rust-tuf
rust-tuf copied to clipboard
theupdateframework
Rust implementation of The Update Framework (TUF)
Hey, it seems there's a newer version of the TUF specification - [v1.0.30](https://github.com/theupdateframework/specification/blob/v1.0.30/tuf-spec.md) The version which [theupdateframework/rust-tuf](https://github.com/theupdateframework/rust-tuf) states it supports is - [v1.0.29](https://github.com/theupdateframework/specification/blob/v1.0.29/tuf-spec.md) The following is a comparison of what...
![github-actions[bot] avatar](https://avatars.githubusercontent.com/in/15368?v=4 "github-actions[bot] avatar"){kind=avatar}
We're getting close to releasing 0.3.0. Are there any other papercuts on the API surface we want to clean up before release? Here are some ideas: - [ ] `MetadataPath`...
Tracking the work necessary to get ECDSA to conform to the spec: - [ ] https://github.com/heartsucker/rust-tuf/issues/204 - ECDSA keys should be encoded as a PEM string
Tracking issue to get RSA keys to conform to the spec [ ] https://github.com/heartsucker/rust-tuf/issues/204 - RSA keys should be encoded as a PEM string
In #304, I'm changing `Client::update()` to error out if we fail to write metadata to the local `FileSystemRepository`. Consider: * The trusted root metadata is version 4. * We fetch...
TUF-1.0.9 §5.1.2 states: Try downloading version N+1 of the root metadata file, up to some W number of bytes (because the size is unknown). The value for W is set...
There are a few places where rust-tuf diverges from the TUF-1.0.5 spec, like #113. This is a tracking ticket to label all these locations in code, and resolve why we've...
TUF-1.0.5 section 5.3.3.2 states: > 3.3.2. The version number of the targets metadata file, and all delegated targets metadata files (if any), in the trusted snapshot metadata file, if any,...
TUF-1.0.5 added section 5.2.2.2: > 2.2.2. The version number of the snapshot metadata file in the trusted timestamp metadata file, if any, MUST be less than or equal to its...
The TUF spec states that the root metadata should be updated by continuing to try to update to version N+1 metadata until we get a not-found error. However, rust-tuf doesn't...
Metadata
Owner
Metadata
Rust implementation of The Update Framework (TUF)