vcswatch reports that
this package seems to have new commits in its VCS but has
not yet updated debian/changelog. You should consider updating
the Debian changelog and uploading this new version into the archive.
Here are the relevant commit logs:
commit 8e0363239eb0659eef677923d7e4f3defaa0433d
Merge: a7308f0 15028a4
Author: lukpueh <lukas.puehringer@nyu.edu>
Date: Thu Aug 6 13:58:21 2020 +0200
Merge pull request #264 from lukpueh/fix-gpg-dsa-test
Change DSA test key format + adopt test code
commit 15028a456a50f7133a78f1be29e985066cdc5aca
Author: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
Date: Mon Jul 27 12:32:05 2020 +0000
Bump cryptography from 2.9.2 to 3.0
Bumps [cryptography](https://github.com/pyca/cryptography) from 2.9.2 to 3.0.
- [Release notes](https://github.com/pyca/cryptography/releases)
- [Changelog](https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/2.9.2...3.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
commit 492f7e5796ef011e35d77a0e4db6ffe78f8ec854
Author: Lukas Puehringer <lukas.puehringer@nyu.edu>
Date: Wed Aug 5 13:34:39 2020 +0200
Change DSA test key format + adopt test code
A recent pyca/cryptography update dropped support for DSA ssh
public keys with bit size other than 1024, which broke our tests.
See https://github.com/pyca/cryptography/issues/5373
This commit changes the test key format to X.509 SubjectPublicKeyInfo PEM
and updates the corresponding test code.
```
ssh-keygen -f C242A830DAAF1C2BEF604A9EF033A3A3E267B3B1.ssh \
-e -m pkcs8 > C242A830DAAF1C2BEF604A9EF033A3A3E267B3B1.pem
```
Note: ssh-keygen mistakingly calls the format pkcs8 although it
is X.509 SubjectPublicKeyInfo PEM.
commit a7308f09ee05932b6e672da0ea2d650524ece43f
Merge: 5451477 247cf9b
Author: Joshua Lock <jlock@vmware.com>
Date: Tue Aug 4 12:01:26 2020 +0100
Merge pull request #260 from MVrachev/fix-empty-directory
Fix directory being empty in ensure_parent_dir
commit 5451477801c981a651bb6aff5d33195203cedf54
Merge: bdcd1b4 f92f1fd
Author: Joshua Lock <jlock@vmware.com>
Date: Mon Jul 27 22:09:06 2020 +0100
Merge pull request #259 from MVrachev/split-get-file-details
Split up util.get_file_details()
commit bdcd1b40e27299fe0b121cde143e85fe41eeeb98
Merge: 6f88f63 71350a0
Author: Joshua Lock <jlock@vmware.com>
Date: Mon Jul 27 13:30:54 2020 +0100
Merge pull request #263 from secure-systems-lab/dependabot/pip/cffi-1.14.1
Bump cffi from 1.14.0 to 1.14.1
commit 71350a0d92d0ea71d1af0ab1f671f854f6997993
Author: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
Date: Mon Jul 27 10:31:24 2020 +0000
Bump cffi from 1.14.0 to 1.14.1
Bumps [cffi](https://bitbucket.org/cffi/release-doc) from 1.14.0 to 1.14.1.
- [Commits](https://bitbucket.org/cffi/release-doc/commits)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
commit f92f1fd7ff182f546d4cc4eda594844069ca5cb6
Author: Martin Vrachev <mvrachev@vmware.com>
Date: Fri Jul 17 14:07:15 2020 +0300
Split up util.get_file_details()
The util.get_file_details() function returns the length and hashes
of the specified file. This makes a lot of sense for generating
information about TUF targets, where the length and hashes of
each target are required, but is potentially too costly function
when generating information about TUF metadata files for the
snapshot role, where lengths and hashes are optional.
Snapshot metadata may only want hashes, or only want lengths,
and we don't want to force an adopter to implement their own subset
of the functionality in get_file_details().
Signed-off-by: Martin Vrachev <mvrachev@vmware.com>
commit 247cf9b353f8568dbb2c31942253ae2d6904a46c
Author: Martin Vrachev <mvrachev@vmware.com>
Date: Fri Jul 17 14:30:46 2020 +0300
Fix directory being empty in ensure_parent_dir
If you pass filename like "a.txt" to
securesyslib.util.ensure_parent_dir function, then the directory
of the file will be '' and when calling
securesyslib.storage.create_folder() with '' argument
an exception will be thrown because of the latest changes
in securesyslib.
