sigstore / root-signing

TUF repository for Sigstore trust root

Apache License 2.0

80 stars 77 forks source link

awslabs/tough is incompatible with new root-signing #1167

Closed jku closed 3 months ago

jku commented 3 months ago

1164 starts using "ecdsa" as the keytype as the specification now suggests.

This seems to break awslabs/tough: https://github.com/awslabs/tough/issues/754 Failed to load repository: Failed to parse root metadata: Invalid SubjectPublicKeyInfo document at line 18 column 4

@kommendorkapten plans to disable the tough test for now: let's re-enable when possible

haydentherapper commented 3 months ago

This is now done.