GO-2022-1004: Improper handling of keys in github.com/theupdateframework/go-tuf

The highest tagged major version is v2.

verify

package

v0.1.1 Latest Latest Go to latest Published: Mar 9, 2022 License: BSD-3-Clause Imports: 9 Imported by: 5

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/theupdateframework/go-tuf

Links

Open Source Insights

Documentation ¶

Index ¶

Variables
type DB
- func NewDB() *DB
- func (db *DB) AddKey(id string, k *data.PublicKey) error
- func (db *DB) AddRole(name string, r *data.Role) error
- func (db *DB) GetRole(name string) *Role
- func (db *DB) GetVerifier(id string) (keys.Verifier, error)
- func (db *DB) Unmarshal(b []byte, v interface{}, role string, minVersion int) error
- func (db *DB) UnmarshalIgnoreExpired(b []byte, v interface{}, role string, minVersion int) error
- func (db *DB) UnmarshalTrusted(b []byte, v interface{}, role string) error
- func (db *DB) Verify(s *data.Signed, role string, minVersion int) error
- func (db *DB) VerifyIgnoreExpiredCheck(s *data.Signed, role string, minVersion int) error
- func (db *DB) VerifySignatures(s *data.Signed, role string) error
type DelegationsVerifier
- func NewDelegationsVerifier(d *data.Delegations) (DelegationsVerifier, error)
- func (d *DelegationsVerifier) Unmarshal(b []byte, v interface{}, role string, minVersion int) error
type ErrExpired
- func (e ErrExpired) Error() string
type ErrLowVersion
- func (e ErrLowVersion) Error() string
type ErrRoleThreshold
- func (e ErrRoleThreshold) Error() string
type ErrUnknownRole
- func (e ErrUnknownRole) Error() string
type ErrWrongID
- func (ErrWrongID) Error() string
type ErrWrongVersion
- func (e ErrWrongVersion) Error() string
type Role
- func (r *Role) ValidKey(id string) bool

Constants ¶

This section is empty.

Variables ¶

View Source

var (
	ErrMissingKey           = errors.New("tuf: missing key")
	ErrNoSignatures         = errors.New("tuf: data has no signatures")
	ErrInvalid              = errors.New("tuf: signature verification failed")
	ErrWrongMethod          = errors.New("tuf: invalid signature type")
	ErrWrongMetaType        = errors.New("tuf: meta file has wrong type")
	ErrExists               = errors.New("tuf: key already in db")
	ErrInvalidKey           = errors.New("tuf: invalid key")
	ErrInvalidRole          = errors.New("tuf: invalid role")
	ErrInvalidDelegatedRole = errors.New("tuf: invalid delegated role")
	ErrInvalidKeyID         = errors.New("tuf: invalid key id")
	ErrInvalidThreshold     = errors.New("tuf: invalid role threshold")
)

View Source

var IsExpired = func(t time.Time) bool {
	return time.Until(t) <= 0
}

Functions ¶

This section is empty.

Types ¶

type DB ¶

type DB struct {
	// contains filtered or unexported fields
}

func NewDB ¶

func NewDB() *DB

func (*DB) AddKey ¶

func (db *DB) AddKey(id string, k *data.PublicKey) error

func (*DB) AddRole ¶

func (db *DB) AddRole(name string, r *data.Role) error

func (*DB) GetRole ¶

func (db *DB) GetRole(name string) *Role

func (*DB) GetVerifier ¶

func (db *DB) GetVerifier(id string) (keys.Verifier, error)

func (*DB) Unmarshal ¶

func (db *DB) Unmarshal(b []byte, v interface{}, role string, minVersion int) error

func (*DB) UnmarshalIgnoreExpired ¶

func (db *DB) UnmarshalIgnoreExpired(b []byte, v interface{}, role string, minVersion int) error

UnmarshalExpired is exactly like Unmarshal except ignores expired timestamp error.

func (*DB) UnmarshalTrusted ¶

func (db *DB) UnmarshalTrusted(b []byte, v interface{}, role string) error

func (*DB) Verify ¶

func (db *DB) Verify(s *data.Signed, role string, minVersion int) error

func (*DB) VerifyIgnoreExpiredCheck ¶

func (db *DB) VerifyIgnoreExpiredCheck(s *data.Signed, role string, minVersion int) error

func (*DB) VerifySignatures ¶

func (db *DB) VerifySignatures(s *data.Signed, role string) error

type DelegationsVerifier ¶

type DelegationsVerifier struct {
	DB *DB
}

func NewDelegationsVerifier ¶

func NewDelegationsVerifier(d *data.Delegations) (DelegationsVerifier, error)

NewDelegationsVerifier returns a DelegationsVerifier that verifies delegations of a given Targets. It reuses the DB struct to leverage verified keys, roles unmarshals.

func (*DelegationsVerifier) Unmarshal ¶

func (d *DelegationsVerifier) Unmarshal(b []byte, v interface{}, role string, minVersion int) error

type ErrExpired ¶

type ErrExpired struct {
	Expired time.Time
}

func (ErrExpired) Error ¶

func (e ErrExpired) Error() string

type ErrLowVersion ¶

type ErrLowVersion struct {
	Actual  int
	Current int
}

func (ErrLowVersion) Error ¶

func (e ErrLowVersion) Error() string

type ErrRoleThreshold ¶

type ErrRoleThreshold struct {
	Expected int
	Actual   int
}

func (ErrRoleThreshold) Error ¶

func (e ErrRoleThreshold) Error() string

type ErrUnknownRole ¶

type ErrUnknownRole struct {
	Role string
}

func (ErrUnknownRole) Error ¶

func (e ErrUnknownRole) Error() string

type ErrWrongID ¶

type ErrWrongID struct{}

func (ErrWrongID) Error ¶

func (ErrWrongID) Error() string

type ErrWrongVersion ¶

type ErrWrongVersion struct {
	Given    int
	Expected int
}

func (ErrWrongVersion) Error ¶

func (e ErrWrongVersion) Error() string

type Role ¶

type Role struct {
	KeyIDs    map[string]struct{}
	Threshold int
}

func (*Role) ValidKey ¶

func (r *Role) ValidKey(id string) bool

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL