Skip to content

Commit 67db2a3

Browse files
h4l0genh4l0gen
committed
adding raw data directly to page
Signed-off-by: h4l0gen <[email protected]>
1 parent f33ec9d commit 67db2a3

File tree

1 file changed

+318
-7
lines changed

1 file changed

+318
-7
lines changed

‎content/metadata.md

+318-7
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,117 @@ Specifies the other top-level roles. When specifying these roles, the trusted
4040
keys for each are listed, along with the minimum number of those keys required
4141
to sign the role's metadata. We call this number the signature threshold.
4242

43-
See [example](https://raw.githubusercontent.com/theupdateframework/tuf/develop/tests/repository_data/repository/metadata/root.json) of Root metadata.
43+
See an **example**
44+
45+
```
46+
{
47+
"signatures": [
48+
{
49+
"keyid": "4e777de0d275f9d28588dd9a1606cc748e548f9e22b6795b7cb3f63f98035fcb",
50+
"sig":
51+
"a337d6375fedd2eabfcd6c2ef6c8a9c3bb85dc5a857715f6a6bd41123e7670c4972d8548bcd
52+
7248154f3d864bf25f1823af59d74c459f41ea09a02db057ca1245612ebbdb97e782c501dc3e
53+
094f7fa8aa1402b03c6ed0635f565e2a26f9f543a89237e15a2faf0c267e2b34c3c38f2a43a2
54+
8ddcdaf8308a12ead8c6dc47d1b762de313e9ddda8cc5bc25aea1b69d0e5b9199ca02f5dda48
55+
c3bff615fd12a7136d00634b9abc6e75c3256106c4d6f12e6c43f6195071355b2857bbe377ce
56+
028619b58837696b805040ce144b393d50a472531f430fadfb68d3081b6a8b5e49337e328c9a
57+
0a3f11e80b0bc8eb2dc6e78d1451dd857e6e6e6363c3fd14c590aa95e083c9bfc77724d78af8
58+
6eb7a7ef635eeddaa353030c79f66b3ba9ea11fab456cfe896a826fdfb50a43cd444f762821a
59+
ada9bcd7b022c0ee85b8768f960343d5a1d3d76374cc0ac9e12a500de0bf5d48569e5398cada
60+
dadab045931c398e3bcb6cec88af2437ba91959f956079cbed159fed3938016e6c3b5e446131
61+
f81cc5981"
62+
}
63+
],
64+
"signed": {
65+
"_type": "root",
66+
"consistent_snapshot": false,
67+
"expires": "2030-01-01T00:00:00Z",
68+
"keys": {
69+
"4e777de0d275f9d28588dd9a1606cc748e548f9e22b6795b7cb3f63f98035fcb": {
70+
"keyid_hash_algorithms": [
71+
"sha256",
72+
"sha512"
73+
],
74+
"keytype": "rsa",
75+
"keyval": {
76+
"public": "-----BEGIN PUBLIC KEY-----
77+
\nMIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEA0GjPoVrjS9eCqzoQ8VRe
78+
