Enable signature checking in beta and staging release channels

updates/helper/signing.go

@@ -28,6 +28,16 @@ var (
 	BinarySigningTrustStore = jess.NewMemTrustStore()
 )
 
+// GetVerificationConfig returns the verification options based on the release channel.
+func GetVerificationConfig(releaseChannel string) map[string]*updater.VerificationOptions {
+	switch releaseChannel {
+	case ReleaseChannelBeta, ReleaseChannelStaging:
+		return VerificationConfig
+	default:
+		return nil
+	}
+}
+
 func init() {
 	for _, signingKey := range BinarySigningKeys {
 		rcpt, err := jess.RecipientFromTextFormat(signingKey)

updates/main.go

@@ -111,6 +111,7 @@ func start() error {
 		UserAgent:        UserAgent,
 		MandatoryUpdates: helper.MandatoryUpdates(),
 		AutoUnpack:       helper.AutoUnpackUpdates(),
+		Verification:     helper.GetVerificationConfig(initialReleaseChannel),
 		DevMode:          devMode(),
 		Online:           true,
 	}