Uploaded image for project: 'Java Driver'
  1. Java Driver
  2. JAVA-5432

Sign release artifacts or tags with MongoDB-managed keys

    • Type: Icon: Task Task
    • Resolution: Done
    • Priority: Icon: Unknown Unknown
    • 5.1.2
    • Affects Version/s: None
    • Component/s: Security
    • None
    • Hide

      DRIVERS-2895:
      Summary of necessary driver changes

      •  Please see the description in the linked DRIVERS ticket
      Show
      DRIVERS-2895 : Summary of necessary driver changes  Please see the description in the linked DRIVERS ticket
    • Fully Compatible
    • Needed
    • Hide

      We need to have a documentation page describing how driver users may validate signatures of the driver artifacts we publish. Given that the instructions are the same regardless of the API used (BSON, driver: Java synchronous, Java reactive, Scala, Kotlin synchronous, Kotlin coroutine), it seems better to have a single page for all of them.

      The instructions are in this comment. However, step 2 "Download and import the public key for verifying signatures" should just refer a user to https://github.com/mongodb/mongo-java-driver/releases, where we will have the information on how to download and import a verifying key for each new release, instead of laying down that info in step 2.

      Show
      We need to have a documentation page describing how driver users may validate signatures of the driver artifacts we publish. Given that the instructions are the same regardless of the API used (BSON, driver: Java synchronous, Java reactive, Scala, Kotlin synchronous, Kotlin coroutine), it seems better to have a single page for all of them. The instructions are in this comment . However, step 2 "Download and import the public key for verifying signatures" should just refer a user to https://github.com/mongodb/mongo-java-driver/releases , where we will have the information on how to download and import a verifying key for each new release, instead of laying down that info in step 2.

      This ticket was split from DRIVERS-2895, please see that ticket for a detailed description.

            Assignee:
            valentin.kovalenko@mongodb.com Valentin Kavalenka
            Reporter:
            dbeng-pm-bot PM Bot
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: