Fixed signature validation display for offline rsg validation with hex-based required signer identity

This commit is contained in:
Mark Qvist
2026-05-07 19:44:53 +02:00
parent 90c88ade00
commit 37fa4392a5
2 changed files with 18 additions and 2 deletions
+17 -1
View File
@@ -1,3 +1,19 @@
### 2026-05-07: RNS 1.2.4
This release
**Changes**
-
**Release Signatures**
Release artifacts include `rsg` signature files that can be validated against the RNS release signing identity `<bc7291552be7a58f361522990465165c>` using `rnid`. To verify files, download the `rsg` signatures, make sure they are in the same folder as the release artifact, and run `rnid` signature verification with the release identity as the required signer:
```sh
rnid -i bc7291552be7a58f361522990465165c -V rns-1.2.4-py3-none-any.whl
```
The `rnid` utility will then verify the signatures, and display whether it is valid. If not, the file has been tampered with and should not be trusted.
### 2026-05-05: RNS 1.2.3
This release adds Work Document and update/commenting support to `rngit`.
@@ -20,7 +36,7 @@ This release adds Work Document and update/commenting support to `rngit`.
Release artifacts include `rsg` signature files that can be validated against the RNS release signing identity `<bc7291552be7a58f361522990465165c>` using `rnid`:
```sh
rnid -i bc7291552be7a58f361522990465165c -V rns-1.2.2-py3-none-any.whl.rsg
rnid -i bc7291552be7a58f361522990465165c -V rns-1.2.3-py3-none-any.whl.rsg
```
### 2026-05-05: RNS 1.2.2
+1 -1
View File
@@ -410,7 +410,7 @@ def validate_rsg(rsg, message=None, required_signer=None):
if not message: raise ValueError(f"No message specified for rsg validation")
if not type(required_signer) in [RNS.Identity, bytes, type(None)]: raise TypeError(f"Invalid required signer type {type(required_signer)}")
if type(required_signer) == RNS.Identity: required_signer_hash = identity.hash
if type(required_signer) == RNS.Identity: required_signer_hash = required_signer.hash
elif type(required_signer) == bytes: required_signer_hash = required_signer
else: required_signer_hash = None