b4tman/docker-squid
1
0
Fork 0
mirror of https://github.com/b4tman/docker-squid.git synced 2024-11-22 11:16:55 +00:00
Code Issues Packages Releases Activity

fix sig verification

Browse Source 
keys imported from http://www.squid-cache.org/pgp.asc

from https://sks-keyservers.net :
> This service is deprecated. This means it is no longer maintained, and new HKPS certificates will not be issued. Service reliability should not be expected.
>
> Update 2021-06-21: Due to even more GDPR takedown requests, the DNS records for the pool will no longer be provided at all.
This commit is contained in:
Dmitry Belyaev 2021-07-01 14:14:15 +03:00
parent 9e6775a422
commit 2e3e78056d
Signed by: b4tman
GPG Key ID: 41A00BF15EA7E5F3
2 changed files with 4 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
Dockerfile
View File

@ -1,7 +1,6 @@
FROM alpine:3.14.0 as build FROM alpine:3.14.0 as build
ENV SQUID_VER 4.15 ENV SQUID_VER 4.15
ENV SQUID_SIG_KEY B06884EDB779C89B044E64E3CD6DBF8EF3B17D3E
# fix conflict with libretls and libressl # fix conflict with libretls and libressl
RUN set -x && \ RUN set -x && \
@ -32,14 +31,12 @@ RUN set -x && \
curl -SsL http://www.squid-cache.org/Versions/v${SQUID_VER%%.*}/squid-${SQUID_VER}.tar.gz -o squid-${SQUID_VER}.tar.gz && \ curl -SsL http://www.squid-cache.org/Versions/v${SQUID_VER%%.*}/squid-${SQUID_VER}.tar.gz -o squid-${SQUID_VER}.tar.gz && \
curl -SsL http://www.squid-cache.org/Versions/v${SQUID_VER%%.*}/squid-${SQUID_VER}.tar.gz.asc -o squid-${SQUID_VER}.tar.gz.asc curl -SsL http://www.squid-cache.org/Versions/v${SQUID_VER%%.*}/squid-${SQUID_VER}.tar.gz.asc -o squid-${SQUID_VER}.tar.gz.asc
COPY squid-keys.asc /tmp
RUN set -x && \ RUN set -x && \
cd /tmp/build && \ cd /tmp/build && \
export GNUPGHOME="$(mktemp -d)" && \ export GNUPGHOME="$(mktemp -d)" && \
( \ gpg --import /tmp/squid-keys.asc && \
gpg --keyserver hkp://p80.pool.sks-keyservers.net:80 --recv-keys ${SQUID_SIG_KEY} || \
gpg --keyserver hkp://ipv4.pool.sks-keyservers.net --recv-keys ${SQUID_SIG_KEY} || \
gpg --keyserver hkp://pgp.mit.edu:80 --recv-keys ${SQUID_SIG_KEY} \
) && \
gpg --batch --verify squid-${SQUID_VER}.tar.gz.asc squid-${SQUID_VER}.tar.gz && \ gpg --batch --verify squid-${SQUID_VER}.tar.gz.asc squid-${SQUID_VER}.tar.gz && \
rm -rf "$GNUPGHOME" rm -rf "$GNUPGHOME"

BIN
squid-keys.asc Normal file
View File

Binary file not shown.