GPG verification

Of tarballs, of metadata? How? Via cli? So many questions.

added levelhard typeimprovement labels

changed the description

changed milestone to %0.1.17

$ /home/hasufell/git/ghcup-hs/dist-newstyle/build/x86_64-linux/ghc-8.10.7/ghcup-0.1.16.2/x/ghcup/opt/build/ghcup/ghcup  -v list                       Sat 19:10
[ Debug ] Identified Platform as: Linux Fedora, 34
[ Info  ] downloading: https://www.haskell.org/ghcup/data/ghcup-0.0.7.yaml as file /home/hasufell/.ghcup/cache/ghcup-0.0.7.yaml
[ Debug ] Skipping and deleting etags file because destination file /home/hasufell/.ghcup/cache/ghcup-0.0.7.yaml doesn't exist
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  123k  100  123k    0     0   109k      0  0:00:01  0:00:01 --:--:--  109k
[ Debug ] Status code was 200, overwriting
[ Debug ] Parsed etag: "61439e15-1ecde"
[ Debug ] Writing etagsFile /home/hasufell/.ghcup/cache/ghcup-0.0.7.yaml.etags
[ Debug ] downloading: https://www.haskell.org/ghcup/data/ghcup-0.0.7.yaml.sig as file /home/hasufell/.ghcup/cache/ghcup-0.0.7.yaml.sig
[ Debug ] Read etag: "61439e15-2aa"
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
[ Debug ] Status code was 304, not overwriting
[ Debug ] Parsed etag: "61439e15-2aa"
[ Debug ] Writing etagsFile /home/hasufell/.ghcup/cache/ghcup-0.0.7.yaml.sig.etags
[ Info  ] verifying signature of: /home/hasufell/.ghcup/cache/ghcup-0.0.7.yaml
[ Debug ] gpg: Signature made Thu 16 Sep 2021 09:41:56 PM CEST
[ ...   ] gpg:                using RSA key 7784930957807690A66EBDBE3786C5262ECB4A3F
[ ...   ] gpg:                issuer "hasufell@posteo.de"
[ ...   ] gpg: Good signature from "Julian Ospald <maerwald@hasufell.de>" [ultimate]
[ ...   ] gpg:                 aka "Julian Ospald <hasufell@posteo.de>" [ultimate]
[ ...   ] gpg:                 aka "Julian Ospald <hasufell@hasufell.de>" [ultimate]
[ ...   ]
[ Debug ] Decoding yaml at: /home/hasufell/.ghcup/cache/ghcup-0.0.7.yaml

mentioned in commit c5acdbf7

mentioned in merge request !178 (merged)

mentioned in commit 2c462583

mentioned in commit db69a767

mentioned in commit 72441c85

mentioned in commit 83f38791

mentioned in commit c431c0ae

closed