From 34722c031f0ae91ab844e3d00d6187f929b7380a Mon Sep 17 00:00:00 2001 From: Vladimir Dubrovin <3proxy@3proxy.ru> Date: Sat, 22 Aug 2026 10:39:06 +0300 Subject: [PATCH] Drop the Ed25519 release key No published release was ever signed with it - signing was introduced after 0.9.9 - so it verifies nothing and only adds a second key for users to reason about. --- 3proxy-release-key-ed25519.asc | 10 ---------- SECURITY.md | 6 ------ 2 files changed, 16 deletions(-) delete mode 100644 3proxy-release-key-ed25519.asc diff --git a/3proxy-release-key-ed25519.asc b/3proxy-release-key-ed25519.asc deleted file mode 100644 index 6cc88b5..0000000 --- a/3proxy-release-key-ed25519.asc +++ /dev/null @@ -1,10 +0,0 @@ ------BEGIN PGP PUBLIC KEY BLOCK----- - -mDMEaogJthYJKwYBBAHaRw8BAQdA8rZ4l90kTOSrlosP0yyeX6jFGfiFFizawjS0 -vyQnmu60KjNwcm94eSByZWxlYXNlIHNpZ25pbmcgPDNwcm94eUAzcHJveHkub3Jn -PoivBBMWCgBXFiEEvHxfo3tIuOfF5ScUw2JYsMbAg6oFAmqICbYbFIAAAAAABAAO -bWFudTIsMi41KzEuMTIsMCwzAhsDBQsJCAcCAiICBhUKCQgLAgQWAgMBAh4HAheA -AAoJEMNiWLDGwIOqBHIA/iRus5VEqL+v6nYQ+GDLDUZJzMfFcnDBI+BOOhiESnTp -AP4s3uvhigRcdutxkYwSXBlJ+7wE1yZeuUmjPoJXvgNaDw== -=Ngp2 ------END PGP PUBLIC KEY BLOCK----- diff --git a/SECURITY.md b/SECURITY.md index ce83528..92e1c1b 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -33,12 +33,6 @@ Import it once: gpg --import 3proxy-release-key.asc ``` -Releases up to and including 0.9.9 were signed with an Ed25519 key, kept as -`3proxy-release-key-ed25519.asc` for verifying those older files. Note that -rpm 4.14 and earlier (RHEL/CentOS 8 and older) cannot import an Ed25519 key -and will report `SIGNATURES NOT OK`; use the RSA key and 0.9.9.1 or later on -those systems. - Checksums and the checksum file signature: ```