Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Implement TAP 4 (the map file) #430

Closed
wants to merge 272 commits into from
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
272 commits
Select commit Hold shift + click to select a range
116cb39
Add matching example of shell-style wildcard
vladimir-v-diaz Apr 24, 2017
3532fb8
Remove alternative schemes for overlapping targets
vladimir-v-diaz Apr 24, 2017
7eae7e3
Explain that section 7 covers consistent snapshots
vladimir-v-diaz Apr 24, 2017
90fe62e
Add setting to support instances of a default hashing algorithm
vladimir-v-diaz Apr 24, 2017
84f1718
Allow hashed bin prefixes to use a configurable hashing algorithm
vladimir-v-diaz Apr 24, 2017
f092d2a
Expand on the TUF client update workflow, per popular demand.
trishankkarthik Apr 26, 2017
6236878
Address comments by @JustinCappos.
trishankkarthik Apr 26, 2017
5e215ee
- Modified LICENCE.txt file. Added The MIT License as a main
May 4, 2017
c06da3f
Fixed markdown errors in Client README.md
dingwilson May 16, 2017
739224a
Fixed markdown issues in Security.md
dingwilson May 16, 2017
ec83e56
More fixes to markdown in Security.md
dingwilson May 16, 2017
afa804f
Clarify that the previous snapshot metadata file may be safely expired.
trishankkarthik May 18, 2017
be7a7ff
Clarify procedure for updating to new root.json
vladimir-v-diaz May 18, 2017
4a1791d
Incorporate @awwad and @heartsucker suggestions
vladimir-v-diaz May 18, 2017
1269ed9
Fix whitespace issue in previous commit
vladimir-v-diaz May 18, 2017
70cf57a
Slight edit to fix incorrect version of root file
vladimir-v-diaz May 18, 2017
947e366
Use "MUST" with regard to RFC 2119.
trishankkarthik May 19, 2017
8b1f853
Explain how to obtain and load the previous root metadata file.
trishankkarthik May 19, 2017
c5deaa3
Explain why download targets up to the # of bytes in the targets meta…
trishankkarthik May 19, 2017
30536cf
Edit Section 7.2 to reflect Section 5.1.
trishankkarthik May 19, 2017
487d27a
Add subtleties to preorder DFS for targets.
trishankkarthik May 19, 2017
5666cbc
Remove what seems like unnecessary, obsolete text.
trishankkarthik May 19, 2017
a2a5931
Merge reading consistent snapshots with the client update workflow.
trishankkarthik May 19, 2017
3935141
Remove what seems like an unnecessary note.
trishankkarthik May 19, 2017
d80ea0b
Add a note about the expiration of the previous root metadata file.
trishankkarthik May 19, 2017
06665c0
Merge branch 'develop' into add-detailed-workflow
vladimir-v-diaz May 23, 2017
98de3c4
Worked with @vladimir-v-diaz to add root migration workflow.
trishankkarthik May 23, 2017
558fb43
Merge branch 'add-detailed-workflow' of github.com:trishankkarthik/tu…
trishankkarthik May 23, 2017
c5e8c07
Fix bloopers.
trishankkarthik May 24, 2017
85eb899
Merge pull request #440 from trishankkarthik/add-detailed-workflow
JustinCappos May 24, 2017
836ebe5
Fix section 3, where the hash is specified rather than the version nu…
vladimir-v-diaz May 24, 2017
b7f893d
Edit instances of "downloaded time" to just "time"
vladimir-v-diaz May 24, 2017
c1e72e0
"latest time" --> "latest known time"
vladimir-v-diaz May 24, 2017
13cfa2e
Clarify checking for freeze attacks on the root metadata file.
trishankkarthik May 31, 2017
dae2b7a
Merge branch 'develop' into update_specification
vladimir-v-diaz Jun 2, 2017
8ddc62c
Merge pull request #433 from theupdateframework/update_specification
vladimir-v-diaz Jun 2, 2017
207a0a0
Remove an extraneous step (thanks @heartsucker).
trishankkarthik Jun 3, 2017
b5e7325
Edit comment/description for settings.HASH_FUNCTION
vladimir-v-diaz Jun 14, 2017
11ecaeb
Merge branch 'develop' into configurable_hash_algo_hashed_bin_prefix
vladimir-v-diaz Jun 14, 2017
b3b5f63
Merge pull request #439 from theupdateframework/configurable_hash_alg…
vladimir-v-diaz Jun 14, 2017
ef67163
Edits to PR
vladimir-v-diaz Jun 15, 2017
ee770da
Merge pull request #460 from theupdateframework/lukpueh-fix-#412
vladimir-v-diaz Jun 15, 2017
a44551b
Merge branch 'develop' into add-detailed-workflow
vladimir-v-diaz Jun 19, 2017
5b2407b
Address what should happen when Root keys are compromised
vladimir-v-diaz Jun 19, 2017
0f40e70
Merge pull request #452 from trishankkarthik/add-detailed-workflow
vladimir-v-diaz Jun 19, 2017
78c81c4
Merge branch 'develop' into vladimir-v-diaz-patch-4
vladimir-v-diaz Jun 19, 2017
9025b90
Justify why a compromise of Root keys should be avoided
vladimir-v-diaz Jun 20, 2017
904fa9b
Merge pull request #461 from theupdateframework/vladimir-v-diaz-patch-4
trishankkarthik Jun 21, 2017
84713f3
Fix for issue #465
vladimir-v-diaz Jul 6, 2017
4763f2d
Merge pull request #466 from theupdateframework/vladimir-v-diaz-patch-4
vladimir-v-diaz Jul 7, 2017
ec3edd0
Update METADATA.md
vladimir-v-diaz Jul 10, 2017
ee5c4fe
Add new repository metadata
vladimir-v-diaz Jul 10, 2017
a0dc02a
List Root's version number in Snapshot
vladimir-v-diaz Jul 10, 2017
ab81a38
Making it clearer who "owns" the project (in response to a CNCF quest…
JustinCappos Jul 11, 2017
3f44d99
Clarifying who runs the project.
JustinCappos Jul 11, 2017
f6d0d07
Add missing root.json.gz metadata
vladimir-v-diaz Jul 11, 2017
af951d4
Merge pull request #469 from vladimir-v-diaz/fix_issue#468
vladimir-v-diaz Jul 11, 2017
cc4577e
Merge branch 'develop' into vladimir-v-diaz-patch-5
vladimir-v-diaz Jul 11, 2017
d28324f
Merge pull request #467 from theupdateframework/vladimir-v-diaz-patch-5
vladimir-v-diaz Jul 11, 2017
7e71080
Use consistent wording in the client workflow
vladimir-v-diaz Jul 11, 2017
ca6a042
Update tuf-spec.txt
vladimir-v-diaz Jul 12, 2017
6e26c31
Add metadata where _type = lowercase
vladimir-v-diaz Jul 12, 2017
25e23d4
Import correct key files in generate_project_data.py
vladimir-v-diaz Jul 12, 2017
41954ac
Remove obsolete backup files (used by developer tool)
vladimir-v-diaz Jul 12, 2017
639818a
Add new project metadata that uses lowercase _type entries
vladimir-v-diaz Jul 12, 2017
a384933
Edit the format of _type entries, which are now lowercase
vladimir-v-diaz Jul 12, 2017
7d30763
Ensure the client loads _type = targets metadata
vladimir-v-diaz Jul 12, 2017
d13a401
Update specification
vladimir-v-diaz Jul 12, 2017
1513339
Merge pull request #470 from theupdateframework/vladimir-v-diaz-patch-1
vladimir-v-diaz Jul 12, 2017
2b5faf4
Merge branch 'develop' into _type_role_lowercase
vladimir-v-diaz Jul 12, 2017
ce5e920
Fix python3 error with string.lower()
vladimir-v-diaz Jul 13, 2017
c76a371
Merge branch '_type_role_lowercase' of github.com:vladimir-v-diaz/tuf…
vladimir-v-diaz Jul 13, 2017
0fc58f6
Merge pull request #472 from vladimir-v-diaz/_type_role_lowercase
vladimir-v-diaz Jul 13, 2017
4cc7c17
Test that root.json.gz can be loaded
vladimir-v-diaz Jul 13, 2017
e5792a0
Catch correct tuf.exceptions.UnknownRoleError
vladimir-v-diaz Jul 13, 2017
e7de36b
Fix docstring to mention expected tuf.exceptions.UnknownRoleError
vladimir-v-diaz Jul 13, 2017
58ab40c
Remove check for unknown repository name
vladimir-v-diaz Jul 13, 2017
c841360
Remove check for
vladimir-v-diaz Jul 13, 2017
48e412d
Add test_exceptions.py
vladimir-v-diaz Jul 13, 2017
a1b61e9
Add test case for tuf.exceptions.DecompressionError
vladimir-v-diaz Jul 14, 2017
31e4f1c
Add blank lines to improve readability
vladimir-v-diaz Jul 14, 2017
30109fb
Add unit test for unittest_toolbox.py
vladimir-v-diaz Jul 14, 2017
97eccf5
Remove chech for > py2.5 in download.py
vladimir-v-diaz Jul 14, 2017
64fdc39
Add test case for loading malformed metadata
vladimir-v-diaz Jul 14, 2017
8fe78f5
Fix/uncomment tests for rebuild_key_and_role_db() and import_delegati…
vladimir-v-diaz Jul 17, 2017
d8b020c
Clear role and key db in setup
vladimir-v-diaz Jul 17, 2017
dbc8cbc
Fix bug in Updater
vladimir-v-diaz Jul 17, 2017
cab5514
Edit test cases after bug fix in _get_keyid()
vladimir-v-diaz Jul 17, 2017
32aab8f
Use securesystemslib v0.10.6
vladimir-v-diaz Jul 17, 2017
6cb2a24
Merge branch 'develop' into coverage
vladimir-v-diaz Jul 18, 2017
4bcf513
Fix remaining bugs with loading multiple keyids
vladimir-v-diaz Jul 18, 2017
4c9d278
Merge branch 'coverage' of github.com:vladimir-v-diaz/tuf into coverage
vladimir-v-diaz Jul 18, 2017
70bdfb9
Fix syntax error in import_delegations and improve coverage
vladimir-v-diaz Jul 18, 2017
7408da6
Add test case for _soft_check_file_length
vladimir-v-diaz Jul 18, 2017
67eb57a
Merge pull request #473 from vladimir-v-diaz/coverage
vladimir-v-diaz Jul 19, 2017
c641ad8
Add function to dump signable metadata content
vladimir-v-diaz Jul 21, 2017
c0e897a
Add repository_tool.append_signature()
vladimir-v-diaz Jul 21, 2017
e606b9b
Add missing function argument in docstring
vladimir-v-diaz Jul 21, 2017
1acd440
Add test conditions for dump_signable_metadata()
vladimir-v-diaz Jul 24, 2017
4eee116
Add test conditions for append_signature()
vladimir-v-diaz Jul 26, 2017
646eca5
Edit README to cover dump_signable_metadata and append_signature()
vladimir-v-diaz Jul 26, 2017
115b949
Merge pull request #474 from vladimir-v-diaz/append_external_signature
vladimir-v-diaz Jul 26, 2017
af6eda2
List missing exception in dump_signable_metadata()'s doctring
vladimir-v-diaz Jul 26, 2017
2674d6e
Merge pull request #475 from vladimir-v-diaz/append_external_signature
vladimir-v-diaz Jul 26, 2017
fb5391e
Add test condition for _verify_uncompressed_metadata_file()
vladimir-v-diaz Jul 26, 2017
868e3aa
Edit parameter used in _verify_root_chain_link()
vladimir-v-diaz Jul 26, 2017
99a3f99
Add test condition for _verify_root_chain_link()
vladimir-v-diaz Jul 26, 2017
7c3cbc7
Log debug message in _targets_of_role()
vladimir-v-diaz Jul 27, 2017
ca52527
Add test cases for _get_file() and _targets_of_role()
vladimir-v-diaz Jul 27, 2017
293989c
coverted spec to MD
jhdalek55 Jul 28, 2017
5364480
Add test conditions
vladimir-v-diaz Jul 31, 2017
671cd14
Specify compression_algorithms when calling _generate_and_write_metad…
vladimir-v-diaz Jul 31, 2017
2cacdc4
Minor edits to updater.py following addition of test conditions
vladimir-v-diaz Jul 31, 2017
a934126
Edit the lists in the Goals sections
vladimir-v-diaz Aug 2, 2017
a2581dc
Update TUF-spec.md
vladimir-v-diaz Aug 2, 2017
da864ec
Format code block and rename markdown file
vladimir-v-diaz Aug 2, 2017
1d67752
Edit more lists
vladimir-v-diaz Aug 2, 2017
95e1e6e
Add table of contents
vladimir-v-diaz Aug 2, 2017
9a77a35
Fix links in TOC
vladimir-v-diaz Aug 2, 2017
e121dbf
Bold the version and last modified entries
vladimir-v-diaz Aug 2, 2017
6b9750c
Merge pull request #478 from theupdateframework/jhdalek55-patch-1
vladimir-v-diaz Aug 2, 2017
508c092
Test _visit_child_roles
vladimir-v-diaz Aug 3, 2017
3312f30
Remove tuf-spec.txt
vladimir-v-diaz Aug 3, 2017
1c8055a
Merge pull request #479 from vladimir-v-diaz/develop
vladimir-v-diaz Aug 3, 2017
338c27c
remove 'method' from sig.py
vladimir-v-diaz Aug 3, 2017
2bbaade
