docker
/
docs
mirror of https://github.com/docker/docs.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
docs/tuf
History
Riyaz Faizullabhoy a16e6b58b5 use only canonical IDs for display on delegation CLI commands, translate to TUF key IDs for metadata usage under the hood 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 		2016-01-29 16:00:42 -08:00
..
client Add test that update fails if the local root is corrupt AND the remote root is corrupt. 2016-01-29 11:07:01 -08:00
data change url from jfrazelle/go to docker/go 2016-01-26 08:43:38 -08:00
db adding gotuf to notary 2015-10-27 16:36:06 -07:00
encrypted adding gotuf to notary 2015-10-27 16:36:06 -07:00
keys client library for retrieving keys and signatures for all roles 2016-01-20 12:00:09 -08:00
resources adding gotuf to notary 2015-10-27 16:36:06 -07:00
signed move verifier and update logs down to debug level 2016-01-26 23:02:54 -08:00
store make -1 read up to 100MB of data, use for non-timestamps. Reduce 2016-01-28 10:17:17 -08:00
testutils Fixed timestamp downloading so if verification fails, we fall back to cached. 2016-01-29 11:05:21 -08:00
utils Do not use strings.Compare 2015-12-26 13:50:52 +00:00
validation fix up style according to comments 2016-01-04 16:20:19 -08:00
LICENSE adding gotuf to notary 2015-10-27 16:36:06 -07:00
README.md adding gotuf to notary 2015-10-27 16:36:06 -07:00
tuf.go use only canonical IDs for display on delegation CLI commands, translate to TUF key IDs for metadata usage under the hood 2016-01-29 16:00:42 -08:00
tuf_test.go use only canonical IDs for display on delegation CLI commands, translate to TUF key IDs for metadata usage under the hood 2016-01-29 16:00:42 -08:00

README.md

GOTUF

This is still a work in progress but will shortly be a fully compliant Go implementation of The Update Framework (TUF).

Where's the CLI

This repository provides a library only. The Notary project from Docker should be considered the official CLI to be used with this implementation of TUF.

TODOs:

  • Add Targets to existing repo
  • Sign metadata files
  • Refactor TufRepo to take care of signing and verification
  • Ensure consistent capitalization in naming (TUF___ vs Tuf___)
  • Make caching of metadata files smarter - PR #5
  • Add configuration for CLI commands. Order of configuration priority from most to least: flags, config file, defaults Notary should be the official CLI
  • Reasses organization of data types. Possibly consolidate a few things into the data package but break up package into a few more distinct files
  • Comprehensive test cases
  • Delete files no longer in use
  • Fix up errors. Some have to be instantiated, others don't, the inconsistency is annoying.
  • Bump version numbers in meta files (could probably be done better)

Credits

This implementation was originally forked from flynn/go-tuf, however in attempting to add delegations I found I was making such significant changes that I could not maintain backwards compatibility without the code becoming overly convoluted.

Some features such as pluggable verifiers have alreayd been merged upstream to flynn/go-tuf and we are in discussion with titanous about working to merge the 2 implementations.

This implementation retains the same 3 Clause BSD license present on the original flynn implementation.