Add extensions gpg key to ring in secure mode

XMLWordPrintableJSON

    • Type: Task
    • Resolution: Fixed
    • Priority: Major - P3
    • 8.3.0-rc0
    • Affects Version/s: None
    • Component/s: None
    • None
    • Query Integration
    • Fully Compatible
    • 200
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      GPG requires that a key must first be inserted into the "key ring" before it is used (before signing or verification).

      In this ticket we are inserting the production key (mongot-extension.pub found at pgp.mongodb.com) into the key ring before loading all extensions, and then removing it out of key ring after extensions are done being loaded.

       

      Define a constant somewhere sensical in the server for the value of the mongot-extension public key. Use the gpgmepp library for the key ring operations.

      As part of this ticket, we introduce the SignatureValidator class, and embed the mongot-extension public key into the mongod/s binaries. Note, this ticket does not perform actual signature verification yet. 

            Assignee:
            Santiago Roche
            Reporter:
            Joe Shalabi
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: