theupdateframework / theupdateframework/python-tuf

Support ASN.1 metadata

Open
#1,081 4 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

enhancement
Dominant language
Python
Stars
1.7k
Forks
304
Avg merge
1d 2h
Merged PRs (30d)
17

Description

(NOTE: this issue copied from docs/ROADMAP.md)

Description of issue or feature request:

We currently support only a JSON-compatible metadata format.

Current behavior:

Only JSON-compatible metadata is supported

Expected behavior:

ASN.1 metadata files are supported including decoding, encoding, signing over, verifying signatures over

It may be worth considering making the metadata format abstract enough that integrators could easily implement their own metadata format, in a similar fashion to the StorageBackendInterface support.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reviewing the copied entry in docs/ROADMAP.md and the issue's current JSON-compatible metadata behavior. Define how ASN.1 metadata should be decoded, encoded, signed, and verified, and determine whether an abstract metadata interface is needed. Done means ASN.1 metadata is supported across all four operations with clear integration behavior.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.