Skip to content

Commit

Permalink
Adios signed gems
Browse files Browse the repository at this point in the history
If you want signed gems, please help us finish an implementation of The Update
Framework (TUF) for RubyGems:

http://theupdateframework.com/
https://groups.google.com/forum/#!forum/rubygems-tuf
  • Loading branch information
tarcieri committed Apr 23, 2014
1 parent d20e65f commit 30af25c
Showing 1 changed file with 0 additions and 26 deletions.
26 changes: 0 additions & 26 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -143,32 +143,6 @@ by professional cryptographers.

That said, it's probably still a million times better than OpenSSL...

## Using Signed Gems

The RbNaCl gem is signed by Tony Arcieri's certificate, which identifies
as `bascule@gmail.com`. You can obtain the official certificate with:

```
curl https://raw.github.com/cryptosphere/rbnacl/master/bascule.cert > /tmp/bascule.cert
gem cert -a /tmp/bascule.cert
```

You can verify the authenticity of bascule.cert by its SHA256 hash:

```
$ shasum -a 256 bascule.cert
6e8b7e53d347ca6c6d214efef2b923aadecdd7650565f0eb1d8d0419723ae20c bascule.cert
```

If you get a different number than `6e8b7e53...`, this is not the cert you are
looking for!

If you'd like to install the gem in high security mode, run:

```
gem install rbnacl-1.0.0.gem -P HighSecurity
```

## Reporting Security Problems

If you have discovered a bug in RbNaCl of a sensitive nature, i.e.
Expand Down

0 comments on commit 30af25c

Please sign in to comment.