Mithril v2327.0-pre

What's Changed

• Fix curl commands for latest snapshot digest in docs by @jpraynaud in #943
• Update Mithril logo by @jpraynaud in #940
• Add Certificate list route to aggregator REST API by @jpraynaud in #949
• Update dependencies & rotate current doc by @jpraynaud in #950
• Ensemble/895/mithril client snapshot commands by @ghubertpalo in #951
• Upgrade Rust 1.70.0 by @jpraynaud in #959
• Greg/960/refactoring client by @ghubertpalo in #963
• Stake distribution client subcommand by @ghubertpalo in #966
• 899/greg/ete msd command by @ghubertpalo in #968
• Fix retrieve open message from correct epoch by @jpraynaud in #964
• Fix clean epoch Certifier service by @jpraynaud in #970
• Enhance terraform infrastructure by @jpraynaud in #957
• Enhance ImmutableDigesterError::NotEnoughImmutable error by @dlachaumepalo in #971
• Greg/960/refacto digester by @ghubertpalo in #972
• Fix Mithril Client multi-platform test workflow by @jpraynaud in #965
• add blog article about new client API by @ghubertpalo in #975
• Update Mithril Client documentation by @dlachaumepalo in #974
• update client architecture documentation by @ghubertpalo in #976
• Fix aggregator SIGNING state dead-loop by @jpraynaud in #985
• Fix snapshot download command error with --download-dir option in client by @dlachaumepalo in #981
• Update dependencies by @jpraynaud in #990
• Upgrade Rust outdated dependencies by @jpraynaud in #992
• Greg/967/stake distribution artifact by @ghubertpalo in #980
• Upgrade Cardano node to 8.1.1 by @jpraynaud in #997
• fix hanging critical error by @ghubertpalo in #996
• Add log with node version at startup in aggregator/signer by @dlachaumepalo in #995
• Signer deployment model by @jpraynaud in #999
• nix: bump crane to fix build. Add basic hydraJobs. by @jbgi in #1002
• Uniformise datetime usage by @Alenar in #994
• Fix rfc3339 datetime migration by @Alenar in #1005
• Update dependencies by @jpraynaud in #1009
• Fix master certificate retrieval by @Alenar in #1007
• Simplify aggregator integration tests by @Alenar in #1003
• Greg/982/refactoring client by @ghubertpalo in #998
• Fix flaky end to end tests by @jpraynaud in #977
• Fix darwin nix build by @jbgi in #1008
• Clean pending_snapshot directory of aggregator by @dlachaumepalo in #1011
• Update dependencies by @jpraynaud in #1014
• refactor client snapshot download by @ghubertpalo in #1012
• Signer deployment model dev blog post by @jpraynaud in #1016
• Aggregator Recompute cert hash command by @Alenar in #1013
• Implement Mithril Relay in infra by @jpraynaud in #1021
• retry when artifact creation failed by @ghubertpalo in #1019
• Update openapi spec examples by @dlachaumepalo in #1020
• Use cargo-nextest to run test on CI and reenable tests report by @Alenar in #1022
• nix: bump nixpkgs to get newer rustc by @jbgi in #1025
• Sqlite upgrade and bundling by @Alenar in #1024
• Add infrastructure monitoring by @jpraynaud in #1026
• Signer verification key discrepancy by @Alenar in #1028
• nix: increase cargo verbosity to avoid hitting max-silent-time by @jbgi in #1029

New Contributors

• @dlachaumepalo made their first contribution in #971
• @jbgi made their first contribution in #1002

Full Changelog: 2321.1...2327.0-pre

Crates Versions

Crate	Version
mithril-aggregator	0.3.46
mithril-client	0.3.14
mithril-common	0.2.73
mithril-signer	0.2.57
mithril-stm	0.2.17

Verify the authenticity of a downloaded asset

Detailed procedure to verify an asset

• Step 1: Identify the downloaded asset on your computer YOUR_ASSET_FILE
• Step 2: Download the signed checksum file from this link CHECKSUM.asc and save it in the same folder as the asset
• Step 3: In your terminal, go to the asset folder by running:

cd ***YOUR_ASSET_FOLDER***

• Step 4: Then verify the checksum of the asset by running:

sha256sum -c ./CHECKSUM.asc 2>/dev/null | grep ***YOUR_ASSET_FILE***

You must see:

./***YOUR_ASSET_FILE***: OK

• Step 5: Download the public key file from this link gpg-public.key and save it in the same folder as the asset
• Step 6: Then import the GPG public key:

gpg --import ./gpg-public.key

You must see something like:

gpg: key : public key "Input Output / Mithril <mithril@iohk.io>" imported
gpg: Total number processed: 1
gpg:               imported: 1

• Step 7: Then verify the GPG signature of the checksum file:

gpg --verify ./gpg-public.key ./CHECKSUM.asc

You must see something like:

gpg: Signature made Mon 05 Dec 2022 04:53:54 PM CET
gpg:                using RSA key 35EDE9D47BBA62A2F388E655899ACD26B8BCA0D2
gpg: Good signature from "Input Output / Mithril <mithril@iohk.io>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: 35ED E9D4 7BBA 62A2 F388  E655 899A CD26 B8BC A0D2

The signature is valid if and only if:

• there is a line with gpg: Good signature from "Input Output / Mithril <mithril@iohk.io>"
• there is a line with Primary key fingerprint: 2AC0 7B11 8B23 1443 F544 2D0C 6E2C 1160 3E79 0021

• Step 8:
  If you successfully validated all the steps of this process, then you have successfully verified the authenticity of the asset ✔️
  If not, contact us at [mithril@iohk.io] and let us know of the outcome of your run of this process ⚠️