Skip to content

Support custom Fulcio and Rekor configuration for verification #296

Closed
@tetsuo-cpp

Description

@tetsuo-cpp

We're going to need this for sigstore/sigstore-conformance#25 as this is needed to point the client at mock servers during verification. At the moment, we expose the flag but don't support it:

    if args.staging:
        logger.debug("verify: staging instances requested")
        verifier = Verifier.staging()
    elif args.rekor_url == DEFAULT_REKOR_URL:
        verifier = Verifier.production()
    else:
        # TODO: We need CLI flags that allow the user to figure the Fulcio cert chain
        # for verification.
        args._parser.error(
            "Custom Rekor and Fulcio configuration for verification isn't fully supported yet!",
        )

Metadata

Metadata

Assignees

Labels

enhancementNew feature or request

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions