One more matching example here would help. Right now, it looks as if "?" matches only "numbers".

  license of the TuF project.

Client's should validate new root.json according to the threshold and keys set by its previous version.

See @heartsucker comment [here](theupdateframework/rust-tuf#42 (comment))

…data.

Ideally, the former should be merged with the latter.

Also corrected how files are fetched.

…f into add-detailed-workflow

Expand on the TUF client update workflow, per popular demand.

…mber

Update specification

settings.HASH_FUNCTION is now only used to calculate path hash prefixes.

…o_hashed_bin_prefix

Add configurable setting for hashing algorithm used in hashed bin delegations

Use securesystemslib v0.10.5 dependency (includes Lukas' contributions and a fix).
Add blank line between function docstring and beginning of code.

Lukpueh fix #412

Clarify checking for freeze attacks on the root metadata file.

What should happen when Root keys are compromised?

Addresses issue #465, where the hash and length of Root are no longer listed in Snapshot.

Fix for issue #465

Use up-to-date metadata examples.

…ion)

Do not lis Root's hash and length in Snapshot.  Fix issue #468

Update METADATA.md

Fixes issue #458.

Further edits to client workflow to replace instances of "this metadata file" with the specific metadata file.

Use consistent wording in the client workflow

… into _type_role_lowercase

Use consistent naming of role names in metadata

sig.get_signature_status() was incorrectly raising securesystemslib.exceptions.UnknownRoleError

roledb.get_role_paths() contains a check for an unknown repository name that is already done by _check_rolename()

for unknown repository name in get_delegated_rolenames()

implementation doesn't support < py2.6

…ons()

These two unit tests were previously commented because they weren't working as expected.  A bug in securesystemslib._get_keydb() was the cause of the issue, where the hash_algorithm argument wasn't being used and didn't allow multiple keyids to be generated.

to protect against test cases that did not clean up properly

where adding a duplicate keyid failed to load valid multiple keyids

Modify _import_delegations() and rebuild_key_and_role_db() so that the correct number of keyids are detected

that contains bug fix for _get_keyid()

Coverage and bug fixes