third_party.pigweed.src/pw_software_update/py
Ali Zhang 4a555a4db0 pw_software_update/py: Relax root metadata signing checks
When signing a root metadata, the signing key does not need to be listed
in the root metadata. This CL removes those checks.

Use case: When rotating a root key, the new root metadata need to signed
with both the existing root key and the new root key but the old root
key does NOT need to be listed in the new root metadata. In fact if the
rotation aims to revoke the old root key, the old root key MUST NOT be
listed in the new root signature requirements.

Change-Id: If6896c98ff49cf2dcc936f5d075a93dd440b18a6
Reviewed-on: https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/69360
Reviewed-by: Joe Ethier <jethier@google.com>
Commit-Queue: Ali Zhang <alizhang@google.com>
2021-11-30 07:10:01 +00:00
..
pw_software_update
BUILD.gn
dev_sign_test.py pw_software_update/py: Relax root metadata signing checks 2021-11-30 07:10:01 +00:00
keys_test.py
metadata_test.py
root_metadata_test.py
update_bundle_test.py