Skip to content
This repository was archived by the owner on Feb 29, 2024. It is now read-only.

Commit ec1486a

Browse files
author
talves
committed
feat: update cf.pub key and cache file path
The private key that encrypts the file in `https://rpki.cloudflare.com/rpki.json` is being rotated. In order to avoid any downtime, we created a second file with the new encryption key in `https://rpki.cloudflare.com/v2/rpki.json`. In this PR, we update the path for the cache file, so we use the newly encrypted v2/rpki.json, and also the new public key in cf.pub that matches it. The old file will also need to be updated so we can deprecate the old encryption keys. You need to download this new release to make sure your code does not break when the key is updated. Alternatively, you can continue to use the release you are using now and simply update cf.pub and pass the -cache flag with the correct url. DEADLINE: 18-03-2024 !!!!
1 parent 9f01dca commit ec1486a

File tree

2 files changed

+3
-3
lines changed

2 files changed

+3
-3
lines changed

cmd/gortr/cf.pub

+2-2
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
11
-----BEGIN PUBLIC KEY-----
2-
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEyXAt9Sa+WVHxZqrYfdqcro8+D+Br
3-
JANBXv226o03qjt3yT7wWGeRYqNOliZ+KEyn09y0qJS0qs5YTHWzQKZnBg==
2+
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEEvh5HhsIBgt8gOLbTHrDcDMB9Kk2
3+
LzxJj75hAr9FCjyCljETiw5ArYYmFvgM4htqAdvBf1IOFtPGKRP1bllg5A==
44
-----END PUBLIC KEY-----

cmd/gortr/gortr.go

+1-1
Original file line numberDiff line numberDiff line change
@@ -82,7 +82,7 @@ var (
8282
Verify = flag.Bool("verify", true, "Check signature using provided public key (disable by passing -verify=false)")
8383
PublicKey = flag.String("verify.key", "cf.pub", "Public key path (PEM file)")
8484

85-
CacheBin = flag.String("cache", "https://rpki.cloudflare.com/rpki.json", "URL of the cached JSON data")
85+
CacheBin = flag.String("cache", "https://rpki.cloudflare.com/v2/rpki.json", "URL of the cached JSON data")
8686
UseSerial = flag.String("useserial", "disable", "Use serial contained in file (disable, startup, full)")
8787

8888
Etag = flag.Bool("etag", true, "Enable Etag header")

0 commit comments

Comments
 (0)