[COMMONSSITE-138] Create Signature Validation script for releases

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.7
• Fix Version/s: 1.8
• Component/s: Commons Release Plugin
• Assignee: Rob Tompkins
• Reporter: Rob Tompkins
• Created: 02/Oct/20 15:28
• Updated: 25/Oct/20 11:39
• Resolved: 25/Oct/20 11:39

Description

I would like to have a signature-validator.sh at the root of the svn distribution directory that accommodates validating all the signatures of the release artifact. Maybe this goes here, maybe this should go in the individual components?

For now I'm going to put it here for the sake of keeping things "DRY." I think this file becomes complex for multi-module builds and we may want individual projects to contribute their own signature-validator.sh file. I think commons-rng will be a good place to show how to incorporate such a customized file. (Happy to do the work myself)