Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Expand gem security build/install instructions; add checksum #70

Merged
merged 7 commits into from
Nov 21, 2013
Merged

Expand gem security build/install instructions; add checksum #70

Changes from 1 commit
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
e9dcef6
Expand gem security build/install instructions; add checksum
bf4 Nov 21, 2013
dae8880
Add rubygems-openpgp video/slides by @grant-olsen, working link
bf4 Nov 21, 2013
d2e08a0
Recommend against signing gems with rubygems-openpgp
bf4 Nov 21, 2013
90f453f
Highlight gem checksum before the not-recommended openpgp
bf4 Nov 21, 2013
2fe098c
Add caveat to using gem cert signed gems
bf4 Nov 21, 2013
df1aee3
Remove most OpenPGP discussion per @grant-olson @yorickpeterse
bf4 Nov 21, 2013
bb47d31
Synch general security content with the details that follow
bf4 Nov 21, 2013
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Add rubygems-openpgp video/slides by @grant-olsen, working link
  • Loading branch information
@bf4
bf4 committed Nov 21, 2013
commit dae8880ccb5db548a5672e90b4847a878b6b749e
4 changes: 3 additions & 1 deletion security.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -103,7 +103,9 @@ Add cert paths to your gemspec

### Alternative: [Rubygems OpenPGP signing](https://web.archive.org/web/20130914152133/http:https://www.rubygems-openpgp-ca.org/), [gem](https://github.com/grant-olson/rubygems-openpgp)

Required setup [rubygems-openpgpg-ca trust](https://github.com/grant-olson/rubygems-openpgp-ca.org/blob/master/public/blog/the-complete-guide-to-signing-the-certificate-authority-keys.html) authority:
About: [Video](https://vimeo.com/59297058), [Slides](https://docs.google.com/a/grant-olson.net/viewer?a=v&pid=sites&srcid=Z3JhbnQtb2xzb24ubmV0fGdyYW50LXMtc3R1ZmZ8Z3g6MTg5MWZkNjU3ZGEyZDY5Yg)

Required setup [rubygems-openpgpg-ca trust](https://desolate-spire-6189.herokuapp.com/blog/the-complete-guide-to-verifying-gems-with-rubygems-openpgp.html) authority:

Assumes you've already generated a signing key with `gpg --gen-key`

Expand Down