item @ref{Release 7_6_0, 7.6.0} @tab 2021-08-08 @tab 1153 KiB @tab @url{download/nncp-7.6.0.tar.xz.meta4, meta4} @url{download/nncp-7.6.0.tar.xz, tar} -@url{download/nncp-7.6.0.tar.xz.asc, sig} +@url{download/nncp-7.6.0.tar.xz.asc, pgp} +@url{download/nncp-7.6.0.tar.xz.sig, ssh} @item @ref{Release 7_5_1, 7.5.1} @tab 2021-08-05 @tab 1147 KiB @tab @url{download/nncp-7.5.1.tar.xz.meta4, meta4} @url{download/nncp-7.5.1.tar.xz, tar} -@url{download/nncp-7.5.1.tar.xz.asc, sig} +@url{download/nncp-7.5.1.tar.xz.asc, pgp} +@url{download/nncp-7.5.1.tar.xz.sig, ssh} @item @ref{Release 7_5_0, 7.5.0} @tab 2021-07-28 @tab 1151 KiB @tab @url{download/nncp-7.5.0.tar.xz.meta4, meta4} @url{download/nncp-7.5.0.tar.xz, tar} -@url{download/nncp-7.5.0.tar.xz.asc, sig} +@url{download/nncp-7.5.0.tar.xz.asc, pgp} +@url{download/nncp-7.5.0.tar.xz.sig, ssh} @item @ref{Release 7_4_0, 7.4.0} @tab 2021-07-19 @tab 1153 KiB @tab @url{download/nncp-7.4.0.tar.xz.meta4, meta4} @url{download/nncp-7.4.0.tar.xz, tar} -@url{download/nncp-7.4.0.tar.xz.asc, sig} +@url{download/nncp-7.4.0.tar.xz.asc, pgp} +@url{download/nncp-7.4.0.tar.xz.sig, ssh} @item @ref{Release 7_3_2, 7.3.2} @tab 2021-07-12 @tab 1141 KiB @tab @url{download/nncp-7.3.2.tar.xz.meta4, meta4} @url{download/nncp-7.3.2.tar.xz, tar} -@url{download/nncp-7.3.2.tar.xz.asc, sig} +@url{download/nncp-7.3.2.tar.xz.asc, pgp} +@url{download/nncp-7.3.2.tar.xz.sig, ssh} @item @ref{Release 7_3_1, 7.3.1} @tab 2021-07-11 @tab 1142 KiB @tab @url{download/nncp-7.3.1.tar.xz.meta4, meta4} @url{download/nncp-7.3.1.tar.xz, tar} -@url{download/nncp-7.3.1.tar.xz.asc, sig} +@url{download/nncp-7.3.1.tar.xz.asc, pgp} +@url{download/nncp-7.3.1.tar.xz.sig, ssh} @item @ref{Release 7_3_0, 7.3.0} @tab 2021-07-10 @tab 1141 KiB @tab @url{download/nncp-7.3.0.tar.xz.meta4, meta4} @url{download/nncp-7.3.0.tar.xz, tar} -@url{download/nncp-7.3.0.tar.xz.asc, sig} +@url{download/nncp-7.3.0.tar.xz.asc, pgp} +@url{download/nncp-7.3.0.tar.xz.sig, ssh} @item @ref{Release 7_2_1, 7.2.1} @tab 2021-07-09 @tab 1139 KiB @tab @url{download/nncp-7.2.1.tar.xz.meta4, meta4} @url{download/nncp-7.2.1.tar.xz, tar} -@url{download/nncp-7.2.1.tar.xz.asc, sig} +@url{download/nncp-7.2.1.tar.xz.asc, pgp} +@url{download/nncp-7.2.1.tar.xz.sig, ssh} @item @ref{Release 7_2_0, 7.2.0} @tab 2021-07-08 @tab 1136 KiB @tab @url{download/nncp-7.2.0.tar.xz.meta4, meta4} @url{download/nncp-7.2.0.tar.xz, tar} -@url{download/nncp-7.2.0.tar.xz.asc, sig} +@url{download/nncp-7.2.0.tar.xz.asc, pgp} +@url{download/nncp-7.2.0.tar.xz.sig, ssh} @item @ref{Release 7_1_1, 7.1.1} @tab 2021-07-06 @tab 1132 KiB @tab @url{download/nncp-7.1.1.tar.xz.meta4, meta4} @url{download/nncp-7.1.1.tar.xz, tar} -@url{download/nncp-7.1.1.tar.xz.asc, sig} +@url{download/nncp-7.1.1.tar.xz.asc, pgp} +@url{download/nncp-7.1.1.tar.xz.sig, ssh} @item @ref{Release 7_1_0, 7.1.0} @tab 2021-07-04 @tab 1142 KiB @tab @url{download/nncp-7.1.0.tar.xz.meta4, meta4} @url{download/nncp-7.1.0.tar.xz, tar} -@url{download/nncp-7.1.0.tar.xz.asc, sig} +@url{download/nncp-7.1.0.tar.xz.asc, pgp} +@url{download/nncp-7.1.0.tar.xz.sig, ssh} @item @ref{Release 7_0_0, 7.0.0} @tab 2021-06-30 @tab 1123 KiB @tab @url{download/nncp-7.0.0.tar.xz.meta4, meta4} @url{download/nncp-7.0.0.tar.xz, tar} -@url{download/nncp-7.0.0.tar.xz.asc, sig} +@url{download/nncp-7.0.0.tar.xz.asc, pgp} +@url{download/nncp-7.0.0.tar.xz.sig, ssh} @item @ref{Release 6_6_0, 6.6.0} @tab 2021-06-26 @tab 1041 KiB @tab @url{download/nncp-6.6.0.tar.xz.meta4, meta4} @url{download/nncp-6.6.0.tar.xz, tar} -@url{download/nncp-6.6.0.tar.xz.asc, sig} +@url{download/nncp-6.6.0.tar.xz.asc, pgp} +@url{download/nncp-6.6.0.tar.xz.sig, ssh} @item @ref{Release 6_5_0, 6.5.0} @tab 2021-05-30 @tab 1041 KiB @tab @url{download/nncp-6.5.0.tar.xz.meta4, meta4} @url{download/nncp-6.5.0.tar.xz, tar} -@url{download/nncp-6.5.0.tar.xz.asc, sig} +@url{download/nncp-6.5.0.tar.xz.asc, pgp} +@url{download/nncp-6.5.0.tar.xz.sig, ssh} @item @ref{Release 6_4_0, 6.4.0} @tab 2021-04-22 @tab 1042 KiB @tab @url{download/nncp-6.4.0.tar.xz.meta4, meta4} @url{download/nncp-6.4.0.tar.xz, tar} -@url{download/nncp-6.4.0.tar.xz.asc, sig} +@url{download/nncp-6.4.0.tar.xz.asc, pgp} +@url{download/nncp-6.4.0.tar.xz.sig, ssh} @item @ref{Release 6_3_0, 6.3.0} @tab 2021-04-14 @tab 1042 KiB @tab @url{download/nncp-6.3.0.tar.xz.meta4, meta4} @url{download/nncp-6.3.0.tar.xz, tar} -@url{download/nncp-6.3.0.tar.xz.asc, sig} +@url{download/nncp-6.3.0.tar.xz.asc, pgp} +@url{download/nncp-6.3.0.tar.xz.sig, ssh} @item @ref{Release 6_2_1, 6.2.1} @tab 2021-03-26 @tab 1038 KiB @tab @url{download/nncp-6.2.1.tar.xz.meta4, meta4} @url{download/nncp-6.2.1.tar.xz, tar} -@url{download/nncp-6.2.1.tar.xz.asc, sig} +@url{download/nncp-6.2.1.tar.xz.asc, pgp} +@url{download/nncp-6.2.1.tar.xz.sig, ssh} @item @ref{Release 6_2_0, 6.2.0} @tab 2021-03-07 @tab 1038 KiB @tab @url{download/nncp-6.2.0.tar.xz.meta4, meta4} @url{download/nncp-6.2.0.tar.xz, tar} -@url{download/nncp-6.2.0.tar.xz.asc, sig} +@url{download/nncp-6.2.0.tar.xz.asc, pgp} +@url{download/nncp-6.2.0.tar.xz.sig, ssh} @item @ref{Release 6_1_0, 6.1.0} @tab 2021-02-24 @tab 1040 KiB @tab @url{download/nncp-6.1.0.tar.xz.meta4, meta4} @url{download/nncp-6.1.0.tar.xz, tar} -@url{download/nncp-6.1.0.tar.xz.asc, sig} +@url{download/nncp-6.1.0.tar.xz.asc, pgp} +@url{download/nncp-6.1.0.tar.xz.sig, ssh} @item @ref{Release 6_0_0, 6.0.0} @tab 2021-01-23 @tab 1028 KiB @tab @url{download/nncp-6.0.0.tar.xz.meta4, meta4} @url{download/nncp-6.0.0.tar.xz, tar} -@url{download/nncp-6.0.0.tar.xz.asc, sig} +@url{download/nncp-6.0.0.tar.xz.asc, pgp} +@url{download/nncp-6.0.0.tar.xz.sig, ssh} @item @ref{Release 5_6_0, 5.6.0} @tab 2021-01-17 @tab 1024 KiB @tab @url{download/nncp-5.6.0.tar.xz.meta4, meta4} @url{download/nncp-5.6.0.tar.xz, tar} -@url{download/nncp-5.6.0.tar.xz.asc, sig} +@url{download/nncp-5.6.0.tar.xz.asc, pgp} +@url{download/nncp-5.6.0.tar.xz.sig, ssh} @item @ref{Release 5_5_1, 5.5.1} @tab 2021-01-11 @tab 1165 KiB @tab @url{download/nncp-5.5.1.tar.xz.meta4, meta4} @url{download/nncp-5.5.1.tar.xz, tar} -@url{download/nncp-5.5.1.tar.xz.asc, sig} +@url{download/nncp-5.5.1.tar.xz.asc, pgp} +@url{download/nncp-5.5.1.tar.xz.sig, ssh} @item @ref{Release 5_5_0, 5.5.0} @tab 2021-01-07 @tab 1161 KiB @tab @url{download/nncp-5.5.0.tar.xz.meta4, meta4} @url{download/nncp-5.5.0.tar.xz, tar} -@url{download/nncp-5.5.0.tar.xz.asc, sig} +@url{download/nncp-5.5.0.tar.xz.asc, pgp} +@url{download/nncp-5.5.0.tar.xz.sig, ssh} @item @ref{Release 5_4_1, 5.4.1} @tab 2020-09-28 @tab 1143 KiB @tab @url{download/nncp-5.4.1.tar.xz.meta4, meta4} @url{download/nncp-5.4.1.tar.xz, tar} -@url{download/nncp-5.4.1.tar.xz.asc, sig} +@url{download/nncp-5.4.1.tar.xz.asc, pgp} +@url{download/nncp-5.4.1.tar.xz.sig, ssh} @item @ref{Release 5_3_3, 5.3.3} @tab 2020-01-23 @tab 1116 KiB @tab @url{download/nncp-5.3.3.tar.xz.meta4, meta4} @url{download/nncp-5.3.3.tar.xz, tar} -@url{download/nncp-5.3.3.tar.xz.asc, sig} +@url{download/nncp-5.3.3.tar.xz.asc, pgp} +@url{download/nncp-5.3.3.tar.xz.sig, ssh} @item @ref{Release 5_3_2, 5.3.2} @tab 2019-12-28 @tab 1118 KiB @tab @url{download/nncp-5.3.2.tar.xz.meta4, meta4} @url{download/nncp-5.3.2.tar.xz, tar} -@url{download/nncp-5.3.2.tar.xz.asc, sig} +@url{download/nncp-5.3.2.tar.xz.asc, pgp} +@url{download/nncp-5.3.2.tar.xz.sig, ssh} @item @ref{Release 5_3_1, 5.3.1} @tab 2019-12-25 @tab 1117 KiB @tab @url{download/nncp-5.3.1.tar.xz.meta4, meta4} @url{download/nncp-5.3.1.tar.xz, tar} -@url{download/nncp-5.3.1.tar.xz.asc, sig} +@url{download/nncp-5.3.1.tar.xz.asc, pgp} +@url{download/nncp-5.3.1.tar.xz.sig, ssh} @item @ref{Release 5_3_0, 5.3.0} @tab 2019-12-22 @tab 1112 KiB @tab @url{download/nncp-5.3.0.tar.xz.meta4, meta4} @url{download/nncp-5.3.0.tar.xz, tar} -@url{download/nncp-5.3.0.tar.xz.asc, sig} +@url{download/nncp-5.3.0.tar.xz.asc, pgp} +@url{download/nncp-5.3.0.tar.xz.sig, ssh} @item @ref{Release 5_2_1, 5.2.1} @tab 2019-12-15 @tab 1109 KiB @tab @url{download/nncp-5.2.1.tar.xz.meta4, meta4} @url{download/nncp-5.2.1.tar.xz, tar} -@url{download/nncp-5.2.1.tar.xz.asc, sig} +@url{download/nncp-5.2.1.tar.xz.asc, pgp} +@url{download/nncp-5.2.1.tar.xz.sig, ssh} @item @ref{Release 5_2_0, 5.2.0} @tab 2019-12-14 @tab 1109 KiB @tab @url{download/nncp-5.2.0.tar.xz.meta4, meta4} @url{download/nncp-5.2.0.tar.xz, tar} -@url{download/nncp-5.2.0.tar.xz.asc, sig} +@url{download/nncp-5.2.0.tar.xz.asc, pgp} +@url{download/nncp-5.2.0.tar.xz.sig, ssh} @item @ref{Release 5_1_2, 5.1.2} @tab 2019-12-13 @tab 1106 KiB @tab @url{download/nncp-5.1.2.tar.xz.meta4, meta4} @url{download/nncp-5.1.2.tar.xz, tar} -@url{download/nncp-5.1.2.tar.xz.asc, sig} +@url{download/nncp-5.1.2.tar.xz.asc, pgp} +@url{download/nncp-5.1.2.tar.xz.sig, ssh} @item @ref{Release 5_1_1, 5.1.1} @tab 2019-12-01 @tab 1103 KiB @tab @url{download/nncp-5.1.1.tar.xz.meta4, meta4} @url{download/nncp-5.1.1.tar.xz, tar} -@url{download/nncp-5.1.1.tar.xz.asc, sig} +@url{download/nncp-5.1.1.tar.xz.asc, pgp} +@url{download/nncp-5.1.1.tar.xz.sig, ssh} @item @ref{Release 5_1_0, 5.1.0} @tab 2019-11-24 @tab 1103 KiB @tab @url{download/nncp-5.1.0.tar.xz.meta4, meta4} @url{download/nncp-5.1.0.tar.xz, tar} -@url{download/nncp-5.1.0.tar.xz.asc, sig} +@url{download/nncp-5.1.0.tar.xz.asc, pgp} +@url{download/nncp-5.1.0.tar.xz.sig, ssh} @item @ref{Release 5_0_0, 5.0.0} @tab 2019-11-15 @tab 1099 KiB @tab @url{download/nncp-5.0.0.tar.xz.meta4, meta4} @url{download/nncp-5.0.0.tar.xz, tar} -@url{download/nncp-5.0.0.tar.xz.asc, sig} +@url{download/nncp-5.0.0.tar.xz.asc, pgp} +@url{download/nncp-5.0.0.tar.xz.sig, ssh} @item @ref{Release 4_1, 4.1} @tab 2019-05-01 @tab 1227 KiB @tab @url{download/nncp-4.1.tar.xz.meta4, meta4} @url{download/nncp-4.1.tar.xz, tar} -@url{download/nncp-4.1.tar.xz.asc, sig} +@url{download/nncp-4.1.tar.xz.asc, pgp} +@url{download/nncp-4.1.tar.xz.sig, ssh} @item @ref{Release 4_0, 4.0} @tab 2019-04-28 @tab 1227 KiB @tab @url{download/nncp-4.0.tar.xz.meta4, meta4} @url{download/nncp-4.0.tar.xz, tar} -@url{download/nncp-4.0.tar.xz.asc, sig} +@url{download/nncp-4.0.tar.xz.asc, pgp} +@url{download/nncp-4.0.tar.xz.sig, ssh} @item @ref{Release 3_4, 3.4} @tab 2018-06-10 @tab 1154 KiB @tab @url{download/nncp-3.4.tar.xz.meta4, meta4} @url{download/nncp-3.4.tar.xz, tar} -@url{download/nncp-3.4.tar.xz.asc, sig} +@url{download/nncp-3.4.tar.xz.asc, pgp} +@url{download/nncp-3.4.tar.xz.sig, ssh} @item @ref{Release 3_3, 3.3} @tab 2018-06-02 @tab 1152 KiB @tab @url{download/nncp-3.3.tar.xz.meta4, meta4} @url{download/nncp-3.3.tar.xz, tar} -@url{download/nncp-3.3.tar.xz.asc, sig} +@url{download/nncp-3.3.tar.xz.asc, pgp} +@url{download/nncp-3.3.tar.xz.sig, ssh} @item @ref{Release 3_2, 3.2} @tab 2018-05-27 @tab 1147 KiB @tab @url{download/nncp-3.2.tar.xz.meta4, meta4} @url{download/nncp-3.2.tar.xz, tar} -@url{download/nncp-3.2.tar.xz.asc, sig} +@url{download/nncp-3.2.tar.xz.asc, pgp} +@url{download/nncp-3.2.tar.xz.sig, ssh} @item @ref{Release 3_1, 3.1} @tab 2018-02-18 @tab 1145 KiB @tab @url{download/nncp-3.1.tar.xz.meta4, meta4} @url{download/nncp-3.1.tar.xz, tar} -@url{download/nncp-3.1.tar.xz.asc, sig} +@url{download/nncp-3.1.tar.xz.asc, pgp} +@url{download/nncp-3.1.tar.xz.sig, ssh} @item @ref{Release 3_0, 3.0} @tab 2017-12-30 @tab 993 KiB @tab @url{download/nncp-3.0.tar.xz.meta4, meta4} @url{download/nncp-3.0.tar.xz, tar} -@url{download/nncp-3.0.tar.xz.asc, sig} +@url{download/nncp-3.0.tar.xz.asc, pgp} +@url{download/nncp-3.0.tar.xz.sig, ssh} @item @ref{Release 2_0, 2.0} @tab 2017-12-02 @tab 986 KiB @tab @url{download/nncp-2.0.tar.xz.meta4, meta4} @url{download/nncp-2.0.tar.xz, tar} -@url{download/nncp-2.0.tar.xz.asc, sig} +@url{download/nncp-2.0.tar.xz.asc, pgp} +@url{download/nncp-2.0.tar.xz.sig, ssh} @item @ref{Release 1_0, 1.0} @tab 2017-12-02 @tab 987 KiB @tab @url{download/nncp-1.0.tar.xz.meta4, meta4} @url{download/nncp-1.0.tar.xz, tar} -@url{download/nncp-1.0.tar.xz.asc, sig} +@url{download/nncp-1.0.tar.xz.asc, pgp} +@url{download/nncp-1.0.tar.xz.sig, ssh} @item @ref{Release 0_12, 0.12} @tab 2017-10-08 @tab 978 KiB @tab @url{download/nncp-0.12.tar.xz.meta4, meta4} @url{download/nncp-0.12.tar.xz, tar} -@url{download/nncp-0.12.tar.xz.asc, sig} +@url{download/nncp-0.12.tar.xz.asc, pgp} +@url{download/nncp-0.12.tar.xz.sig, ssh} @item @ref{Release 0_11, 0.11} @tab 2017-08-21 @tab 1031 KiB @tab @url{download/nncp-0.11.tar.xz.meta4, meta4} @url{download/nncp-0.11.tar.xz, tar} -@url{download/nncp-0.11.tar.xz.asc, sig} +@url{download/nncp-0.11.tar.xz.asc, pgp} +@url{download/nncp-0.11.tar.xz.sig, ssh} @item @ref{Release 0_10, 0.10} @tab 2017-07-04 @tab 949 KiB @tab @url{download/nncp-0.10.tar.xz.meta4, meta4} @url{download/nncp-0.10.tar.xz, tar} -@url{download/nncp-0.10.tar.xz.asc, sig} +@url{download/nncp-0.10.tar.xz.asc, pgp} +@url{download/nncp-0.10.tar.xz.sig, ssh} @item @ref{Release 0_9, 0.9} @tab 2017-05-17 @tab 942 KiB @tab @url{download/nncp-0.9.tar.xz.meta4, meta4} @url{download/nncp-0.9.tar.xz, tar} -@url{download/nncp-0.9.tar.xz.asc, sig} +@url{download/nncp-0.9.tar.xz.asc, pgp} +@url{download/nncp-0.9.tar.xz.sig, ssh} @item @ref{Release 0_8, 0.8} @tab 2017-04-30 @tab 932 KiB @tab @url{download/nncp-0.8.tar.xz.meta4, meta4} @url{download/nncp-0.8.tar.xz, tar} -@url{download/nncp-0.8.tar.xz.asc, sig} +@url{download/nncp-0.8.tar.xz.asc, pgp} +@url{download/nncp-0.8.tar.xz.sig, ssh} @item @ref{Release 0_7, 0.7} @tab 2017-04-02 @tab 783 KiB @tab @url{download/nncp-0.7.tar.xz.meta4, meta4} @url{download/nncp-0.7.tar.xz, tar} -@url{download/nncp-0.7.tar.xz.asc, sig} +@url{download/nncp-0.7.tar.xz.asc, pgp} +@url{download/nncp-0.7.tar.xz.sig, ssh} @item @ref{Release 0_6, 0.6} @tab 2017-02-05 @tab 746 KiB @tab @url{download/nncp-0.6.tar.xz.meta4, meta4} @url{download/nncp-0.6.tar.xz, tar} -@url{download/nncp-0.6.tar.xz.asc, sig} +@url{download/nncp-0.6.tar.xz.asc, pgp} +@url{download/nncp-0.6.tar.xz.sig, ssh} @item @ref{Release 0_5, 0.5} @tab 2017-01-19 @tab 743 KiB @tab @url{download/nncp-0.5.tar.xz.meta4, meta4} @url{download/nncp-0.5.tar.xz, tar} -@url{download/nncp-0.5.tar.xz.asc, sig} +@url{download/nncp-0.5.tar.xz.asc, pgp} +@url{download/nncp-0.5.tar.xz.sig, ssh} @item @ref{Release 0_4, 0.4} @tab 2017-01-17 @tab 741 KiB @tab @url{download/nncp-0.4.tar.xz.meta4, meta4} @url{download/nncp-0.4.tar.xz, tar} -@url{download/nncp-0.4.tar.xz.asc, sig} +@url{download/nncp-0.4.tar.xz.asc, pgp} +@url{download/nncp-0.4.tar.xz.sig, ssh} @item @ref{Release 0_3, 0.3} @tab 2017-01-17 @tab 741 KiB @tab @url{download/nncp-0.3.tar.xz.meta4, meta4} @url{download/nncp-0.3.tar.xz, tar} -@url{download/nncp-0.3.tar.xz.asc, sig} +@url{download/nncp-0.3.tar.xz.asc, pgp} +@url{download/nncp-0.3.tar.xz.sig, ssh} @item @ref{Release 0_2, 0.2} @tab 2017-01-17 @tab 740 KiB @tab @url{download/nncp-0.2.tar.xz.meta4, meta4} @url{download/nncp-0.2.tar.xz, tar} -@url{download/nncp-0.2.tar.xz.asc, sig} +@url{download/nncp-0.2.tar.xz.asc, pgp} +@url{download/nncp-0.2.tar.xz.sig, ssh} @item 0.1 @tab 2017-01-10 @tab 720 KiB @tab @url{download/nncp-0.1.tar.xz.meta4, meta4} @url{download/nncp-0.1.tar.xz, tar} -@url{download/nncp-0.1.tar.xz.asc, sig} +@url{download/nncp-0.1.tar.xz.asc, pgp} +@url{download/nncp-0.1.tar.xz.sig, ssh} @end multitable diff --git a/doc/integrity.texi b/doc/integrity.texi index 5547ef9..f09b5e8 100644 --- a/doc/integrity.texi +++ b/doc/integrity.texi @@ -5,16 +5,20 @@ @cindex gpg @cindex GnuPG @cindex WKD +@cindex OpenSSH @section Tarballs integrity check -You @strong{have to} check downloaded archives integrity and verify -their signature to be sure that you