The merge for this has been deployed to dogfood. Added a FIT signable blob to the signing test packages and threw them into a FIT signing PPA on dogfood. This correctly triggered a new key to be generated:
Generating a 2048 bit RSA private key
.........................+++
...................+++
writing new private key to '/srv/launchpad.net/ppa-signing-keys/uefi/apw/fit-1/fit/fit.key'
and apparent signing of the supplied object:
FIT description: kernel, initrd and devicetree
Created: Wed Jun 19 11:46:09 2019
Image 0 (kernel@1)
Description: kernel
These have published out as expected into dists, and appear correctly signed when downloaded. The public key is included as expected.
The merge for this has been deployed to dogfood. Added a FIT signable blob to the signing test packages and threw them into a FIT signing PPA on dogfood. This correctly triggered a new key to be generated:
Generating a 2048 bit RSA private key ....... ....... ......+ ++ ....... ....... +++ .net/ppa- signing- keys/uefi/ apw/fit- 1/fit/fit. key'
.....
.....
writing new private key to '/srv/launchpad
and apparent signing of the supplied object:
FIT description: kernel, initrd and devicetree
Created: Wed Jun 19 11:46:09 2019
Image 0 (kernel@1)
Description: kernel
These have published out as expected into dists, and appear correctly signed when downloaded. The public key is included as expected.