Skip to content

Improve the sumdbverify client tool - #51

Merged
mhutchinson merged 2 commits into
transparency-dev:mainfrom
mhutchinson:sumdb-full-verify
Oct 1, 2025
Merged

Improve the sumdbverify client tool#51
mhutchinson merged 2 commits into
transparency-dev:mainfrom
mhutchinson:sumdb-full-verify

Conversation

@mhutchinson

Copy link
Copy Markdown
Contributor

Now compares the go.mod file contents match between the git repository
for each version, and that served in SumDB. Note that this still doesn't
calculate and compare the zip file hash.

Misc smaller changes:

  • Much better output: proper tabular output and granular info
  • Pre-refactoring ready to accept non-VIndex SumDB info
  • Switch away from os.Exec to use proper git implementation
  • README for the sumdbverify command directly

Now compares the go.mod file contents match between the git repository
for each version, and that served in SumDB. Note that this still doesn't
calculate and compare the zip file hash.

Misc smaller changes:
  - Much better output: proper tabular output and granular info
  - Pre-refactoring ready to accept non-VIndex SumDB info
  - Switch away from os.Exec to use proper git implementation
  - README for the sumdbverify command directly
Comment thread vindex/cmd/sumdbverify/client.go Outdated
Comment thread vindex/cmd/sumdbverify/client.go Outdated
Comment thread vindex/cmd/sumdbverify/client.go Outdated
Comment thread vindex/cmd/sumdbverify/client.go Outdated
Comment thread vindex/cmd/sumdbverify/client.go Outdated
Comment thread vindex/cmd/sumdbverify/client.go Outdated

@mhutchinson mhutchinson left a comment

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cheers, took some doing but done. Using Hash1 was a good idea in the end. I resisted it because I'd already committed to unpacking that format when I parsed sumdb. I've changed it so that we don't do that, and instead the comparison is done using the raw strings with the h1 prefix.

Comment thread vindex/cmd/sumdbverify/client.go Outdated
Comment thread vindex/cmd/sumdbverify/client.go Outdated
Comment thread vindex/cmd/sumdbverify/client.go Outdated
Comment thread vindex/cmd/sumdbverify/client.go Outdated
@mhutchinson
mhutchinson merged commit ea613a1 into transparency-dev:main Oct 1, 2025
6 checks passed
@mhutchinson
mhutchinson deleted the sumdb-full-verify branch October 1, 2025 15:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants