specify selective disclosure and anchor policy
Some checks failed
CI / fmt, clippy, docs (push) Failing after 5s
CI / test (ubuntu-latest) (push) Failing after 5s
CI / iroh integration smoke tests (push) Failing after 5s
CodeQL / Analyze Rust (push) Failing after 4s
Security / RustSec cargo-audit (push) Failing after 5s
CI / test (macos-latest) (push) Has been cancelled
CI / test (windows-latest) (push) Has been cancelled
Some checks failed
CI / fmt, clippy, docs (push) Failing after 5s
CI / test (ubuntu-latest) (push) Failing after 5s
CI / iroh integration smoke tests (push) Failing after 5s
CodeQL / Analyze Rust (push) Failing after 4s
Security / RustSec cargo-audit (push) Failing after 5s
CI / test (macos-latest) (push) Has been cancelled
CI / test (windows-latest) (push) Has been cancelled
This commit is contained in:
parent
492a37c020
commit
76eb785ee2
11 changed files with 834 additions and 387 deletions
|
|
@ -6518,7 +6518,16 @@ pub fn handle_request(
|
|||
devices: verified.state.devices.values().filter(|device| device.active).count(),
|
||||
disclosed_profiles: verified.state.disclosed_profiles.len(),
|
||||
incomplete_profiles: verified.state.incomplete_profiles.len(),
|
||||
anchor_threshold: verified.state.anchor_policy.threshold,
|
||||
anchor_attester_threshold: verified.state.anchor_policy.attester_threshold,
|
||||
anchor_backend_threshold: verified.state.anchor_policy.backend_threshold,
|
||||
required_anchor_backends: verified
|
||||
.state
|
||||
.anchor_policy
|
||||
.backends
|
||||
.iter()
|
||||
.filter(|backend| backend.required)
|
||||
.count(),
|
||||
required_anchor_classes: verified.state.anchor_policy.required_classes.len(),
|
||||
note:
|
||||
"verified sequence-free SSHSIGCHAIN v1 authority records and disclosed profile commitments against the explicitly pinned root key"
|
||||
.to_owned(),
|
||||
|
|
@ -11090,7 +11099,7 @@ mod tests {
|
|||
.expect("unsigned init"),
|
||||
);
|
||||
|
||||
let verified = verify_keychain_sshsigchain_with_ssh(&[init.clone()], &trust)
|
||||
let verified = verify_keychain_sshsigchain_with_ssh(std::slice::from_ref(&init), &trust)
|
||||
.expect("verify real OpenSSH SSHSIG chain");
|
||||
assert_eq!(verified.records, 1);
|
||||
assert_eq!(verified.state.active_key_count(), 1);
|
||||
|
|
|
|||
Loading…
Reference in a new issue