Skip to content

Add PQC (ML-DSA) coverage to manifest signing tests - #2484

Open
dralley wants to merge 1 commit into
pulp:mainfrom
dralley:pqc-tests
Open

Add PQC (ML-DSA) coverage to manifest signing tests#2484
dralley wants to merge 1 commit into
pulp:mainfrom
dralley:pqc-tests

Conversation

@dralley

Copy link
Copy Markdown
Contributor

Parameterize the existing manifest signing and push-signature tests over both a traditional GPG key and a post-quantum ML-DSA/Sequoia key, covering signing with either a primary key or a dedicated signing subkey. Replaces python-gnupg verification with pysequoia.

closes#2280
closes#2281

Assisted-By: Claude Opus 4.8

@dralley

Copy link
Copy Markdown
ContributorAuthor

I can squash the commits once done, I wanted to retain the history for now.

@dralley

Copy link
Copy Markdown
ContributorAuthor

The tests have decided to break all of a sudden, but it's not specific to this PR, it's the nightly job too.

https://github.com/pulp/pulp_container/actions/runs/33714487446

Maybe something to do with the new pulpcore release.

Parameterize the existing manifest signing and push-signature tests over
both a traditional GPG key and a post-quantum ML-DSA/Sequoia key, covering
signing with either a primary key or a dedicated signing subkey. Replaces
python-gnupg verification with pysequoia.
closespulp#2280closespulp#2281
Assisted-By: Claude Opus 4.8
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Test pushing PQC signed content to pulp_container Test a container plugin signing service with PQC

1 participant

@dralley