kotovalexarian-likes-github
/
moby--moby
mirror of https://github.com/moby/moby.git
1
0
Fork 0
Code Releases Activity
moby--moby/graph/fixtures/validate_manifest
History
Aaron Lehmann 011bfd666e Unmarshal signed payload when pulling by digest 
Add a unit test for validateManifest which ensures extra data can't be
injected by adding data to the JSON object outside the payload area.

This also removes validation of legacy signatures at pull time. This
starts the path of deprecating legacy signatures, whose presence in the
very JSON document they attempt to sign is problematic.  These
signatures were only checked for official images, and since they only
caused a weakly-worded message to be printed, removing the verification
should not cause impact.

Signed-off-by: Aaron Lehmann <aaron.lehmann@docker.com>
 		2015-10-12 10:51:28 -07:00
..
bad_manifest Unmarshal signed payload when pulling by digest 2015-10-12 10:51:28 -07:00
extra_data_manifest Unmarshal signed payload when pulling by digest 2015-10-12 10:51:28 -07:00
good_manifest Unmarshal signed payload when pulling by digest 2015-10-12 10:51:28 -07:00
no_signature_manifest Unmarshal signed payload when pulling by digest 2015-10-12 10:51:28 -07:00