problem: distributed gpg verification

solution: link to commit for signing gpg key (at separate repo) and include signatures installer script (an optional added layer of security) Rel ETCDEVTeam#5
whilei · Jul 24, 2017 · 8ff8d7a · 8ff8d7a
1 parent 3433438
commit 8ff8d7a
Show file tree

Hide file tree

Showing 4 changed files with 2 additions and 2 deletions.
diff --git a/get-windows.sh b/get-windows.sh
@@ -15,7 +15,7 @@ set -e
 TAR_FILE="/tmp/janus.zip"
 TAR_FILE_SIG="/tmp/janus.zip.sig"
 ISAAC_GPG_FILE="/tmp/isaac-gpg.txt"
-ISAAC_GPG_URL="https://raw.githubusercontent.com/ethereumproject/volunteer/master/Volunteer-Public-Keys/isaac.ardis%40gmail.com"
+ISAAC_GPG_URL="https://raw.githubusercontent.com/ethereumproject/volunteer/7a78a94307d67a0b20e418568b7bccac83c3d143/Volunteer-Public-Keys/isaac.ardis%40gmail.com"
 DOWNLOAD_URL="https://github.com/ethereumproject/janus/releases/download"
 test -z "$TMPDIR" && TMPDIR="$(mktemp -d)"
 

diff --git a/get-windows.sh.sig b/get-windows.sh.sig
diff --git a/get.sh b/get.sh
@@ -15,7 +15,7 @@ set -e
 TAR_FILE="/tmp/janus.tar.gz"
 TAR_FILE_SIG="/tmp/janus.tar.gz.sig"
 ISAAC_GPG_FILE="/tmp/isaac-gpg.txt"
-ISAAC_GPG_URL="https://raw.githubusercontent.com/ethereumproject/volunteer/master/Volunteer-Public-Keys/isaac.ardis%40gmail.com"
+ISAAC_GPG_URL="https://raw.githubusercontent.com/ethereumproject/volunteer/7a78a94307d67a0b20e418568b7bccac83c3d143/Volunteer-Public-Keys/isaac.ardis%40gmail.com"
 DOWNLOAD_URL="https://github.com/ethereumproject/janus/releases/download"
 test -z "$TMPDIR" && TMPDIR="$(mktemp -d)"
 

diff --git a/get.sh.sig b/get.sh.sig