python-tuf

python-tuf copied to clipboard

Support HSM signing

1

Supersedes #569 and #864 Related to #1109 (out-of-band signing) Groundwork available in https://github.com/secure-systems-lab/securesystemslib/pull/229 **Description of issue or feature request**: python-tuf (or rather `securesystemslib`) should provide an implementation to sign metadata...

lukpueh

Add validation guidelines

6

There seems to be agreement to discontinue the securesystemslib schema facility (see https://github.com/secure-systems-lab/securesystemslib/issues/183). We still need to be able to validate all **inputs at the user boundary** (type annotations should...

lukpueh

Support external signatures (sigs made on system without TUF installed)

5

Please fill in the fields below to submit an issue or feature request. The more information that is provided, the better. **Description of issue or feature request**: Feature request: please...

maltfield

How much metadata behaviour should be implemented on their classes?

6

The TUF refactor aims at a more idiomatic use of OOP (see #1112). As such it seems reasonable to implement metadata entity behaviour as instance methods on the corresponding classes....

lukpueh

Indexing targets with TUF is hard if using delegations

5

## The Importance of a Target Index First, let's be clear about this: if you're looking for the trustworthy target info (hash, length, etc.) for a target whose name you...

awwad

Support ASN.1 metadata

4

(NOTE: this issue copied from [docs/ROADMAP.md](https://github.com/theupdateframework/tuf/blob/4847783001bb669e5082414e23cbb8a1948110db/docs/ROADMAP.md)) **Description of issue or feature request**: We currently support only a JSON-compatible metadata format. **Current behavior**: Only JSON-compatible metadata is supported **Expected behavior**: ASN.1...

joshuagl

tests: test infrastructure (setup/teardown) improvements

1

(Documenting test improvement ideas from #1346) A lot (most?) of our tests require a test server (or several). This typically means moving metadata from sources to a temp directory, serving...

jku

docs: python-tuf version should be visible in docs (readthedocs)

16

https://theupdateframework.readthedocs.io/en/stable/ works great and automatically updates based on release tags. But it's hard to see which release the docs are actually for... I'm not sure if the solution is to...

jku

ngclient: max_root_rotations value is very small

1

Please fill in the fields below to submit an issue or feature request. The more information that is provided, the better. **Description of issue or feature request**: ngclient (like legacy...

joshuagl

Create simple test for examples/client_example

2

**Description of issue or feature request**: Adding a tests folder in examples/client_example and writing a simple test would be a great demonstration of best practices to who will be using...

kairoaraujo