Commit graph

1590 commits

Author SHA1 Message Date
Vladimir Diaz
68eedeb477 Initial commit for Issue #143 and #144 2013-12-09 11:11:23 -05:00
Vladimir Diaz
8fdf029001 Fix for issue #148
Update comments and docstrings following testing (self-tested with low-level updater.py, @nekt tested with interposition and C-bridge).
Complete refactored changes.
2013-12-05 13:14:47 -05:00
Vladimir Diaz
6de2fdca5c Initial re-implementation of compressed metadata verification in updater.py 2013-12-04 09:14:06 -05:00
dachshund
c9ee77ee38 Merge remote-tracking branch 'upstream/develop' into develop 2013-12-03 18:11:00 -05:00
Trishank Karthik Kuppusamy
69fb92ddcb Merge pull request #161 from nekt/develop
Modified the maximum timestamp.txt size (fix #159).
2013-12-03 14:48:19 -08:00
Nektarios Tsoutsos
9f0f80fab4 Modified the maximum timestamp.txt size (#bug 159) 2013-12-03 16:46:24 -05:00
dachshund
ed4fe44530 Fix #150. 2013-11-28 11:22:50 -05:00
dachshund
4eeb8575de Fix #139. 2013-11-28 10:59:07 -05:00
PandaSPUR
17924213fd Update SlowRetrievalError
Updating on behalf of "Red Team" of App. Sec.
Undescriptive error found while testing gemsontuf.
2013-11-27 15:30:41 -05:00
Vladimir Diaz
738fa4d4a7 Remove test import statement changes from previous commit 2013-11-27 12:16:21 -05:00
Vladimir Diaz
c58906f9c2 Fix for issue #153
Update the key modules and their unit tests so that only the signature scheme is included in the signature label.

PyCrypto-PKCS#1 PSS -> RSASSA-PSS
ed25519-python and ed25519-pynacl -> ed25519
2013-11-27 12:11:16 -05:00
Vladimir Diaz
8d34b7aff8 Continue updating the comments and docstrings of libtuf.py 2013-11-26 15:19:12 -05:00
Vladimir Diaz
21e9291ba7 Implement enhancement outlined in issue #136
1. write_partial() increments version numbers if metadata is new or the first to be written.
2. write() increments version numbers if partial metadata is not loaded and a partial_write() is not needed.
2013-11-26 12:11:58 -05:00
Vladimir Diaz
191f32aa74 Continue refactor of libtuf.py 2013-11-25 15:01:27 -05:00
Vladimir Diaz
46a3b9b4ac Resolve merge conflict 2013-11-25 12:09:39 -05:00
Vladimir Diaz
a76a247ef3 Refactor Repository.write(), and write_delegated_metadata() 2013-11-25 12:04:21 -05:00
vladdd
3459b6b12d Add clear_targets() method to Targets 2013-11-24 21:12:14 -05:00
vladdd
2b5c83bdc6 Fix typo 2013-11-24 20:33:35 -05:00
vladdd
ce31e93fc0 Remove test print statements and fix bugs reported by Lai
add_targets() did not check for duplicate target file paths.
delegate() did not check for duplicate delegations.
load_repository() did not fully load and update delegated roles.
2013-11-24 20:23:12 -05:00
Vladimir Diaz
e8f8fe449c Update README.md
Add comments related to writing partial metadata with repository.write_partial().  This update addresses issue #138.
2013-11-22 11:38:11 -05:00
Vladimir Diaz
008315c139 Merge branch 'repository-tools' of https://github.com/theupdateframework/tuf into repository-tools 2013-11-22 11:36:03 -05:00
Vladimir Diaz
e437dbaf14 Update comments & docstrings, fix bug, and address issues #135 and #138
Issue #135: Duplicate signatures, rather than keys, was previously saved to metadata.  libtuf.py should now store one signature per keyid.  It should be noted that these duplicates were not identical, as PSS incorporates random salts and able to generate two valid signatures (and not equal) with the same key.

Issue #138: The write_partial() method added to libtuf.Repository.

Fixed a bug in load_repository() that did not properly detect some compressed delegated roles and failed to update the 'compressions' field of the Targets object.
2013-11-22 11:13:11 -05:00
Vladimir Diaz
56a4a44785 Update tuf-spec.txt 2013-11-20 21:15:43 -05:00
Vladimir Diaz
d142cb8b11 Update README.md 2013-11-19 09:04:56 -05:00
Vladimir Diaz
b6804d2c36 Update README.md
5-16: Add usage notes.
95: Typo.
155-156: Missing word.
221: Remove outdated behavior.
290: Add missing slashes.
2013-11-16 20:52:32 -05:00
vladdd
da767a4981 Merge branch 'repository-tools' of https://github.com/theupdateframework/tuf into repository-tools 2013-11-16 12:25:59 -05:00
vladdd
eb7f8a58f5 Update old repository tools affected by renamed function 2013-11-16 12:13:25 -05:00
Vladimir Diaz
ff821e2282 Update README.md
Final self-review fixes:
Add heading.

109-111, 230: "pw" -> "password", to be consistent.

162: Add missing import statement.

Minor edits to comments, code, etc.
2013-11-15 19:45:36 -05:00
Vladimir Diaz
12982a2db8 Update README.md
Link to updated libtuf-diagram.png
2013-11-15 18:06:41 -05:00
vladdd
6073cb559c Merge branch 'repository-tools' of https://github.com/theupdateframework/tuf into repository-tools 2013-11-15 18:05:00 -05:00
vladdd
9f75253d0a Add libtuf-diagram.png 2013-11-15 18:04:29 -05:00
Vladimir Diaz
49e7db2387 Update README.md
Reviewed "Create Root" and "Create RSA Keys" sections.
2013-11-15 13:02:36 -05:00
Vladimir
3ca6261f79 Merge and resolve conflicts 2013-11-15 10:09:59 -05:00
Vladimir Diaz
f1d72f0b82 Update README.md
9-10: Remove extra whitespace.
58: Add missing period.

Update a few comments.

Add examples for nested delegations, restricted paths, metadata compression, and selection of target paths.
2013-11-14 20:43:34 -05:00
vladdd
d2d6794dad Support compressed metadata for all role types and minor edits 2013-11-14 20:36:28 -05:00
vladdd
ba69b2394f Merge branch 'repository-tools' of https://github.com/theupdateframework/tuf into repository-tools 2013-11-14 14:32:38 -05:00
vladdd
85d2b7fb19 Add updates and features following review
Add support for compressed metadata, path hash prefixes, delegated role revocation fix, removal of obsolete metadata files, and other minor changes.
2013-11-14 14:24:07 -05:00
Vladimir Diaz
9acebfa1be Update README.md
Add sections, comments, and command-line output related to target files.

Fix garbled section heading.
2013-11-13 14:46:28 -05:00
vladdd
6cc0b90672 Remove invalid signatures from signables prior to final repository.write()
signables may contain signatures (now invalid) from previous versions of metadata loaded with load_repository().
2013-11-13 14:28:34 -05:00
vladdd
691081cb26 Merge branch 'repository-tools' of https://github.com/theupdateframework/tuf into repository-tools 2013-11-13 11:52:41 -05:00
vladdd
c860d27787 Add 'tuf/client/basic_client.py' to setup.py 2013-11-13 11:52:15 -05:00
dachshund
b2e9fca142 Remove evpy. 2013-11-13 11:48:22 -05:00
vladdd
4a124746dc Merge branch 'repository-tools' of https://github.com/theupdateframework/tuf into repository-tools 2013-11-13 11:44:46 -05:00
vladdd
86e8f0b771 Switch default ed25519 cryptography library to 'ed25519'
Modify so that testing the repository tools does not raise errors for users without pynacl installed.
2013-11-13 11:44:00 -05:00
Vladimir Diaz
8520c49cf3 Update README.md
238: Remove full rolename argument to revoke().
2013-11-13 11:21:59 -05:00
Vladimir Diaz
19c659f5c0 Update README.md
91-92: Move Metadata file output to new line to avoid wrapping.
153-154: Fix length of comment block to avoid wrapping.
159-160: Fix garbled comment block.
199-200: Shorten lengthy comment.
2013-11-13 11:12:07 -05:00
Vladimir Diaz
fff486d134 Update README.md
Add directory listing of a successful update test.
2013-11-13 09:58:51 -05:00
Vladimir Diaz
6bcaee3926 Update README.md
34, 37-38: Fix indentation, add missing period, and expand comment.
93: Add missing period.
152-153: Expand comment to make it clear that target files are not created and previous target paths are not replaced.
245: Fix typo.
2013-11-13 09:46:42 -05:00
Vladimir Diaz
8b16b00ab8 Update README.md
79-82: Add repository.status() example.
2013-11-13 09:27:00 -05:00
Vladimir Diaz
cff05ad4ec Update README.md
14: Add spacing to argument list.
16-18: Fix comment formatting and garbled text.
38: Add missing quotation mark.
71: Fix spacing.
75: Fix indentation.
233-234: Add comments and update command.
246-248, 256-259: Modify quotation marks.
2013-11-13 09:19:46 -05:00