Skip to content

Update supported public key algorithms.#1604

Merged
jku merged 4 commits intosigstore:mainfrom
di:fix/1603
Nov 6, 2025
Merged

Update supported public key algorithms.#1604
jku merged 4 commits intosigstore:mainfrom
di:fix/1603

Conversation

@di
Copy link
Member

@di di commented Nov 5, 2025

There were some algorithms we were supporting that fulcio doesn't support.

Additionally, it doesn't appear that we were supporting PKIX_RSA_PKCS1V15_2048_SHA256, and we were incorrectly setting the key details for PKIX_RSA_PKCS1V15_4096_SHA256.

Also adds tests to get to 100% coverage for unsupported edge cases.

Fixes #1603.

@di di requested a review from woodruffw November 5, 2025 20:31
Copy link
Member

@woodruffw woodruffw left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks @di!

@di di requested a review from jku November 5, 2025 20:51
@jku jku merged commit 2cf6e38 into sigstore:main Nov 6, 2025
42 checks passed
@jku jku mentioned this pull request Jan 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

FTBFS: test/unit/internal/test_key_details.py cryptography.exceptions.UnsupportedAlgorithm: Curve secp192r1 is not supported

4 participants