Add symlink (tuf-spec.txt) to tuf-spec.md
vladimir-v-diaz Aug 3, 2017
bb50bee
re-add tuf-spec.txt, otherwise it breaks existing links to this file
vladimir-v-diaz Aug 3, 2017
e9338ae
Merge pull request #480 from vladimir-v-diaz/add_tuf_spec_txt
vladimir-v-diaz Aug 3, 2017
645a567
Add disclaimer that tuf-spec.txt has been moved
vladimir-v-diaz Aug 3, 2017
65e0aa1
Merge pull request #481 from vladimir-v-diaz/disclaimer_spec_moved
vladimir-v-diaz Aug 3, 2017
5c90e8f
Merge branch 'develop' of github.com:theupdateframework/tuf into tap9…
vladimir-v-diaz Aug 3, 2017
f8d9ac7
Add apache and mit licenses, and edit README
vladimir-v-diaz Aug 11, 2017
c59a8e1
Fix links in README to License files
vladimir-v-diaz Aug 11, 2017
89ee40d
Merge branch 'develop' into dual_license
vladimir-v-diaz Aug 11, 2017
a43f70c
Merge pull request #482 from vladimir-v-diaz/dual_license
JustinCappos Aug 11, 2017
8db447c
Incorporate changes made to crypto library
vladimir-v-diaz Aug 22, 2017
f4fd98b
Incorporate securesystemslib changes into sig.py and test_sig.py
vladimir-v-diaz Aug 23, 2017
5c17b59
Incorporate securesystemslib changes into sig.py
vladimir-v-diaz Aug 23, 2017
467a1af
Include missing argument to format_keyval_to_metadata() in test_repos…
vladimir-v-diaz Aug 23, 2017
3933232
Add new metadata that includes the signing scheme
vladimir-v-diaz Aug 23, 2017
bcf43e6
Edit metadata and code for developer_tool.py
vladimir-v-diaz Aug 23, 2017
f463ad6
Edit schemas in formats.py
vladimir-v-diaz Aug 23, 2017
e4f597d
Attempt to fix irregular build failure
vladimir-v-diaz Aug 23, 2017
e4d2d50
Update tuf-spec.md
vladimir-v-diaz Aug 23, 2017
4ee9d3b
Merge pull request #483 from theupdateframework/tap9_spec_changes
vladimir-v-diaz Aug 23, 2017
fa22ea1
Use v0.10.7 of securesystemslib
vladimir-v-diaz Aug 23, 2017
493402b
Merge branch 'develop' into tap9_signing_schemes
vladimir-v-diaz Aug 23, 2017
01e35f7
Merge pull request #484 from vladimir-v-diaz/tap9_signing_schemes
vladimir-v-diaz Aug 23, 2017
d1132b3
Merge branch 'develop' into coverage
vladimir-v-diaz Aug 23, 2017
52e2cd4
Remove print statements used for testing
vladimir-v-diaz Aug 24, 2017
28a4026
Remove print statements in updater.py
vladimir-v-diaz Aug 24, 2017
8536415
Ignore branch coverage for a particular loop in repository_tool.py
vladimir-v-diaz Aug 24, 2017
1afd968
Remove schemeta related to compression and update unit tests
vladimir-v-diaz Aug 25, 2017
3bfa9f6
Remove compression code from exceptions and update unit tests
vladimir-v-diaz Aug 25, 2017
9fe0075
Remove compression from roledb and update its unit tests
vladimir-v-diaz Aug 25, 2017
60cd552
Remove compression logic from repository_lib.py and edit its unit tests
vladimir-v-diaz Aug 25, 2017
1edc4d4
Remove compression from unit tests for formats.py, keydb.py, and role…
vladimir-v-diaz Aug 25, 2017
3372155
Do not generate compressed top-level repository data
vladimir-v-diaz Aug 25, 2017
134bf07
Remove compression from repository tool and its unit test
vladimir-v-diaz Aug 25, 2017
a602d44
Remove compression from developer_tool.py
vladimir-v-diaz Aug 25, 2017
bd754d5
Remove compression from updater.py and its unit test
vladimir-v-diaz Aug 25, 2017
d5f933b
Remove compression from developer_tool.py's unit test
vladimir-v-diaz Aug 25, 2017
15777a3
Remove compression from test_root_versioning_integration.py
vladimir-v-diaz Aug 25, 2017
b7c3b7c
Fix remaining unit test failures for repository_tool.py
vladimir-v-diaz Aug 25, 2017
419569c
Re-generate metadata that doesn't reference compressed metadata
vladimir-v-diaz Aug 25, 2017
a8ea44b
Do not mention compression in README.md
vladimir-v-diaz Aug 28, 2017
d2f85ec
Remove mention of compression from specification
vladimir-v-diaz Aug 28, 2017
8af7072
Merge pull request #485 from vladimir-v-diaz/tap10_remove_compression
vladimir-v-diaz Aug 28, 2017
924b97d
Resolve conflicts
vladimir-v-diaz Aug 28, 2017
d4f6362
Add metadata that contains 'spec_version'
vladimir-v-diaz Aug 28, 2017
8de5c69
Add check for supported major version of specification
vladimir-v-diaz Aug 28, 2017
313169d
Fix typo in code that checks for expected major version number
vladimir-v-diaz Aug 28, 2017
6f8511a
Add test condition for unsupported spec version number
vladimir-v-diaz Aug 28, 2017
0ff0718
Add spec_version to tuf-spec.md
vladimir-v-diaz Aug 28, 2017
c897a43
Add valid developer_tool.py metadata
vladimir-v-diaz Aug 29, 2017
5733e61
Merge pull request #487 from vladimir-v-diaz/spec_version_in_metadata
vladimir-v-diaz Aug 29, 2017
72fdbc5
Resolve merge conflicts
vladimir-v-diaz Aug 29, 2017
d9e2078
Remove obsolete test condition for metadata compression
vladimir-v-diaz Aug 29, 2017
cf9db61
Remove obsolete compression argument in repository_tool.py
vladimir-v-diaz Aug 29, 2017
36042c1
Add test condition for invalid metadata extension
vladimir-v-diaz Aug 29, 2017
144ab88
Provide better error message for invalid spec_version
vladimir-v-diaz Aug 29, 2017
6aa8854
Test for specific exception in invalid spec_version test condition
vladimir-v-diaz Aug 29, 2017
c5125e4
Finish test condition for _get_file() and test unsafe download
vladimir-v-diaz Aug 29, 2017
3ccb68c
Add test condition for detection of max number of delegations
vladimir-v-diaz Aug 29, 2017
100c5a7
Fix links in table of contents
Ajedi32 Aug 30, 2017
cabc2d0
Update tuf-spec.md
vladimir-v-diaz Aug 30, 2017
87f5308
Merge pull request #488 from Ajedi32/patch-1
vladimir-v-diaz Aug 30, 2017
e1ba30a
Add test condition for cycles in preorder_depth_first_walk()
vladimir-v-diaz Aug 30, 2017
c811494
Fix comment and ensure None is returned for a circular delegation
vladimir-v-diaz Aug 30, 2017
fb9aa3e
Add Mercury paper and entry in README.rst
vladimir-v-diaz Aug 31, 2017
be38eec
Merge branch 'develop' into add_mercury_paper
vladimir-v-diaz Aug 31, 2017
2f63ed3
Merge pull request #489 from vladimir-v-diaz/add_mercury_paper
vladimir-v-diaz Aug 31, 2017
3b58d6e
Merge branch 'develop' into coverage
vladimir-v-diaz Aug 31, 2017
3ea1c48
Test condition for unequal path hash prefixes
vladimir-v-diaz Aug 31, 2017
84b79b8
Update README.rst
vladimir-v-diaz Aug 31, 2017
66e2ed8
Fix unit test failures in test_updater.py
vladimir-v-diaz Aug 31, 2017
63b4d73
Fix exception name
vladimir-v-diaz Aug 31, 2017
bcabe00
Refactor _visit_child_role, remove obsolete test conditions, and impr…
vladimir-v-diaz Sep 6, 2017
baa4da9
Hit remaining lines in updater.py
vladimir-v-diaz Sep 6, 2017
3947fcb
Merge branch 'develop' into coverage
vladimir-v-diaz Sep 6, 2017
9e63023
Merge pull request #490 from vladimir-v-diaz/coverage
vladimir-v-diaz Sep 7, 2017
789e136
Drop py26 from tox.ini
vladimir-v-diaz Sep 21, 2017
eedff4a
Drop py26 from setup.py
vladimir-v-diaz Sep 21, 2017
72d7ebf
Remove py26 conditional import statements
vladimir-v-diaz Sep 21, 2017
8a6061f
Test only py 2.7, 3.4, 3.6 under Travis
vladimir-v-diaz Sep 21, 2017
460171b
Test all supported Python versions under Tox
vladimir-v-diaz Sep 21, 2017
aa12948
Add py3.6 to setup.py
vladimir-v-diaz Sep 21, 2017
c7b611c
Fix test failures under py3
vladimir-v-diaz Sep 21, 2017
87b84b4
Merge pull request #491 from vladimir-v-diaz/drop_py26_support
vladimir-v-diaz Sep 21, 2017
991033b
Merge branch 'develop' into edit_travis_py_versions
vladimir-v-diaz Sep 21, 2017
20d7cd2
Fix incorrect use of json.dumps
vladimir-v-diaz Sep 22, 2017
6340aaf
Upgrade pyca/cryptography
vladimir-v-diaz Sep 22, 2017
224e301
Merge pull request #492 from vladimir-v-diaz/edit_travis_py_versions
vladimir-v-diaz Sep 22, 2017
69a66e9
Add issue and pull request templates
vladimir-v-diaz Sep 28, 2017
e647264
Merge branch 'develop' into add_github_issue_pr_templates
vladimir-v-diaz Sep 28, 2017
e45084f
Merge pull request #493 from vladimir-v-diaz/add_github_issue_pr_temp…
vladimir-v-diaz Sep 28, 2017
d8b477b
Update tuf-spec.md
goldenMetteyya Oct 10, 2017
8824ec8
Remove references to 'method' as proposed by TAP 9
vladimir-v-diaz Oct 10, 2017
6e2344d
Fix 'schdemes' typo
vladimir-v-diaz Oct 10, 2017
a9a2a23
Merge pull request #494 from goldenMetteyya/develop
vladimir-v-diaz Oct 10, 2017
5f32ee0
Add section for TAPs to README
vladimir-v-diaz Oct 10, 2017
9c9941e
Merge pull request #495 from theupdateframework/link_to_taps_repo
vladimir-v-diaz Oct 11, 2017
709ada1
Remove example metadata
vladimir-v-diaz Oct 11, 2017
e5b3b8f
Edit METADATA.md to expand text that links to example metadata
vladimir-v-diaz Oct 11, 2017
fffc30c
Edit link to nested delegation example
vladimir-v-diaz Oct 11, 2017
2a0b86b
Fix link
vladimir-v-diaz Oct 11, 2017
e5776b7
Merge pull request #496 from vladimir-v-diaz/remove_example_metadata
vladimir-v-diaz Oct 11, 2017
02e6d4e
Ignore virtualenv and pyenv files
vladimir-v-diaz Oct 11, 2017
3fd782c
Merge pull request #497 from vladimir-v-diaz/update_gitignore
vladimir-v-diaz Oct 11, 2017
1014f1b
Add ecdsa-sha2-nistp256 to specification
vladimir-v-diaz Oct 11, 2017
c2f9d63
Update Last Modified
vladimir-v-diaz Oct 11, 2017
76b2b2d
Merge pull request #498 from vladimir-v-diaz/add_ecdsa_to_spec
vladimir-v-diaz Oct 11, 2017
57c8862
Edit specifiation files to point to their new location
vladimir-v-diaz Oct 11, 2017
ed63201
Remove obsolete proposals director (which now lives in the taps repo)
vladimir-v-diaz Oct 11, 2017
0076a49
Link to the specifidation new location from README
vladimir-v-diaz Oct 11, 2017
11043dc
Merge pull request #499 from vladimir-v-diaz/move_specification
vladimir-v-diaz Oct 11, 2017
02ddfb0
Remove PyCrypto dependency
vladimir-v-diaz Oct 13, 2017
02df40d
Add pyup.io configuration file
vladimir-v-diaz Oct 13, 2017
6d8b007
Merge pull request #500 from vladimir-v-diaz/add_pyup
vladimir-v-diaz Oct 13, 2017
bccdcb5
Update cffi from 1.7.0 to 1.11.2
pyup-bot Oct 13, 2017
1fd4f40
Update pynacl from 1.0.1 to 1.1.2
pyup-bot Oct 13, 2017
03f0600
Update cryptography from 2.0.3 to 2.1.1
pyup-bot Oct 13, 2017
459b550
Pin tox to latest version 2.9.1
pyup-bot Oct 13, 2017
2997ba0
Add pyup.io badges to README
vladimir-v-diaz Oct 13, 2017
1151ee6
Merge pull request #502 from vladimir-v-diaz/add_pyup_badge
vladimir-v-diaz Oct 13, 2017
229769f
Merge branch 'develop' into pyup-initial-update
vladimir-v-diaz Oct 13, 2017
d8a33c2
Merge pull request #501 from theupdateframework/pyup-initial-update
vladimir-v-diaz Oct 13, 2017
32fcc66
Convert coverage's badge to SVG from PNG
vladimir-v-diaz Oct 13, 2017
cba1cae
Merge pull request #503 from theupdateframework/convert_coverage_badge
vladimir-v-diaz Oct 13, 2017
4126fc8
Merge branch 'tap4' of github.com:theupdateframework/tuf into tap4
vladimir-v-diaz Oct 13, 2017
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
13 changes: 13 additions & 0 deletions .github/ISSUE_TEMPLATE.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,13 @@
Please fill in the fields below to submit an issue or feature request. The
more information that is provided, the better.


