Commit graph

3274 commits

Author SHA1 Message Date
Vladimir Diaz
3549aaaf5d
Add/edit test conditions for consistent snapshot repo
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-03-16 14:35:38 -04:00
Vladimir Diaz
ae9301b011
Write new Root file if the consistent snapshot setting as changed
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-03-16 14:30:22 -04:00
Vladimir Diaz
d99e52e75e
Store consistent snapshot setting after loading Root metadata
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-03-16 14:29:11 -04:00
Vladimir Diaz
5563fe4961
Merge branch 'trishankatdatadog/consistent_snapshot' of git://github.com/trishankatdatadog/tuf into trishankatdatadog-trishankatdatadog/consistent_snapshot 2018-03-16 14:13:10 -04:00
Vladimir Diaz
e6dcb27efc
Merge pull request #642 from vladimir-v-diaz/cli_add_option_delegated_roles
CLI: Allow --add to work with delegated roles
2018-03-16 10:48:28 -04:00
Vladimir Diaz
37872f7957
Document password changes in CLI.md
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-03-16 10:34:21 -04:00
Trishank K Kuppusamy
2f4de169e2
try fixing test per @vladimir-v-diaz
Signed-off-by: Trishank K Kuppusamy <trishank.kuppusamy@datadoghq.com>
2018-03-15 17:05:41 -04:00
Trishank K Kuppusamy
d452739017
try fixing test
Signed-off-by: Trishank K Kuppusamy <trishank.kuppusamy@datadoghq.com>
2018-03-15 16:57:14 -04:00
Vladimir Diaz
3f3be4f94d
Remove obsolete code from repo.py
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-03-15 16:33:28 -04:00
Trishank K Kuppusamy
0e65ba0766
try removing condition per @vladimir-v-diaz
Signed-off-by: Trishank K Kuppusamy <trishank.kuppusamy@datadoghq.com>
2018-03-15 15:56:08 -04:00
Vladimir Diaz
00892d900b
Allow --add to work with delegated roles
Also allow custom passwords with top-level roles.

Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-03-15 15:22:31 -04:00
Vladimir Diaz
8d5dd3bf85
Merge pull request #641 from alanjcastonguay/patch-1
Update TUTORIAL.md
2018-03-13 13:43:04 -04:00
Alan J Castonguay
c5dd5531a6
Update TUTORIAL.md
Reinstate link to ATTACKS.md, which demonstrates how the code
protects against the attacks outlined in SECURITY.md.
2018-03-13 12:21:00 -04:00
Alan J Castonguay
09c703d5b6
Update TUTORIAL.md
Correct links to modules and documentation.
Broken links appear to be mostly fallout from moving
documentation into the docs/ directory, as relative paths
to python source modules were broken.
2018-03-11 16:16:04 -04:00
Vladimir Diaz
d9b6d9846e
Merge pull request #640 from vladimir-v-diaz/support_remove_cli_option
CLI: Implement --remove command-line option
2018-03-08 13:27:11 -05:00
Vladimir Diaz
829bc32213
Add --remove command-line option
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-03-08 11:36:20 -05:00
Vladimir Diaz
e61f6f36b9
Edit CLI.md to include text for --remove option
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-03-08 11:34:18 -05:00
Vladimir Diaz
d1ea040be3
Merge pull request #638 from vladimir-v-diaz/sign_fresh_metadata
CLI --sign: Support signing of delegated metadata and ability to import any public key type
2018-03-06 11:32:19 -05:00
Vladimir Diaz
b7cb025eae
Remove test condition for delegation to 2+ roles
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-03-06 10:15:22 -05:00
Vladimir Diaz
b68ad48cb1
Make sure private key is loaded with --sign
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-03-05 17:24:27 -05:00
Vladimir Diaz
c269d4784a
Support import of any key type, and sign fresh metadata
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-03-05 16:47:55 -05:00
Vladimir Diaz
2d3a419364
Revise CLI.md
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-03-05 16:41:02 -05:00
Vladimir Diaz
1d46c93624
Allow 2+ role to delegate to the same role
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-03-05 16:39:44 -05:00
Vladimir Diaz
2b6679e2c9
Merge pull request #636 from vladimir-v-diaz/fix_slash_sensitivity-issue#630
Fix slash sensitivity: Issue #630
2018-03-05 15:46:49 -05:00
Vladimir Diaz
940a5861f7
Merge pull request #635 from vladimir-v-diaz/use_glob_pattern_example
Use glob pattern example in documentation for delegate() and repo.py --delegate
2018-03-05 15:46:34 -05:00
Vladimir Diaz
62dc96e65b
Merge pull request #637 from vladimir-v-diaz/support_non-ecdsa_keys_signing
CLI --sign: Support non-ECDSA keys
2018-03-02 16:42:29 -05:00
Vladimir Diaz
461c3e4a6f
Update CLI.md to remove note
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-03-02 16:15:22 -05:00
Vladimir Diaz
6158f96f30
Support non-ecdsa keys with --sign
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-03-02 16:14:37 -05:00
Vladimir Diaz
0cb889f7d1
Add test case for slash sensitivity issue
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-03-02 11:36:42 -05:00
Vladimir Diaz
77cd6325d2
Ensure, e.g., that 'foo.tgz' matches delegation '/foo*'
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-03-02 11:35:32 -05:00
Vladimir Diaz
4b1fea27d1
Use glob pattern example in documentation for delegate()
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-03-01 16:08:35 -05:00
Vladimir Diaz
6aa1cec4d2
Merge pull request #634 from vladimir-v-diaz/upgrade_cffi
Bump 'cffi' dependency: 1.11.4 -> 1.11.5
2018-03-01 15:59:21 -05:00
Vladimir Diaz
c273942639
Bump 'cffi' dependency: 1.11.4 -> 1.11.5
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-03-01 15:44:12 -05:00
Vladimir Diaz
58cda4fe90
Merge pull request #629 from vladimir-v-diaz/add_revoke_option
Add --revoke option in `repo.py`
2018-02-13 15:29:03 -05:00
Vladimir Diaz
5fcec06bb0
Resolve linter warning: Correctly list exceptions
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-02-13 15:05:36 -05:00
Vladimir Diaz
0fd5728602
Implement --revoke option in repo.py
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-02-13 14:34:28 -05:00
Vladimir Diaz
8a03fc4b30
Document --revoke in CLI.md
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-02-13 14:33:07 -05:00
Vladimir Diaz
8a9ed5240c
Do not throw exception if a role being removed is missing
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-02-13 14:29:43 -05:00
Vladimir Diaz
9e98d96a4b
Merge pull request #627 from vladimir-v-diaz/add_delegate_option
Add --delegate option to `repo.py` CLI (WIP)
2018-02-13 10:30:38 -05:00
Vladimir Diaz
25a8eb1312
Update test cases affected by change to delegating paths
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-02-12 17:32:29 -05:00
Vladimir Diaz
b3cc7dfeb6
Correctly delegate paths via add_paths() in repository_tool.py
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-02-12 17:31:17 -05:00
Vladimir Diaz
6edad831c5
Minor cosmetic edits to repo.py
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-02-12 16:45:19 -05:00
Vladimir Diaz
442d4b592e
Do not modify the delegated paths given by user
These paths may not necessarily exist on the local environment or within the repo's targets directory

Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-02-12 16:41:13 -05:00
Vladimir Diaz
3660776f80
Add 'ecdsa-sha2-nistp256' to supported delegated key types
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-02-12 16:25:01 -05:00
Vladimir Diaz
bc0af9acdd
Implement (roughly) --delegate, and supporting options
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-02-09 17:23:00 -05:00
Vladimir Diaz
b802801402
Document --delegate in CLI.md
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-02-09 17:21:05 -05:00
Vladimir Diaz
838e3fcdba
Reorder the list of repo.py options
The previous ordering placed unimportant options higher, which made reading the --help output difficult.

Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-02-09 14:16:06 -05:00
Vladimir Diaz
7c102341ef
Revise text of CLI.md
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-02-09 14:13:46 -05:00
Vladimir Diaz
e28b3fd535
Merge pull request #626 from vladimir-v-diaz/revise_client.py_descs
Revise `client.py` help descriptions
2018-02-09 10:07:20 -05:00
Vladimir Diaz
e61138c382
Revise client.py help descriptions
Signed-off-by: Vladimir Diaz <vladimir.v.diaz@gmail.com>
2018-02-08 17:14:15 -05:00