clientupdate/distsign/roots: add temporary dev root key (#9080)

Adding a root key that signs the current signing key on
pkgs.tailscale.com. This key is here purely for development and should
be replaced before 1.50 release.

Updates #8760

Signed-off-by: Andrew Lytvynov <awly@tailscale.com>
This commit is contained in:
Andrew Lytvynov 2023-08-24 16:24:26 -06:00 committed by GitHub
parent f3077c6ab5
commit de9ba1c621
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 2 deletions

View File

@ -34,7 +34,7 @@ func parseRoots() ([]ed25519.PublicKey, error) {
if !f.Type().IsRegular() { if !f.Type().IsRegular() {
continue continue
} }
if filepath.Ext(f.Name()) != ".pub" { if filepath.Ext(f.Name()) != ".pem" {
continue continue
} }
raw, err := rootsFS.ReadFile(path.Join("roots", f.Name())) raw, err := rootsFS.ReadFile(path.Join("roots", f.Name()))

View File

@ -1,3 +1,3 @@
-----BEGIN ROOT PUBLIC KEY----- -----BEGIN ROOT PUBLIC KEY-----
xFykOJAkOlBoMOXA4UKYtaSGYsOY8r1+0wJzQE5mzUo= Muw5GkO5mASsJ7k6kS+svfuanr6XcW9I7fPGtyqOTeI=
-----END ROOT PUBLIC KEY----- -----END ROOT PUBLIC KEY-----