terraform

Commit Graph

Author	SHA1	Message	Date
Justin Campbell	495826444b	plugin/discovery: Use GPG keys from Registry When verifying the signature of the SHA256SUMS file, we have been hardcoding HashiCorp's public GPG key and using it as the keyring. Going forward, Terraform will get a list of valid public keys for a provider from the Terraform Registry (registry.terraform.io), and use them as the keyring for the openpgp verification func.	2018-11-20 14:09:16 -05:00
James Bardin	e059eb80d1	add test for signature mismatch	2017-06-21 16:17:34 -04:00
James Bardin	13d835f996	test signature verification use a published provider's checksum file and signature to check the verification.	2017-06-20 13:14:30 -04:00

Author

SHA1

Message

Date

Justin Campbell

495826444b

plugin/discovery: Use GPG keys from Registry

When verifying the signature of the SHA256SUMS file, we have been
hardcoding HashiCorp's public GPG key and using it as the keyring.

Going forward, Terraform will get a list of valid public keys for a
provider from the Terraform Registry (registry.terraform.io), and use
them as the keyring for the openpgp verification func.

2018-11-20 14:09:16 -05:00

James Bardin

e059eb80d1

add test for signature mismatch

2017-06-21 16:17:34 -04:00

James Bardin

13d835f996

test signature verification

use a published provider's checksum file and signature to check the
verification.

2017-06-20 13:14:30 -04:00

3 Commits