PkC0cI6ktiEgqPfHESFzyxyjC490Cuy19nuxPcJuZfN64MC48oOkR+W2mq4pM51i
79+
xmdG5xjvNOBRkJ5wUCc8fDCltMUTBlqt9y5eLsf/4/EoBU+zC4SW1iPU++mCsity
80+
fQQ7U6LOn3EYCyrkH51hZ/dvKC4o9TPYMVxNecJ3CL1q02Q145JlyjBTuM3Xdqsa
81+
ndTHoXSRPmmzgB/1dL/c4QjMnCowrKW06mFLq9RAYGIaJWfM/0CbrOJpVDkATmEc
82+
MdpGJYDfW/sRQvRdlHNPo24ZW7vkQUCqdRxvnTWkK5U81y7RtjLt1yskbWXBIbOV
83+
z94GXsgyzANyCT9qRjHXDDz2mkLq+9I2iKtEqaEePcWRu3H6RLahpM/TxFzw684Y
84+
R47weXdDecPNxWyiWiyMGStRFP4Cg9trcwAGnEm1w8R2ggmWphznCd5dXGhPNjfA
85+
a82yNFY8ubnOUVJOf0nXGg3Edw9iY3xyjJb2+nrsk5f3AgMBAAE=\n-----END PUBLIC KEY-----"
86+
},
87+
"scheme": "rsassa-pss-sha256"
88+
},
89+
"59a4df8af818e9ed7abe0764c0b47b4240952aa0d179b5b78346c470ac30278d": {
90+
"keyid_hash_algorithms": [
91+
"sha256",
92+
"sha512"
93+
],
94+
"keytype": "ed25519",
95+
"keyval": {
96+
"public": "edcd0a32a07dce33f7c7873aaffbff36d20ea30787574ead335eefd337e4dacd"
97+
},
98+
"scheme": "ed25519"
99+
},
100+
"65171251a9aff5a8b3143a813481cb07f6e0de4eb197c767837fe4491b739093": {
101+
"keyid_hash_algorithms": [
102+
"sha256",
103+
"sha512"
104+
],
105+
"keytype": "ed25519",
106+
"keyval": {
107+
"public": "89f28bd4ede5ec3786ab923fd154f39588d20881903e69c7b08fb504c6750815"
108+
},
109+
"scheme": "ed25519"
110+
},
111+
"8a1c4a3ac2d515dec982ba9910c5fd79b91ae57f625b9cff25d06bf0a61c1758": {
112+
"keyid_hash_algorithms": [
113+
"sha256",
114+
"sha512"
115+
],
116+
"keytype": "ed25519",
117+
"keyval": {
118+
"public": "82ccf6ac47298ff43bfa0cd639868894e305a99c723ff0515ae2e9856eb5bbf4"
119+
},
120+
"scheme": "ed25519"
121+
}
122+
},
123+
"roles": {
124+
"root": {
125+
"keyids": [
126+
"4e777de0d275f9d28588dd9a1606cc748e548f9e22b6795b7cb3f63f98035fcb"
127+
],
128+
"threshold": 1
129+
},
130+
"snapshot": {
131+
"keyids": [
132+
"59a4df8af818e9ed7abe0764c0b47b4240952aa0d179b5b78346c470ac30278d"
133+
],
134+
"threshold": 1
135+
},
136+
"targets": {
137+
"keyids": [
138+
"65171251a9aff5a8b3143a813481cb07f6e0de4eb197c767837fe4491b739093"
139+
],
140+
"threshold": 1
141+
},
142+
"timestamp": {
143+
"keyids": [
144+
"8a1c4a3ac2d515dec982ba9910c5fd79b91ae57f625b9cff25d06bf0a61c1758"
145+
],
146+
"threshold": 1
147+
}
148+
},
149+
"spec_version": "1.0.0",
150+
"version": 1
151+
}
152+
}
153+
```
44154

