You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: tap14.md
+5-7Lines changed: 5 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -346,7 +346,7 @@ And the "signed" portion of root will include:
346
346
}
347
347
```
348
348
349
-
where `BECOMES_OBSOLETE` is a timestamp.
349
+
where `BECOMES_OBSOLETE` is a date-time string with the same format as `expires`
350
350
351
351
For existing TUF clients to continue operation after this TAP is implemented,
352
352
repositories may store metadata from before TUF 2.0.0 in the top-level
@@ -383,7 +383,6 @@ This field will contain the following:
383
383
{ ...,
384
384
"supported_versions" : [
385
385
{ "version": MAJOR_VERSION,
386
-
"path": FOLDER_NAME,
387
386
"root-filename": ROOT_FILENAME,
388
387
"root-digest": ROOT_DIGEST
389
388
},
@@ -394,16 +393,15 @@ This field will contain the following:
394
393
```
395
394
396
395
where `MAJOR_VERSION` is the integer representing a supported major version
397
-
and `FOLDER_NAME` is the string representing the folder containing metadata for
398
-
this supported major version (e.g. { "version": 2, "path": "2" }).
399
-
`FOLDER_NAME` MUST NOT contain any subdirectories.
400
-
In most cases, `MAJOR_VERSION` should match `FOLDER_NAME`.
401
396
For backwards compatability, version 1 should be assumed to be in the top-level
402
397
repository with no directory named 1. `ROOT_FILENAME` is the name of the root metadata file in the new specification version. `ROOT_DIGEST` is the digest of the new root metadata file.
403
398
404
399
The `root-digest` field MUST be empty for the supported version that matches the
405
400
specification version used by the current root metadata file. `supported_versions`
406
-
MAY leave out the specification version used by the current root metadata.
401
+
MAY leave out the specification version used by the current root metadata, and any
402
+
older specification versions. So all supported versions greater than the specification
403
+
version of the root metadata MUST be included, and any less than or equal to
404
+
the current specification version MAY be included.
407
405
408
406
A repository should generate all TUF metadata, including root metadata, for all
409
407
TUF versions that the repository supports. Any update to TUF targets or delegations should be reflected across
0 commit comments