Release-signing toolchain: HSM-backed OpenPGP workflow#240

Open

quarckster wants to merge 18 commits into

openssl:masterfrom

quarckster:signing-script

Commits on May 11, 2026

release-tools: add openssl-pgp-ceremony-run
quarckster
committed
release-tools/openssl-pgp-ceremony-run: add tmux start-and-wait orchestration
quarckster
committed
release-tools/openssl-pgp: run generatekey in batch mode
quarckster
committed
release-tools: add openssl-pgp-revocation-recipients bundle helper
quarckster
committed
release-tools/openssl-pgp-ceremony-run: skip server owner in access grant
quarckster
committed
openssl-pgp: route OCS quorum operations through preload
quarckster
committed
openssl-pgp: pin preload to module 1 by default
quarckster
committed

Commits on May 14, 2026

stage-release.sh: rename --local-user to --key-label
quarckster
committed