fix connection to rekor

lib/rubygems/sigstore/http_client.rb

@@ -18,7 +18,8 @@
 class HttpClient
     def initialize; end
     def get_cert(id_token, proof, pub_key, fulcio_host)
-        connection = Faraday.new do |request|
+        # rekor uses a self signed certificate which failes the ssl check
+        connection = Faraday.new(ssl: { verify: false }) do |request|
             request.authorization :Bearer, id_token.to_s
             request.url_prefix = fulcio_host
             request.request :json
@@ -29,15 +30,16 @@ def get_cert(id_token, proof, pub_key, fulcio_host)
         return fulcio_response.body
     end
     def submit_rekor(pub_key, data_digest, data_signature, certPEM, data_raw, rekor_host)
-        connection = Faraday.new do |request|
+        # rekor uses a self signed certificate which failes the ssl check
+        connection = Faraday.new(ssl: { verify: false }) do |request|
             # request.authorization :Bearer, id_token.to_s
             request.url_prefix = rekor_host
             request.request :json
             request.response :json, content_type: /json/
             request.adapter :net_http
         end
 
-        rekor_response = connection.post("/api/v1/log/entries", 
+        rekor_response = connection.post("/api/v1/log/entries",
             {
                 kind: "rekord",
                 apiVersion: "0.0.1",

settings.yml

@@ -1,5 +1,5 @@
 fulcio_host: "https://fulcio.sigstore.dev"
-rekor_host: "https://api.rekor.dev"
+rekor_host: "https://rekor.sigstore.dev"
 oidc_issuer: "https://oauth2.sigstore.dev/auth"
 oidc_client: "sigstore"
 oidc_secret: ""