-
After installing i915 on guest VM Ubuntu 22.04. Received a message.
> root@user-Standard-PC-Q35-ICH9-2009:~/i915-sriov-dkms# dmesg | grep i915
> [ 2.948494] i915: loading out-of-tree module t…
-
There was a previous issue opened (#1573 ) asking about a manual Rekor upload of an artifact signed with a cosign public key. However, the proposed solution (using the `--pki-format x509` flag) did no…
-
While rpm -V and -q from rpmdb do verify existing signatures on rpmdb walk, this is largely useless as an attacker with sufficient permissions can modify the signature tags in rpmdb headers to make a …
-
Hi all,
just as a warning, the ansible-sign package started failing its build recently, but only on openSUSE Tumbleweed. The build for openSUSE Leap / SLES is still fine, so this looks like some in…
-
The [Signed-Releases](https://github.com/ossf/scorecard/blob/main/checks/signed_releases.go) check currently looks for known signature files, but does not verify them.
We should try to verify them wi…
-
Gradle 8.0 introduced a new build failing enforcement for requiring 160-bit signature fingerprints.
### Expected Behavior
The warning prints out *all* bad fingerprints and tells me what their lo…
-
## RPC endpoints for light clients
A light client protocol can verify the correctness of any data it receives about the Aptos block chain without making trust assumptions on the provider of that da…
-
Here is my code:
```
const fs = require('fs');
const forge = require('node-forge');
let certificate = forge.pki.certificateFromPem(fs.readFileSync("XXX.crt")),
privateKey = forge.pki.priv…
-
## Use Cases
- Verification of SII AECs.
-----
Ref: https://github.com/XML-Security/signxml/issues/59
-
There are two pitfalls in the ParseResponse method of "x/cryto/ocsp". The first being that if you forget to pass in an issuer then the response will be parsed but signature verification will not be pe…