mirror of
https://github.com/theupdateframework/python-tuf
synced 2026-05-24 10:08:28 +00:00
ff8819577b
secure-systems-lab/securesystemslib#288 changes the key generation interface functions in such a way that it is clear if a call opens a blocking prompt, or writes the key unencrypted. To do this two functions are added per key type: - `generate_and_write_*_keypair_with_prompt` - `generate_and_write_unencrypted_*_keypair` The default `generate_and_write_*_keypair` function now only allows encrypted keys and only using a passed password. This respects the principle of secure defaults and least surprise. sslib#288 furthermore adds a protected `_generate_and_write_*_keypair`, which is not exposed publicly because it does not encrypt by default, but is more flexible and thus convenient e.g. to consume all arguments from a key generation command line tool such as 'repo.py'. This commit adds the new public functions to the tuf namespace and adopts their usage accordingly. NOTE regarding repo.py: This commit does not fix any problematic password behavior of 'repo.py' like default passwords, etc. (see #881). It only adopts the sslib#288 changes to maintain the current behvior, plus removing one glaringly obsolete password prompt. NOTE regarding key import: The securesystemslib private key import functions were also changed to no longer auto-prompt for decryption passwords , TUF, however, only exposes custom wrappers (see repository_lib) that do auto-prompt. sslib#288 changes to the prompt texts are nevertheless propagated to tuf and reflected in this commit. Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu> |
||
|---|---|---|
| .. | ||
| adr | ||
| images | ||
| latex | ||
| papers | ||
| AUTHORS.txt | ||
| CHANGELOG.md | ||
| CLI.md | ||
| CODE-OF-CONDUCT.md | ||
| CONTRIBUTORS.rst | ||
| GETTING_STARTED.rst | ||
| GOVERNANCE.md | ||
| INSTALLATION.rst | ||
| MAINTAINERS.txt | ||
| METADATA.md | ||
| OVERVIEW.rst | ||
| QUICKSTART.md | ||
| RELEASE.md | ||
| ROADMAP.md | ||
| SECURITY.md | ||
| TAP.rst | ||
| tuf-spec.0.9.txt | ||
| tuf-spec.md | ||
| tuf-spec.txt | ||
| TUTORIAL.md | ||