transparencylog / tl

verify https assets with a public transparency log
https://www.transparencylog.com/
Apache License 2.0
75 stars 5 forks source link

use h1:base64(body) as the new format #6

Closed philips closed 4 years ago

philips commented 4 years ago

The new beta API endpoint uses the go.sum inspired h1:base64(body) format for the digests instead of hex encoded. Update the tool to use that.

curl https://beta-asset.transparencylog.net/lookup/github.com/mozilla/sops/releases/download/v3.6.0/sops-v3.6.0.linux
1
h1:KAyjnSHmdA36UzKxLvQWmKzwFOXyd8XClsYeg7TMrSE=

tlog database tree
3
DskKVTdOH1UvyZOcMehIEuQKkg7/B1l9i56NH2NPzTM=

— log OAmnXqXM3k+oxEaX5l9Q2DsktEkJz8MQ80zuLXrOyieeRN4T66/u7Z/8AvliaX5Rl5lOyRxmuKSdGBKM0a+0X+yw0A0=
philips commented 4 years ago

done via https://github.com/transparencylog/btget/commit/918a8ce0cb4b957722ed105a9f4fb8471a2035bb