Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Require inclusion proof for all bundle versions newer than v0.1 #146

Merged
merged 1 commit into from
Apr 10, 2024

Conversation

codysoyland
Copy link
Member

Signed-off-by: Cody Soyland codysoyland@github.com

Summary

This PR modifies the logic in ProtobufBundle.validate to require inclusion proof for all bundles newer than v0.1.

This includes new tested logic to extract the bundle version instead of continuing to add new consts for each bundle version.

The validate function is still untested. This should be addressed with #64.

Fixes #145

Release Note

Documentation

Signed-off-by: Cody Soyland <codysoyland@github.com>
}

// if bundle version is newer than v0.3, return error as this version is not supported
if semver.Compare(bundleVersion, "v0.3") > 0 {
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do we need to handle v0.3.x? I saw we include a test for v0.3.1 but I don't believe we'll include the patch version. I think this is fine as-is, but if we do want to handle patch versions, does this need to be >= v0.4?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I turned on auto-merge so this didn't get addressed, but good point! I can file another quick PR.

@codysoyland codysoyland merged commit 20c2ce9 into main Apr 10, 2024
11 checks passed
@codysoyland codysoyland deleted the bundle-v0.3-inclusion-proof-check branch April 10, 2024 21:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Bundle v0.3 doesn't require tlog entries to have inclusion proofs
2 participants