Uploaded image for project: 'Mender'
  1. Mender
  2. MEN-2802

mender-artifact validate does not validate signature

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Done
    • Priority: (None)
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: None
    • Labels:
    • Days in progress:
      0

      Description

      The "mender-artifact validate" command returns success even though the Artifact is signed and it does not seem to check the signature.

      My expectation was for it to fail unless I pass the "-k" option if the Artifact is signed. If the command is working as intended we should update the description what is validated when.

      mender-artifact validate my-container-update-1.0-signed.mender 
      Artifact file 'my-container-update-1.0-signed.mender' validated successfully
      $ mender-artifact read my-container-update-1.0-signed.mender 
      Mender artifact:
        Name: my-container-update-1.0
        Format: mender
        Version: 3
        Signature: signed; verification using provided key failed
        Compatible devices: '[my-device-type]'
        Provides group: 
        Depends on one of artifact(s): []
        Depends on one of group(s): []
        State scripts:
      Updates:
          0:
          Type:   docker
          Provides: Nothing
          Depends: Nothing
          Metadata:
          {
            "containers": [
              "debian@sha256:e25b64a9cf82c72080074d6b1bba7329cdd752d51574971fd37731ed164f3345"
            ]
          }
      

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                lluis Lluís Campos
                Reporter:
                mirzak Mirza Krak
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Summary Panel