New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Verification of CRS release signature #106

Open

studersi opened this issue Jul 8, 2020 · 1 comment

Contributor

studersi commented Jul 8, 2020

CRS releases come with an .asc file. The CRS releases could be verified like the other downloaded resources.

Example: https://github.com/coreruleset/coreruleset/releases/download/v3.3.0/coreruleset-3.3.0.tar.gz.asc

The text was updated successfully, but these errors were encountered:

Contributor Author

studersi commented Jul 8, 2020

Suggestion:

wget https://github.com/coreruleset/coreruleset/archive/v3.3.0.tar.gz
wget https://github.com/coreruleset/coreruleset/releases/download/v3.3.0/coreruleset-3.3.0.tar.gz.asc
wget https://coreruleset.org/security.asc
gpg --import security.asc
gpg --trusted-key 38EEACA1AB8A6E72 --verify coreruleset-3.3.0.tar.gz.asc v3.3.0.tar.gz

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment