Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Trusted GPG-key should only accept 160-bit fingerprints #23946

Merged
merged 1 commit into from Feb 21, 2023

Conversation

ljacomet
Copy link
Member

Backport from #23667 to 6.9.4

Fixes #23945

@ljacomet ljacomet added the in:dependency-verification trustkey truststore checksum signature label Feb 17, 2023
@ljacomet ljacomet added this to the 6.9.4 milestone Feb 17, 2023
@ljacomet ljacomet self-assigned this Feb 17, 2023
@ljacomet
Copy link
Member Author

@hegyibalint If you get the time, I would appreciate. I think I did all that was needed to have the proper behavior and I tested it on a real project.
But if you see a missing bit from the changes when adapting the backport, let me know.

@ljacomet ljacomet force-pushed the ljacomet/gradle6x/gpg-fingerprint-6 branch from b694ef6 to ff1d3bb Compare February 17, 2023 17:34
@gradle gradle deleted a comment from ljacomet Feb 20, 2023
@bot-gradle
Copy link
Collaborator

I've triggered a build for you.

@bot-gradle
Copy link
Collaborator

Pre-tested commit build failed.

@blindpirate
Copy link
Collaborator

@bot-gradle test and merge

@gradle gradle deleted a comment from ljacomet Feb 20, 2023
@gradle gradle deleted a comment from ljacomet Feb 20, 2023
@bot-gradle
Copy link
Collaborator

I've triggered a build for you.

@bot-gradle bot-gradle merged commit bf3cc0f into release6x Feb 21, 2023
@bot-gradle bot-gradle deleted the ljacomet/gradle6x/gpg-fingerprint-6 branch February 21, 2023 01:10
@hegyibalint
Copy link
Member

@ljacomet sorry, this one got lost in the sea.
I think in retrospect that it's all-right!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
in:dependency-verification trustkey truststore checksum signature
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants