Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add CertificateAuthority #1200

Merged
merged 4 commits into from
Oct 31, 2024
Merged

Conversation

DarkaMaul
Copy link
Collaborator

Summary

Following up on #1182, this PR adds a CertificateAuthority class to the trust and uses it to retrieve both Fulcio certificates and Timestamping Authorities.

Copy link
Member

@woodruffw woodruffw left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks @DarkaMaul! This is a good start, but I think it can be simplified quite a bit -- we don't need to be so stringent about classifying the different members of the CertificateAuthority message, since they all end up in a trust "pool" anyways for chain building purposes 🙂

@woodruffw woodruffw added component:verification Core verification functionality component:tuf TUF related components labels Oct 31, 2024
@DarkaMaul
Copy link
Collaborator Author

Thanks @DarkaMaul! This is a good start, but I think it can be simplified quite a bit -- we don't need to be so stringent about classifying the different members of the CertificateAuthority message, since they all end up in a trust "pool" anyways for chain building purposes 🙂

I've updated the code to remove the distinction between all the different certificates 👍

@DarkaMaul DarkaMaul force-pushed the dm/verify-timestamp branch from 6cad8bb to eac665f Compare October 31, 2024 14:47
@DarkaMaul DarkaMaul force-pushed the dm/verify-timestamp branch from eac665f to 4add4cd Compare October 31, 2024 14:48
Copy link
Member

@woodruffw woodruffw left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice work!

@woodruffw
Copy link
Member

/gcbrun

@woodruffw woodruffw merged commit a3dd82b into sigstore:main Oct 31, 2024
23 checks passed
@woodruffw woodruffw deleted the dm/verify-timestamp branch October 31, 2024 15:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
component:tuf TUF related components component:verification Core verification functionality
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants