Skip to content

Latest commit

 

History

History
28 lines (21 loc) · 786 Bytes

MAINTAINERS.md

File metadata and controls

28 lines (21 loc) · 786 Bytes

Firmware release process

  1. Tag the commit to be released with the next firmware version
  2. Build the firmware using Docker
  3. Sign the binary firmware
  4. Upload signed binary to the Github releases
  5. Bump ./STABLE_RELEASE file with the latest version
  6. Run update script on the update server (if needed)

Signing firmware

To sign the firmware it suffices to call pynitrokey like this:

nitropy fido2 util sign VERIFYING_KEY APP_HEX OUTPUT_JSON

128kB variant

During the firmware signing the smaller MCU version has to be indicated during signing with the --pages switch, like:

nitropy fido2 util sign --pages 64 ....

The rest of the invocation is the same, e.g.:

nitropy fido2 util sign --pages 64 VERIFYING_KEY APP_HEX OUTPUT_JSON