mirror of
https://github.com/theupdateframework/python-tuf
synced 2026-05-24 10:08:28 +00:00
cb9aa4a362
Change TrustedMetadataSet to load and verify metadata using a MetadataUnwrapper instance. IMPORTANT NOTES: * Requires changing the TrustedMetadataSet to store payloads only, which is okay, because signatures are no longer needed, after being verified at load time. * Includes a minor re-ordering of validation steps. That is, the version increment for root metadata is now checked after signature verification. Preserving the order would require including the check in the Unwrapper interface, which is feasible but does not seem correct wrt separation of responsibility. Changes are adopted in updater, tests and _localrepo. Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu> |
||
|---|---|---|
| .. | ||
| client | ||
| manual_repo | ||
| repository | ||
| uploader | ||
| README.md | ||