Commit graph

3274 commits

Author SHA1 Message Date
Vladimir Diaz
b921372c1f Replace instances of ED25519 with Ed25519 in messages 2016-10-19 13:51:14 -04:00
Vladimir Diaz
76dc0a6a0d Use pyca-cryptography by default 2016-10-19 13:37:10 -04:00
Vladimir Diaz
5fbdd14399 Remove section for virtual machine and installation instructions 2016-10-19 13:00:31 -04:00
Vladimir Diaz
a5146c5d1b Edit overview section 2016-10-19 12:59:22 -04:00
Vladimir Diaz
22fa839ea3 Add sections to repository tool doc for updater attacks and how to perform an update 2016-10-19 11:21:05 -04:00
Vladimir Diaz
e588a61b4f Merge pull request #379 from vladimir-v-diaz/ecordell-root-versioning
Various changes to repository writting
2016-10-18 14:08:31 -04:00
Vladimir Diaz
8eac568c92 Partial implmentation for issue #374
If writting a consistent snapshot, the snapshot should be written first and and then a copy or link to it should be created.
2016-10-18 13:31:37 -04:00
Vladimir Diaz
70fc8dce36 Resolve merge conflicts with upstream and ecordell-root-versioning 2016-10-18 10:28:04 -04:00
Vladimir Diaz
58370a5a2f Append '_integration.py' to the module name of the integration tests. 2016-10-17 16:56:08 -04:00
Vladimir Diaz
18619f2da7 Rename function: _verify_next_version_of_root() --> _verify_root_chain_link() 2016-10-17 16:26:24 -04:00
Vladimir Diaz
1cbf89e4da Add some comments/concerns in updater.refresh() 2016-10-17 16:22:12 -04:00
Vladimir Diaz
9e2fe125ee Remove code no longer needed that fetched root and snapshot by digest (they are now fetched by version number). 2016-10-17 16:08:46 -04:00
Vladimir Diaz
8882dc5b7b Merge branch 'root-versioning' of https://github.com/ecordell/tuf into ecordell-root-versioning
Conflicts:
	tests/test_key_revocation.py
	tests/test_replay_attack.py
	tests/test_repository_tool.py
	tests/test_updater.py
	tuf/formats.py
	tuf/repository_lib.py
2016-10-17 15:57:48 -04:00
Sebastien Awwad
5e0574f3f7 minor readme correction: libffi typo 2016-10-14 14:05:32 -04:00
Vladimir Diaz
3dfb22cfb7 Update setup.py
Add 'cryptography' to tuf[tools]
2016-10-14 11:27:13 -04:00
Vladimir Diaz
ab26a216a8 Update README.rst 2016-10-12 10:35:04 -04:00
Trishank Karthik Kuppusamy
8fddd7c023 Include installation instructions for Fedora 2016-10-11 15:39:40 -04:00
Vladimir Diaz
b03deee874 Modify the way slow retrieval errors are raised and detected.
Potential slow retrieval errors are raised for safe downloads (strict check on file size) and not for unsafe (a file size less than an upper limit).  Slow retrieval errors should always be prevented
2016-10-10 17:34:00 -04:00
Vladimir Diaz
d72f733862 Do not raise tuf.SlowRetrievalError in download.py
(at least until the tests are updated).
2016-10-07 17:24:54 -04:00
Vladimir Diaz
0a84a4e7d6 Throw an explicit exception if streamed data occurs at a slow enough rate 2016-10-07 11:34:20 -04:00
Vladimir Diaz
f2bd05bcbe Prevent rudimentary client module from refetching root.json
Not re-fetching root simplifies examples in documentation and attack simulations
2016-10-07 11:33:01 -04:00
Vladimir Diaz
8cfaf2ccb6 Rename tuf.py to tufcli.py to prevent name clash 2016-10-07 11:27:52 -04:00
Vladimir Diaz
3ab08e52f6 Update tuf-spec.txt
Distinguish the "signed" portion of a metadata file from the entire file itself.  Addressing comment provided by @HuKeping
2016-10-07 10:57:19 -04:00
Vladimir Diaz
f50fa2a4fe Merge pull request #376 from theupdateframework/fix_key_typos
DOC: Fixes PBKDF1 typo throughout modules
2016-10-07 10:26:18 -04:00
Santiago Torres
a96f0036e3
DOC: Fixes PBKDF1 typo throughout modules
tuf/keys.py,  pyca_crypto_keys.py and pycrypto_keys.py was missing the
"D" on PBKDF1.
