docker
/
docs
mirror of https://github.com/docker/docs.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
docs/tuf
History
avaid96 07265a3635 TUF changed to Tuf in all comments and rethink models as per open issue 313 
Signed-off-by: avaid96 <avaid1996@gmail.com>
 		2016-06-08 17:14:08 -07:00
..
client Change minimum required version of metadata to be 1, not 0 2016-04-27 10:58:58 -07:00
data check the intersection of all hash algorithms, given a valid Hashes map 2016-05-13 23:15:30 -07:00
signed Add a general interface test for signed.CryptoService specifying expected interface behavior. 2016-05-03 17:00:55 -07:00
store Rename constant 2016-04-29 09:33:45 -07:00
testutils TUF changed to Tuf in all comments and rethink models as per open issue 313 2016-06-08 17:14:08 -07:00
utils Handle cert bundles as key IDs 2016-04-19 11:01:56 -07:00
validation Use 'require' instead of 'assert' in client and TUF client tests 2016-03-15 13:52:48 -07:00
LICENSE adding gotuf to notary 2015-10-27 16:36:06 -07:00
README.md TUF changed to Tuf in all comments and rethink models as per open issue 313 2016-06-08 17:14:08 -07:00
builder.go Address review comments: 2016-04-27 14:45:37 -07:00
builder_test.go Change minimum required version of metadata to be 1, not 0 2016-04-27 10:58:58 -07:00
tuf.go Simplify even further and only save the previous role during a root rotation 2016-05-09 14:10:25 -07:00
tuf_test.go Simplify even further and only save the previous role during a root rotation 2016-05-09 14:10:25 -07:00

README.md

GOTUF

This is still a work in progress but will shortly be a fully compliant Go implementation of The Update Framework (TUF).

Where's the CLI

This repository provides a library only. The Notary project from Docker should be considered the official CLI to be used with this implementation of TUF.

TODOs:

  • Add Targets to existing repo
  • Sign metadata files
  • Refactor TUFRepo to take care of signing and verification
  • Ensure consistent capitalization in naming (TUF___ vs Tuf___)
  • Make caching of metadata files smarter - PR #5
  • Add configuration for CLI commands. Order of configuration priority from most to least: flags, config file, defaults Notary should be the official CLI
  • Reasses organization of data types. Possibly consolidate a few things into the data package but break up package into a few more distinct files
  • Comprehensive test cases
  • Delete files no longer in use
  • Fix up errors. Some have to be instantiated, others don't, the inconsistency is annoying.
  • Bump version numbers in meta files (could probably be done better)

Credits

This implementation was originally forked from flynn/go-tuf, however in attempting to add delegations I found I was making such significant changes that I could not maintain backwards compatibility without the code becoming overly convoluted.

Some features such as pluggable verifiers have already been merged upstream to flynn/go-tuf and we are in discussion with titanous about working to merge the 2 implementations.

This implementation retains the same 3 Clause BSD license present on the original flynn implementation.