have got trusted, untampered -software. For integrity and authentication of downloaded binaries -@url{https://www.gnupg.org/, GNU Privacy Guard} is used. You must -download signature (@file{.asc}) provided with the tarball. +You @strong{have to} verify downloaded tarballs authenticity to be sure +that you retrieved trusted and untampered software. There are two options: -For the very first time you need to import signing public key. It is -provided below, but it is better to check alternative resources with it. +@table @asis + +@item @url{https://www.openpgp.org/, OpenPGP} @file{.asc} signature + Use @url{https://www.gnupg.org/, GNU Privacy Guard} free software + implementation. + For the very first time it is necessary to get signing public key and + import it. It is provided @url{.well-known/openpgpkey/nncpgo.org/hu/i4cdqgcarfjdjnba6y4jnf498asg8c6p.asc, here}, but you should + check alternate resources. @verbatim pub rsa2048/0x2B25868E75A1A953 2017-01-10 @@ -22,21 +26,19 @@ pub rsa2048/0x2B25868E75A1A953 2017-01-10 uid NNCP releases @end verbatim -@itemize - -@item @example $ gpg --auto-key-locate dane --locate-keys releases at nncpgo dot org $ gpg --auto-key-locate wkd --locate-keys releases at nncpgo dot org @end example -@item -@verbatiminclude .well-known/openpgpkey/nncpgo.org/hu/i4cdqgcarfjdjnba6y4jnf498asg8c6p.asc - -@end itemize - -Then you could verify tarballs signature: +@item @url{https://www.openssh.com/, OpenSSH} @file{.sig} signature + @url{PUBKEY-SSH.pub, Public key} and its OpenPGP + @url{PUBKEY-SSH.pub.asc, signature} made with the key above. + Its fingerprint: @code{SHA256:FRiWawVNBkyS3jFn8uZ/JlT+PWKSFbhWe5XSixp1+SY}. @example -$ gpg --verify nncp-@value{VERSION}.tar.xz.asc nncp-@value{VERSION}.tar.xz +$ ssh-keygen -Y verify -f PUBKEY-SSH.pub -I releases@@nncpgo.org -n file \ + -s nncp-@value{VERSION}.tar.zst.sig < nncp-@value{VERSION}.tar.zst @end example + +@end table diff --git a/doc/www.do b/doc/www.do new file mode 100644 index 0000000..672456c --- /dev/null +++ b/doc/www.do @@ -0,0 +1,16 @@ +html=nncp.html +redo $html +cp -a .well-known $html/ +cp -a download $html/ +cp ../PUBKEY-* $html/ +( + cd $html/download + export ATOM_ID="e33cb83e-bf33-46f8-b9b1-6115f46e1218" + export NAME=NNCP + export BASE_URL=http://www.nncpgo.org/download + export AUTHOR_EMAIL=releases@nncpgo.org + ~/work/releases-feed/releases.atom.zsh +) +perl -i -npe 'print "\n" if /^<\/head>/' $html/Tarballs.html +find nncp.html -type d -exec chmod 755 {} + +find nncp.html -type f -exec chmod 644 {} + diff --git a/makedist b/makedist index f833a7f..cc9cbc3 100755 --- a/makedist +++ b/makedist @@ -46,9 +46,7 @@ You can obtain releases source code prepared tarballs from @url{http://www.nncpgo.org/Mirrors.html, mirrors}. EOF perl -i -ne 'print unless /include pedro/' doc/index.texi doc/about.ru.texi -perl -p -i -e 's/^(.verbatiminclude) .