Implement TAP 4 (the map file) #430

vladimir-v-diaz · 2017-02-15T21:13:41Z

This is an implementation of TAP 4 (the map file). A MultiRepoUpdater class is added that reads map.json, determines which repository URL to use for a requested target file, and returns the updater object and targetinfo for the requested target file. The client is free to use the updater object to download the target file corresponding to the targetinfo. An example is provided below:

multi_repo_updater = tuf.client.updater.MultiRepoUpdater("path/to/map.json")
targetinfo, my_updater = multi_repo_updater.get_one_valid_targetinfo("foo.tgz")

# save the `foo.tgz` target file to "path/to/destination".
my_updater.download_target(targetinfo, "path/to/destination")

The client can also access the updater objects for each repository...

pypi_updater = multi_repo_updater.repository_names_to_updaters['pypi']
pypi_updater.download_target(...)

@awwad PIease have a look at this PR and let me know if it supports everything needed to create Uptane repositories. The repository tools behave as they currently do, but they now support the creation of multiple repositories within the same Python process.

One more matching example here would help. Right now, it looks as if "?" matches only "numbers".

license of the TuF project.

@heartsucker

Client's should validate new root.json according to the threshold and keys set by its previous version. See @heartsucker comment [here](theupdateframework/rust-tuf#42 (comment))

…data.

Ideally, the former should be merged with the latter.

Remove example metadata and link to /tests metadata from METADATA.md

Ignore virtualenv and pyenv files

Add ecdsa-sha2-nistp256 to specification

Move specification and delete obsolete directory

Our crypto library dropped multi-library support and no longer uses PyCrypto.

We use pyup.io to make sure all of our dependencies are up to date.

Add pyup.io

Add pyup.io badges to README

Initial Update

Convert coverage's badge to SVG from PNG

coveralls · 2017-10-13T16:46:38Z

Coverage increased (+0.7%) to 98.595% when pulling 4126fc8 on tap4 into 40aaf93 on develop.

vladimir-v-diaz · 2017-10-13T19:33:23Z

Closing this pull request in favor of #504.

vladimir-v-diaz mentioned this pull request Feb 28, 2017

Addition of ASN.1 format with BER/DER encoding to TUF awwad/tuf#3

Closed

awwad force-pushed the develop branch 2 times, most recently from 61d04eb to 40aaf93 Compare March 22, 2017 16:11

vladimir-v-diaz mentioned this pull request Apr 18, 2017

Update example metadata. Fix issue #436. #437

Closed

vladimir-v-diaz and others added 7 commits April 24, 2017 12:55

Add matching example of shell-style wildcard

116cb39

One more matching example here would help. Right now, it looks as if "?" matches only "numbers".

Remove alternative schemes for overlapping targets

3532fb8

Explain that section 7 covers consistent snapshots

7eae7e3

Add setting to support instances of a default hashing algorithm

90fe62e

Allow hashed bin prefixes to use a configurable hashing algorithm

84f1718

Expand on the TUF client update workflow, per popular demand.

f092d2a

Address comments by @JustinCappos.

6236878

vladimir-v-diaz mentioned this pull request Apr 26, 2017

Expand on the TUF client update workflow, per popular demand. #440

Merged

3 tasks

Artyom Baloyan and others added 18 commits May 4, 2017 10:48

- Modified LICENCE.txt file. Added The MIT License as a main

5e215ee

license of the TuF project.

Fixed markdown errors in Client README.md

c06da3f

Fixed markdown issues in Security.md

739224a

More fixes to markdown in Security.md

ec83e56

Clarify that the previous snapshot metadata file may be safely expired.

afa804f

Clarify procedure for updating to new root.json

be7a7ff

Client's should validate new root.json according to the threshold and keys set by its previous version. See @heartsucker comment [here](theupdateframework/rust-tuf#42 (comment))

Incorporate @awwad and @heartsucker suggestions

4a1791d

Fix whitespace issue in previous commit

1269ed9

Slight edit to fix incorrect version of root file

70cf57a

Use "MUST" with regard to RFC 2119.

947e366

Explain how to obtain and load the previous root metadata file.

8b1f853

Explain why download targets up to the # of bytes in the targets meta…

c5deaa3

…data.

Edit Section 7.2 to reflect Section 5.1.

30536cf

Ideally, the former should be merged with the latter.

Add subtleties to preorder DFS for targets.

487d27a

Remove what seems like unnecessary, obsolete text.

5666cbc

Merge reading consistent snapshots with the client update workflow.

a2a5931

Remove what seems like an unnecessary note.

3935141

Add a note about the expiration of the previous root metadata file.

d80ea0b

vladimir-v-diaz mentioned this pull request Oct 11, 2017

Remove example metadata and link to /tests metadata from METADATA.md #496

Merged

3 tasks

vladimir-v-diaz and others added 24 commits October 11, 2017 11:27

Merge pull request #496 from vladimir-v-diaz/remove_example_metadata

e5776b7

Remove example metadata and link to /tests metadata from METADATA.md

Ignore virtualenv and pyenv files

02e6d4e

Merge pull request #497 from vladimir-v-diaz/update_gitignore

3fd782c

Ignore virtualenv and pyenv files

Add ecdsa-sha2-nistp256 to specification

1014f1b

Update Last Modified

c2f9d63

Merge pull request #498 from vladimir-v-diaz/add_ecdsa_to_spec

76b2b2d

Add ecdsa-sha2-nistp256 to specification

Edit specifiation files to point to their new location

57c8862

Remove obsolete proposals director (which now lives in the taps repo)

ed63201

Link to the specifidation new location from README

0076a49

Merge pull request #499 from vladimir-v-diaz/move_specification

11043dc

Move specification and delete obsolete directory

Remove PyCrypto dependency

02ddfb0

Our crypto library dropped multi-library support and no longer uses PyCrypto.

Add pyup.io configuration file

02df40d

We use pyup.io to make sure all of our dependencies are up to date.

Merge pull request #500 from vladimir-v-diaz/add_pyup

6d8b007

Add pyup.io

Update cffi from 1.7.0 to 1.11.2

bccdcb5

Update pynacl from 1.0.1 to 1.1.2

1fd4f40

Update cryptography from 2.0.3 to 2.1.1

03f0600

Pin tox to latest version 2.9.1

459b550

Add pyup.io badges to README

2997ba0

Merge pull request #502 from vladimir-v-diaz/add_pyup_badge

1151ee6

Add pyup.io badges to README

Merge branch 'develop' into pyup-initial-update

229769f

Merge pull request #501 from theupdateframework/pyup-initial-update

d8a33c2

Initial Update

Convert coverage's badge to SVG from PNG

32fcc66

Merge pull request #503 from theupdateframework/convert_coverage_badge

cba1cae

Convert coverage's badge to SVG from PNG

Merge branch 'tap4' of github.com:theupdateframework/tuf into tap4

4126fc8

vladimir-v-diaz closed this Oct 13, 2017

vladimir-v-diaz deleted the tap4 branch April 13, 2018 17:29

vladimir-v-diaz mentioned this pull request Feb 5, 2020

Reference the map file in the specification (TAP4) theupdateframework/specification#88

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Implement TAP 4 (the map file) #430

Implement TAP 4 (the map file) #430

vladimir-v-diaz commented Feb 15, 2017

coveralls commented Oct 13, 2017 •

edited

Loading

vladimir-v-diaz commented Oct 13, 2017

Implement TAP 4 (the map file) #430

Implement TAP 4 (the map file) #430

Conversation

vladimir-v-diaz commented Feb 15, 2017

coveralls commented Oct 13, 2017 • edited Loading

vladimir-v-diaz commented Oct 13, 2017

coveralls commented Oct 13, 2017 •

edited

Loading