Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Backport trusting only full GPG keys in dependency verification [Backport 6.9.4] #23945

Closed
ljacomet opened this issue Feb 17, 2023 · 0 comments
Closed

Backport trusting only full GPG keys in dependency verification [Backport 6.9.4] #23945

ljacomet opened this issue Feb 17, 2023 · 0 comments
Assignees
@ljacomet
Labels
a:chore Minor issue without significant impact in:dependency-verification trustkey truststore checksum signature
Milestone
6.9.4

Comments

@ljacomet
Copy link
Member

@ljacomet ljacomet added a:chore Minor issue without significant impact in:dependency-verification trustkey truststore checksum signature labels Feb 17, 2023
@ljacomet ljacomet added this to the 6.9.4 milestone Feb 17, 2023
@ljacomet ljacomet self-assigned this Feb 17, 2023
@ljacomet ljacomet mentioned this issue Feb 17, 2023
Merged
ljacomet pushed a commit that referenced this issue Feb 17, 2023
@hegyibalint @ljacomet
Trusted GPG-key should only accept 160-bit fingerprints
ff1d3bb 
Backport from #23667 to 6.9.4

Fixes #23945
bot-gradle added a commit that referenced this issue Feb 20, 2023
@bot-gradle @hegyibalint
Merge pull request #23946 Trusted GPG-key should only accept 160-bit …
bf3cc0f 
…fingerprints

Backport from #23667 to 6.9.4

Fixes #23945

Co-authored-by: Balint Hegyi <bhegyi@gradle.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@ljacomet ljacomet

Labels
a:chore Minor issue without significant impact in:dependency-verification trustkey truststore checksum signature
Projects
None yet
Milestone
6.9.4
Development

No branches or pull requests
1 participant
@ljacomet