**Description of issue or feature request**:


**Current behavior**:


**Expected behavior**:


15 changes: 15 additions & 0 deletions .github/PULL_REQUEST_TEMPLATE.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,15 @@
Please fill in the fields below to submit a pull request. The more information
that is provided, the better.

**Fixes issue #**:

**Description of the changes being introduced by the pull request**:

**Please verify and check that the pull request fulfills the following
requirements**:

- [ ] The code follows the [Code Style Guidelines](https://github.com/secure-systems-lab/code-style-guidelines#code-style-guidelines)
- [ ] Tests have been added for the bug fix or new feature
- [ ] Docs have been added for the bug fix or new feature


4 changes: 3 additions & 1 deletion .gitignore
Original file line number Diff line number Diff line change
@@ -1,6 +1,7 @@
# root level directories
dist/*
build/*
env/*

# global file patterns
*.log
Expand All @@ -12,4 +13,5 @@ build/*
.coverage
.tox/*
tests/htmlcov/*
.DS_Store
.DS_Store
.python-version
40 changes: 40 additions & 0 deletions .pyup.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,40 @@
# configure updates globally
# default: all
# allowed: all, insecure, False
update: all

# set the default branch
# default: empty, the default branch on GitHub
branch: develop

# update schedule
# default: empty
# allowed: "every day", "every week", ..
schedule: "every day"

# configure dependency pinning globally
# default: True
# allowed: True, False
pin: True

# search for requirement files
# default: True
# allowed: True, False
search: False

# Specify requirement files by hand, default is empty
# default: empty
# allowed: list
requirements:
- dev-requirements.txt:
# update all dependencies and pin them
update: all
pin: True

# configure the branch prefix the bot is using
# default: pyup-
branch_prefix: pyup-

# allow to close stale PRs
# default: True
close_prs: True
12 changes: 7 additions & 5 deletions .travis.yml
Original file line number Diff line number Diff line change
@@ -1,19 +1,21 @@
language: python

dist: trusty
sudo: false

cache: pip
python: 3.6

python:
- "3.5"
env:
- TOXENV=py27
- TOXENV=py34
- TOXENV=py36

before_script:
- pip install -U pip wheel tox

script: tox

after_success:
- cd tests
- cd tests
- coveralls
- cd -

Expand Down
4 changes: 4 additions & 0 deletions AUTHORS.txt
Original file line number Diff line number Diff line change
@@ -1,3 +1,7 @@
The TUF project is managed by Justin Cappos at NYU (jcappos@nyu.edu).

Contributors:

Arturo Filastò
Benno Fünfstück
David Halls
Expand Down
174 changes: 174 additions & 0 deletions LICENSE-APACHE.txt
Original file line number Diff line number Diff line change
@@ -0,0 +1,174 @@
Apache License
Version 2.0, January 2004
http://www.apache.org/licenses/

TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION

1. Definitions.

"License" shall mean the terms and conditions for use, reproduction,
and distribution as defined by Sections 1 through 9 of this document.

"Licensor" shall mean the copyright owner or entity authorized by
the copyright owner that is granting the License.

"Legal Entity" shall mean the union of the acting entity and all
other entities that control, are controlled by, or are under common
control with that entity. For the purposes of this definition,
"control" means (i) the power, direct or indirect, to cause the
direction or management of such entity, whether by contract or
otherwise, or (ii) ownership of fifty percent (50%) or more of the
outstanding shares, or (iii) beneficial ownership of such entity.

"You" (or "Your") shall mean an individual or Legal Entity
exercising permissions granted by this License.

"Source" form shall mean the preferred form for making modifications,
including but not limited to software source code, documentation
source, and configuration files.

"Object" form shall mean any form resulting from mechanical
transformation or translation of a Source form, including but
not limited to compiled object code, generated documentation,
and conversions to other media types.

"Work" shall mean the work of authorship, whether in Source or
Object form, made available under the License, as indicated by a
copyright notice that is included in or attached to the work
(an example is provided in the Appendix below).

"Derivative Works" shall mean any work, whether in Source or Object
form, that is based on (or derived from) the Work and for which the
editorial revisions, annotations, elaborations, or other modifications
represent, as a whole, an original work of authorship. For the purposes
of this License, Derivative Works shall not include works that remain
separable from, or merely link (or bind by name) to the interfaces of,
the Work and Derivative Works thereof.

"Contribution" shall mean any work of authorship, including
the original version of the Work and any modifications or additions
to that Work or Derivative Works thereof, that is intentionally
submitted to Licensor for inclusion in the Work by the copyright owner
or by an individual or Legal Entity authorized to submit on behalf of
the copyright owner. For the purposes of this definition, "submitted"
means any form of electronic, verbal, or written communication sent
to the Licensor or its representatives, including but not limited to
communication on electronic mailing lists, source code control systems,
and issue tracking systems that are managed by, or on behalf of, the
Licensor for the purpose of discussing and improving the Work, but
excluding communication that is conspicuously marked or otherwise
designated in writing by the copyright owner as "Not a Contribution."

"Contributor" shall mean Licensor and any individual or Legal Entity
on behalf of whom a Contribution has been received by Licensor and
subsequently incorporated within the Work.

2. Grant of Copyright License. Subject to the terms and conditions of
this License, each Contributor hereby grants to You a perpetual,
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
copyright license to reproduce, prepare Derivative Works of,
publicly display, publicly perform, sublicense, and distribute the
Work and such Derivative Works in Source or Object form.

3. Grant of Patent License. Subject to the terms and conditions of
this License, each Contributor hereby grants to You a perpetual,
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
(except as stated in this section) patent license to make, have made,
use, offer to sell, sell, import, and otherwise transfer the Work,
where such license applies only to those patent claims licensable
by such Contributor that are necessarily infringed by their
Contribution(s) alone or by combination of their Contribution(s)
with the Work to which such Contribution(s) was submitted. If You
institute patent litigation against any entity (including a
cross-claim or counterclaim in a lawsuit) alleging that the Work
or a Contribution incorporated within the Work constitutes direct
or contributory patent infringement, then any patent licenses
granted to You under this License for that Work shall terminate
as of the date such litigation is filed.

