ICTO / ansible-jenkins

Ansible playbook: Jenkins
MIT License
282 stars 171 forks source link

Install repository key from repo, not HTTP #11

Closed fawkesley closed 10 years ago

fawkesley commented 10 years ago

Jenkins unfortunately don't provide their repository key from an HTTPS conneciton. Installing such a key without authentication is not good as it is wide to to man-in-the-middle attacks.

This commit makes ansible install the key directly from the repository. If the key changes, we will have to verify and update it here, but this feels like a justifiable change.