8 Commits

Author	SHA1	Message	Date
Colin Walters	b6040143e5	Only enable "dummy" signature type with opt-in env variable ... I don't want to even have to think about people using this in production.	2020-04-14 22:18:13 +00:00
Denis Pynkin	e474033ea9	tests/sign: use library functions for ed25519 keys ... Switch to library functions usage. Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>	2020-03-25 15:23:54 +03:00
Denis Pynkin	7e71f87ebc	tests/sign: check system-wide config and revoked keys ... Extend the ed25519 tests with checking the system-wide directory keys loading code(with the help of redefinition). Added test of ed25519 revoking keys mechanism. Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>	2020-03-25 15:23:54 +03:00
Denis Pynkin	ea291a0605	builtin/sign: allow to use multiple public keys for verification ... `ostree sign` is able to use several public keys provided via arguments and via file with keys. Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>	2020-03-25 15:23:54 +03:00
Denis Pynkin	36e4667973	builtin/sign: allow to sign with keys from secret file ... Read keys from secret file provided by `--keys-file=` option. Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>	2020-03-25 15:23:54 +03:00
Denis Pynkin	0b55db9b2f	tests/sign: check public keys load from file ... Test ed25519 public keys load from file and verify signed commit against that file. Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>	2020-03-25 15:23:54 +03:00
Denis Pynkin	2303202c86	sign: API changes for public keys and CLI keys format ... API changes: - added function `ostree_sign_add_pk()` for multiple public keys using. - `ostree_sign_set_pk()` now substitutes all previously added keys. - added function `ostree_sign_load_pk()` allowed to load keys from file. - `ostree_sign_ed25519_load_pk()` able to load the raw keys list from file. - use base64 encoded public and private ed25519 keys for CLI and keys file. Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>	2020-03-25 15:23:54 +03:00
Denis Pynkin	9e8f0f4ca0	tests: add test for commits sign/verification ... Add tests checking: - sign mechanism is in working state - module 'dummy' is able to sign/verify commit - module 'ed25519' is able to sign/verify commit - both modules could be used for the same commit - 'ostree sign' builtin works with commits - 'ostree commit' builtin able to sign commits Signed-off-by: Denis Pynkin <denis.pynkin@collabora.com>	2020-03-25 15:23:54 +03:00