diff --git a/.changes/misign-update.md b/.changes/misign-update.md new file mode 100644 index 000000000..e1a0281d8 --- /dev/null +++ b/.changes/misign-update.md @@ -0,0 +1,5 @@ +--- +"tauri": patch +--- + +The updater now expects signatures created with the latest CLI release. diff --git a/core/tauri/Cargo.toml b/core/tauri/Cargo.toml index c2a5c950a..3d7c10bef 100644 --- a/core/tauri/Cargo.toml +++ b/core/tauri/Cargo.toml @@ -66,9 +66,9 @@ attohttpc = { version = "0.17", features = [ "json", "form" ] } open = { version = "2.0", optional = true } shared_child = { version = "0.3", optional = true } os_pipe = { version = "0.9", optional = true } -rfd = { version = "0.5.0", features = [ "parent" ] } +rfd = { version = "0.5.1", features = [ "parent" ] } raw-window-handle = "0.3.3" -minisign-verify = { version = "0.1", optional = true } +minisign-verify = { version = "0.2", optional = true } os_info = { version = "3.0.7", optional = true } futures-lite = "1.12" diff --git a/core/tauri/src/updater/core.rs b/core/tauri/src/updater/core.rs index 77eb9bd32..84b20b496 100644 --- a/core/tauri/src/updater/core.rs +++ b/core/tauri/src/updater/core.rs @@ -811,7 +811,7 @@ pub fn verify_signature( file_buff.read_to_end(&mut data)?; // Validate signature or bail out - public_key.verify(&data, &signature)?; + public_key.verify(&data, &signature, false)?; Ok(true) }