Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Sign Bundle with a Timestamp Authority #1216

Merged
merged 26 commits into from
Nov 25, 2024

Commits on Nov 7, 2024

  1. Add tests for CertificateAuthority

    Signed-off-by: Alexis <[email protected]>
    DarkaMaul committed Nov 7, 2024
    Configuration menu
    Copy the full SHA
    c7de7db View commit details
    Browse the repository at this point in the history
  2. Add root requirement for CA

    Signed-off-by: Alexis <[email protected]>
    DarkaMaul committed Nov 7, 2024
    Configuration menu
    Copy the full SHA
    ac0fa7e View commit details
    Browse the repository at this point in the history
  3. Timestamp Verification

    Signed-off-by: Alexis <[email protected]>
    DarkaMaul committed Nov 7, 2024
    Configuration menu
    Copy the full SHA
    cc16b31 View commit details
    Browse the repository at this point in the history
  4. Add signature on Bundle and Envelope

    Signed-off-by: Alexis <[email protected]>
    DarkaMaul committed Nov 7, 2024
    Configuration menu
    Copy the full SHA
    9a1bbf4 View commit details
    Browse the repository at this point in the history
  5. Start to improve tests.

    Signed-off-by: Alexis <[email protected]>
    DarkaMaul committed Nov 7, 2024
    Configuration menu
    Copy the full SHA
    f686f53 View commit details
    Browse the repository at this point in the history
  6. Improve testing

    Signed-off-by: Alexis <[email protected]>
    DarkaMaul committed Nov 7, 2024
    Configuration menu
    Copy the full SHA
    86e4885 View commit details
    Browse the repository at this point in the history
  7. Improve tests

    Signed-off-by: Alexis <[email protected]>
    DarkaMaul committed Nov 7, 2024
    Configuration menu
    Copy the full SHA
    8d95387 View commit details
    Browse the repository at this point in the history
  8. Add CHANGELOG entry

    Signed-off-by: Alexis <[email protected]>
    DarkaMaul committed Nov 7, 2024
    Configuration menu
    Copy the full SHA
    9f9adf8 View commit details
    Browse the repository at this point in the history
  9. Fix test

    Signed-off-by: Alexis <[email protected]>
    DarkaMaul committed Nov 7, 2024
    Configuration menu
    Copy the full SHA
    303210f View commit details
    Browse the repository at this point in the history
  10. Fix _verify_signed_timestamp return value.

    Signed-off-by: Alexis <[email protected]>
    DarkaMaul committed Nov 7, 2024
    Configuration menu
    Copy the full SHA
    7733a9b View commit details
    Browse the repository at this point in the history

Commits on Nov 8, 2024

  1. Use a Signed Timestamp within a bundle

    Signed-off-by: Alexis <[email protected]>
    DarkaMaul committed Nov 8, 2024
    Configuration menu
    Copy the full SHA
    dc6545c View commit details
    Browse the repository at this point in the history

Commits on Nov 12, 2024

  1. Refactor client timeout as constant

    Signed-off-by: Alexis <[email protected]>
    DarkaMaul committed Nov 12, 2024
    Configuration menu
    Copy the full SHA
    e0c10e5 View commit details
    Browse the repository at this point in the history
  2. Apply suggestions from code review

    Co-authored-by: Facundo Tuesca <[email protected]>
    Signed-off-by: dm <[email protected]>
    DarkaMaul and facutuesca authored Nov 12, 2024
    Configuration menu
    Copy the full SHA
    e0e5f6d View commit details
    Browse the repository at this point in the history
  3. Rename method to request_timestamp

    Signed-off-by: Alexis <[email protected]>
    DarkaMaul committed Nov 12, 2024
    Configuration menu
    Copy the full SHA
    b28a849 View commit details
    Browse the repository at this point in the history

Commits on Nov 15, 2024

  1. Merge branch 'main' into dm/timestamp-signing

    # Conflicts:
    #	CHANGELOG.md
    #	sigstore/dsse/__init__.py
    #	sigstore/verify/verifier.py
    #	test/assets/tsa/bundle.txt.sigstore
    #	test/unit/verify/test_verifier.py
    DarkaMaul committed Nov 15, 2024
    Configuration menu
    Copy the full SHA
    1684b74 View commit details
    Browse the repository at this point in the history
  2. Use add_root_certificate

    Signed-off-by: Alexis <[email protected]>
    DarkaMaul committed Nov 15, 2024
    Configuration menu
    Copy the full SHA
    b4744dd View commit details
    Browse the repository at this point in the history

Commits on Nov 18, 2024

  1. Update .github/workflows/ci.yml

    Co-authored-by: William Woodruff <[email protected]>
    Signed-off-by: dm <[email protected]>
    DarkaMaul and woodruffw authored Nov 18, 2024
    Configuration menu
    Copy the full SHA
    e18f80f View commit details
    Browse the repository at this point in the history
  2. Update test/unit/conftest.py

    Co-authored-by: William Woodruff <[email protected]>
    Signed-off-by: dm <[email protected]>
    DarkaMaul and woodruffw authored Nov 18, 2024
    Configuration menu
    Copy the full SHA
    ad1d6f1 View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    3f7146b View commit details
    Browse the repository at this point in the history
  4. Reduce timeout

    Signed-off-by: Alexis <[email protected]>
    DarkaMaul committed Nov 18, 2024
    Configuration menu
    Copy the full SHA
    f2c2124 View commit details
    Browse the repository at this point in the history

Commits on Nov 20, 2024

  1. Use new release of rfc3161-client

    Signed-off-by: Alexis <[email protected]>
    DarkaMaul committed Nov 20, 2024
    Configuration menu
    Copy the full SHA
    9de30ed View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    dae1fc2 View commit details
    Browse the repository at this point in the history
  3. Make sure Timestamp tests are effectively run.

    Signed-off-by: Alexis <[email protected]>
    DarkaMaul committed Nov 20, 2024
    Configuration menu
    Copy the full SHA
    4272a5b View commit details
    Browse the repository at this point in the history
  4. Better document failure cases in tests

    Signed-off-by: Alexis <[email protected]>
    DarkaMaul committed Nov 20, 2024
    Configuration menu
    Copy the full SHA
    5c4dc68 View commit details
    Browse the repository at this point in the history

Commits on Nov 21, 2024

  1. Configuration menu
    Copy the full SHA
    c5abd36 View commit details
    Browse the repository at this point in the history

Commits on Nov 25, 2024

  1. Configuration menu
    Copy the full SHA
    fcc890a View commit details
    Browse the repository at this point in the history