Elgato_dark/python-tuf
1
0
Fork 0
mirror of https://github.com/theupdateframework/python-tuf synced 2026-05-24 10:08:28 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3
2132 commits 28 branches 35 tags 23 MiB
Commit graph

123 commits

Author SHA1 Message Date
Vladimir Diaz
2b5faf4a67 Merge branch 'develop' into _type_role_lowercase 2017-07-12 15:13:17 -04:00
Vladimir Diaz
d13a401678
Update specification 2017-07-12 15:09:15 -04:00
Vladimir Diaz
ca6a0422c3 Update tuf-spec.txt 
Further edits to client workflow to replace instances of "this metadata file" with the specific metadata file.
 2017-07-12 10:45:44 -04:00
Vladimir Diaz
7e71080156 Use consistent wording in the client workflow 
Fixes issue #458.
 2017-07-11 17:01:09 -04:00
Vladimir Diaz
84713f366b Fix for issue #465 
Addresses issue #465, where the hash and length of Root are no longer listed in Snapshot.
 2017-07-06 16:55:19 -04:00
Vladimir Diaz
9025b90bac Justify why a compromise of Root keys should be avoided 2017-06-20 11:27:06 -04:00
Vladimir Diaz
78c81c43a5 Merge branch 'develop' into vladimir-v-diaz-patch-4 2017-06-19 16:46:25 -04:00
Vladimir Diaz
5b2407b04e Address what should happen when Root keys are compromised 2017-06-19 15:29:24 -04:00
Vladimir Diaz
a44551b77b Merge branch 'develop' into add-detailed-workflow 2017-06-19 12:17:18 -04:00
Trishank Karthik Kuppusamy
207a0a0bb6 Remove an extraneous step (thanks @heartsucker). 2017-06-03 14:21:15 -04:00
Vladimir Diaz
dae2b7a349 Merge branch 'develop' into update_specification 2017-06-02 11:14:43 -04:00
Trishank Karthik Kuppusamy
13cfa2ee6f Clarify checking for freeze attacks on the root metadata file. 2017-05-31 11:49:07 -04:00
Vladimir Diaz
c1e72e0fdd "latest time" --> "latest known time" 2017-05-24 12:37:43 -04:00
Vladimir Diaz
b7f893dd62 Edit instances of "downloaded time" to just "time" 2017-05-24 12:37:43 -04:00
Vladimir Diaz
836ebe59cb Fix section 3, where the hash is specified rather than the version number 2017-05-24 12:14:36 -04:00
Trishank Karthik Kuppusamy
c5e8c079bb Fix bloopers. 2017-05-23 21:41:31 -04:00
Trishank Karthik Kuppusamy
558fb43dec Merge branch 'add-detailed-workflow' of github.com:trishankkarthik/tuf into add-detailed-workflow 2017-05-23 17:12:20 -04:00
Trishank Karthik Kuppusamy
98de3c490f Worked with @vladimir-v-diaz to add root migration workflow. 
Also corrected how files are fetched.
 2017-05-23 17:09:57 -04:00
Vladimir Diaz
06665c0bdc Merge branch 'develop' into add-detailed-workflow 2017-05-23 12:20:25 -04:00
Trishank Karthik Kuppusamy
d80ea0b145 Add a note about the expiration of the previous root metadata file. 2017-05-19 16:32:48 -04:00
Trishank Karthik Kuppusamy
3935141b85 Remove what seems like an unnecessary note. 2017-05-19 16:31:18 -04:00
Trishank Karthik Kuppusamy
a2a5931883 Merge reading consistent snapshots with the client update workflow. 2017-05-19 00:45:28 -04:00
Trishank Karthik Kuppusamy
5666cbcfc0 Remove what seems like unnecessary, obsolete text. 2017-05-19 00:10:50 -04:00
Trishank Karthik Kuppusamy
487d27a654 Add subtleties to preorder DFS for targets. 2017-05-19 00:10:29 -04:00
Trishank Karthik Kuppusamy
30536cfb1a Edit Section 7.2 to reflect Section 5.1. 
Ideally, the former should be merged with the latter.
 2017-05-18 21:09:35 -04:00
Trishank Karthik Kuppusamy
c5deaa340f Explain why download targets up to the # of bytes in the targets metadata. 2017-05-18 20:59:00 -04:00
Trishank Karthik Kuppusamy
8b1f85363a Explain how to obtain and load the previous root metadata file. 2017-05-18 20:58:37 -04:00
Trishank Karthik Kuppusamy
947e366557 Use "MUST" with regard to RFC 2119. 2017-05-18 20:44:46 -04:00
Vladimir Diaz
70cf57ad85 Slight edit to fix incorrect version of root file 2017-05-18 16:04:44 -04:00
Vladimir Diaz
1269ed9678 Fix whitespace issue in previous commit 2017-05-18 16:04:44 -04:00
Vladimir Diaz
4a1791d125 Incorporate @awwad and @heartsucker suggestions 2017-05-18 16:04:44 -04:00
Vladimir Diaz
be7a7ffd6f Clarify procedure for updating to new root.json 
Client's should validate new root.json according to the threshold and keys set by its previous version.

