starred/certbot-certbot-1
1
0
Fork 0
mirror of https://github.com/certbot/certbot.git synced 2026-08-01 19:14:54 +02:00
Code Issues Packages Projects Releases Wiki Activity

Support openssl and gpg signatures in parallel

Browse Source
This commit is contained in:
Peter Eckersley
2016-05-11 15:56:10 -07:00
parent 37efe30675
commit 407ebad36e
2 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.rst
+2 -2
View File
@@ -37,9 +37,9 @@ from your OS and puts others in a python virtual environment::
.. hint:: The certbot-auto download is protected by HTTPS, which is pretty good, but if you'd like to .. hint:: The certbot-auto download is protected by HTTPS, which is pretty good, but if you'd like to
double check the integrity of the ``certbot-auto`` script, you can use these steps for verification before running it:: double check the integrity of the ``certbot-auto`` script, you can use these steps for verification before running it::
user@server:~$ wget https://dl.eff.org/certbot-auto.sig user@server:~$ wget https://dl.eff.org/certbot-auto.asc
user@server:~$ gpg2 --recv-key A2CFB51FA275A7286234E7B24D17C995CD9775F2 user@server:~$ gpg2 --recv-key A2CFB51FA275A7286234E7B24D17C995CD9775F2
user@server:~$ gpg2 --trusted-key 4D17C995CD9775F2 --verify certbot-auto.sig certbot-auto user@server:~$ gpg2 --trusted-key 4D17C995CD9775F2 --verify certbot-auto.asc certbot-auto
And for full command line help, you can type:: And for full command line help, you can type::
tools/release.sh
+3
View File
@@ -187,6 +187,9 @@ while ! openssl dgst -sha256 -verify $RELEASE_OPENSSL_PUBKEY -signature \
read -p "Please correctly sign letsencrypt-auto with offline-signrequest.sh" read -p "Please correctly sign letsencrypt-auto with offline-signrequest.sh"
done done
# This signature is not quite as strong, but easier for people to verify out of band
gpg -u "$RELEASE_GPG_KEY" --detach-sign --armor --sign letsencrypt-auto-source/letsencrypt-auto
# copy leauto to the root, overwriting the previous release version # copy leauto to the root, overwriting the previous release version
cp -p letsencrypt-auto-source/letsencrypt-auto letsencrypt-auto cp -p letsencrypt-auto-source/letsencrypt-auto letsencrypt-auto