*$/$1 PUBKEY.asc/g' doc/integrity.texi -mv doc/.well-known/openpgpkey/nncpgo.org/hu/i4cdqgcarfjdjnba6y4jnf498asg8c6p.asc PUBKEY.asc -ln -s ../PUBKEY.asc doc +mv doc/.well-known/openpgpkey/nncpgo.org/hu/i4cdqgcarfjdjnba6y4jnf498asg8c6p.asc PUBKEY-PGP.asc redo doc/all ######################################################################## @@ -122,8 +120,10 @@ cd .. tar cvf nncp-"$release".tar --uid=0 --gid=0 --numeric-owner nncp-"$release" xz -9v nncp-"$release".tar tarball=nncp-"$release".tar.xz +ssh-keygen -Y sign -f ~/.ssh/sign/releases@nncpgo.org -n file $tarball gpg --armor --detach-sign --sign --local-user releases@nncpgo.org "$tarball" -meta4-create -fn "$tarball" -mtime "$tarball" -sig "$tarball".asc \ +meta4-create -fn "$tarball" -mtime "$tarball" \ + -sig-pgp "$tarball".asc -sig-ssh "$tarball".sig \ http://www.nncpgo.org/download/"$tarball" \ http://y.www.nncpgo.org/download/"$tarball" \ https://nncp.mirrors.quux.org/download/"$tarball" < "$tarball" > "$tarball".meta4 @@ -131,7 +131,7 @@ meta4-create -fn "$tarball" -mtime "$tarball" -sig "$tarball".asc \ size=$(( $(stat -f %z $tarball) / 1024 )) release_date=$(date "+%Y-%m-%d") -mv -v $tmp/"$tarball" $tmp/"$tarball".asc $tmp/"$tarball".meta4 $cur/doc/download +mv -v $tmp/"$tarball" $tmp/"$tarball".asc $tmp/"$tarball".sig $tmp/"$tarball".meta4 $cur/doc/download release_underscored=`echo $release | tr . _` cat < -Fingerprint: 92C2 F0AE FE73 208E 46BF F3DE 2B25 868E 75A1 A953 +OpenPGP key: 92C2 F0AE FE73 208E 46BF F3DE 2B25 868E 75A1 A953 + NNCP releases +OpenSSH key: SHA256:FRiWawVNBkyS3jFn8uZ/JlT+PWKSFbhWe5XSixp1+SY There are mirrors where you can also get the source code tarballs: http://www.nncpgo.org/Mirrors.html @@ -234,8 +236,9 @@ $(git cat-file -p v$release | sed -n '6,/^.*BEGIN/p' | sed '$d') http://www.nncpgo.org/download/nncp-${release}.tar.xz ($size KiB) http://www.nncpgo.org/download/nncp-${release}.tar.xz.asc -Идентификатор GPG ключа: 0x2B25868E75A1A953 NNCP releases -Отпечаток: 92C2 F0AE FE73 208E 46BF F3DE 2B25 868E 75A1 A953 +OpenPGP ключ: 92C2 F0AE FE73 208E 46BF F3DE 2B25 868E 75A1 A953 + NNCP releases +OpenSSH ключ: SHA256:FRiWawVNBkyS3jFn8uZ/JlT+PWKSFbhWe5XSixp1+SY Есть и зеркала где вы также можете получить архивы с исходным кодом: http://www.nncpgo.org/Mirrors.html -- 2.44.0