plugeth/vulnerabilities.json.minisig.1 at 344d6f95cf07b9337cd686be6ffe3304991f4955 - plugeth - Gitea: come getta cuppa

cerc-io/plugeth

Martin Holst Swende 15339cf1c9

cmd/geth: implement vulnerability check (#21859 )

* cmd/geth: implement vulnerability check

* cmd/geth: use minisign to verify vulnerability feed

* cmd/geth: add the test too

* cmd/geth: more minisig/signify testing

* cmd/geth: support multiple pubfiles for signing

* cmd/geth: add @holiman minisig pubkey

* cmd/geth: polishes on vulnerability check

* cmd/geth: fix ineffassign linter nit

* cmd/geth: add CVE to version check struct

* cmd/geth/testdata: add missing testfile

* cmd/geth: add more keys to versionchecker

* cmd/geth: support file:// URLs in version check

* cmd/geth: improve key ID printing when signature check fails

Co-authored-by: Felix Lange <fjl@twurst.com>

2020-12-04 15:01:47 +01:00

5 lines

308 B

Groff

Raw Blame History

 untrusted comment: signature from minisign secret key
 RWQkliYstQBOKFQFQTjmCd6TPw07VZyWFSB3v4+1BM1kv8eHLE5FDy2OkPEqtdaL53xftlrHoJQie0uCcovdlSV8kpyxiLrxEQ0=
 trusted comment: timestamp:1605618622	file:vulnerabilities.json
 osAPs4QPdDkmiWQxqeMIzYv/b+ZGxJ+19Sbrk1Cpq4t2gHBT+lqFtwL3OCzKWWyjGRTmHfsVGBYpzEdPRQ0/BQ==