awwad / uptane

Uptane, security framework for automotive updates
https://uptane.github.io/
MIT License
10 stars 42 forks source link

TUF Modification required: TAP 3 & TAP 4 implementations must support special behavior for custom target info #9

Closed awwad closed 7 years ago

awwad commented 8 years ago

Uptane expects Director and OEM repositories to provide matching metadata about target files, except for the Director's custom metadata, which comes only from the Director and should be used to indicate which ECU each target file is for.

In order to support this behavior, TUF will need to support a parameter in tuf.client.updater.target() that will optionally instruct it to return all otherwise-matching target info with non-matching custom info.

I won't go into all the details here, but I'll close this issue when the appropriate changes have been made to Uptane's fork of TUF.

awwad commented 7 years ago

The TAP-4-related portion of this has been resolved in awwad/tuf:pinning through the addition of an optional argument to tuf.client.updater.target() that instructs it to return all targetinfo for the given target from the role that was required in the validation of that target for each repository that was required for the validation of that target.

This has to be updated to work better for TUF in the general case. In particular:

awwad commented 7 years ago

Should open a TUF issue for this, perhaps, but the Uptane-related portion is resolved.