Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Hashicorp keysource should be configurable #6

Open
mbloch1986 opened this issue Jun 2, 2020 · 0 comments
Open

Hashicorp keysource should be configurable #6

mbloch1986 opened this issue Jun 2, 2020 · 0 comments

Comments

@mbloch1986
Copy link

mbloch1986 commented Jun 2, 2020

Hello

The import of the hashicorp certificate from keybase.io is failing atm Error message:

[root@dbda206cfe39 workspace]# wget -O- https://keybase.io/hashicorp/pgp_keys.asc?fingerprint=91a6e7f85d05c65630bef18951852d87348ffc4c | gpg --import
--2020-06-03 08:51:01--  https://keybase.io/hashicorp/pgp_keys.asc?fingerprint=91a6e7f85d05c65630bef18951852d87348ffc4c
[..]
ERROR: cannot verify keybase.io's certificate, issued by ‘/C=GB/ST=Greater Manchester/L=Salford/O=Sectigo Limited/CN=Sectigo RSA Domain Validation Secure Server CA’:
  Issued certificate has expired.
To connect to keybase.io insecurely, use `--no-check-certificate'.
gpg: no valid OpenPGP data found.
gpg: Total number processed: 0

Instead of relying on the hardcoded key source https://keybase.io/hashicorp/pgp_keys.asc?fingerprint=91a6e7f85d05c65630bef18951852d87348ffc4c (https://github.com/inkblot/puppet-hashicorp/blob/master/manifests/init.pp#L13) wouldn't it be a good idea to make this paramter configurable, this would allow us to pass a file path as source.

Any opinions about this ?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant