Add v0.2 bundle tests - Githubissues

bdehamer commented 9 months ago

Adds a handful of new bundle verification tests to the suite:

Happy path for v0.2 bundle with DSSE payload
Error case where the signing certificate was issued outside the validity window for the root CA certificate
Error case where the TLog entry is missing an inclusion proof
Error case where the integrated time of the TLog entry falls outside the validity window for the signing certificate
Error case where the canonicalized body of the TLog entry does NOT match the signed content
Error case where the (TSA-issued) signed timestamp falls outside the validity window for the signing certificate

All of these bundles were signed with a private Sigstore instance and must be verified using a custom trusted_root.json.

woodruffw commented 9 months ago

Thanks @bdehamer!

bdehamer commented 9 months ago

FYI @phillmv @steiza

woodruffw commented 9 months ago

This is sigstore/sigstore-python#821, right?

Yep, that's right. I'd like to get https://github.com/sigstore/sigstore-python/issues/814 merged in and then move on that.

sigstore / sigstore-conformance