Skip to content
This repository has been archived by the owner on Feb 29, 2024. It is now read-only.

Commit

Permalink
feat: update cf.pub key and cache file path
Browse files Browse the repository at this point in the history
The private key that encrypts the file in `https://rpki.cloudflare.com/rpki.json` is being rotated.
In order to avoid any downtime, we created a second file with the new encryption key in `https://rpki.cloudflare.com/v2/rpki.json`.
In this PR, we update the path for the cache file, so we use the newly encrypted v2/rpki.json, and also the new public key in cf.pub that matches it.

The old file will also need to be updated so we can deprecate the old encryption keys.
You need to download this new release to make sure your code does not break when the key is updated. Alternatively, you can continue to use the release you are using now and simply update cf.pub and pass the -cache flag with the correct url.

DEADLINE: 18-03-2024 !!!!
  • Loading branch information
talves committed Feb 29, 2024
1 parent 9f01dca commit ec1486a
Show file tree
Hide file tree
Showing 2 changed files with 3 additions and 3 deletions.
4 changes: 2 additions & 2 deletions cmd/gortr/cf.pub
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEyXAt9Sa+WVHxZqrYfdqcro8+D+Br
JANBXv226o03qjt3yT7wWGeRYqNOliZ+KEyn09y0qJS0qs5YTHWzQKZnBg==
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEEvh5HhsIBgt8gOLbTHrDcDMB9Kk2
LzxJj75hAr9FCjyCljETiw5ArYYmFvgM4htqAdvBf1IOFtPGKRP1bllg5A==
-----END PUBLIC KEY-----
2 changes: 1 addition & 1 deletion cmd/gortr/gortr.go
Original file line number Diff line number Diff line change
Expand Up @@ -82,7 +82,7 @@ var (
Verify = flag.Bool("verify", true, "Check signature using provided public key (disable by passing -verify=false)")
PublicKey = flag.String("verify.key", "cf.pub", "Public key path (PEM file)")

CacheBin = flag.String("cache", "https://rpki.cloudflare.com/rpki.json", "URL of the cached JSON data")
CacheBin = flag.String("cache", "https://rpki.cloudflare.com/v2/rpki.json", "URL of the cached JSON data")
UseSerial = flag.String("useserial", "disable", "Use serial contained in file (disable, startup, full)")

Etag = flag.Bool("etag", true, "Enable Etag header")
Expand Down

0 comments on commit ec1486a

Please sign in to comment.