Only accept the full GPG key ID when signing linux packages

Fixes: https://github.com/brave/brave-browser/issues/3107
This commit is contained in:
Matt Bacchi
2019-01-25 08:43:09 -07:00
parent afd51a31bd
commit bc968d5f7e
2 changed files with 12 additions and 0 deletions
+6
View File
@@ -16,6 +16,12 @@ set -exu
### The first argument is the S3 bucket, the second is the GPG key fingerprint
OPTION=${1:-brave-browser-apt-staging-nightly}
GPG_KEY_ID=${2:-E85FFA8E2E90B40B33ED39274FE13824E3FFC656} # Defaults to New Brave Software signing key
if [[ $2 == 0x* ]]; then
echo "Error: Please pass the Full GPG KEY ID to sign with! (i.e. '9228DBCE20DDE5EC46488DE90B31DBA06A8A26F9')"
exit 1
fi
if [ "$GPG_KEY_ID" = "E85FFA8E2E90B40B33ED39274FE13824E3FFC656" ]; then
KEY_NAME=brave-core.asc
else
+6
View File
@@ -16,6 +16,12 @@ set -exu
BUCKET=${1:-brave-browser-rpm-staging-nightly}
GPG_KEY_ID=${2:-E85FFA8E2E90B40B33ED39274FE13824E3FFC656} # Defaults to New Brave Software signing key
GPG_KEY_SHORT_ID=${GPG_KEY_ID:(-8)}
if [[ $2 == 0x* ]]; then
echo "Error: Please pass the Full GPG KEY ID to sign with! (i.e. '9228DBCE20DDE5EC46488DE90B31DBA06A8A26F9')"
exit 1
fi
if [ "$GPG_KEY_ID" = "E85FFA8E2E90B40B33ED39274FE13824E3FFC656" ]; then
KEY_NAME=brave-core.asc
else