This PR modifies the TrustedMaterial interface with interface types for CertificateAuthority and TimestampingAuthority. This decouples the original CertificateAuthority struct from the verifier and allows clients to have more control over the verification of certificates and timestamps.
Additionally, this PR modifies the verifier to output the chains of certificates that were used to verify the certificate, which has the added benefit of improving performance of the SCT verifier by only attempting SCT verification on the chain that was used to verify the certificate.
This is a breaking change to the TrustedMaterial interface, so clients that directly modify TrustedMaterial must be updated to use the new interface types.
This PR modifies the
TrustedMaterialinterface with interface types forCertificateAuthorityandTimestampingAuthority. This decouples the originalCertificateAuthoritystruct from the verifier and allows clients to have more control over the verification of certificates and timestamps.Additionally, this PR modifies the verifier to output the chains of certificates that were used to verify the certificate, which has the added benefit of improving performance of the SCT verifier by only attempting SCT verification on the chain that was used to verify the certificate.
This is a breaking change to the
TrustedMaterialinterface, so clients that directly modifyTrustedMaterialmust be updated to use the new interface types.Fixes https://github.com/sigstore/sigstore-go/issues/293
Summary
Release Note
Documentation