Require switch on unofficial build #36

Closed
ferventcoder opened this Issue Jan 20, 2015 · 3 comments

Projects

None yet

3 participants

@ferventcoder
Member

The default one in the repository is for building source. If built in release mode, require a special switch to run --allow-unofficial-build or something like that.

When choco.exe detects that it is not using the official
publickeytoken, throw an error requiring an explicit override (this is
already overridden in debug builds). When AllowUnofficialBuild (--allow-unofficial-build) flag is
set to true, log a very important warning so that folks can receive
clues that the state of their system may be compromised.

@ferventcoder ferventcoder self-assigned this Jan 20, 2015
@ferventcoder ferventcoder added this to the 0.9.9 milestone Jan 20, 2015
@ferventcoder ferventcoder added a commit that referenced this issue Jan 25, 2015
@ferventcoder ferventcoder (GH-36) Add official publickeytoken
Add official publickeytoken to application parameters. Adjust .uppercut
to search for an environment variable containing the official key
location
59ba8f6
@ferventcoder ferventcoder added a commit that referenced this issue Jan 25, 2015
@ferventcoder ferventcoder (GH-36) check for official public key
When choco.exe detects that it is not using the official
publickeytoken, throw an error requiring an explicit override (this is
already overridden in debug builds). When AllowUnofficialBuild flag is
set to true, log a very important warning so that folks can receive
clues that the state of their system may be compromised.
a3158ec
@ferventcoder ferventcoder added 3 - Done and removed 0 - Backlog labels Jan 25, 2015
@gep13
Member
gep13 commented Jan 25, 2015

Very cool! 👍

@ferventcoder ferventcoder changed the title from Check for proper public key to Require switch on unofficial build Jan 30, 2015
@smurawski

👍 👍 Yay for security and yay for being able to build without the "official" key for testing purposes (without having to do a bunch of modifications that make pull requests suck).

@ferventcoder
Member

most of that brought to you by this - 59ba8f6

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment