Skip to content

v1.5.1
Compare
Choose a tag to compare
@benma benma released this 11 May 06:41
· 28 commits to master since this release
v1.5.1
This tag was signed with the committer’s verified signature.
benma
GPG key ID: 804538928C37EAE8
Learn about vigilant mode.
54723c7
This commit was signed with the committer’s verified signature.
benma
GPG key ID: 804538928C37EAE8
Learn about vigilant mode.

Release notes

  • Fix bug where on macOS 13.3, the bridge would register one BitBox02 twice
  • Fix a bug on Windows 11 causing timeouts of BitBox02 workflows

Note

This is a patch release for macOS and Windows only.

Verifying the release

Note: the public key 1AA6 2C17 C56D 4275 A541 2320 9CD5 646C 0AD5 161E used to sign previous releases was revoked and replaced with the key DD09 E413 0975 0EBF AE0D EF63 5092 49B0 68D2 15AE for operational reasons. The new key is now hosted on the shiftcrypto.ch webserver.

Get a public key of security@shiftcrypto.ch with fingerprint DD09 E413 0975 0EBF AE0D EF63 5092 49B0 68D2 15AE:

curl https://bitbox.swiss/download/shiftcryptosec-509249B068D215AE.gpg.asc | gpg --import

Download the bridge for your platform and the corresponding .asc file and place them in the same folder.

We will verify the signature of the macOS release as an example. The other files are verified in the same way by replacing the filename.

To verify the signature, execute:

gpg --verify BitBoxBridge-1.5.1-macOS-installer.pkg.asc

You should see the following output:

gpg --verify BitBoxBridge-1.5.1-macOS-installer.pkg.asc
gpg: assuming signed data in 'BitBoxBridge-1.5.1-macOS-installer.pkg'
gpg: Signature made <DATE AND TIME>
gpg:                using RSA key DD09E41309750EBFAE0DEF63509249B068D215AE
gpg: Good signature from "ShiftCrypto Security <security@shiftcrypto.ch>" [ultimate]

(The [ultimate] could say [unknown] or something else depending on your trust level.)

Assets 12
Loading