From 0487794b7c3310ead15f39ff5d37c4a30ccbd1bb Mon Sep 17 00:00:00 2001 From: Ross Nicoll Date: Wed, 14 Jul 2021 21:26:56 +0100 Subject: [PATCH] Refine Snap verification message Refine Snap verification message to accurately reflect it's checking secure hashes, not signatures. Checking signature would entail verifying there is a signature from a trusted person, not just that the hash matches a value in the known values list. --- contrib/snap/snapcraft.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/contrib/snap/snapcraft.yaml b/contrib/snap/snapcraft.yaml index 8a5b21b4d..ad357b142 100644 --- a/contrib/snap/snapcraft.yaml +++ b/contrib/snap/snapcraft.yaml @@ -37,10 +37,10 @@ parts: wget https://github.com/dogecoin/dogecoin/releases/download/v${SNAPCRAFT_PROJECT_VERSION}/dogecoin-${SNAPCRAFT_PROJECT_VERSION}-${SNAPCRAFT_ARCH_TRIPLET}.tar.gz wget https://github.com/dogecoin/gitian.sigs/archive/refs/heads/master.zip unzip master.zip - echo "Verifying signatures..." + echo "Verifying secure hash matches signed values..." checksum=$(sha256sum dogecoin-${SNAPCRAFT_PROJECT_VERSION}-${SNAPCRAFT_ARCH_TRIPLET}.tar.gz) if ! grep -r $checksum *; then - echo "Signature not verified." + echo "Secure hash not verified." return fi tar -xvf dogecoin-${SNAPCRAFT_PROJECT_VERSION}-${SNAPCRAFT_ARCH_TRIPLET}.tar.gz