Authing with 3rd party private providers

mjdouble · March 17, 2021, 3:57pm

I set up a private registry using Provider Registry Protocol. When I init, the provider is downloaded from my private registry, but it is not able to to be installed due to a checksum list has no SHA-256 hash error. shasums_url and shasums_signature_url are good and valid. Any idea why tf is not pulling these and using for verification? Must a provider only be signed with hashicorp keys? My version is Terraform v0.14.5

mjdouble · March 17, 2021, 5:09pm

@apparentlymart would you be able to comment on this?

apparentlymart · March 17, 2021, 6:24pm

This error seems to come from the step that parses the _SHA256SUMS file retrieved from the URL given in the registry response:

github.com

hashicorp/terraform/blob/c6278bbe372781328183d1c8be6a4b100879c8e4/internal/getproviders/package_authentication.go#L336-L366


func (m matchingChecksumAuthentication) AuthenticatePackage(location PackageLocation) (*PackageAuthenticationResult, error) {
	// Find the checksum in the list with matching filename. The document is
	// in the form "0123456789abcdef filename.zip".
	filename := []byte(m.Filename)
	var checksum []byte
	for _, line := range bytes.Split(m.Document, []byte("\n")) {
		parts := bytes.Fields(line)
		if len(parts) > 1 && bytes.Equal(parts[1], filename) {
			checksum = parts[0]
			break
		}
	}
	if checksum == nil {
		return nil, fmt.Errorf("checksum list has no SHA-256 hash for %q", m.Filename)
	}
	// Decode the ASCII checksum into a byte array for comparison.
	var gotSHA256Sum [sha256.Size]byte
	if _, err := hex.Decode(gotSHA256Sum[:], checksum); err != nil {
		return nil, fmt.Errorf("checksum list has invalid SHA256 hash %q: %s", string(checksum), err)

This file has been truncated. show original

The code before that error is looking for a line in the file which starts with the filename given in the error message, and so my first guess would be that the filename doesn’t exactly match the filename that the registry is reporting and so Terraform can’t match the downloaded file against one of the rows in the sums file.

Topic		Replies	Views
SHA256SUMS on terraform registry Terraform Providers	0	709	October 15, 2020
'missing or invalid SHA256SUMS file' when I publish my Terraform provider Terraform	1	301	July 30, 2023
Unable to publish terraform provider to registry Terraform	3	583	February 26, 2021
Terraform provider downloads fail Terraform	4	2140	February 22, 2021
What are the checks done by hashicorp while Hosting community providers in the terraform registry Terraform	1	139	November 28, 2023

Authing with 3rd party private providers

Related topics