See @heartsucker comment [here](https://github.com/heartsucker/rust-tuf/issues/42#issuecomment-302436972)
 2017-05-18 16:04:44 -04:00
Trishank Karthik Kuppusamy
afa804f093 Clarify that the previous snapshot metadata file may be safely expired. 2017-05-18 12:36:01 -04:00
Trishank Karthik Kuppusamy
6236878eb1 Address comments by @JustinCappos. 2017-04-26 15:07:56 -04:00
Trishank Karthik Kuppusamy
f092d2a87b Expand on the TUF client update workflow, per popular demand. 2017-04-26 14:02:01 -04:00
Vladimir Diaz
7eae7e38b0 Explain that section 7 covers consistent snapshots 2017-04-24 16:10:16 -04:00
Vladimir Diaz
3532fb8005 Remove alternative schemes for overlapping targets 2017-04-24 14:59:18 -04:00
Vladimir Diaz
116cb39039 Add matching example of shell-style wildcard 
One more matching example here would help. Right now, it looks as if "?" matches only "numbers".
 2017-04-24 12:55:51 -04:00
Vladimir Diaz
adf48f90ce Remove parenthetical note 
in text for terminating delegations.
 2017-04-24 12:25:12 -04:00
Vladimir Diaz
6665d25b9e Remove notion of a full rolename 
We previously used a full rolename when delegations resembled a tree
 2017-02-27 16:22:10 -05:00
Vladimir Diaz
6cca34b6f1 Add 'terminating' attribute and text explaining its use 2017-02-27 16:19:25 -05:00
Vladimir Diaz
bbd3288245 Update text for handling overlapping targets between delegations. 
Remove note about priority tag schemes and our investigation of several of these schemes
 2017-02-27 15:29:51 -05:00
Vladimir Diaz
1a00c4cd8f Update text describing format of PATHPATTERN 2017-02-27 15:11:37 -05:00
Vladimir Diaz
c105077d05 Add compression_algorithms and consistent_snapshot attributes to root.json 2017-02-27 14:48:37 -05:00
Vladimir Diaz
76435bfdb5 Update tuf-spec.txt 
Add improved definition of the fast-forward attack in the specification.
 2017-02-07 11:29:43 -05:00
Vladimir Diaz
70fc8dce36 Resolve merge conflicts with upstream and ecordell-root-versioning 2016-10-18 10:28:04 -04:00
Vladimir Diaz
8882dc5b7b Merge branch 'root-versioning' of https://github.com/ecordell/tuf into ecordell-root-versioning 
Conflicts:
	tests/test_key_revocation.py
	tests/test_replay_attack.py
	tests/test_repository_tool.py
	tests/test_updater.py
	tuf/formats.py
	tuf/repository_lib.py
 2016-10-17 15:57:48 -04:00
Vladimir Diaz
3ab08e52f6 Update tuf-spec.txt 
Distinguish the "signed" portion of a metadata file from the entire file itself.  Addressing comment provided by @HuKeping
 2016-10-07 10:57:19 -04:00
Evan Cordell
a11709000d Add root versioning for root key rotation 2016-09-19 15:18:20 -04:00
Vladimir Diaz
5d2c8fdc76 Update tuf-spec.txt 
Remove mention of a "private" dictionary key in metadata.  Public TUF metadata consumed by clients would never include a "private" field, so it shouldn't be specified here in the specification.
 2016-09-15 14:23:44 -04:00