Elgato_dark/python-tuf
1
0
Fork 0
mirror of https://github.com/theupdateframework/python-tuf synced 2026-05-24 10:08:28 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
2102 commits 28 branches 35 tags 23 MiB
Commit graph

2102 commits

This branch
This branch
All branches
Author SHA1 Message Date
Vladimir Diaz
af951d4d14 Merge pull request #469 from vladimir-v-diaz/fix_issue#468 
Do not lis Root's hash and length in Snapshot.  Fix issue #468
 2017-07-11 10:26:02 -04:00
Vladimir Diaz
f6d0d07a0e
Add missing root.json.gz metadata 2017-07-11 10:19:32 -04:00
Justin Cappos
3f44d99354 Clarifying who runs the project. 2017-07-10 22:09:52 -04:00
Justin Cappos
ab81a381c6 Making it clearer who "owns" the project (in response to a CNCF question) 2017-07-10 22:05:58 -04:00
Vladimir Diaz
a0dc02a49e
List Root's version number in Snapshot 2017-07-10 17:10:37 -04:00
Vladimir Diaz
ee5c4fee08
Add new repository metadata 2017-07-10 17:08:35 -04:00
Vladimir Diaz
4763f2d3c4 Merge pull request #466 from theupdateframework/vladimir-v-diaz-patch-4 
Fix for issue #465
 2017-07-07 10:08:06 -04:00
Vladimir Diaz
84713f366b Fix for issue #465 
Addresses issue #465, where the hash and length of Root are no longer listed in Snapshot.
 2017-07-06 16:55:19 -04:00
Trishank Karthik Kuppusamy
904fa9b8df Merge pull request #461 from theupdateframework/vladimir-v-diaz-patch-4 
What should happen when Root keys are compromised?
 2017-06-20 21:10:01 -04:00
Vladimir Diaz
9025b90bac Justify why a compromise of Root keys should be avoided 2017-06-20 11:27:06 -04:00
Vladimir Diaz
78c81c43a5 Merge branch 'develop' into vladimir-v-diaz-patch-4 2017-06-19 16:46:25 -04:00
Vladimir Diaz
0f40e7013f Merge pull request #452 from trishankkarthik/add-detailed-workflow 
Clarify checking for freeze attacks on the root metadata file.
 2017-06-19 15:44:32 -04:00
Vladimir Diaz
5b2407b04e Address what should happen when Root keys are compromised 2017-06-19 15:29:24 -04:00
Vladimir Diaz
a44551b77b Merge branch 'develop' into add-detailed-workflow 2017-06-19 12:17:18 -04:00
Vladimir Diaz
ee770da10f Merge pull request #460 from theupdateframework/lukpueh-fix-#412 
Lukpueh fix #412
 2017-06-15 14:37:26 -04:00
Vladimir Diaz
ef6716321e
Edits to PR 
Use securesystemslib v0.10.5 dependency (includes Lukas' contributions and a fix).
Add blank line between function docstring and beginning of code.
 2017-06-15 13:29:01 -04:00
Vladimir Diaz
b3b5f6348c Merge pull request #439 from theupdateframework/configurable_hash_algo_hashed_bin_prefix 
Add configurable setting for hashing algorithm used in hashed bin delegations
 2017-06-14 15:56:26 -04:00
Vladimir Diaz
11ecaeba89 Merge branch 'develop' into configurable_hash_algo_hashed_bin_prefix 2017-06-14 15:23:51 -04:00
Vladimir Diaz
b5e7325be4 Edit comment/description for settings.HASH_FUNCTION 
settings.HASH_FUNCTION is now only used to calculate path hash prefixes.
 2017-06-14 15:18:11 -04:00
Trishank Karthik Kuppusamy
207a0a0bb6 Remove an extraneous step (thanks @heartsucker). 2017-06-03 14:21:15 -04:00
Vladimir Diaz
8ddc62c43f Merge pull request #433 from theupdateframework/update_specification 
Update specification
 2017-06-02 11:22:25 -04:00
Vladimir Diaz
dae2b7a349 Merge branch 'develop' into update_specification 2017-06-02 11:14:43 -04:00
Trishank Karthik Kuppusamy
13cfa2ee6f Clarify checking for freeze attacks on the root metadata file. 2017-05-31 11:49:07 -04:00
