Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Terraform Registry: Use signing keys provided from the Registry #19389

Merged
merged 4 commits into from
Nov 20, 2018
Merged

Terraform Registry: Use signing keys provided from the Registry #19389

merged 4 commits into from
Nov 20, 2018

Commits on Nov 20, 2018

  1. plugin/discovery: Use GPG keys from Registry 

    When verifying the signature of the SHA256SUMS file, we have been
hardcoding HashiCorp's public GPG key and using it as the keyring.

Going forward, Terraform will get a list of valid public keys for a
provider from the Terraform Registry (registry.terraform.io), and use
them as the keyring for the openpgp verification func.
    @justincampbell
    justincampbell committed Nov 20, 2018
    Configuration menu
    Copy the full SHA
    4958264 View commit details
    Browse the repository at this point in the history

  2. plugin/discovery: Print name before verification 

    This is so that any errors output from the checksum/signature verification show up in the expected place in the output.
    @justincampbell
    justincampbell committed Nov 20, 2018
    Configuration menu
    Copy the full SHA
    9a8a74b View commit details
    Browse the repository at this point in the history

  3. plugin/discovery: Add friendly gpg err msg 

    When GPG verification fails, display a helpful message to the user instead of the generic openpgp error.
    @justincampbell
    justincampbell committed Nov 20, 2018
    Configuration menu
    Copy the full SHA
    06825bf View commit details
    Browse the repository at this point in the history

  4. registry/response: Add protocols to DL resp

    @justincampbell
    justincampbell committed Nov 20, 2018
    Configuration menu
    Copy the full SHA
    c993e9b View commit details
    Browse the repository at this point in the history