Signed-off-by: Martin Vrachev <mvrachev@vmware.com>
commit 6f88f63d1b4ed108c2abbc966b265d3dce42c8ea
Merge: 22a3c4e adf5d39
Author: Joshua Lock <jlock@vmware.com>
Date: Fri Jul 10 12:18:39 2020 +0100
Merge pull request #252 from MVrachev/fix-failing-tuf-tests
Throw exception on empty filepath in create_folder
commit adf5d39933c4900d9a7e896ca5bc517291503e48
Author: Martin Vrachev <mvrachev@vmware.com>
Date: Wed Jul 8 15:19:32 2020 +0300
Move the empty path exception check
The check if an exception is thrown when calling the
securesystemslib.storage.FilesystemBackend.create_folder()
function with empty string is better suited to be in the
test_exceptions function in the tests/test_storage.py
where the rest exception checks are.
Signed-off-by: Martin Vrachev <mvrachev@vmware.com>
commit 7048013585dea1a30173eae9f293af286c034c63
Author: Martin Vrachev <mvrachev@vmware.com>
Date: Tue Jul 7 13:17:23 2020 +0300
Throw exception on empty filepath in create_folder
Now, when securesystemslib.storage.FilesystemBackend.create_folder()
is called with an empty string it returns immediately,
without exception, but if we call os.mkdir() with an empty string
we receive this exception:
"[Errno 2] No such file or directory: ''
If we want to mimic the os.mkdir() function when using the
securesystemslib.storage.FilesystemBackend.create_folder()
the function we need to throw our respective exception
securesystemslib.exceptions.StorageError with an appropriate message
when an empty path is given.
Signed-off-by: Martin Vrachev <mvrachev@vmware.com>
commit 22a3c4e252c60e911355feaa204f70c2c191aae2
Merge: 7531747 327c946
Author: Joshua Lock <jlock@vmware.com>
Date: Thu Jul 2 16:37:43 2020 +0100
Merge pull request #249 from lukpueh/teardown-test-tmpdir
Properly tear down storage tests
commit 327c946988ba4a1cc1d5b0a3c426b4faa6a070dc
Author: Lukas Puehringer <lukas.puehringer@nyu.edu>
Date: Thu Jul 2 16:07:15 2020 +0200
Properly tear down storage tests
Update TestStorage.tearDown method to remove a temporary directory
that is created in TestStorage.setUp.
commit 7531747a74914ac0417045db06d242abbc988125
Merge: df57705 5908bfb
Author: Joshua Lock <jlock@vmware.com>
Date: Thu Jun 25 12:11:52 2020 +0100
Merge pull request #227 from MVrachev/refactor-format-metadata-to-key
Refactor format_metadata_to_key
commit 5908bfbc2d8113c2f50d7955a339b8c3d9f41b54
Author: Martin Vrachev <mvrachev@vmware.com>
Date: Mon May 18 13:08:19 2020 +0300
Add a test case for non default hash algorithms
Signed-off-by: Martin Vrachev <mvrachev@vmware.com>
commit b7a15fdee7dee899c098b01fe64d604635b2b132
Author: Martin Vrachev <mvrachev@vmware.com>
Date: Wed Apr 1 17:28:37 2020 +0300
Refactor format_metadata_to_key
Refactor format_metadata_to_key so that it won't depend
on settings.HASH_ALGORITHMS.
There are couple of code snippets in tuf where in order to provide
a custom list of hash algorithms, tuf is temporary changing
settings.HASH_ALGORITHMS and then returning it to its formal state.
This could lead to problems in future and one should
be able to control hash algorithms used for generating keyids in f
ormat_metadata_to_key() without having to change
package level settings in securesystemslib.settings.
Closes: https://github.com/secure-systems-lab/securesystemslib/issues/220
Signed-off-by: Martin Vrachev <mvrachev@vmware.com>
commit df57705c25e2b4089cc8516c29d6ed510ffa2046
Merge: 9b3a78e a3d0f58
Author: lukpueh <lukas.puehringer@nyu.edu>
Date: Mon Jun 22 18:17:53 2020 +0200
Merge pull request #244 from trailofbits/ww/any-nonempty-string
securesystemslib: Add AnyNonemptyString, use for PATH_SCHEMA
commit a3d0f5854ed503fd3160bb43868243fa33f05f5e
Author: William Woodruff <william@trailofbits.com>
Date: Fri Jun 19 13:23:00 2020 -0400
securesystemslib/schema: Spacing
commit 26f3d3e5c5c17f860a8881fb1e04c3841632205c
Author: William Woodruff <william@trailofbits.com>
Date: Fri Jun 19 11:25:52 2020 -0400
securesystemslib/schema: Avoid use of super()
Makes Python 2.7 unhappy without "new-style" classes.
commit 60cd0829be0e5a69c6a61707b48ed8e48e837714
Author: William Woodruff <william@trailofbits.com>
Date: Fri Jun 19 11:16:54 2020 -0400
test_schema: Add test_AnyNonemptyString
commit b3b5159c0bb2e62814144e89bd3842bf6c34d660
Author: William Woodruff <william@trailofbits.com>
Date: Fri Jun 19 11:11:26 2020 -0400
securesystemslib/schema: Fix missing argument
commit d24fc41be2a8e3c9f2b2af8be2863571ee529f1f
Author: William Woodruff <william@trailofbits.com>
Date: Fri Jun 19 10:45:24 2020 -0400
securesystemslib/util: PATHS_SCHEMA -> NAMES_SCHEMA
commit 19877378850cf1a3c55d755d182bb3c6fb8bce25
Author: William Woodruff <william@trailofbits.com>
Date: Fri Jun 19 10:43:34 2020 -0400
securesystemslib/schema: AnyNonemptyString inherits from AnyString
commit e84c99dbb69548af5907e5668d617e6856df2cd9
Author: William Woodruff <william@trailofbits.com>
Date: Thu Jun 18 16:07:53 2020 -0400
securesystemslib/schema: Spacing
commit 790671b55db914b7e8a2e01165cdb0ed1a60d50c
Author: William Woodruff <william@trailofbits.com>
Date: Thu Jun 18 16:02:50 2020 -0400
securesystemslib: Add AnyNonemptyString, use for PATH_SCHEMA
commit 9b3a78e998412c39418efb29f411591b20cdd236
Merge: 2c578ce 7d07b1b
Author: lukpueh <lukas.puehringer@nyu.edu>
Date: Mon Jun 1 12:03:07 2020 +0200
Merge pull request #238 from secure-systems-lab/dependabot/pip/pynacl-1.4.0
Bump pynacl from 1.3.0 to 1.4.0
commit 2c578cebbf3df04ac45dc37ec79ab9a9fd8a2e17
Merge: c7a473c 23b661e
Author: lukpueh <lukas.puehringer@nyu.edu>
Date: Fri May 29 10:36:21 2020 +0200
Merge pull request #240 from trailofbits/ww/storage-invariant-docs
securesystemslib/storage: Document some storage invariants
commit 23b661e7dd52928931ba7234f00c36d9c0d65e2f
Author: William Woodruff <william@trailofbits.com>
Date: Thu May 28 14:58:16 2020 -0400
securesystemslib/storage: Document some storage invariants
commit 7d07b1b41b0b58f070c93d290238195db9e9da77
Author: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
Date: Wed May 27 11:37:30 2020 +0000
Bump pynacl from 1.3.0 to 1.4.0
Bumps [pynacl](https://github.com/pyca/pynacl) from 1.3.0 to 1.4.0.
- [Release notes](https://github.com/pyca/pynacl/releases)
- [Changelog](https://github.com/pyca/pynacl/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/pyca/pynacl/compare/1.3.0...1.4.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
commit c7a473cc486c3d403f40948751338179df31bd02
Merge: 09cf6d4 cef7264
Author: lukpueh <lukas.puehringer@nyu.edu>
Date: Wed May 27 13:36:08 2020 +0200
Merge pull request #237 from secure-systems-lab/dependabot/pip/six-1.15.0
Bump six from 1.14.0 to 1.15.0
commit cef7264af163bf9291c9f16766a44f5ceae76b0c
Author: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
Date: Fri May 22 10:37:43 2020 +0000
Bump six from 1.14.0 to 1.15.0
Bumps [six](https://github.com/benjaminp/six) from 1.14.0 to 1.15.0.
- [Release notes](https://github.com/benjaminp/six/releases)
- [Changelog](https://github.com/benjaminp/six/blob/master/CHANGES)
- [Commits](https://github.com/benjaminp/six/compare/1.14.0...1.15.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
![[bug history graph]](https://qa.debian.org/data/bts/graphs/p/python-securesystemslib.png){kind=link}