Vladimir Diaz
c1e72e0fdd "latest time" --> "latest known time" 2017-05-24 12:37:43 -04:00
Vladimir Diaz
b7f893dd62 Edit instances of "downloaded time" to just "time" 2017-05-24 12:37:43 -04:00
Vladimir Diaz
836ebe59cb Fix section 3, where the hash is specified rather than the version number 2017-05-24 12:14:36 -04:00
Justin Cappos
85eb8995fe Merge pull request #440 from trishankkarthik/add-detailed-workflow 
Expand on the TUF client update workflow, per popular demand.
 2017-05-23 23:15:19 -04:00
Trishank Karthik Kuppusamy
c5e8c079bb Fix bloopers. 2017-05-23 21:41:31 -04:00
Trishank Karthik Kuppusamy
558fb43dec Merge branch 'add-detailed-workflow' of github.com:trishankkarthik/tuf into add-detailed-workflow 2017-05-23 17:12:20 -04:00
Trishank Karthik Kuppusamy
98de3c490f Worked with @vladimir-v-diaz to add root migration workflow. 
Also corrected how files are fetched.
 2017-05-23 17:09:57 -04:00
Vladimir Diaz
06665c0bdc Merge branch 'develop' into add-detailed-workflow 2017-05-23 12:20:25 -04:00
Trishank Karthik Kuppusamy
d80ea0b145 Add a note about the expiration of the previous root metadata file. 2017-05-19 16:32:48 -04:00
Trishank Karthik Kuppusamy
3935141b85 Remove what seems like an unnecessary note. 2017-05-19 16:31:18 -04:00
Trishank Karthik Kuppusamy
a2a5931883 Merge reading consistent snapshots with the client update workflow. 2017-05-19 00:45:28 -04:00
Trishank Karthik Kuppusamy
5666cbcfc0 Remove what seems like unnecessary, obsolete text. 2017-05-19 00:10:50 -04:00
Trishank Karthik Kuppusamy
487d27a654 Add subtleties to preorder DFS for targets. 2017-05-19 00:10:29 -04:00
Trishank Karthik Kuppusamy
30536cfb1a Edit Section 7.2 to reflect Section 5.1. 
Ideally, the former should be merged with the latter.
 2017-05-18 21:09:35 -04:00
Trishank Karthik Kuppusamy
c5deaa340f Explain why download targets up to the # of bytes in the targets metadata. 2017-05-18 20:59:00 -04:00
Trishank Karthik Kuppusamy
8b1f85363a Explain how to obtain and load the previous root metadata file. 2017-05-18 20:58:37 -04:00
Trishank Karthik Kuppusamy
947e366557 Use "MUST" with regard to RFC 2119. 2017-05-18 20:44:46 -04:00
Vladimir Diaz
70cf57ad85 Slight edit to fix incorrect version of root file 2017-05-18 16:04:44 -04:00
Vladimir Diaz
1269ed9678 Fix whitespace issue in previous commit 2017-05-18 16:04:44 -04:00
Vladimir Diaz
4a1791d125 Incorporate @awwad and @heartsucker suggestions 2017-05-18 16:04:44 -04:00
Vladimir Diaz
be7a7ffd6f Clarify procedure for updating to new root.json 
Client's should validate new root.json according to the threshold and keys set by its previous version.

See @heartsucker comment [here](https://github.com/heartsucker/rust-tuf/issues/42#issuecomment-302436972)
 2017-05-18 16:04:44 -04:00
Trishank Karthik Kuppusamy
afa804f093 Clarify that the previous snapshot metadata file may be safely expired. 2017-05-18 12:36:01 -04:00
Wilson Ding
ec83e5603f More fixes to markdown in Security.md 2017-05-16 15:16:03 -04:00
Wilson Ding
739224a2a6 Fixed markdown issues in Security.md 2017-05-16 15:16:03 -04:00
Wilson Ding
c06da3f1d9 Fixed markdown errors in Client README.md 2017-05-16 15:16:03 -04:00
Artyom Baloyan
5e215ee223 - Modified LICENCE.txt file. Added The MIT License as a main 
license of the TuF project.
 2017-05-04 10:48:57 -04:00
Trishank Karthik Kuppusamy
6236878eb1 Address comments by @JustinCappos. 2017-04-26 15:07:56 -04:00