17 lines
631 B
Go
17 lines
631 B
Go
package update
|
|
|
|
// publicKeyPEM is the PEM-encoded Ed25519 public key that matches the
|
|
// RELEASE_SIGNING_KEY secret used by CI to sign release binaries. Generate a
|
|
// keypair once with:
|
|
//
|
|
// openssl genpkey -algorithm ed25519 -out private.pem
|
|
// openssl pkey -in private.pem -pubout -out public.pem
|
|
//
|
|
// Paste the contents of public.pem here and commit; store private.pem as
|
|
// the RELEASE_SIGNING_KEY repository secret. When empty, the updater refuses
|
|
// to update (e.g. development builds).
|
|
var publicKeyPEM = `-----BEGIN PUBLIC KEY-----
|
|
MCowBQYDK2VwAyEAqTAJ0CCeAQI7MhFlgc5xNmF/CfvLVUAY3ZAoeAS0tT8=
|
|
-----END PUBLIC KEY-----
|
|
`
|