opentofu / get.opentofu.org

The website hosting the OpenTofu Installer script and installation resources
Apache License 2.0
4 stars 8 forks source link

GPG verification support for Windows #12

Closed ghost closed 8 months ago

ghost commented 8 months ago

Currently, the Windows version of the installer script doesn't support GPG. The install guide claims they do, so this should be fixed.

The script is running this command:

gpg.exe --no-default-keyring --keyring ...\opentofu.asc.gpg --verify ...\tofu_1.6.0_SHA256SUMS.gpgsig ...\tofu_1.6.0_SHA256SUMS

The main issue is that GnuPG 2.4 I have installed on Windows (as opposed to 2.2 on Linux) seems to not be able to use keyrings like this:

gpg.exe --no-default-keyring --keyring ...\opentofu.asc.gpg --list-keys