Skip to content

Implement new SimpleSigstoreSigner and update exceptions in Signer#133

Draft
KiranSatyaRaj wants to merge 6 commits into
in-toto:masterfrom
KiranSatyaRaj:new-SimpleSigstoreSigner
Draft

Implement new SimpleSigstoreSigner and update exceptions in Signer#133
KiranSatyaRaj wants to merge 6 commits into
in-toto:masterfrom
KiranSatyaRaj:new-SimpleSigstoreSigner

Conversation

@KiranSatyaRaj

@KiranSatyaRaj KiranSatyaRaj commented Jul 15, 2024

Copy link
Copy Markdown

This pull request adds support for KeylessSigning the payload in dsse and updates the throwable exceptions in Signer

@KiranSatyaRaj KiranSatyaRaj force-pushed the new-SimpleSigstoreSigner branch from a795f08 to 4b8c3e3 Compare July 15, 2024 18:42
Signed-off-by: KiranSatyaRaj <kiranjamy20021508@gmail.com>
@KiranSatyaRaj KiranSatyaRaj force-pushed the new-SimpleSigstoreSigner branch from 4b8c3e3 to 421c4e6 Compare July 15, 2024 18:54
@KiranSatyaRaj KiranSatyaRaj marked this pull request as ready for review July 15, 2024 18:58
Object subAltArr = certificate.getSubjectAlternativeNames().toArray()[0];
String subAltName = subAltArr.toString();
subAltName = subAltName.substring(4, subAltName.length() - 1);
this.keyId = keyId.concat(" " + subAltName);

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

can you compute the keyid such as:

<oidc provider>:<SAN> ? this way we can also know who actually provided the identity to fulcio

@KiranSatyaRaj KiranSatyaRaj Jul 15, 2024

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is this how it's supposed to look?
<https://accounts.example.com>: <alice@example.com>
@SantiagoTorres

@KiranSatyaRaj KiranSatyaRaj marked this pull request as draft July 16, 2024 02:19
@KiranSatyaRaj

KiranSatyaRaj commented Jul 16, 2024

Copy link
Copy Markdown
Author

@jkjell @colek42 can you please review this pull request?

Signed-off-by: KiranSatyaRaj <kiranjamy20021508@gmail.com>
@KiranSatyaRaj KiranSatyaRaj marked this pull request as ready for review July 16, 2024 03:11
Signed-off-by: KiranSatyaRaj <kiranjamy20021508@gmail.com>
Use Message Signature from Bundle to retrieve payload Digest

Signed-off-by: KiranSatyaRaj <kiranjamy20021508@gmail.com>
Signed-off-by: KiranSatyaRaj <kiranjamy20021508@gmail.com>
@KiranSatyaRaj KiranSatyaRaj marked this pull request as draft July 18, 2024 19:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants