[Koha-bugs] [Bug 24632] Plugins should support simple signing for security/verifiability

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24632 Katrin Fischer changed: What|Removed |Added CC||martin.renvoize@ptfs-europe

[Koha-bugs] [Bug 24632] Plugins should support simple signing for security/verifiability

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24632 David Cook changed: What|Removed |Added Status|Failed QA |In Discussion -- You are rece

[Koha-bugs] [Bug 24632] Plugins should support simple signing for security/verifiability

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24632 Bug 24632 depends on bug 23975, which changed state. Bug 23975 Summary: Add ability to search and install plugins from GitHub https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=23975 What|Removed

[Koha-bugs] [Bug 24632] Plugins should support simple signing for security/verifiability

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24632 Bug 24632 depends on bug 23975, which changed state. Bug 23975 Summary: Add ability to search and install plugins from GitHub https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=23975 What|Removed

[Koha-bugs] [Bug 24632] Plugins should support simple signing for security/verifiability

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24632 Bug 24632 depends on bug 23975, which changed state. Bug 23975 Summary: Add ability to search and install plugins from GitHub https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=23975 What|Removed

[Koha-bugs] [Bug 24632] Plugins should support simple signing for security/verifiability

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24632 --- Comment #19 from David Cook --- Thanks for taking the time to look at this one, Katrin. I appreciate it. I think for now I'm probably going to abandon this work, and focus instead on patches that limit users' ability to install

[Koha-bugs] [Bug 24632] Plugins should support simple signing for security/verifiability

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24632 Katrin Fischer changed: What|Removed |Added Status|Signed Off |Failed QA --- Comment #18

[Koha-bugs] [Bug 24632] Plugins should support simple signing for security/verifiability

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24632 Jonathan Druart changed: What|Removed |Added Keywords|rel_20_11_target| -- You are receiving th

[Koha-bugs] [Bug 24632] Plugins should support simple signing for security/verifiability

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24632 Martin Renvoize changed: What|Removed |Added Keywords|rel_20_05_candidate |rel_20_11_target -- You

[Koha-bugs] [Bug 24632] Plugins should support simple signing for security/verifiability

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24632 Tomás Cohen Arazi changed: What|Removed |Added Version|unspecified |master -- You are rece

[Koha-bugs] [Bug 24632] Plugins should support simple signing for security/verifiability

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24632 Tomás Cohen Arazi changed: What|Removed |Added CC||tomasco...@gmail.com

[Koha-bugs] [Bug 24632] Plugins should support simple signing for security/verifiability

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24632 Martin Renvoize changed: What|Removed |Added See Also||https://bugs.koha-communit

[Koha-bugs] [Bug 24632] Plugins should support simple signing for security/verifiability

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24632 --- Comment #17 from Martin Renvoize --- (In reply to Jonathan Druart from comment #15) > You are assuming that an author who is trusted once is trusted for all the > plugins they will write. This assumption is wrong IMO. I agree wi

[Koha-bugs] [Bug 24632] Plugins should support simple signing for security/verifiability

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24632 --- Comment #16 from David Cook --- (In reply to Jonathan Druart from comment #15) > You are assuming that an author who is trusted once is trusted for all the > plugins they will write. This assumption is wrong IMO. This assumption

[Koha-bugs] [Bug 24632] Plugins should support simple signing for security/verifiability

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24632 Jonathan Druart changed: What|Removed |Added CC||jonathan.dru...@bugs.koha-

[Koha-bugs] [Bug 24632] Plugins should support simple signing for security/verifiability

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24632 --- Comment #14 from David Cook --- I noticed late yesterday that https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=23975 allows a person to fetch plugins directly from Github. I'll have to take a look at that code to see ho

[Koha-bugs] [Bug 24632] Plugins should support simple signing for security/verifiability

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24632 Holly changed: What|Removed |Added Status|Needs Signoff |Signed Off -- You are receiving th

[Koha-bugs] [Bug 24632] Plugins should support simple signing for security/verifiability

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24632 ByWater Sandboxes changed: What|Removed |Added Attachment #104032|0 |1 is obsolete|

[Koha-bugs] [Bug 24632] Plugins should support simple signing for security/verifiability

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24632 --- Comment #12 from David Cook --- Created attachment 104032 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=104032&action=edit Bug 24632: Verify Koha plugin signatures against trusted author public keys The conce

[Koha-bugs] [Bug 24632] Plugins should support simple signing for security/verifiability

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24632 David Cook changed: What|Removed |Added Status|NEW |Needs Signoff Patch complexi

[Koha-bugs] [Bug 24632] Plugins should support simple signing for security/verifiability

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24632 --- Comment #11 from David Cook --- Created attachment 104031 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=104031&action=edit Example Koha Plugin Developer Public Key -- You are receiving this mail because: You

[Koha-bugs] [Bug 24632] Plugins should support simple signing for security/verifiability

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24632 --- Comment #10 from David Cook --- Created attachment 104030 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=104030&action=edit Koha Plugin Signatures -- You are receiving this mail because: You are watching all

[Koha-bugs] [Bug 24632] Plugins should support simple signing for security/verifiability

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24632 David Cook changed: What|Removed |Added Summary|Plugins should support |Plugins should support