Loading...
Loading...
### Terraform Version ```shell 1.5.4 - but assume all ``` ### Terraform Configuration Files N/A ### Debug Output N/A ### Expected Behavior Get the GPG key to verify Terraform binary releases. `curl --remote-name https://www.hashicorp.com/.well-known/pgp-key.txt` ### Actual Behavior Cannot import key as key material doesn't exist. You get redirected to a localisation, and then get a 404 In a build pipeline, I'm getting the following error: `gpg: no valid OpenPGP data found` Debugging with `curl`: ```text GET /.well-known/pgp-key.txt HTTP/2 > Host: www.hashicorp.com > User-Agent: curl/8.7.1 > Accept: */* > * Request completely sent off < HTTP/2 307 < cache-control: public, max-age=0, must-revalidate < content-type: text/plain < date: Mon, 03 Feb 2025 23:51:08 GMT GET /en/.well-known/pgp-key.txt HTTP/2 > Host: www.hashicorp.com > User-Agent: curl/8.7.1 > Accept: */* > * Request completely sent off < HTTP/2 404 < age: 6521 < cache-control: public, max-age=0, must-revalidate < content-type: text/html; charset=utf-8 < date: Mon, 03 Feb 2025 22:02:26 GMT ; rel="alternate"; hreflang="en", ; rel="alternate"; hreflang="ja", ; rel="alternate"; hreflang="de", ; rel="alternate"; hreflang="fr", ; rel="alternate"; hreflang="ko", ; rel="alternate"; hreflang="pt", ; rel="alternate"; hreflang="es" ``` ### Steps to Reproduce 1. Follow the steps at https://www.hashicorp.com/en/trust/security at the “Release archive checksum verification” section. ### Additional Context I’m sure this isn’t the right place for this, but just wanted to spread awareness. This is breaking pipelines or tools installing Terraform in which a verification of the binaries is done prior to installing. **EDIT: Formatting and additional info** ### References _No response_ ### Generative AI / LLM assisted development? _No response_
Click on a version to see all relevant bugs
Terraform Integration
Learn more about where this data comes from
Bug Scrub Advisor
Streamline upgrades with automated vendor bug scrubs
BugZero Enterprise
Wish you caught this bug sooner? Get proactive today.