please enroll UEFI signing keys into signing service for ppas

Asked by Steve Langasek

We have 4 signing keys with certificates signed by the Canonical UEFI CA that we need to have attached to the signing service for various signing ppas. The keys and ppas are:

- https://launchpad.net/~canonical-signing/+archive/ubuntu/primary-2022v1
  fingerprint: 8C:B7:94:7F:30:AD:67:00:B5:B1:E1:C7:15:4E:09:55:5D:2B:C3:DC
  private key: ftpmaster-ps5:/home/vorlon/secureboot/private/uefi-2022v1.key
  public key: https://people.canonical.com/~vorlon/uefi-2022v1.crt

- https://launchpad.net/~canonical-signing/+archive/ubuntu/primary-2022v2
  fingerprint: AE:98:DF:E2:04:3C:58:41:1A:F6:1B:6C:59:AC:B2:5E:A4:D2:1A:5D
  private key: ftpmaster-ps5:/home/vorlon/secureboot/private/uefi-2022v2.key
  public key: https://people.canonical.com/~vorlon/uefi-2022v2.crt

- https://launchpad.net/~canonical-signing/+archive/ubuntu/advantage-2021v2
  fingerprint: 98:6D:1D:69:14:07:05:A6:90:A6:EF:B7:07:7A:8F:E7:EB:7A:A6:35
  private key: wherever IS created it on gannondorf (/root?)
  public key:
    https://people.canonical.com/~vorlon/SecureBootCA-2021-09-23.tar.gz
    -> SecureBootCA/newcerts/0D.pem

- https://launchpad.net/~canonical-signing/+archive/ubuntu/core-2021v2
  fingerprint: 7E:12:F8:93:D9:59:F8:89:32:95:20:0E:AC:10:FE:F2:96:FD:6D:7C
  private key: wherever IS created it on gannondorf (/root?)
  public key:
    https://people.canonical.com/~vorlon/SecureBootCA-2021-09-23.tar.gz
    -> SecureBootCA/newcerts/0A.pem

Question information

Language:
English Edit question
Status:
Answered
For:
Launchpad itself Edit question
Assignee:
Colin Watson Edit question
Last query:
Last reply:
Revision history for this message
Guruprasad (lgp171188) said :
#1

Hi Steve, it looks like I do not have the necessary permissions to do this. So we'll have to wait till one of Colin/William are back from their vacation to help you.

Revision history for this message
Julian Andres Klode (juliank) said :
#2

Ping, how are we doing on this?

Revision history for this message
Guruprasad (lgp171188) said :
#3

Hi Julian, Colin is off today and has been busy in the past week or so. I will nudge him about this once he is back to work on Monday. Thank you for your patience.

Revision history for this message
Colin Watson (cjwatson) said :
#4
Revision history for this message
Colin Watson (cjwatson) said :
#5

This is done now.

Can you help with this problem?

Provide an answer of your own, or ask Steve Langasek for more information if necessary.

To post a message you must log in.