Skip to content

Commit 0ef7c4f

Browse files
darosiorpinheadmz
authored andcommitted
Update downlad signature verification with new builder keys location
1 parent dee2105 commit 0ef7c4f

File tree

2 files changed

+11
-12
lines changed

2 files changed

+11
-12
lines changed

_includes/templates/download.html

Lines changed: 4 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -16,13 +16,11 @@
1616
{% capture SHORT_BUILDER_KEY %}
1717
{{example_builder_key | slice: 0, 4}} {{ example_builder_key | slice: 4, 4 }}..
1818
.{% endcapture %}
19-
{% capture BUILDER_KEYS_TXT_URL %}{{page.builder_keys_url}}/keys.txt{% endcapture %}
2019

2120
{% capture OBTAIN_RELEASE_KEY %}
2221
{{page.obtain_release_key |
2322
replace: '$(BUILDER_KEYS_URL)', page.builder_keys_url |
24-
replace: '$(EXAMPLE_BUILDERS_LINE)', page.example_builders_line |
25-
replace: '$(BUILDER_KEYS_TXT_URL)', BUILDER_KEYS_TXT_URL}}
23+
replace: '$(EXAMPLE_BUILDER_KEY_FILE)', page.example_builder_key_file}}
2624
{% endcapture %}
2725

2826
{% assign GPG_DOWNLOAD_URL = "https://www.gnupg.org/download/index.en.html#binary" %}
@@ -157,7 +155,7 @@ <h2 style="text-align: center" id="{{page.verify_download | slugify}}">{{page.ve
157155

158156
<li>{{OBTAIN_RELEASE_KEY}}
159157

160-
<pre class="highlight"><code>{{GPG}}{{site.strings.gpg_keyserver}} --recv-keys {{example_builder_key}}</code></pre>
158+
<pre class="highlight"><code>{{GPG}} --import {{page.example_builder_key_file}}</code></pre>
161159

162160
<p>{{page.release_key_obtained}}</p></li>
163161

@@ -205,7 +203,7 @@ <h2 style="text-align: center" id="{{page.verify_download | slugify}}">{{page.ve
205203

206204
<li>{{OBTAIN_RELEASE_KEY}}
207205

208-
<pre class="highlight"><code>gpg{{site.strings.gpg_keyserver}} --recv-keys {{example_builder_key}}</code></pre>
206+
<pre class="highlight"><code>gpg --import {{page.example_builder_key_file}}</code></pre>
209207

210208
<p>{{page.release_key_obtained}}</p></li>
211209

@@ -247,7 +245,7 @@ <h2 style="text-align: center" id="{{page.verify_download | slugify}}">{{page.ve
247245

248246
<li>{{OBTAIN_RELEASE_KEY}}
249247

250-
<pre class="highlight"><code>gpg{{site.strings.gpg_keyserver}} --recv-keys {{example_builder_key}}</code></pre>
248+
<pre class="highlight"><code>gpg --import {{page.example_builder_key_file}}</code></pre>
251249

252250
<p>{{page.release_key_obtained}}</p></li>
253251

_posts/en/pages/2017-01-01-download.md

Lines changed: 7 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -80,19 +80,20 @@ verify_download_checksum: "Verify that the checksum of the release file is liste
8080
checksum_warning_and_ok: 'In the output produced by the above command, you can safely ignore any warnings and failures, but you must ensure the output lists "$(SHASUMS_OK)" after the name of the release file you downloaded. For example:'
8181

8282
example_builders_line: "E777299FC265DD04793070EB944D35F9AC3DB76A Michael Ford (fanquake)"
83-
builder_keys_url: "https://github.com/bitcoin/bitcoin/tree/master/contrib/builder-keys"
83+
builder_keys_url: "https://github.com/bitcoin-core/guix.sigs/tree/main/builder-keys"
84+
example_builder_key_file: "fanquake.gpg"
8485

8586
obtain_release_key: >
8687
<p>Bitcoin releases are signed by a number of individuals, each with a unique public
8788
key. In order to recognize the validity of signatures, you must use GPG to load these
8889
public keys locally. You can find many developer keys listed in the <a
89-
href='$(BUILDER_KEYS_URL)'>bitcoin/bitcoin repository</a>, which you can then load
90+
href='$(BUILDER_KEYS_URL)'>bitcoin-core/guix.sigs repository</a>, which you can then load
9091
into your GPG key database.</p>
9192
92-
<p>For example, given the <a href='$(BUILDER_KEYS_TXT_URL)'><code>
93-
builder-keys/keys.txt</code></a> line
94-
<code>$(EXAMPLE_BUILDERS_LINE)</code>you could load that
95-
key using this command:</p>
93+
<p>For example, you could load the key <a
94+
href='$(BUILDER_KEYS_URL)/$(EXAMPLE_BUILDER_KEY_FILE)'><code>
95+
builder-keys/$(EXAMPLE_BUILDER_KEY_FILE)</code></a> by downloading the file as <code>
96+
$(EXAMPLE_BUILDER_KEY_FILE)</code> and using this command:</p>
9697
9798
choosing_builders: >
9899
It is recommended that you choose a few individuals from this list who you find

0 commit comments

Comments
 (0)