From 8ff8d7a0bfa47846e8b410d4a5c2af5a04f3cb4c Mon Sep 17 00:00:00 2001 From: ia Date: Mon, 24 Jul 2017 08:00:52 -0500 Subject: [PATCH] problem: distributed gpg verification solution: link to commit for signing gpg key (at separate repo) and include signatures installer script (an optional added layer of security) Rel #5 --- get-windows.sh | 2 +- get-windows.sh.sig | Bin 0 -> 543 bytes get.sh | 2 +- get.sh.sig | Bin 0 -> 543 bytes 4 files changed, 2 insertions(+), 2 deletions(-) create mode 100644 get-windows.sh.sig create mode 100644 get.sh.sig diff --git a/get-windows.sh b/get-windows.sh index 90a859e..3902542 100644 --- a/get-windows.sh +++ b/get-windows.sh @@ -15,7 +15,7 @@ set -e TAR_FILE="/tmp/janus.zip" TAR_FILE_SIG="/tmp/janus.zip.sig" ISAAC_GPG_FILE="/tmp/isaac-gpg.txt" -ISAAC_GPG_URL="https://raw.githubusercontent.com/ethereumproject/volunteer/master/Volunteer-Public-Keys/isaac.ardis%40gmail.com" +ISAAC_GPG_URL="https://raw.githubusercontent.com/ethereumproject/volunteer/7a78a94307d67a0b20e418568b7bccac83c3d143/Volunteer-Public-Keys/isaac.ardis%40gmail.com" DOWNLOAD_URL="https://github.com/ethereumproject/janus/releases/download" test -z "$TMPDIR" && TMPDIR="$(mktemp -d)" diff --git a/get-windows.sh.sig b/get-windows.sh.sig new file mode 100644 index 0000000000000000000000000000000000000000..fa8d42e428f91a7dafdd847646d661ae7d6cf567 GIT binary patch literal 543 zcmV+)0^t3L0vrSY0SEvF1p--h?#ciP2@vyShb43w*-U^S5CG!yVC-Z_D6RH`iRW=*00a;PBhJV_FE~^l<0lH;VN#XoY`z^WM6@lgzLLei@#>j{>GU13cX3X}j z-S1aKbS;l7cgtaHgJPNa!9rkzyYFkg&7dHtdoqSzBTO8E7qwo}{zQ1(GJ%!fW*PEi zpGWp866T1k=z_zCn+j2gqHBiE?$mM*WY1hS%%CK0_Y^oir3P3yDudPJ4)XW7N)9_3 zz4}Dpga>|1jJyh1xbbXDRWV;G9+)`RUX;sT-URk9q(`dgB-S}Q+CVV^pWKQk9~m=M z;ox3rMPQPE{Jx#?dLK^%Ad}5Zv6b2)2A9GH>8Iw=;XPeWkTIeKoGvW_Zquyi@NjH} zi5SUZZ`oN4Zg{8ExoAE~$8-+@guZ~ud4C;8i1Dx~ZC?}Xc~GK_5^6l(7Y!?h6vcJj zm$X!w;+HsfN>lbAxKx7~p&822cjK1Zbn=v4YA73?(+=r4hKd}?WZ`%4aTZb=IkLiN z0*rk!5rbg5VBzv1mlheA6WMnFdvR$G4lk%)TzlV|==Xv@`Bi_;QBhIw!IQ;pkRH7X z3ow%}q6|i-2!?B?11X;o8nxhs4oT{tA*~&=xH%uPq+8(5Edz)9d`Y3YYyP8#(m$K9 hV_KNsPn%vIh7-M4prPjF8{g28R?(w?egYxF2@av#0I&c6 literal 0 HcmV?d00001 diff --git a/get.sh b/get.sh index b0ba3eb..ab8580e 100755 --- a/get.sh +++ b/get.sh @@ -15,7 +15,7 @@ set -e TAR_FILE="/tmp/janus.tar.gz" TAR_FILE_SIG="/tmp/janus.tar.gz.sig" ISAAC_GPG_FILE="/tmp/isaac-gpg.txt" -ISAAC_GPG_URL="https://raw.githubusercontent.com/ethereumproject/volunteer/master/Volunteer-Public-Keys/isaac.ardis%40gmail.com" +ISAAC_GPG_URL="https://raw.githubusercontent.com/ethereumproject/volunteer/7a78a94307d67a0b20e418568b7bccac83c3d143/Volunteer-Public-Keys/isaac.ardis%40gmail.com" DOWNLOAD_URL="https://github.com/ethereumproject/janus/releases/download" test -z "$TMPDIR" && TMPDIR="$(mktemp -d)" diff --git a/get.sh.sig b/get.sh.sig new file mode 100644 index 0000000000000000000000000000000000000000..47c91820e403ac2b475cabc360ab2f8a05931ced GIT binary patch literal 543 zcmV+)0^t3L0vrSY0SEvF1p--h?!^EK2@vyShb43w*-UVY5B@Db&|>qzW>y!#>LSUO z&gUn{;&XSiFQoxR-3pL-Gk(6F1igNuYw!`KDxpgg8BbE!pY0#vI{fmb^u(qctmCn) z_XfE8nI`xBRK}d&S3B?Mg!{D@HrkB)_m`l}gl?oQ1$xK>yQ|~i(4E2>K?htV)rO8<&rPs1+f8PQ- z*n^CXYQ{U2%n%$aI2#ukftC&2KN$K1HdYknMsIdGJtyI~KHr0;4c7avSD8e+-zj6ctLdjDMrbQ2NJw`FMX>R8sk zCQY@Ewh?x08&?k0gnp&RnOGip#pOaf>-cyW&B2Iv2EeSBRi|7K4ZQs^$I*@$D^iz1 z)Hi?4-(7UY7Clc;c7Q^_>*yJd5*3NYR3iQ2`^~%u?zL|#f$;}|`p{%CK5%(K>5vU; zZo#wIjH!fPFMid6RjagW0L>T{wb#@Q!Km0}=WGN<4;F4BQ3ue-*BGtYZ*^ZGjn;W> z5om$H-v@qrWxFVS#SVDE1z(wkCX_Z~o9Cqwo(f!bNQu>e^9^uZIP9w+3 h^L~;|?Ieq@q#3k?Xq}q-wEn&l{^cg;y-rOSw*(||41WLs literal 0 HcmV?d00001