x
/
cursive
Code Issues Proposed changes
Library for validation of digital signatures.
14 Commits 1 Branch 7 Tags 420 KiB
Python 100%
Go to file
Peter Hamilton ad879a1fbc Add certificate validation 
This change adds support for certificate validation, including
certificate inspection utilities. Validating a certificate
requires the certificate UUID of the certificate to validate,
a set of UUIDs corresponding to the set of trusted certificates
needed to validate the certificate, and a user context for
authentication to the key manager. A new certificate verification
context is included that is used to store the set of trusted
certificates once they are loaded from the key manager. This
context is used to validate the signing certificate, verifying
that the certificate belongs to a valid certificate chain rooted
in the set of trusted certificates.

All new certificate utility code is added in a new module named
certificate_utils.

For more information on this work, see the spec:
https://review.openstack.org/#/c/488541/

SecurityImpact
DocImpact

Change-Id: I8d7f43fb4c0573ac3681147eac213b369bbbcb3b
Implements: blueprint nova-validate-certificates
 		2017-10-03 15:57:27 -04:00
cursive Add certificate validation 2017-10-03 15:57:27 -04:00
doc/source Initial cookiecutter commit 2016-06-27 18:28:04 -07:00
releasenotes Add certificate validation 2017-10-03 15:57:27 -04:00
.gitignore Fix releasenotes building 2016-07-13 09:39:52 +02:00
.gitreview Added .gitreview 2016-07-06 10:24:04 +00:00
.testr.conf Initial cookiecutter commit 2016-06-27 18:28:04 -07:00
CONTRIBUTING.rst Initial cookiecutter commit 2016-06-27 18:28:04 -07:00
HACKING.rst Add hacking note for copyrights 2016-06-28 06:45:21 -07:00
LICENSE Initial cookiecutter commit 2016-06-27 18:28:04 -07:00
MANIFEST.in Initial cookiecutter commit 2016-06-27 18:28:04 -07:00
README.rst Initial cookiecutter commit 2016-06-27 18:28:04 -07:00
babel.cfg Initial cookiecutter commit 2016-06-27 18:28:04 -07:00
requirements.txt Add oslo.log to requirements.txt 2016-09-01 12:23:22 +02:00
setup.cfg Support building wheels 2016-06-28 10:50:14 -07:00
setup.py Initial cookiecutter commit 2016-06-27 18:28:04 -07:00
test-requirements.txt Initial cookiecutter commit 2016-06-27 18:28:04 -07:00
tox.ini Cleanup tox.ini 2016-08-26 11:10:43 +02:00

README.rst

cursive

Cursive implements OpenStack-specific validation of digital signatures.

As OpenStack continues to mature, robust security controls become increasingly critical. The cursive project contains code extracted from various OpenStack projects for verifying digital signatures. Additional capabilities will be added to this project in support of various security features.

Features

  • TODO