-
Notifications
You must be signed in to change notification settings - Fork 13
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Implement new SimpleSigstoreSigner and update exceptions in Signer #133
base: master
Are you sure you want to change the base?
Implement new SimpleSigstoreSigner and update exceptions in Signer #133
Conversation
a795f08
to
4b8c3e3
Compare
Signed-off-by: KiranSatyaRaj <[email protected]>
4b8c3e3
to
421c4e6
Compare
Object subAltArr = certificate.getSubjectAlternativeNames().toArray()[0]; | ||
String subAltName = subAltArr.toString(); | ||
subAltName = subAltName.substring(4, subAltName.length() - 1); | ||
this.keyId = keyId.concat(" " + subAltName); |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
can you compute the keyid such as:
<oidc provider>:<SAN>
? this way we can also know who actually provided the identity to fulcio
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Is this how it's supposed to look?
<https://accounts.example.com>: <[email protected]>
@SantiagoTorres
Signed-off-by: KiranSatyaRaj <[email protected]>
Signed-off-by: KiranSatyaRaj <[email protected]>
Use Message Signature from Bundle to retrieve payload Digest Signed-off-by: KiranSatyaRaj <[email protected]>
Signed-off-by: KiranSatyaRaj <[email protected]>
This pull request adds support for KeylessSigning the payload in dsse and updates the throwable exceptions in Signer