-
Type:
Task
-
Resolution: Unresolved
-
Priority:
Major - P3
-
None
-
Affects Version/s: None
-
Component/s: None
-
None
-
Query Integration
-
None
-
None
-
None
-
None
-
None
-
None
-
None
GPG requires that a key must first be inserted into the "key ring" before it is used (before signing or verification).
In this ticket we are inserting the production key (mongot-extension.pub found at pgp.mongodb.com) into the key ring before loading all extensions, and then removing it out of key ring after extensions are done being loaded.
Define a constant somewhere sensical in the server for the value of the mongot-extension public key. Use the gpgmepp library for the key ring operations.
- depends on
-
SERVER-115287 Import gpgmepp lib into the server
-
- In Progress
-
-
SERVER-115281 Add extensions signature secure bazel flag and pre-processor maco
-
- Closed
-
- is depended on by
-
SERVER-115289 Perform extensions signature verification
-
- Open
-
-
SERVER-115610 Add extensions test gpg key to ring in insecure mode
-
- Open
-