You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In rekor V2, me may not be including the KindVersion in the "canonicalized body", while still having the KindVersion in the root of the response, just as in rekor V1.
This issue tracks a fix to make the parsing the KindVersion forward compatible.
For rekor V1, I think we will likely continue to use LogEntry._from_response(), while for rekor V2, we would use start using LogEntry_from_dict_rekor(), which works so far in my testing for parsing responses. (more are changes required for sending requests and verifying signatures.)
The text was updated successfully, but these errors were encountered:
Let's not close this once #1370 merges (a new issue is fine too): let's also make sure the failure on unsupported kindVersions is reasonable -- this is important in the verify case
Client support for Rekor V2: sigstore-python
Description
In rekor V2, me may not be including the KindVersion in the "canonicalized body", while still having the KindVersion in the root of the response, just as in rekor V1.
This issue tracks a fix to make the parsing the KindVersion forward compatible.
For rekor V1, I think we will likely continue to use
LogEntry._from_response()
, while for rekor V2, we would use start usingLogEntry_from_dict_rekor()
, which works so far in my testing for parsing responses. (more are changes required for sending requests and verifying signatures.)The text was updated successfully, but these errors were encountered: