sigsum-py, branch v0.1.0Moved to https://git.glasklar.is/sigsum/core/sigsum-pyhttps://getuid.sigsum.org/sigsum-py/atom?h=v0.1.02021-06-16T11:54:49Zadd README and LICENSE2021-06-16T11:54:49ZLinus Nordberglinus@nordberg.se2021-06-16T11:54:49Zurn:sha1:53b4e01d9b55f78f41719e6d1357a15f35ef06b0rename files signed_tree_head and signing_key2021-06-16T11:27:13ZLinus Nordberglinus@nordberg.se2021-06-16T11:27:13Zurn:sha1:606ce5cfab2d0fb1bccd0069ccaa7e5d6bee3ac6
NOTE: BREAKING COMPATIBILITY with old filenames
To keep a config working after applying this change, do
mv signed_tree_head signed-tree-head
mv signing_key signing-key
in the config directory.
be explicit when we return None2021-06-16T11:19:25ZLinus Nordberglinus@nordberg.se2021-06-16T11:19:25Zurn:sha1:9b0109848b10a370e1a19c9d3789e048f1992f86don't fetch consistency proof when tree hasn't grown2021-06-16T11:18:53ZLinus Nordberglinus@nordberg.se2021-06-16T11:18:53Zurn:sha1:e79f6189d090fc0515c3e5935695787c51039c77use @properties in TreeHead2021-06-16T11:16:19ZLinus Nordberglinus@nordberg.se2021-06-16T11:16:19Zurn:sha1:9f604cc3a7e77851cbb989145d500ec5b01f67a6refactoring log history validation2021-06-16T08:46:20ZLinus Nordberglinus@nordberg.se2021-06-16T08:46:20Zurn:sha1:b211fc9a1bd50aeeb0664129d02924041636d31bfix --base-dir2021-06-16T08:24:23ZLinus Nordberglinus@nordberg.se2021-06-16T08:22:12Zurn:sha1:98cd8ebb3182996379a5f2377eedfe0b832a2f35validate tree heads harder2021-06-16T08:17:42ZLinus Nordberglinus@nordberg.se2021-06-16T08:17:42Zurn:sha1:3629f925b06d9d789e6942876aaf2c0ef875353f
Disallow time travel, tree shrinkage, new tree hash for same sized
tree, new tree size with same tree hash.
Consider an STH seen iff all three attributes -- timestamp, size,
hash -- are identical.
a too old or too new tree head is not an error2021-06-16T06:58:48ZLinus Nordberglinus@nordberg.se2021-06-16T06:58:48Zurn:sha1:e4e8216eff7bff1449c12979c9da4c67eafb4499
We return !0 for critical errors that need human intervention.
Let's consider a stale log and a log with a bad clock an intermittent
and non critical error for now.
We might want to change requirements on logs to separate freshness
from clock skew. We should reconsider the severeness of those errors
if that change happens.
don't sign a tree head that's too old or too far in the future2021-06-15T14:25:45ZLinus Nordberglinus@nordberg.se2021-06-15T14:25:45Zurn:sha1:10dd352ab1ab6ef9cdc8b1494f0a8c0e9ca7d20d