Merge pull request #58 from Venafi/v1.0.2-pr

v1.0.2 release
Venafi · Oct 5, 2023 · 2074c08 · 2074c08
2 parents fac7d1b + 5794e7d
commit 2074c08
Show file tree

Hide file tree

Showing 4 changed files with 21 additions and 20 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,15 @@
-# v1.0.1
+# v1.0.2
 
 ## Enhancements
 
-* Experimental PDF signing support
+* Official PDF signing support
+* JWKS retrieval support
+* API minimum scope options
+
+## Bug Fixes
+
+* Payload size detection for client vs server side hashing approaches
+
+## Others
+
+* Enhanced PDF signing documentation
diff --git a/go.mod b/go.mod
@@ -13,7 +13,7 @@ require (
  github.com/sigstore/sigstore v1.7.3
  github.com/spf13/cobra v1.7.0
  github.com/spf13/viper v1.16.0
- golang.org/x/crypto v0.12.0
+ golang.org/x/crypto v0.13.0
 )
 
 require (
@@ -162,7 +162,7 @@ require (
  golang.org/x/net v0.14.0 // indirect
  golang.org/x/oauth2 v0.11.0 // indirect
  golang.org/x/sync v0.3.0 // indirect
- golang.org/x/term v0.11.0 // indirect
+ golang.org/x/term v0.12.0 // indirect
  golang.org/x/time v0.3.0 // indirect
  google.golang.org/appengine v1.6.7 // indirect
  google.golang.org/genproto/googleapis/rpc v0.0.0-20230807174057-1744710a1577 // indirect
@@ -202,7 +202,7 @@ require (
  github.com/stretchr/testify v1.8.4
  github.com/subosito/gotenv v1.4.2 // indirect
  github.com/xi2/xz v0.0.0-20171230120015-48954b6210f8
- golang.org/x/sys v0.11.0 // indirect
+ golang.org/x/sys v0.12.0 // indirect
  golang.org/x/text v0.13.0
  gopkg.in/ini.v1 v1.67.0
  gopkg.in/yaml.v3 v3.0.1 // indirect

diff --git a/go.sum b/go.sum
@@ -882,8 +882,8 @@ golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d/go.mod h1:IxCIyHEi3zRg3s0
 golang.org/x/crypto v0.0.0-20220722155217-630584e8d5aa/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
 golang.org/x/crypto v0.7.0/go.mod h1:pYwdfH91IfpZVANVyUOhSIPZaFoJGxTFbZhFTx+dXZU=
-golang.org/x/crypto v0.12.0 h1:tFM/ta59kqch6LlvYnPa0yx5a83cL2nHflFhYKvv9Yk=
-golang.org/x/crypto v0.12.0/go.mod h1:NF0Gs7EO5K4qLn+Ylc+fih8BSTeIjAP05siRnAh98yw=
+golang.org/x/crypto v0.13.0 h1:mvySKfSWJ+UKUii46M40LOvyWfN0s2U+46/jDd0e6Ck=
+golang.org/x/crypto v0.13.0/go.mod h1:y6Z2r+Rw4iayiXXAIxJIDAJ1zMW4yaTpebo8fPOliYc=
 golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8=
@@ -1064,14 +1064,14 @@ golang.org/x/sys v0.0.0-20220906165534-d0df966e6959/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220908164124-27713097b956/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.11.0 h1:eG7RXZHdqOJ1i+0lgLgCpSXAp6M3LYlAo6osgSi0xOM=
-golang.org/x/sys v0.11.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.12.0 h1:CM0HF96J0hcLAwsHPJZjfdNzs0gftsLfgKt57wWHJ0o=
+golang.org/x/sys v0.12.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
 golang.org/x/term v0.6.0/go.mod h1:m6U89DPEgQRMq3DNkDClhWw02AUbt2daBVO4cn4Hv9U=
-golang.org/x/term v0.11.0 h1:F9tnn/DA/Im8nCwm+fX+1/eBwi4qFjRT++MhtVC4ZX0=
-golang.org/x/term v0.11.0/go.mod h1:zC9APTIj3jG3FdV/Ons+XE1riIZXG4aZ4GTHiPZJPIU=
+golang.org/x/term v0.12.0 h1:/ZfYdc3zq+q02Rv9vGqTeSItdzZTSNDmfTi0mBAuidU=
+golang.org/x/term v0.12.0/go.mod h1:owVbMEjm3cBLCHdkQu9b1opXd4ETQWc3BhuQGKgXgvU=
 golang.org/x/text v0.0.0-20170915032832-14c0d48ead0c/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.1-0.20180807135948-17ff2d5776d2/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=

diff --git a/pkg/plugin/signers/pdf/signer.go b/pkg/plugin/signers/pdf/signer.go
@@ -25,7 +25,6 @@ import (
  "os"
  "time"
 
- "github.com/common-nighthawk/go-figure"
  "github.com/venafi/vsign/cmd/vsign/cli/options"
  c "github.com/venafi/vsign/pkg/crypto"
  "github.com/venafi/vsign/pkg/plugin/signers"
@@ -60,10 +59,6 @@ func testpath(string) bool {
 
 // sign a manifest and return the PKCS#7 blob
 func sign(r io.Reader, cert *certloader.Certificate, opts signers.SignOpts) ([]byte, error) {
-
- experimental := figure.NewFigure("experimental: PDF signing", "", true)
- experimental.Print()
-
  var err error
 
  certificate_chains := make([][]*x509.Certificate, 0)
@@ -100,10 +95,6 @@ func sign(r io.Reader, cert *certloader.Certificate, opts signers.SignOpts) ([]b
 }
 
 func verify(f *os.File, opts options.VerifyOptions, tppOpts signers.VerifyOpts) error {
-
- experimental := figure.NewFigure("experimental: PDF signing", "", true)
- experimental.Print()
-
  _, err := verifier.File(f)
  if err != nil {
  return err