search

monzum / tuf-legacy

Incorporate TUF into legacy applications.
MIT License
1 stars 0 forks source link

Integrate tuf_api_translator.py with tuf #1

Open monzum opened 11 years ago

monzum commented 11 years ago

The TUF client is not ready yet, so we are unable to integrate tuf_api_translator.py with the TUF client yet. This is a high priority and needs to be done ASAP!

The Integration has been done. However, the perform_an_update function in tuf_client_api is quite buggy and is delaying the completion of the project

monzum commented 11 years ago

This should be done now. Jerry could you confirm this?

bataille16 commented 11 years ago

Yes.. TUFTranslator is integrated with tuf_client_api to perform the security checks for TUF software updates. Further testing needs to be done for perform_an_update function of the tuf_client_api

bataille16 commented 11 years ago

The function perform_an_update in tuf_client_api module has some bugs that lead to an uncontrollable amount of network calls. Although the file is updated and saved in tuf -related directories (namely legacy-client/client/targets), we cannot transfer the file contents to the legacy application ( to maintain transparency) because of the many network calls. Konstantin should take a look at this issue as well since he designed the module

akonst commented 11 years ago

Interesting. Do you have time to meet today, so that we can go over the issue?

On Dec 4, 2012, at 1:08 AM, bataille16 wrote:

The function perform_an_update in tuf_client_api module has some bugs that lead to an uncontrollable amount of network calls. Although the file is updated and saved in tuf -related directories (namely legacy-client/client/targets), we cannot transfer the file contents to the legacy application ( to maintain transparency) because of the many network calls. Konstantin should take a look at this issue as well since he designed the module

— Reply to this email directly or view it on GitHub.

bataille16 commented 11 years ago

We got a fix on this bug and now updates through TUF are performed properly. We are doing some performance (how much slower are updates with TUF) and security testing (Howe many of the attacks mentioned in the TUF website are minimized in our platform?).