FreedomBox Release Image Signatures

1 FreedomBox Release Image Signatures

Created by Steven Baltakatei Sandoval on 2022-05-14T03:29Z under a CC BY-SA 4.0 license.

1.1 Summary

This document describes when FreedomBox installation image signature files were created, as ofo 2022-05-14. Date ranges are used to describe history of these keys in Notable Public Keys.

1.2 Analysis

1.2.1 Acquire fingerprints of signatures

See fingerprints available here.

  1. Fingerprints
    1. Sunil Mohan Adapa (36C3 6144 0C9B C971)
      pub   rsa4096/0x36C361440C9BC971 2011-11-12 [SC] [expires: 2023-03-23]
      Key fingerprint = BCBE BD57 A11F 70B2 3782  BC57 36C3 6144 0C9B C971
uid                   [ unknown] Sunil Mohan Adapa <0f990da0>
uid                   [ unknown] Sunil Mohan Adapa <040cbdcf>
uid                   [ unknown] Sunil Mohan Adapa <6271c3c3>
sub   rsa4096/0x43EA1CFF0AA7C5F2 2016-06-04 [S] [expires: 2023-03-23]
      Key fingerprint = E713 C363 D672 5A75 AEA5  7481 43EA 1CFF 0AA7 C5F2
sub   rsa4096/0xF9F18B3DA6EF2942 2016-06-04 [A] [expires: 2023-03-23]
      Key fingerprint = DDE7 318C 9541 FB42 E786  8DD0 F9F1 8B3D A6EF 2942
sub   rsa4096/0xF5077A854C1D4B57 2011-11-12 [E] [expires: 2023-03-23]
      Key fingerprint = 83BB 47F9 531E 732C D468  E382 F507 7A85 4C1D 4B57
    2. James Valleroy (77C0 C75E 7B65 0808)
      pub   rsa4096/0x77C0C75E7B650808 2015-06-07 [SCA] [expires: 2022-11-20]
      Key fingerprint = 7D6A DB75 0F91 0855 8948  4BE6 77C0 C75E 7B65 0808
uid                   [ unknown] James Valleroy <ef8c790c>
uid                   [ unknown] James Valleroy <cc9e6d5c>
uid                   [ unknown] James Valleroy <aed00202>
sub   rsa4096/0x1E3D7658DDA11207 2015-07-03 [A] [expires: 2022-11-20]
      Key fingerprint = 065E 1FA3 78BD C472 41A9  410F 1E3D 7658 DDA1 1207
sub   rsa2048/0x81DD8ABA2A624357 2015-12-22 [A] [expires: 2022-11-20]
      Key fingerprint = 14ED DCE5 A2C1 5C06 E474  0AC0 81DD 8ABA 2A62 4357
sub   rsa4096/0x4972352E25D22BF4 2015-06-07 [E] [expires: 2022-11-20]
      Key fingerprint = 1968 4269 1A27 66F2 1A8B  250C 4972 352E 25D2 2BF4
sub   rsa2048/0xBEE22CB4990F243B 2017-01-14 [A] [expires: 2022-11-20]
      Key fingerprint = BCCD 6658 3F68 0306 8299  79AE BEE2 2CB4 990F 243B
sub   rsa4096/0x1F52746F95690007 2021-08-18 [A] [expires: 2022-08-18]
      Key fingerprint = 34E6 6A4D 0927 9756 A664  609C 1F52 746F 9569 0007
    3. FreedomBox CI (5D41 53D6 FE18 8FC8)
      pub   rsa4096/0x5D4153D6FE188FC8 2018-06-06 [SC]
      Key fingerprint = 013D 86D8 BA32 EAB4 A669  1BF8 5D41 53D6 FE18 8FC8
uid                   [ unknown] FreedomBox CI (Continuous Integration server) <7c8f3186>
sub   rsa4096/0x24E6B04F3B3AF25D 2018-06-06 [E]
      Key fingerprint = CE3D 01C4 C6D1 FF10 C201  348D 24E6 B04F 3B3A F25D

1.2.2 Acquire image signature files

wget -r -A .sig,MD5SUMS,SHA1SUMS,SHA256SUMS,SHA512SUMS,.sign,.asc https://ftp.freedombox.org/pub/freedombox/

Signature files downloaded on 2022-05-13 from https://ftp.freedombox.org/pub/freedombox/ available here.

1.2.3 List signature packets

  1. Script to call gpg to list packets
    #!/bin/bash

url="$1";
output="";
output="$(printf "%s\n%s\n" "$output" "========================================")";
output="$(printf "%s\n%s%s\n" "$output" "STATUS:url:" "$url")";
gpg_output="$(gpg --list-packets "$1")";
output="$(printf "%s\n%s\n" "$output" "$gpg_output")";
output="$(printf "%s\n%s\n" "$output" "========================================")";
printf "%s\n\n" "$output";
  2. Command to call script
    find . -type f -name "*.sig" | parallel /bin/bash /tmp/script.sh > 20220513_ftp.freedombox.org..image_gpg_packets.txt

    20220513_ftp.freedombox.org..image_gpg_packets.txt file available here.

1.2.4 List signature creation dates

Analyze gpg packet readouts 20220513_ftp.freedombox.org..image_gpg_packets.txt to get signature dates.

  1. Signatures of Sunil Mohan Adapa (36C3 6144 0C9B C971)

    Also include subkey 43EA 1CFF 0AA7 C5F2. 

    cat 20220513_ftp.freedombox.org..image_gpg_packets.txt | grep -E -A1 -- "(36C361440C9BC971$)|(43EA1CFF0AA7C5F2$)" | grep -E -- "created" | tr -s ' ' | cut -d' ' -f4 | tr -d ',' | sort -u | parallel date --date='@{}' --iso-8601=seconds --utc
2015-01-15T03:55:51+00:00
2015-01-15T03:56:16+00:00
2015-01-15T03:57:50+00:00
2015-01-15T03:58:33+00:00
2015-01-15T11:54:28+00:00
2015-08-06T18:32:21+00:00
2015-08-06T18:48:21+00:00
2015-08-06T19:34:38+00:00
2015-08-07T02:14:57+00:00
2015-08-07T02:16:17+00:00
2015-08-07T02:16:51+00:00
2015-08-07T04:22:11+00:00
2015-08-07T04:22:41+00:00
2015-10-18T11:04:00+00:00
2015-10-18T11:04:48+00:00
2015-10-18T11:05:56+00:00
2015-10-18T11:06:38+00:00
2015-10-18T11:07:57+00:00
2015-10-18T11:22:44+00:00
2015-10-18T11:53:01+00:00
2015-10-18T12:30:27+00:00
2015-10-18T14:17:32+00:00
2015-12-13T14:55:49+00:00
2015-12-13T14:58:26+00:00
2015-12-13T15:19:05+00:00
2015-12-13T15:23:56+00:00
2015-12-13T15:36:30+00:00
2015-12-13T15:37:58+00:00
2015-12-13T15:42:05+00:00
2015-12-13T15:53:32+00:00
2015-12-13T18:40:30+00:00
2015-12-13T19:04:54+00:00
2015-12-13T19:15:13+00:00
2015-12-13T19:15:21+00:00
2015-12-13T19:29:29+00:00
2015-12-13T19:31:58+00:00
2016-03-19T08:05:48+00:00
2016-03-19T08:09:27+00:00
2016-03-19T08:10:24+00:00
2016-03-19T08:11:01+00:00
2016-03-19T08:11:48+00:00
2016-03-19T08:13:01+00:00
2016-03-19T08:13:58+00:00
2016-03-19T08:14:49+00:00
2016-03-19T08:15:37+00:00
2016-03-19T08:16:29+00:00
2016-07-02T18:01:56+00:00
2016-07-02T18:02:00+00:00
2016-07-02T18:02:02+00:00
2016-07-02T18:02:04+00:00
2016-07-02T18:02:05+00:00
2016-07-02T18:02:07+00:00
2019-04-18T01:01:32+00:00
2019-04-18T01:18:45+00:00
  2. Signatures of James Valleroy (77C0 C75E 7B65 0808)
    cat 20220513_ftp.freedombox.org..image_gpg_packets.txt | grep -E -A1 -- "77C0C75E7B650808$" | grep -E -- "created" | tr -s ' ' | cut -d' ' -f4 | tr -d ',' | sort -u | parallel date --date='@{}' --iso-8601=seconds --utc
2016-07-03T11:52:05+00:00
2016-07-03T12:40:01+00:00
2016-07-03T13:24:00+00:00
2016-07-03T14:11:43+00:00
2016-07-03T14:59:30+00:00
2016-07-03T15:46:57+00:00
2016-07-03T16:30:50+00:00
2016-07-03T17:19:22+00:00
2016-07-03T18:07:38+00:00
2017-02-03T00:43:16+00:00
2017-02-03T01:18:14+00:00
2017-02-03T01:54:46+00:00
2017-02-03T02:31:25+00:00
2017-02-03T03:09:53+00:00
2017-02-03T03:45:38+00:00
2017-02-03T04:18:57+00:00
2017-02-03T04:51:22+00:00
2017-02-03T12:40:58+00:00
2017-02-03T13:06:59+00:00
2017-02-03T13:16:40+00:00
2017-02-03T13:19:43+00:00
2017-02-03T13:22:48+00:00
2017-02-03T13:25:03+00:00
2017-02-03T13:27:41+00:00
2017-06-18T20:14:44+00:00
2017-06-18T20:45:57+00:00
2017-06-18T21:15:22+00:00
2017-06-18T21:49:27+00:00
2017-06-18T22:25:18+00:00
2017-06-18T22:51:46+00:00
2017-06-18T23:17:29+00:00
2017-06-18T23:54:16+00:00
2017-06-19T00:04:26+00:00
2017-06-19T00:11:28+00:00
2017-06-19T00:27:17+00:00
2017-06-19T00:32:44+00:00
2017-06-19T01:02:21+00:00
2017-06-19T01:30:47+00:00
2017-07-17T23:33:56+00:00
2017-06-19T00:24:01+00:00
2017-08-16T23:46:26+00:00
  3. Signatures of FreedomBox CI (5D41 53D6 FE18 8FC8)
    cat 20220513_ftp.freedombox.org..image_gpg_packets.txt | grep -E -A1 -- "5D4153D6FE188FC8$" | grep -E -- "created" | tr -s ' ' | cut -d' ' -f4 | tr -d ',' | sort -u | parallel date --date='@{}' --iso-8601=seconds --utc
2018-06-14T12:23:36+00:00
2018-07-29T06:02:42+00:00
2018-12-23T07:49:21+00:00
2019-04-29T04:08:43+00:00
2019-07-19T06:11:28+00:00
2020-08-29T12:24:58+00:00
2020-08-29T13:14:58+00:00
2020-08-29T14:05:16+00:00
2020-08-29T16:47:09+00:00
2020-08-29T17:37:40+00:00
2020-08-29T18:28:24+00:00
2020-08-29T19:19:17+00:00
2020-08-29T19:34:58+00:00
2020-08-29T20:25:56+00:00
2020-08-29T21:16:43+00:00
2020-08-29T22:07:40+00:00
2020-08-29T22:57:07+00:00
2020-08-29T23:45:48+00:00
2020-08-30T00:01:13+00:00
2020-08-30T00:17:12+00:00
2020-08-30T01:10:47+00:00
2020-08-30T02:03:21+00:00
2020-08-30T02:55:44+00:00
2020-08-30T03:22:23+00:00
2020-08-30T03:38:00+00:00
2020-08-30T04:54:37+00:00
2020-10-01T14:48:13+00:00
2020-10-01T15:40:21+00:00
2021-08-28T16:49:58+00:00
2021-08-28T17:32:25+00:00
2021-08-28T18:14:29+00:00
2021-08-28T18:56:56+00:00
2021-08-28T19:39:14+00:00
2021-08-28T20:21:23+00:00
2021-08-28T20:34:36+00:00
2021-08-28T21:14:04+00:00
2021-08-28T21:55:54+00:00
2021-08-28T22:38:06+00:00
2021-08-28T23:20:14+00:00
2021-08-28T23:32:51+00:00
2021-08-29T00:15:21+00:00
2021-08-29T01:01:27+00:00
2021-08-29T01:46:49+00:00
2021-08-29T02:00:40+00:00
2021-08-29T02:14:00+00:00
2021-08-29T02:57:21+00:00
2021-08-29T03:41:18+00:00
2021-08-29T04:25:04+00:00
2021-08-29T04:55:38+00:00
2021-08-29T05:09:04+00:00
2021-08-29T06:03:14+00:00
2022-01-28T20:10:56+00:00
2022-03-03T21:47:46+00:00
2022-04-09T12:29:44+00:00
2022-05-06T20:12:41+00:00
2022-05-06T20:30:43+00:00
2022-05-06T20:50:47+00:00
2022-05-06T21:39:06+00:00
2022-05-06T22:25:08+00:00
2022-05-06T23:11:17+00:00
2022-05-06T23:25:43+00:00
2022-05-07T00:13:20+00:00
2022-05-07T00:56:44+00:00
2022-05-07T01:43:16+00:00
2022-05-07T02:29:27+00:00
2022-05-07T03:15:52+00:00
2022-05-07T04:01:35+00:00
2022-05-07T04:16:08+00:00
2022-05-07T05:03:01+00:00
2022-05-07T05:49:11+00:00
2022-05-07T06:35:17+00:00
2022-05-07T07:27:05+00:00
2022-05-07T08:18:58+00:00
2022-05-07T08:34:16+00:00
2022-05-07T08:48:29+00:00
2022-05-07T09:37:40+00:00
2022-05-07T10:26:27+00:00
2022-05-07T11:15:56+00:00
2022-05-07T12:05:38+00:00
2022-05-07T12:36:42+00:00
2022-05-07T12:51:31+00:00

1.3 Conclusion

  • Sunil Mohan Adapa (36C3 6144 0C9B C971) created signatures between 2015 and 2019 inclusive.
  • James Valleroy (77C0 C75E 7B65 0808) created signatures between 2016 and 2017 inclusive.
  • FreedomBox CI (5D41 53D6 FE18 8FC8) created signatures between 2018 and 2022 inclusive.

Date: 2022-05-14

Author: Steven Baltakatei Sandoval

Created: 2022-05-14 Sat 03:34

Validate