Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update securesystemslib to 0.12.0 #934

Merged
merged 3 commits into from
Oct 14, 2019

Conversation

lukpueh
Copy link
Member

@lukpueh lukpueh commented Oct 14, 2019

Fixes issue #:
Closes #28.
Supersedes #917 and #918.

Description of the changes being introduced by the pull request:

Updates pinned version of securesystemslib dependency in *requirements.txt and setup.py to latest 0.12.0.

The update requires a few adjustments due to breaking changes in securesystemslib 0.12.0, which were kindly provided by @joshuagl in #917 and #918:

  • explicitly encode data we pass to securesystemslib.keys.create_signature and securesystemslib.keys.verify_signature
  • remove use of securesystemslib.util.TempFile in favour of tempfile.TemporaryFile from the Python standard library

These changes are incorporated with this PR, fixing minor merge conflicts due to #885.

Please verify and check that the pull request fulfills the following
requirements
:

  • The code follows the Code Style Guidelines
  • Tests have been added for the bug fix or new feature
  • Docs have been added for the bug fix or new feature

lukpueh and others added 3 commits October 14, 2019 12:26
Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu>
securesystemslib PR theupdateframework#162 removed implicit encoding of data to bytes
in securesystemslib.keys.[create_signature|verify_signature]

Update to encode data where required.

Signed-off-by: Joshua Lock <jlock@vmware.com>
The class has been removed from securesystemslib as its desirable
features are no longer required and its behavioural inconsistencies
with a standard Python file object are confusing. Therefore remove
uses of the class from TUF.

Signed-off-by: Joshua Lock <jlock@vmware.com>
Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu>
@lukpueh
Copy link
Member Author

lukpueh commented Oct 14, 2019

I'm merging this PR despite failing AppVeyor build and missing review, because:

@lukpueh lukpueh merged commit 536fed7 into theupdateframework:develop Oct 14, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

More explicit interposition with urllib and urllib2
2 participants