path53 0.4.7 → 0.4.8
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- checksums.yaml.gz.sig +0 -0
- data/README.org +20 -0
- data.tar.gz.sig +0 -0
- metadata +1 -1
- metadata.gz.sig +2 -1
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA1:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 232e35ab654ffd598a1816606e5efd0ecf613807
|
4
|
+
data.tar.gz: ef7c23b81f8a1221504121c65063f31521466471
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: d528f082c73312fd59d7288daa6e28c759c534d019e556445c17a19bbf32c213507ccefcbbdc9c592bdb4a945b78e9fdd487082d251611ff62869333f738a096
|
7
|
+
data.tar.gz: b22f93edba5a2e306edcb2711265f2c7516aa493ba383dcca812b2b1ef8ef9b1bc7e7fa0acd6d9195b206e55b39b5332b25989cb5487fd91ff7b8165cb1200c8
|
checksums.yaml.gz.sig
CHANGED
Binary file
|
data/README.org
CHANGED
@@ -23,6 +23,26 @@ validation rules are often surprising. =path53= aims to tame this complexity.
|
|
23
23
|
tampered with (and really should, since calling ~apply!~ acts on your AWS
|
24
24
|
account with your credentials).
|
25
25
|
|
26
|
+
Assuming you have trusted the certificate, you can perform a trusted installation like so:
|
27
|
+
|
28
|
+
#+BEGIN_SRC shell
|
29
|
+
gem install path53 --trust-policy MediumSecurity
|
30
|
+
#+END_SRC
|
31
|
+
|
32
|
+
Using =bundler=, the process is similar:
|
33
|
+
|
34
|
+
#+BEGIN_SRC shell
|
35
|
+
bundle --trust-policy MediumSecurity
|
36
|
+
#+END_SRC
|
37
|
+
|
38
|
+
*** Why MediumSecurity?
|
39
|
+
|
40
|
+
=MediumSecurity= requires valid signatures on *signed* gems, but allows unsigned
|
41
|
+
dependencies. While =path53= has few dependencies, not all of them are signed.
|
42
|
+
Using =HighSecurity= will fail unless *all* dependencies are signed.
|
43
|
+
|
44
|
+
*** Trusting the signing certificate
|
45
|
+
|
26
46
|
A copy of the public key is included in the repository for verification.
|
27
47
|
Assuming you've cloned the repository to =./path53=, you can add it to your list
|
28
48
|
of trusted keys like so:
|
data.tar.gz.sig
CHANGED
Binary file
|
metadata
CHANGED
metadata.gz.sig
CHANGED
@@ -1 +1,2 @@
|
|
1
|
-
|
1
|
+
�d�^C�J�P�m�
|
2
|
+
���W���p����}�Y-I�Tix�Ւ��X4VH��x����2[?[��S�����(_�M�f
|