4. Redistribution. You may reproduce and distribute copies of the
Work or Derivative Works thereof in any medium, with or without
modifications, and in Source or Object form, provided that You
meet the following conditions:

(a) You must give any other recipients of the Work or
Derivative Works a copy of this License; and

(b) You must cause any modified files to carry prominent notices
stating that You changed the files; and

(c) You must retain, in the Source form of any Derivative Works
that You distribute, all copyright, patent, trademark, and
attribution notices from the Source form of the Work,
excluding those notices that do not pertain to any part of
the Derivative Works; and

(d) If the Work includes a "NOTICE" text file as part of its
distribution, then any Derivative Works that You distribute must
include a readable copy of the attribution notices contained
within such NOTICE file, excluding those notices that do not
pertain to any part of the Derivative Works, in at least one
of the following places: within a NOTICE text file distributed
as part of the Derivative Works; within the Source form or
documentation, if provided along with the Derivative Works; or,
within a display generated by the Derivative Works, if and
wherever such third-party notices normally appear. The contents
of the NOTICE file are for informational purposes only and
do not modify the License. You may add Your own attribution
notices within Derivative Works that You distribute, alongside
or as an addendum to the NOTICE text from the Work, provided
that such additional attribution notices cannot be construed
as modifying the License.

You may add Your own copyright statement to Your modifications and
may provide additional or different license terms and conditions
for use, reproduction, or distribution of Your modifications, or
for any such Derivative Works as a whole, provided Your use,
reproduction, and distribution of the Work otherwise complies with
the conditions stated in this License.

5. Submission of Contributions. Unless You explicitly state otherwise,
any Contribution intentionally submitted for inclusion in the Work
by You to the Licensor shall be under the terms and conditions of
this License, without any additional terms or conditions.
Notwithstanding the above, nothing herein shall supersede or modify
the terms of any separate license agreement you may have executed
with Licensor regarding such Contributions.

6. Trademarks. This License does not grant permission to use the trade
names, trademarks, service marks, or product names of the Licensor,
except as required for reasonable and customary use in describing the
origin of the Work and reproducing the content of the NOTICE file.

7. Disclaimer of Warranty. Unless required by applicable law or
agreed to in writing, Licensor provides the Work (and each
Contributor provides its Contributions) on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
implied, including, without limitation, any warranties or conditions
of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
PARTICULAR PURPOSE. You are solely responsible for determining the
appropriateness of using or redistributing the Work and assume any
risks associated with Your exercise of permissions under this License.

8. Limitation of Liability. In no event and under no legal theory,
whether in tort (including negligence), contract, or otherwise,
unless required by applicable law (such as deliberate and grossly
negligent acts) or agreed to in writing, shall any Contributor be
liable to You for damages, including any direct, indirect, special,
incidental, or consequential damages of any character arising as a
result of this License or out of the use or inability to use the
Work (including but not limited to damages for loss of goodwill,
work stoppage, computer failure or malfunction, or any and all
other commercial damages or losses), even if such Contributor
has been advised of the possibility of such damages.

9. Accepting Warranty or Additional Liability. While redistributing
the Work or Derivative Works thereof, You may choose to offer,
and charge a fee for, acceptance of support, warranty, indemnity,
or other liability obligations and/or rights consistent with this
License. However, in accepting such obligations, You may act only
on Your own behalf and on Your sole responsibility, not on behalf
of any other Contributor, and only if You agree to indemnify,
defend, and hold each Contributor harmless for any liability
incurred by, or claims asserted against, such Contributor by reason
of your accepting any such warranty or additional liability.
40 changes: 16 additions & 24 deletions LICENSE.txt → LICENSE-MIT.txt
Original file line number Diff line number Diff line change
@@ -1,33 +1,25 @@
This file contains the license for TUF: The Update Framework.
The MIT License (MIT)

It also lists license information for components and source
code used by TUF: The Update Framework.
Copyright (c) 2010 New York University

If you got this file as a part of a larger bundle,
there may be other license terms that you should be aware of.

===============================================================================
TUF: The Update Framework is distributed under this license:

Copyright (c) 2010, Justin Samuel and Justin Cappos.

Permission is hereby granted, free of charge, to any person obtaining a copy of
this software and/or hardware specification (the “Work”) to deal in the Work
without restriction, including without limitation the rights to use, copy,
modify, merge, publish, distribute, sublicense, and/or sell copies of the Work,
and to permit persons to whom the Work is furnished to do so, subject to the
following conditions:
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Work.
copies or substantial portions of the Software.

THE WORK IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR
OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
ARISING FROM, OUT OF OR IN CONNECTION WITH THE WORK OR THE USE OR OTHER
DEALINGS IN THE WORK.
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.

===============================================================================
Many files are modified from Thandy and are licensed under the
following license:
Expand Down
Loading