Skip to content

feat(signature): allow to provide custom signature#745

Merged
Altahrim merged 1 commit intomasterfrom
feat/self-provided-signature
Apr 22, 2026
Merged

feat(signature): allow to provide custom signature#745
Altahrim merged 1 commit intomasterfrom
feat/self-provided-signature

Conversation

@Altahrim
Copy link
Copy Markdown
Collaborator

No description provided.

@Altahrim Altahrim added this to the Nextcloud 34 milestone Apr 21, 2026
@Altahrim Altahrim requested review from blizzz and susnux April 21, 2026 09:51
@Altahrim Altahrim self-assigned this Apr 21, 2026
@Altahrim Altahrim force-pushed the feat/self-provided-signature branch 3 times, most recently from 61629a3 to bd0a2bb Compare April 21, 2026 12:45
@Altahrim Altahrim marked this pull request as ready for review April 21, 2026 12:56
@Altahrim Altahrim requested a review from skjnldsv as a code owner April 21, 2026 12:56
Signed-off-by: Benjamin Gaussorgues <benjamin.gaussorgues@nextcloud.com>
@Altahrim Altahrim force-pushed the feat/self-provided-signature branch from bd0a2bb to f414c80 Compare April 21, 2026 14:06
@Altahrim
Copy link
Copy Markdown
Collaborator Author

/backport to stable33

@Altahrim
Copy link
Copy Markdown
Collaborator Author

/backport to stable32

@Altahrim
Copy link
Copy Markdown
Collaborator Author

/backport to stable31

Comment thread lib/Updater.php
if ($signature === '') {
if ($urlOverride !== '') {
throw new \Exception(
'Custom download url provided. You need to provide a signature with --signature or skip integrity check with --no-verify.'
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

quality of life idea here would be to try DOWNLOADURL.asc in case you just have a custom proxy server but files are the same (or manually specify a download versions).

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Agree!
Actually I tried to do it but .asc is a GPG signature and we need gnupg module or an external command to verify signature.
Unless I am missing something else?

@Altahrim Altahrim merged commit 4c9cad0 into master Apr 22, 2026
21 checks passed
@Altahrim Altahrim deleted the feat/self-provided-signature branch April 22, 2026 06:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants