upstream/terraform
1
0
Fork 0
mirror of https://github.com/hashicorp/terraform.git synced 2026-02-19 02:39:17 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions 6
terraform/internal/releaseauth/testdata/sample.md
Brandon Croft 6daaec5ce1
Package releaseauth 
Package releaseauth helps authenticates archives downloaded from a service like releases.hashicorp.com by providing some simple authentication tools:

1. Matching reported SHA-256 hash against a standard SHA256SUMS file.
2. Calculates the SHA-256 checksum of an archive and compares it against a reported hash.
3. Ensures the checksums were signed by HashiCorp.
2023-08-14 14:07:18 -06:00

567 B
Raw Permalink Blame History

Package releaseauth Test Data Signing Key

This directory contains a private key that is only used for signing the test data, along with the public key that the package uses to verfify the signing. Here are the steps to reproduce the test data, which would be necessary if the archive and checksum changes.

  1. Import the secret key

gpg --import sample.private.key

  1. Sign the sample_release SHA256SUMS file using the sample key:

gpg -u 200BDA882C95B80A --output sample_release/sample_0.1.0_SHA256SUMS.sig --detach-sig sample_release/sample_0.1.0_SHA256SUMS