45155
## Targets Metadata (targets.json)
46156

@@ -57,7 +167,76 @@ so in a way similar to how the Root role specifies the top-level roles: by givin
57167
the trusted keys and signature threshold for each role. Additionally, one or more
58168
[glob patterns](https://en.wikipedia.org/wiki/Glob_(programming)) will be specified to indicate the target file paths for which clients should trust each delegated role.
59169

60-
See [example](https://raw.githubusercontent.com/theupdateframework/tuf/develop/tests/repository_data/repository/metadata/targets.json) of Targets metadata.
170+
See as an **example**
171+
```
172+
{
173+
"signatures": [
174+
{
175+
"keyid": "65171251a9aff5a8b3143a813481cb07f6e0de4eb197c767837fe4491b739093",
176+
"sig":
177+
"d65f8db0c1a8f0976552b9742bbb393f24a5fa5eaf145c37aee047236c79dd0b83
178+
cfbb8b49fa7803689dfe0031dcf22c4d006b593acac07d69093b9b81722c08"
179+
}
180+
],
181+
"signed": {
182+
"_type": "targets",
183+
"delegations": {
184+
"keys": {
185+
"c8022fa1e9b9cb239a6b362bbdffa9649e61ad2cb699d2e4bc4fdf7930a0e64a": {
186+
"keyid_hash_algorithms": [
187+
"sha256",
188+
"sha512"
189+
],
190+
"keytype": "ed25519",
191+
"keyval": {
192+
"public": "fcf224e55fa226056adf113ef1eb3d55e308b75b321c8c8316999d8c4fd9e0d9"
193+
},
194+
"scheme": "ed25519"
195+
}
196+
},
197+
"roles": [
198+
{
199+
"keyids": [
200+
"c8022fa1e9b9cb239a6b362bbdffa9649e61ad2cb699d2e4bc4fdf7930a0e64a"
201+
],
202+
"name": "role1",
203+
"paths": [
204+
"file3.txt"
205+
],
206+
"terminating": false,
207+
"threshold": 1
208+
}
209+
]
210+
},
211+
"expires": "2030-01-01T00:00:00Z",
212+
"spec_version": "1.0.0",
213+
"targets": {
214+
"file1.txt": {
215+
"custom": {
216+
"file_permissions": "0644"
217+
},
218+
"hashes": {
219+
"sha256": "65b8c67f51c993d898250f40aa57a317d854900b3a04895464313e48785440da",
220+
"sha512":
221+
"467430a68afae8e9f9c0771ea5d78bf0b3a0d79a2d3d3b40c69fde4dd42c4614
222+
48aef76fcef4f5284931a1ffd0ac096d138ba3a0d6ca83fa8d7285a47a296f77"
223+
},
224+
"length": 31
225+
},
226+
"file2.txt": {
227+
"hashes": {
228+
"sha256": "452ce8308500d83ef44248d8e6062359211992fd837ea9e370e561efb1a4ca99",
229+
"sha512":
230+
"052b49a21e03606b28942db69aa597530fe52d47ee3d748ba65afcd14b857738
231+
e36bc1714c4f4adde46c3e683548552fe5c96722e0e0da3acd9050c2524902d8"
232+
},
233+
"length": 39
234+
}
235+
},
236+
"version": 1
237+
}
238+
}
239+
```
61240

62241
## Delegated Targets Metadata (role1.json)
63242

@@ -81,9 +260,85 @@ metadata file would be found at:
81260

82261
/ANOTHER_ROLE.json
83262

84-
See
85-
[example](https://raw.githubusercontent.com/theupdateframework/tuf/develop/tests/repository_data/repository/metadata/role1.json)
86-
of delegated Targets metadata and [example](https://raw.githubusercontent.com/theupdateframework/tuf/develop/tests/repository_data/repository/metadata/role2.json) of a nested delegation.
263+
See **example** of delegated Targets metadata
264+
```
265+
{
266+
"signatures": [
267+
{
268+
"keyid": "c8022fa1e9b9cb239a6b362bbdffa9649e61ad2cb699d2e4bc4fdf7930a0e64a",
269+
"sig":
270+
"9408b46569e622a46f1d35d9fa3c10e17a9285631ced4f2c9c2bba2c2842413
271+
fcb796db4e81d6f988fc056c21c407fdc3c10441592cf1e837e088f2e2dfd5403"
272+
}
273+
],
274+
"signed": {
275+
"_type": "targets",
276+
"delegations": {
277+
"keys": {
278+
"c8022fa1e9b9cb239a6b362bbdffa9649e61ad2cb699d2e4bc4fdf7930a0e64a": {
279+
"keyid_hash_algorithms": [
280+
"sha256",
281+
"sha512"
282+
],
283+
"keytype": "ed25519",
284+
"keyval": {
285+
"public":
286+
"fcf224e55fa226056adf113ef1eb3d55e308b75b321c8c8316999d8c4fd9e0d9"
287+
},
288+
"scheme": "ed25519"
289+
}
290+
},
291+
"roles": [
292+
{
293+
"keyids": [
294+
"c8022fa1e9b9cb239a6b362bbdffa9649e61ad2cb699d2e4bc4fdf7930a0e64a"
295+
],
296+
"name": "role2",
297+
"paths": [],
298+
"terminating": false,
299+
"threshold": 1
300+
}
301+
]
302+
},
303+
"expires": "2030-01-01T00:00:00Z",
304+
"spec_version": "1.0.0",
305+
"targets": {
306+
"file3.txt": {
307+
"hashes": {
308+
"sha256":
309+
"141f740f53781d1ca54b8a50af22cbf74e44c21a998fa2a8a05aaac2c002886b",
310+
"sha512":
311+
"ef5beafa16041bcdd2937140afebd485296cd54f7348ecd5a4d035c09759608
312+
de467a7ac0eb58753d0242df873c305e8bffad2454aa48f44480f15efae1cacd0"
313+
},
314+
"length": 28
315+
}
316+
},
317+
"version": 1
318+
}
319+
}
320+
```
321+
322+
and **example** of a nested delegation
323+
```
324+
{
325+
"signatures": [
326+
{
327+
"keyid": "c8022fa1e9b9cb239a6b362bbdffa9649e61ad2cb699d2e4bc4fdf7930a0e64a",
328+
"sig":
329+
"75b196a224fd200e46e738b1216b3316c5384f61083872f8d14b8b0a378b2344e64b1a6f1
330+
a89a711206a66a0b199d65ac0e30fe15ddbc4de89fa8ff645f99403"
331+
}
332+
],
333+
"signed": {
334+
"_type": "targets",
335+
"expires": "2030-01-01T00:00:00Z",
336+
"spec_version": "1.0.0",
337+
"targets": {},
338+
"version": 1
339+
}
340+
}
341+
```
87342

