cmd/geth: implement vulnerability check (#21859)
* cmd/geth: implement vulnerability check
* cmd/geth: use minisign to verify vulnerability feed
* cmd/geth: add the test too
* cmd/geth: more minisig/signify testing
* cmd/geth: support multiple pubfiles for signing
* cmd/geth: add @holiman minisig pubkey
* cmd/geth: polishes on vulnerability check
* cmd/geth: fix ineffassign linter nit
* cmd/geth: add CVE to version check struct
* cmd/geth/testdata: add missing testfile
* cmd/geth: add more keys to versionchecker
* cmd/geth: support file:// URLs in version check
* cmd/geth: improve key ID printing when signature check fails
Co-authored-by:
Felix Lange <fjl@twurst.com>
Showing
- cmd/geth/main.go 1 addition, 0 deletionscmd/geth/main.go
- cmd/geth/misccmd.go 27 additions, 0 deletionscmd/geth/misccmd.go
- cmd/geth/testdata/vcheck/data.json 61 additions, 0 deletionscmd/geth/testdata/vcheck/data.json
- cmd/geth/testdata/vcheck/data2.json 62 additions, 0 deletionscmd/geth/testdata/vcheck/data2.json
- cmd/geth/testdata/vcheck/minisig-sigs/vulnerabilities.json.minisig.1 4 additions, 0 deletions...stdata/vcheck/minisig-sigs/vulnerabilities.json.minisig.1
- cmd/geth/testdata/vcheck/minisig-sigs/vulnerabilities.json.minisig.2 4 additions, 0 deletions...stdata/vcheck/minisig-sigs/vulnerabilities.json.minisig.2
- cmd/geth/testdata/vcheck/minisig-sigs/vulnerabilities.json.minisig.3 4 additions, 0 deletions...stdata/vcheck/minisig-sigs/vulnerabilities.json.minisig.3
- cmd/geth/testdata/vcheck/minisign.pub 2 additions, 0 deletionscmd/geth/testdata/vcheck/minisign.pub
- cmd/geth/testdata/vcheck/minisign.sec 2 additions, 0 deletionscmd/geth/testdata/vcheck/minisign.sec
- cmd/geth/testdata/vcheck/signify-sigs/data.json.sig 2 additions, 0 deletionscmd/geth/testdata/vcheck/signify-sigs/data.json.sig
- cmd/geth/testdata/vcheck/signifykey.pub 2 additions, 0 deletionscmd/geth/testdata/vcheck/signifykey.pub
- cmd/geth/testdata/vcheck/signifykey.sec 2 additions, 0 deletionscmd/geth/testdata/vcheck/signifykey.sec
- cmd/geth/testdata/vcheck/sigs/vulnerabilities.json.minisig.1 4 additions, 0 deletionscmd/geth/testdata/vcheck/sigs/vulnerabilities.json.minisig.1
- cmd/geth/testdata/vcheck/sigs/vulnerabilities.json.minisig.2 4 additions, 0 deletionscmd/geth/testdata/vcheck/sigs/vulnerabilities.json.minisig.2
- cmd/geth/testdata/vcheck/sigs/vulnerabilities.json.minisig.3 4 additions, 0 deletionscmd/geth/testdata/vcheck/sigs/vulnerabilities.json.minisig.3
- cmd/geth/version_check.go 169 additions, 0 deletionscmd/geth/version_check.go
- cmd/geth/version_check_test.go 79 additions, 0 deletionscmd/geth/version_check_test.go
Loading
Please register or sign in to comment