Skip to content

Support gpg signatures (copied from in-toto project) #163

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 7 commits into from
+2,272 −12
Closed

Support gpg signatures (copied from in-toto project) #163

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
3460384
Move and fix gpg package from in-toto
danixeee Feb 6, 2019
cc106e5
Make signature schema compatible with gpg
danixeee Feb 7, 2019
f071abc
Copy gpg tests from in-toto
danixeee Mar 5, 2019
806c8b2
Increase test coverage
danixeee Mar 5, 2019
93969c3
Remove commented code
danixeee Mar 5, 2019
b0bfbe8
Drop python 3.4 support
danixeee Mar 13, 2019
56bbc48
Add latest changes from in-toto (ab1e904caa)
danixeee Mar 13, 2019
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 0 additions & 1 deletion .travis.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,6 @@ python: 3.6

env:
- TOXENV=py27
- TOXENV=py34
- TOXENV=py36

before_script:
Expand Down
3 changes: 2 additions & 1 deletion ci-requirements.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,4 +5,5 @@ coverage
coveralls
six
colorama
mock; python_version < '3.3'
mock;
subprocess32; python_version < '3'
3 changes: 2 additions & 1 deletion dev-requirements.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,7 @@ tox==3.2.1
coveralls==1.3.0
coverage==4.5.1
colorama==0.3.9
mock==2.0.0; python_version < '3.3'
mock==2.0.0;
subprocess32; python_version < '3'

--editable .
1 change: 1 addition & 0 deletions requirements.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,3 +2,4 @@ cryptography
pynacl
six
colorama
subprocess32; python_version < '3'
4 changes: 3 additions & 1 deletion securesystemslib/formats.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -355,8 +355,10 @@
# That would be under the argument that a key should only be able to sign a
# file once.
SIGNATURE_SCHEMA = SCHEMA.Object(
object_name = 'SIGNATURE_SCHEMA',
object_name = "SIGNATURE_SCHEMA",
keyid = KEYID_SCHEMA,
short_keyid = SCHEMA.Optional(KEYID_SCHEMA),
other_headers = SCHEMA.Optional(HEX_SCHEMA),
sig = HEX_SCHEMA)

# List of SIGNATURE_SCHEMA.
Expand Down
23 changes: 23 additions & 0 deletions securesystemslib/gpg/__init__.py
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,23 @@
"""
<Module Name>
gpg

<Author>
Santiago Torres-Arias <[email protected]>

<Started>
Nov 15, 2017

<Copyright>
See LICENSE for licensing information.

<Purpose>
This module was written due to the lack of other python (such as pygpg)
modules that can provide an abstraction to the RFC4480 encoded messages from
GPG. The closest candidate we could find was the python bindings for gpgme,
we oped to use a Popen-based python-only construction given that gpgme is
often shipped separately and other popular tools using gpg (e.g., git) don't
use these bindings either. This is because users willing to use gpg signing
are almost guaranteed to have gpg installed, yet the same assumption can't be
made for the gpgme python bindings.
"""
Loading