specify selective disclosure and anchor policy
Some checks failed
CI / fmt, clippy, docs (push) Failing after 5s
CI / test (ubuntu-latest) (push) Failing after 5s
CI / iroh integration smoke tests (push) Failing after 5s
CodeQL / Analyze Rust (push) Failing after 4s
Security / RustSec cargo-audit (push) Failing after 5s
CI / test (macos-latest) (push) Has been cancelled
CI / test (windows-latest) (push) Has been cancelled

This commit is contained in:
Eric Wendland 2026-07-18 22:05:57 +02:00
commit 76eb785ee2
11 changed files with 834 additions and 387 deletions

View file

@ -6518,7 +6518,16 @@ pub fn handle_request(
devices: verified.state.devices.values().filter(|device| device.active).count(),
disclosed_profiles: verified.state.disclosed_profiles.len(),
incomplete_profiles: verified.state.incomplete_profiles.len(),
anchor_threshold: verified.state.anchor_policy.threshold,
anchor_attester_threshold: verified.state.anchor_policy.attester_threshold,
anchor_backend_threshold: verified.state.anchor_policy.backend_threshold,
required_anchor_backends: verified
.state
.anchor_policy
.backends
.iter()
.filter(|backend| backend.required)
.count(),
required_anchor_classes: verified.state.anchor_policy.required_classes.len(),
note:
"verified sequence-free SSHSIGCHAIN v1 authority records and disclosed profile commitments against the explicitly pinned root key"
.to_owned(),
@ -11090,7 +11099,7 @@ mod tests {
.expect("unsigned init"),
);
let verified = verify_keychain_sshsigchain_with_ssh(&[init.clone()], &trust)
let verified = verify_keychain_sshsigchain_with_ssh(std::slice::from_ref(&init), &trust)
.expect("verify real OpenSSH SSHSIG chain");
assert_eq!(verified.records, 1);
assert_eq!(verified.state.active_key_count(), 1);