Skip to content

Release v4.27.0
Compare
Choose a tag to compare
@benma benma released this 22 Mar 15:02
· 2793 commits to master since this release
v4.27.0
This tag was signed with the committer’s verified signature.
benma
GPG key ID: 804538928C37EAE8
Learn about vigilant mode.
a9015a7
This commit was signed with the committer’s verified signature.
benma
GPG key ID: 804538928C37EAE8
Learn about vigilant mode.

Release notes

  • Buy ERC20 tokens using Moonpay
  • Upgrade to BitBox02 Bitcoin-only firmware version 9.5.0
  • Upgrade to BitBox02 Multi firmware version 9.5.0
  • Run BitBoxApp installer as admin by default on Windows
  • Close a running BitBoxApp instance on Windows when installing an update to ensure success
  • Connect default full nodes on port 443 to avoid firewall issues
  • Show blockchain connection errors in detail
  • Remove CryptoCompare; use Coingecko for latest conversion rates. Fixes rate limiting issues, especially for VPN/Tor users.
  • Remove confusing disabled copy button in the receive screen

Verifying the release

Get benma's public key:

curl https://keybase.io/benma/pgp_keys.asc?fingerprint=2260e48288882c76afaa319d67a2b160f74db275 | gpg --import
# or via Tor hidden service
curl http://keybase5wmilwokqirssclfnsqrjdsi7jdir5wy7y7iu3tanwmtp6oid.onion/benma/pgp_keys.asc?fingerprint=2260e48288882c76afaa319d67a2b160f74db275 | gpg --import

Download the app for your platform and the corresponding .asc file and place them in the same folder.

We will verify the signature of the macOS release as an example. The other files are verified in the same way by replacing the filename.

To verify the signature, execute:

gpg --verify BitBox-4.27.0-macOS.zip.asc

You should see the following output:

gpg --verify BitBox-4.27.0-macOS.zip.asc
gpg: assuming signed data in 'BitBox-4.27.0-macOS.zip'
gpg: Signature made <DATE AND TIME>
gpg:                using RSA key 2D8876810AB092E451DCA894804538928C37EAE8
gpg: Good signature from "Marko Bencun <marko@shiftcrypto.ch>" [ultimate]
gpg:                 aka "Marko Bencun <mbencun+pgp@gmail.com>" [ultimate]

(The [ultimate] could say [unknown] or something else depending on your trust level.)

Assets 14