Add support for ClientTrustConfig #185
Assignees
Labels
enhancement
New feature or request
Comments
Closed
haydentherapper
added a commit
to haydentherapper/sigstore-go
that referenced
this issue
Dec 20, 2024
Created a simple wrapper around the protobuf SigningConfig. I mirrored the existing code for TrustedRoot, though this is far simpler since this is just a few strings. I didn't add support for ClientTrustConfig since we won't distribute this file via TUF, but this would be easy enough to add later on. Fixes sigstore#185 Signed-off-by: Hayden Blauzvern <[email protected]>
|
Created a PR for |
haydentherapper
added a commit
to haydentherapper/sigstore-go
that referenced
this issue
Jan 9, 2025
Created a simple wrapper around the protobuf SigningConfig. I mirrored the existing code for TrustedRoot, though this is far simpler since this is just a few strings. I didn't add support for ClientTrustConfig since we won't distribute this file via TUF, but this would be easy enough to add later on. Fixes sigstore#185 Signed-off-by: Hayden Blauzvern <[email protected]>
haydentherapper
added a commit
to haydentherapper/sigstore-go
that referenced
this issue
Jan 9, 2025
Created a simple wrapper around the protobuf SigningConfig. I mirrored the existing code for TrustedRoot, though this is far simpler since this is just a few strings. I didn't add support for ClientTrustConfig since we won't distribute this file via TUF, but this would be easy enough to add later on. Fixes sigstore#185 Signed-off-by: Hayden Blauzvern <[email protected]>
haydentherapper
added a commit
that referenced
this issue
Jan 10, 2025
* Add support for SigningConfig Created a simple wrapper around the protobuf SigningConfig. I mirrored the existing code for TrustedRoot, though this is far simpler since this is just a few strings. I didn't add support for ClientTrustConfig since we won't distribute this file via TUF, but this would be easy enough to add later on. Fixes #185 Signed-off-by: Hayden Blauzvern <[email protected]> * bump conformance Signed-off-by: Hayden Blauzvern <[email protected]> --------- Signed-off-by: Hayden Blauzvern <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Description
A
ClientTrustConfigmessage wraps aTrustRootand aSigningConfig, the latter specifying which URLs should be contacted to fetch a signing certificate, fetch an identity token, log a signing event, and get a signed timestamp.This standardizes support for bring-your-own-infrastructure without the need to configure each client or bake in any URLs from the public good infrastructure.
The text was updated successfully, but these errors were encountered: