v0.0.29: fix setup crash and add windows key thumbprint display

Author: geemus

.github/workflows/release.yml

@@ -20,11 +20,11 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
       - name: Set up Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v5
         with:
           cache: true
           go-version-file: go.mod
@@ -56,7 +56,7 @@ jobs:
         shell: bash
         run: echo 'flags=--skip homebrew' >> $GITHUB_ENV
       - name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@v4
+        uses: goreleaser/goreleaser-action@v5
         with:
           distribution: goreleaser-pro
           version: latest
@@ -70,11 +70,11 @@ jobs:
     needs: prepare
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
       - name: Set up Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v5
         with:
           go-version-file: go.mod
 
@@ -97,7 +97,7 @@ jobs:
           enableCrossOsArchive: true
 
       - name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@v4
+        uses: goreleaser/goreleaser-action@v5
         with:
           distribution: goreleaser-pro
           version: latest
@@ -112,7 +112,7 @@ jobs:
     needs: prepare
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
 

cert/models/provision.go

@@ -32,7 +32,7 @@ func (m *Provision) Update(msg tea.Msg) (tea.Model, tea.Cmd) {
 		m.chainFile = msg[1]
 		m.keyFile = msg[2]
 
-		return m, tea.Quit
+		return m, nil
 	default:
 		var cmd tea.Cmd
 		m.spinner, cmd = m.spinner.Update(msg)

package.json

@@ -4,6 +4,6 @@
   "dependencies": {},
   "scripts": {},
   "devDependencies": {
-    "@stoplight/prism-cli": "5.7.0"
+    "@stoplight/prism-cli": "5.8.1"
   }
 }

trust/models/clean.go

@@ -2,6 +2,7 @@ package models
 
 import (
 	"fmt"
+	"runtime"
 	"strings"
 
 	"github.com/charmbracelet/bubbles/spinner"
@@ -159,6 +160,14 @@ func (m *TrustCleanCA) View() string {
 	}
 
 	if m.cleaning != nil {
+		// present thumbprint for comparison with pop up prompt
+		if runtime.GOOS == "windows" {
+			fmt.Fprintln(&b, ui.StepHint(fmt.Sprintf("\"%s\" Thumbprint (sha1): %s",
+				m.CA.Subject.CommonName,
+				m.CA.WindowsThumbprint(),
+			)))
+		}
+
 		fmt.Fprintln(&b, ui.StepInProgress(fmt.Sprintf("Cleaning %s %s: removing from %s…%s",
 			ui.EmphasizeUnderline(m.CA.Subject.CommonName),
 			ui.Emphasize(m.CA.PublicKeyAlgorithm.String()),

trust/models/trust.go

@@ -2,6 +2,7 @@ package models
 
 import (
 	"fmt"
+	"runtime"
 	"strings"
 
 	"github.com/anchordotdev/cli"
@@ -116,7 +117,7 @@ func (m *TrustPreflight) View() string {
 			fmt.Fprintln(&b, ui.StepAlert(fmt.Sprintf("%s to install %d missing certificates. (%s)", ui.Action("Press Enter"), len(m.auditInfo.Missing), ui.Accentuate("requires sudo"))))
 		}
 	case noSync:
-		fmt.Fprintln(&b, ui.StepDone(fmt.Sprintf("Compared local and expected CA certificates: found matching certificates.")))
+		fmt.Fprintln(&b, ui.StepDone("Compared local and expected CA certificates: found matching certificates."))
 	default:
 		panic("impossible")
 	}
@@ -185,6 +186,14 @@ func (m *TrustUpdateStore) View() string {
 	}
 
 	if m.installing != nil {
+		// present thumbprint for comparison with pop up prompt
+		if runtime.GOOS == "windows" {
+			fmt.Fprintln(&b, ui.StepHint(fmt.Sprintf("\"%s\" Thumbprint (sha1): %s",
+				m.installing.Subject.CommonName,
+				m.installing.WindowsThumbprint(),
+			)))
+		}
+
 		fmt.Fprintln(&b, ui.StepInProgress(fmt.Sprintf("Updating %s: installing %s %s.",
 			ui.Emphasize(m.Store.Description()),
 			ui.Underline(m.installing.Subject.CommonName),

truststore/truststore.go

@@ -1,11 +1,14 @@
 package truststore
 
 import (
+	"crypto/sha1"
 	"crypto/subtle"
 	"crypto/x509"
+	"encoding/hex"
 	"fmt"
 	"io/fs"
 	"os"
+	"regexp"
 	"strings"
 )
 
@@ -31,6 +34,15 @@ func (c *CA) Equal(ca *CA) bool {
 	return c.UniqueName == ca.UniqueName && subtle.ConstantTimeCompare(c.Raw, ca.Raw) == 1
 }
 
+var reWindowsThumbprintSpacer = regexp.MustCompile(".{8}")
+
+func (c *CA) WindowsThumbprint() string {
+	certSha := sha1.Sum(c.Raw)
+	certHex := strings.ToUpper(hex.EncodeToString(certSha[:]))
+	thumbprint := strings.TrimRight(reWindowsThumbprintSpacer.ReplaceAllString(certHex, "$0 "), " ")
+	return thumbprint
+}
+
 func fatalErr(err error, msg string) error {
 	return fmt.Errorf("%s: %w", msg, err)
 }