From 0c5edf1ced2872c495b190977db575deaf28fa1c Mon Sep 17 00:00:00 2001
From: Christian Poessinger <christian@poessinger.com>
Date: Mon, 6 Sep 2021 12:31:45 +0200
Subject: install-image: T2108: use minisign backup key if primary key fails

---
 scripts/install/install-image | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/scripts/install/install-image b/scripts/install/install-image
index 439c6ca4..146a6560 100755
--- a/scripts/install/install-image
+++ b/scripts/install/install-image
@@ -173,6 +173,10 @@ fetch_iso_by_url ()
     if [ -e ${filename}.minisig ]; then
         echo "Found it. Checking digital signature..."
         minisign -V -q -p /usr/share/vyos/keys/vyos-release.minisign.pub -m ${filename} -x ${filename}.minisig
+        if [ $? -ne 0 ]; then
+            echo "Signature check FAILED, trying BACKUP key..."
+            minisign -V -q -p /usr/share/vyos/keys/vyos-backup.minisign.pub -m ${filename} -x ${filename}.minisig
+        fi
         if [ $? -ne 0 ]; then
             echo "Signature check FAILED."
             echo -n "Do you want to continue anyway? (yes/no) [no] "
-- 
cgit v1.2.3