88343
## Snapshot Metadata (snapshot.json)
89344

@@ -95,7 +350,36 @@ view of all files on the repository. That is, metadata files (and thus Target
95350
files) that existed on the repository at different times cannot be combined
96351
and presented to clients by an attacker.
97352

98-
​See [example](https://raw.githubusercontent.com/theupdateframework/tuf/develop/tests/repository_data/repository/metadata/snapshot.json) of Snapshot metadata.
353+
​See **example** of Snapshot metadata.
354+
```
355+
{
356+
"signatures": [
357+
{
358+
"keyid": "59a4df8af818e9ed7abe0764c0b47b4240952aa0d179b5b78346c470ac30278d",
359+
"sig":
360+
"085672c70dffe26610e58542ee552843633cfed973abdad94c56138dbf0cd991644f2d3f27
361+
e4dda3098e08ab676e7f52627b587947ae69db1012d59a6da18e0c"
362+
}
363+
],
364+
"signed": {
365+
"_type": "snapshot",
366+
"expires": "2030-01-01T00:00:00Z",
367+
"meta": {
368+
"role1.json": {
369+
"version": 1
370+
},
371+
"role2.json": {
372+
"version": 1
373+
},
374+
"targets.json": {
375+
"version": 1
376+
}
377+
},
378+
"spec_version": "1.0.0",
379+
"version": 1
380+
}
381+
}
382+
```
99383

100384
## Timestamp Metadata (timestamp.json)
101385

@@ -119,4 +403,31 @@ keys should be used for signing the snapshot.json file so that the
119403
Snapshot role's keys can be kept offline, and thus more secure.
120404
* Timestamp.json may be given to mirrors.
121405

122-
See [example](https://raw.githubusercontent.com/theupdateframework/tuf/develop/tests/repository_data/repository/metadata/timestamp.json) of Timestamp metadata.
406+
See **example** of Timestamp metadata.
407+
```
408+
{
409+
"signatures": [
410+
{
411+
"keyid": "8a1c4a3ac2d515dec982ba9910c5fd79b91ae57f625b9cff25d06bf0a61c1758",
412+
"sig":
413+
"de0e16920f87bf5500cc65736488ac17e09788cce808f6a4e85eb9e4e478a312b4c1a2d7723
414+
af56f7bfb1df533c67d8c93b6f49d39eabe7fae391a08e1f72f01"
415+
}
416+
],
417+
"signed": {
418+
"_type": "timestamp",
419+
"expires": "2030-01-01T00:00:00Z",
420+
"meta": {
421+
"snapshot.json": {
422+
"hashes": {
423+
"sha256": "8f88e2ba48b412c3843e9bb26e1b6f8fc9e98aceb0fbaa97ba37b4c98717d7ab"
424+
},
425+
"length": 515,
426+
"version": 1
427+
}
428+
},
429+
"spec_version": "1.0.0",
430+
"version": 1
431+
}
432+
}
433+
```

0 commit comments

Comments
 (0)