timestamp

May 13, 2024 GO-2024-3252

  GO-2024-3252: gitsign may use incorrect Rekor entries during verification in github.com/sigstore/gitsign

Apr 2, 2024 GO-2024-3252

  GO-2024-3252: gitsign may use incorrect Rekor entries during verification in github.com/sigstore/gitsign

Apr 2, 2024 GO-2024-3252

  GO-2024-3252: gitsign may use incorrect Rekor entries during verification in github.com/sigstore/gitsign

Apr 2, 2024 GO-2024-3252

  GO-2024-3252: gitsign may use incorrect Rekor entries during verification in github.com/sigstore/gitsign

Mar 5, 2024 GO-2024-3252

  GO-2024-3252: gitsign may use incorrect Rekor entries during verification in github.com/sigstore/gitsign

Feb 5, 2024 GO-2024-3252

  GO-2024-3252: gitsign may use incorrect Rekor entries during verification in github.com/sigstore/gitsign

Nov 9, 2023 GO-2024-3252

  GO-2024-3252: gitsign may use incorrect Rekor entries during verification in github.com/sigstore/gitsign

May 22, 2023 GO-2023-2332 +1 more

  GO-2023-2332: Gitsign's Rekor public keys fetched from upstream API instead of local TUF client. in github.com/sigstore/gitsign

  GO-2024-3252: gitsign may use incorrect Rekor entries during verification in github.com/sigstore/gitsign

May 22, 2023

retracted

GO-2023-2332 +1 more

  GO-2023-2332: Gitsign's Rekor public keys fetched from upstream API instead of local TUF client. in github.com/sigstore/gitsign

  GO-2024-3252: gitsign may use incorrect Rekor entries during verification in github.com/sigstore/gitsign

Apr 10, 2023 GO-2023-2332 +1 more

  GO-2023-2332: Gitsign's Rekor public keys fetched from upstream API instead of local TUF client. in github.com/sigstore/gitsign

  GO-2024-3252: gitsign may use incorrect Rekor entries during verification in github.com/sigstore/gitsign

Jan 26, 2023 GO-2024-3252

  GO-2024-3252: gitsign may use incorrect Rekor entries during verification in github.com/sigstore/gitsign

Jan 26, 2023 GO-2024-3252

  GO-2024-3252: gitsign may use incorrect Rekor entries during verification in github.com/sigstore/gitsign

Jan 24, 2023 GO-2024-3252

  GO-2024-3252: gitsign may use incorrect Rekor entries during verification in github.com/sigstore/gitsign

Nov 30, 2022 GO-2024-3252

  GO-2024-3252: gitsign may use incorrect Rekor entries during verification in github.com/sigstore/gitsign

Nov 28, 2022 GO-2024-3252

  GO-2024-3252: gitsign may use incorrect Rekor entries during verification in github.com/sigstore/gitsign

Changes in this version

+ var DefaultHTTPClient = HTTPClient(http.DefaultClient)

+ func GenerateNonce() *big.Int

+ type Accuracy struct

+ Micros int

+ Millis int

+ Seconds int

+ func (a Accuracy) Duration() time.Duration

+ type HTTPClient interface

+ Do func(*http.Request) (*http.Response, error)

+ type Info struct

+ Accuracy Accuracy

+ Extensions []pkix.Extension

+ GenTime time.Time

+ MessageImprint MessageImprint

+ Nonce *big.Int

+ Ordering bool

+ Policy asn1.ObjectIdentifier

+ SerialNumber *big.Int

+ TSA asn1.RawValue

+ Version int

+ func ParseInfo(eci protocol.EncapsulatedContentInfo) (Info, error)

+ func (i *Info) After(t time.Time) bool

+ func (i *Info) Before(t time.Time) bool

+ type MessageImprint struct

+ HashAlgorithm pkix.AlgorithmIdentifier

+ HashedMessage []byte

+ func NewMessageImprint(hash crypto.Hash, r io.Reader) (MessageImprint, error)

+ func (mi MessageImprint) Equal(other MessageImprint) bool

+ func (mi MessageImprint) Hash() (crypto.Hash, error)

+ type PKIFreeText []asn1.RawValue

+ func (ft PKIFreeText) Append(t string) PKIFreeText

+ func (ft PKIFreeText) Strings() ([]string, error)

+ type PKIStatusInfo struct

+ FailInfo asn1.BitString

+ Status int

+ StatusString PKIFreeText

+ func (si PKIStatusInfo) Error() string

+ func (si PKIStatusInfo) GetError() error

+ type Request struct

+ CertReq bool

+ Extensions []pkix.Extension

+ MessageImprint MessageImprint

+ Nonce *big.Int

+ ReqPolicy asn1.ObjectIdentifier

+ Version int

+ func (req Request) Do(url string) (Response, error)

+ func (req Request) Matches(tsti Info) bool

+ type Response struct

+ Status PKIStatusInfo

+ TimeStampToken protocol.ContentInfo

+ func ParseResponse(ber []byte) (Response, error)

+ func (r Response) Info() (Info, error)