Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Implement new SimpleSigstoreSigner and update exceptions in Signer #133

Draft
wants to merge 6 commits into
base: master
Choose a base branch
from

Conversation

KiranSatyaRaj
Copy link

@KiranSatyaRaj KiranSatyaRaj commented Jul 15, 2024

This pull request adds support for KeylessSigning the payload in dsse and updates the throwable exceptions in Signer

@KiranSatyaRaj KiranSatyaRaj force-pushed the new-SimpleSigstoreSigner branch from a795f08 to 4b8c3e3 Compare July 15, 2024 18:42
@KiranSatyaRaj KiranSatyaRaj force-pushed the new-SimpleSigstoreSigner branch from 4b8c3e3 to 421c4e6 Compare July 15, 2024 18:54
@KiranSatyaRaj KiranSatyaRaj marked this pull request as ready for review July 15, 2024 18:58
Object subAltArr = certificate.getSubjectAlternativeNames().toArray()[0];
String subAltName = subAltArr.toString();
subAltName = subAltName.substring(4, subAltName.length() - 1);
this.keyId = keyId.concat(" " + subAltName);
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

can you compute the keyid such as:

<oidc provider>:<SAN> ? this way we can also know who actually provided the identity to fulcio

Copy link
Author

@KiranSatyaRaj KiranSatyaRaj Jul 15, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is this how it's supposed to look?
<https://accounts.example.com>: <[email protected]>
@SantiagoTorres

@KiranSatyaRaj KiranSatyaRaj marked this pull request as draft July 16, 2024 02:19
@KiranSatyaRaj
Copy link
Author

KiranSatyaRaj commented Jul 16, 2024

@jkjell @colek42 can you please review this pull request?

@KiranSatyaRaj KiranSatyaRaj marked this pull request as ready for review July 16, 2024 03:11
Use Message Signature from Bundle to retrieve payload Digest

Signed-off-by: KiranSatyaRaj <[email protected]>
Signed-off-by: KiranSatyaRaj <[email protected]>
@KiranSatyaRaj KiranSatyaRaj marked this pull request as draft July 18, 2024 19:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants