8000 Tests: switch CI to use release nginx signing key. · nginxinc/nginx-saml@4cf0f20 · GitHub
[go: up one dir, main page]

Skip to content

Commit 4cf0f20

Browse files
committed
Tests: switch CI to use release nginx signing key.
1 parent f197ff2 commit 4cf0f20

File tree

1 file changed

+8
-6
lines changed

1 file changed

+8
-6
lines changed

.github/workflows/ci-functional-perl.yml

Lines changed: 8 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ jobs:
1010
runs-on: ubuntu-latest
1111
steps:
1212
- name: Checkout repository
13-
uses: actions/checkout@v3
13+
uses: actions/checkout@v5
1414

1515
- name: Install prerequisites
1616
run: |
@@ -28,19 +28,21 @@ jobs:
2828
run: |
2929
echo '${{ secrets.NGINX_LIC }}' | tee $RUNNER_TEMP/lic > /dev/null
3030
31+
- name: Import NGINX Plus signing key
32+
run: |
33+
wget -qO - https://cs.nginx.com/static/keys/nginx_signing.key \
34+
| gpg --dearmor \
35+
| sudo tee /usr/share/keyrings/nginx-archive-keyring.gpg > /dev/null
36+
3137
- name: Configure NGINX Plus repository
3238
run: |
33-
wget --certificate=/etc/ssl/nginx/nginx-repo.crt --private-key=/etc/ssl/nginx/nginx-repo.key \
34-
https://pkgs-test.nginx.com/keys/nginx_test_signing.key
35-
sudo gpg --no-default-keyring --keyring /usr/share/keyrings/nginx_test_signing.gpg \
36-
--import nginx_test_signing.key
3739
echo "Acquire::https::pkgs-test.nginx.com::Verify-Peer \"true\";" | sudo tee -a /etc/apt/apt.conf.d/90nginx
3840
echo "Acquire::https::pkgs-test.nginx.com::Verify-Host \"true\";" | sudo tee -a /etc/apt/apt.conf.d/90nginx
3941
echo "Acquire::https::pkgs-test.nginx.com::SslCert \"/etc/ssl/nginx/nginx-repo.crt\";" \
4042
| sudo tee -a /etc/apt/apt.conf.d/90nginx
4143
echo "Acquire::https::pkgs-test.nginx.com::SslKey \"/etc/ssl/nginx/nginx-repo.key\";" \
4244
| sudo tee -a /etc/apt/apt.conf.d/90nginx
43-
printf "deb [signed-by=/usr/share/keyrings/nginx_test_signing.gpg] \
45+
printf "deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] \
4446
https://pkgs-test.nginx.com/nightly/ubuntu $(lsb_release -cs) nginx-plus\n" \
4547
| sudo tee /etc/apt/sources.list.d/nginx-plus.list
4648

0 commit comments

Comments
 (0)
0