Skip to content

Conversation

@lukpueh
Copy link
Member

@lukpueh lukpueh commented Oct 14, 2019

Fixes issue #:
Closes #28.
Supersedes #917 and #918.

Description of the changes being introduced by the pull request:

Updates pinned version of securesystemslib dependency in *requirements.txt and setup.py to latest 0.12.0.

The update requires a few adjustments due to breaking changes in securesystemslib 0.12.0, which were kindly provided by @joshuagl in #917 and #918:

  • explicitly encode data we pass to securesystemslib.keys.create_signature and securesystemslib.keys.verify_signature
  • remove use of securesystemslib.util.TempFile in favour of tempfile.TemporaryFile from the Python standard library

These changes are incorporated with this PR, fixing minor merge conflicts due to #885.

Please verify and check that the pull request fulfills the following
requirements
:

  • The code follows the Code Style Guidelines
  • Tests have been added for the bug fix or new feature
  • Docs have been added for the bug fix or new feature

Lukas Puehringer and others added 3 commits October 14, 2019 12:26
securesystemslib PR theupdateframework#162 removed implicit encoding of data to bytes
in securesystemslib.keys.[create_signature|verify_signature]

Update to encode data where required.

Signed-off-by: Joshua Lock <[email protected]>
The class has been removed from securesystemslib as its desirable
features are no longer required and its behavioural inconsistencies
with a standard Python file object are confusing. Therefore remove
uses of the class from TUF.

Signed-off-by: Joshua Lock <[email protected]>
Signed-off-by: Lukas Puehringer <[email protected]>
@lukpueh
Copy link
Member Author

lukpueh commented Oct 14, 2019

I'm merging this PR despite failing AppVeyor build and missing review, because:

@lukpueh lukpueh merged commit 536fed7 into theupdateframework:develop Oct 14, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

More explicit interposition with urllib and urllib2

2 participants