search

sigstore / sigstore-python

A Sigstore client written in Python
https://pypi.org/p/sigstore
Other
232 stars 49 forks source link

Add CertificateAuthority #1200

Closed DarkaMaul closed 3 weeks ago

DarkaMaul commented 3 weeks ago

Summary

Following up on #1182, this PR adds a CertificateAuthority class to the trust and uses it to retrieve both Fulcio certificates and Timestamping Authorities.

DarkaMaul commented 3 weeks ago

Thanks @DarkaMaul! This is a good start, but I think it can be simplified quite a bit -- we don't need to be so stringent about classifying the different members of the CertificateAuthority message, since they all end up in a trust "pool" anyways for chain building purposes 🙂

I've updated the code to remove the distinction between all the different certificates 👍

woodruffw commented 3 weeks ago

/gcbrun