Skip to content

v0.3
Compare
Choose a tag to compare
@riyazdf riyazdf released this 12 May 01:09
· 1099 commits to master since this release
v0.3.0
658a25c

v0.3

  • Root rotations
  • RethinkDB support as a storage backend for Server and Signer
  • A new TUF repo builder that merges server and client validation
  • Trust Pinning: configure known good key IDs and CAs to replace TOFU.
  • Add --input, --output, and --quiet flags to notary verify command
  • Remove local certificate store. It was redundant as all certs were also stored in the cached root.json
  • Add environment variable for automating delegation key passphrase entry
  • Update formatting for delegation list output to be multiline for keys and paths
  • Update delegation behavior to not fallback to parent roles if specified role does not exist
  • Further restrict JWT token permissions to remove unnecessary actions
  • Cleanup of dead code in client side key storage logic
  • Update project to Go 1.6.1
  • Reorganize vendoring to meet Go 1.6+ standard. Still using Godeps to manage vendored packages
  • Add targets by hash, no longer necessary to have the original target data available
  • Active Key ID verification during signature verification
  • Switch all testing from assert to require, reduces noise in test runs
  • Use alpine based images for smaller downloads and faster setup times
  • Clean up out of data signatures when re-signing content
  • Set cache control headers on HTTP responses from Notary Server
  • Add sha512 support for targets
  • Move SQLite dependency to tests only so it doesn't get built into official images
  • Fixed asking for password to list private repositories
  • Enable using notary client with username/password in a scripted fashion
  • Fix static compilation of client
  • Enforce TUF version to be >= 1, previously 0 was acceptable although unused
  • json.RawMessage should always be used as *json.RawMessage due to concepts of addressability in Go and effects on encoding

Checksums

Sha256

notary-Darwin-amd64             dfca69606e920142611209e50aa14124b83ac6af54473bf0102d2ceea2355140
notary-Linux-amd64              1cb85573282dd38657dc2af86fd403ceea5cd7440ac7f418f8d898fa5a9d071a
notary-Linux-static-amd64       66e7fbfb03dc88c0b592b0492ff66b8c325a204738c4c9447239fcaeb47be635
Assets 5