Skip to content
Impreza HostdocsSearch documentationCtrl KOpen portal

Impreza signing keys

SecurityImpreza documentationRead as Markdown ↗

Impreza Host publishes two OpenPGP keys on this page. Before you trust a downloaded key, compare its fingerprint with the value below. If you can, also compare it with a second channel, such as the release page on GitHub.

Impreza Support (offline)

  • Identity: Impreza Support <support@imprezahost.com>

  • Fingerprint:

    FD4AF833 BBA6D9B8 B890B1AE 8BF24F8D E8F950F9

  • Download: /.well-known/security-key.asc

  • Used for: encrypting security and abuse reports, signing public statements and release tags, and certifying the release-signing key below. It is kept offline.

To encrypt a support ticket, use the ticket key on the portal PGP page, not this key.

Impreza Release Signing

  • Identity: Impreza Release Signing <support@imprezahost.com>

  • Fingerprint:

    6B3B5A4C AAE29C44 F5398B14 BD79F84E ED6B38C0

  • Algorithm: RSA 4096, signing only. It expires on 2029-11-01.

  • Download: release-signing-key.txt (the armored key, also shown below)

  • Used for: signing the SHA256SUMS file of the Impreza Terraform and OpenTofu provider releases. The Terraform Registry only accepts RSA or DSA keys, so this key is separate from the support key. The support key certifies it, and you can check that certification with gpg --check-sigs.

The public key:

-----BEGIN PGP PUBLIC KEY BLOCK-----

mQINBGrod0cBEADMwEgQLWOL5/kyUzadcj/lyGa/7bPLDuNKQJw7MuoQOPydHtku
kxY/YWdqgWAsDQsSTuvbqS4DEP0NTN9sp/7S+PPk45Eba3li5kp/tuMEu4wbv45A
4E35CuqqLdch32bnyjVs944CLgb0781s4rGH+zkVyO7jdEd8i7Qn2dx+yZv0Qa/c
FL2tNtpVxbXetP+6EdAzMl3eq5PRjTgYd6kVH64UD8ul/gertnln0nG87LG9Lx4Q
aRkHuImhd0y/fxwkZtIAWBa5nrIYN7JiwZD+u6ZKurBmZORXJsE22ntYzLFMxvvN
BVCVR5i0xIVCjum09/bGpgvpdm3XWCVH2okwQ3yf1CwLJooA1ZSZ0UF+E12DnrdC
r23360Jt+vNVWx4HWw9mOySSFLxKn8xIP2QYSBWkImEbvByN4kUumqFMM6PTN3sS
jUA019858/YZwbdk3g/Ixw4gKbB4VgdDzogO2SaCa7pdTO6KEX2SlBAPm5UCVMhc
CqFZI8Z8dCEvBukPvEyTKNTJIQvbmpjRHY/o9/cfSuURBNmv6Gbw1CWvJnHI9Zf7
rz5+25agtLOOqslg4tg4bQF21AbILXN5XOqwFBU10Srw7Gcmmxgry7omdhmJk8Hq
UBM+yDU/Z54mWF5vcOUIkTTYnzrZGpOfBbPtEdBpxQ0F2Oi2q557ndqohQARAQAB
tDFJbXByZXphIFJlbGVhc2UgU2lnbmluZyA8c3VwcG9ydEBpbXByZXphaG9zdC5j
b20+iQJzBBMBCABdFiEEaztaTKrinET1OYsUvXn4Tu1rOMAFAmrod0cbFIAAAAAA
BAAObWFudTIsMi41KzEuMTIsMiwxAhsDBQkFo5qABQsJCAcCAiICBhUKCQgLAgQW
AgMBAh4HAheAAAoJEL15+E7tazjADCQP/RQktrc8+K03DnpUZkJMAx8hOwU3UJDo
pXSsHpw3wKiXSi1TtbSb+beVAJZZxYzik0R69vqcIH6FDiC76i84vjU+oF+26LHx
w8aTW2hv996owBJGobsmkUfF1bTs0/zdmcgwIH1FTlZ1uNvfgzLAgnG7cUN1vMLM
I/hoqkMyjmAOrMxZCqO8Tbj4iN4j23ZH6WhFYz+1J/7E6gMm4MRuQ8NjwQ1QuFkQ
EsxKzRjQUMCVypYHx1NeHX9dT31wLCdqL1wupchm4MSLi2je7kbG55YrFaJ/GxfR
y1Bo8Opexhk3kAYMovdPMdJ/NQUkXGM1XbVmrVuiFHxowC5xBLEPdXDs0BgOfK1G
SiSNptS4XiasL4NS2+EBF5cclPojV+tdm+vJ2PWTfGmpWdcna4rDd/v0q29UnTuJ
OgLloN3ynrgFRLM1kgMIi1RJi/Bc52jR1aCzG4pLHaO6b7SVFsFJtdz/HNjKFPIf
H3IW3UTuN0DUn67agXCl/gt2xBFqlC+suvPktxFB/u3aQ3lokp5NM1mTW35/yyL6
HEEdAafR+msBHv0rlDq/bJlAoLE+TU7SvGgPPqZMr77SVtFbDLULCqE0iP06AcAW
qMc3uHxPiiRftKDKUOmM8C+Ig48e9IeH8TjaxmbhIIk8geOfKLJK7HKP+4xuZumQ
I6Q6XuihoMrkiHUEEBYKAB0WIQT9Svgzu6bZuLiQsa6L8k+N6PlQ+QUCauh3gwAK
CRCL8k+N6PlQ+ZLbAP43N7vzKzNGIC0zMaN66BQ7XSDi5soL1OQz3w0lF8WWCgEA
8eIAzWEXOOn2sbv/c8SzczB6DI1iFAp5tRvyLbNUQQs=
=zRxi
-----END PGP PUBLIC KEY BLOCK-----

Verify a provider release

Download the ZIP for your platform, the SHA256SUMS file and its .sig from the release, then run:

gpg --import release-signing-key.txt
gpg --verify terraform-provider-impreza_<version>_SHA256SUMS.sig terraform-provider-impreza_<version>_SHA256SUMS
sha256sum -c --ignore-missing terraform-provider-impreza_<version>_SHA256SUMS

Expect Good signature from "Impreza Release Signing <support@imprezahost.com>" and OK for the ZIP you downloaded. Terraform and OpenTofu run the same check when they install the provider from their registries.