2016-10-02 18:21:09 -04:00
Vladimir Diaz
3ec0e517e6 Update README.rst
Update list of non-Python dependencies that should be installed
2016-09-30 14:09:44 -04:00
Vladimir Diaz
8b456211e5 Merge branch 'develop' of github.com:theupdateframework/tuf into develop 2016-09-21 09:24:45 -04:00
Vladimir Diaz
e1debf8ea9 Improve code coverage for repository_tool.py 2016-09-21 09:17:37 -04:00
Vladimir Diaz
402057e716 Group load_pem_public_key() exceptions in verify_rsa_signature() 2016-09-20 11:42:01 -04:00
Vladimir Diaz
070c9e0149 Test for invalid keyid in remove_invalid_and_duplicate_signatures() 2016-09-20 11:40:38 -04:00
Vladimir Diaz
35d478f1c2 Cover remaining code coverage for repository_lib.py 2016-09-20 11:02:53 -04:00
Vladimir Diaz
d75d25a4e6 Implement pyca_crypto_keys.py's create_rsa_encrypted_pem and improve code coverage for it 2016-09-19 17:21:33 -04:00
Evan Cordell
0e93c3a7d2 Enforce root version signature chaining in client updater 2016-09-19 15:18:33 -04:00
Evan Cordell
a11709000d Add root versioning for root key rotation 2016-09-19 15:18:20 -04:00
Vladimir Diaz
383a99b6ad Don't list compressed versions of rolenames in snapshot.json 2016-09-15 16:34:39 -04:00
Vladimir Diaz
b5a0cc413b Add test repository
compressed metadata was incorrectly listed in snapshot.json.  List on roles with '.json' extension
2016-09-15 16:33:20 -04:00
Vladimir Diaz
83eb466055 Add repository.writeall() and repository.write(), and rename backtrack to terminating 2016-09-15 15:27:19 -04:00
Vladimir Diaz
feb2cd0df4 Update tests to improve code coverage and following the changes to repository write and backtracking 2016-09-15 15:24:00 -04:00
Vladimir Diaz
26016479e9 Add test repository following changes to repository writing and backtracking 2016-09-15 15:19:27 -04:00
Vladimir Diaz
5d2c8fdc76 Update tuf-spec.txt
Remove mention of a "private" dictionary key in metadata.  Public TUF metadata consumed by clients would never include a "private" field, so it shouldn't be specified here in the specification.
2016-09-15 14:23:44 -04:00
Vladimir Diaz
f8e56d29e6 Add favicons
Add two favicons that are easier to see in the browser.
2016-09-02 10:22:58 -04:00
Vladimir Diaz
daa79ea640 Add code coverage for en(de)cryption functions of pyca_crypto_keys.py 2016-09-01 16:39:03 -04:00
Vladimir Diaz
6e4a69162f Update README.md
Use a wildcard in the `restricted_paths` argument to delegate() and in the argument to add_restricted_paths()
2016-09-01 15:40:40 -04:00
Vladimir Diaz
2876702f48 Add code coverage for keys.extract_pem() 2016-09-01 12:53:28 -04:00
Vladimir Diaz
e620b005a8 Add remaining code coverage for repository_lib.py 2016-09-01 11:07:02 -04:00
Vladimir Diaz
fbc1265170 Merge pull request #370 from vladimir-v-diaz/develop
Code coverage
2016-09-01 10:25:16 -04:00
Vladimir Diaz
e0d5dd0ee1 Minor edit to length of commented line 2016-09-01 10:15:55 -04:00
Vladimir Diaz
5a35e797fc Improve code coverage for test_signature() 2016-09-01 10:12:56 -04:00
Vladimir Diaz
13e118b7d2 Merge branch 'develop' of github.com:theupdateframework/tuf into develop 2016-09-01 10:11:09 -04:00
Vladimir Diaz
b049c6b59b Update updater.py 2016-09-01 09:49:59 -04:00