Skip to content

Commit 2fbd1c2

Browse files
committed
Add clarification to supported_versions
Signed-off-by: Marina Moore <mnm678@gmail.com>
1 parent 21e8c48 commit 2fbd1c2

1 file changed

Lines changed: 5 additions & 7 deletions

File tree

tap14.md

Lines changed: 5 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -346,7 +346,7 @@ And the "signed" portion of root will include:
346346
}
347347
```
348348

349-
where `BECOMES_OBSOLETE` is a timestamp.
349+
where `BECOMES_OBSOLETE` is a date-time string with the same format as `expires`
350350

351351
For existing TUF clients to continue operation after this TAP is implemented,
352352
repositories may store metadata from before TUF 2.0.0 in the top-level
@@ -383,7 +383,6 @@ This field will contain the following:
383383
{ ...,
384384
"supported_versions" : [
385385
{ "version": MAJOR_VERSION,
386-
"path": FOLDER_NAME,
387386
"root-filename": ROOT_FILENAME,
388387
"root-digest": ROOT_DIGEST
389388
},
@@ -394,16 +393,15 @@ This field will contain the following:
394393
```
395394

396395
where `MAJOR_VERSION` is the integer representing a supported major version
397-
and `FOLDER_NAME` is the string representing the folder containing metadata for
398-
this supported major version (e.g. { "version": 2, "path": "2" }).
399-
`FOLDER_NAME` MUST NOT contain any subdirectories.
400-
In most cases, `MAJOR_VERSION` should match `FOLDER_NAME`.
401396
For backwards compatability, version 1 should be assumed to be in the top-level
402397
repository with no directory named 1. `ROOT_FILENAME` is the name of the root metadata file in the new specification version. `ROOT_DIGEST` is the digest of the new root metadata file.
403398

404399
The `root-digest` field MUST be empty for the supported version that matches the
405400
specification version used by the current root metadata file. `supported_versions`
406-
MAY leave out the specification version used by the current root metadata.
401+
MAY leave out the specification version used by the current root metadata, and any
402+
older specification versions. So all supported versions greater than the specification
403+
version of the root metadata MUST be included, and any less than or equal to
404+
the current specification version MAY be included.
407405

408406
A repository should generate all TUF metadata, including root metadata, for all
409407
TUF versions that the repository supports. Any update to TUF targets or delegations should be reflected across

0 commit comments

Comments
 (0)