3 Commits

Author	SHA1	Message	Date
Justin Campbell	495826444b	plugin/discovery: Use GPG keys from Registry ... When verifying the signature of the SHA256SUMS file, we have been hardcoding HashiCorp's public GPG key and using it as the keyring. Going forward, Terraform will get a list of valid public keys for a provider from the Terraform Registry (registry.terraform.io), and use them as the keyring for the openpgp verification func.	2018-11-20 14:09:16 -05:00
James Bardin	e059eb80d1	add test for signature mismatch	2017-06-21 16:17:34 -04:00
James Bardin	13d835f996	test signature verification ... use a published provider's checksum file and signature to check the verification.	2017-06-20 13:14:30 -04:00