Add bundle with SCT with extensions to tests (#319)

* Add bundle with SCT with extensions to tests

TesseraCT is the tiles-backed CT log that the Sigstore infrastructure is
moving to. It produces SCTs in the same format as the previous CT log
did, but the extension field is now populated with the leaf index of the
entry. Ensure clients don't fail to verify such an SCT.

Signed-off-by: Colleen Murphy <colleenmurphy@google.com>

* selftest: Update sigstore-python hash

This should fix the issue with sct extensions.

Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>

---------

Signed-off-by: Colleen Murphy <colleenmurphy@google.com>
Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
Co-authored-by: Jussi Kukkonen <jkukkonen@google.com>

Author: cmurphy

selftest-requirements.txt

@@ -1,2 +1,2 @@
 # Use a commit from main until sigstore-python release > 4.1.0
-sigstore @ git+https://github.com/sigstore/sigstore-python.git@379054cfc27212e4cf0177451984ce968cbb8b7e
+sigstore @ git+https://github.com/sigstore/sigstore-python.git@b1ef51c78b34dbd772ec2a2d8d07ad6a6b4d853d

test/assets/bundle-verify/bundle-with-sct-with-extensions/README

@@ -0,0 +1 @@
+Bundle with an SCT with a non-empty extension field (used for Static CT) should succeed.

test/assets/bundle-verify/bundle-with-sct-with-extensions/bundle.sigstore.json

@@ -0,0 +1 @@
+{"mediaType":"application/vnd.dev.sigstore.bundle.v0.3+json", "verificationMaterial":{"certificate":{"rawBytes":"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"}, "tlogEntries":[{"logIndex":"3", "logId":{"keyId":"2AtEIMfG6Y41yK0tcwRTBS2tjhOrjKGIpDkHFgp65g0="}, "kindVersion":{"kind":"hashedrekord", "version":"0.0.2"}, "inclusionProof":{"logIndex":"3", "rootHash":"zSeFZyyk6Mc09gibSz+m1OIVRLRoHHi8a7s3Wf+f/Ro=", "treeSize":"4", "hashes":["6loILNl0suwj7VIQa6nUnZroCCkODBL/Cuqny++Osh8=", "ifnqE2mukxqnIGMCWGHBRvFN30GTNX+Icqgft17lvMs="], "checkpoint":{"envelope":"rekor-local\n4\nzSeFZyyk6Mc09gibSz+m1OIVRLRoHHi8a7s3Wf+f/Ro=\n\n— rekor-local 2AtEIMw1E77aMspQ1CLDoBAWq6atO8UDiAhgEx6R58iF+EYWDnr16zMX5kkxNfS7r3TUtJeJzLtgXb39J5o1XDfdRwg=\n"}}, "canonicalizedBody":"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"}], "timestampVerificationData":{"rfc3161Timestamps":[{"signedTimestamp":"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"}]}}, "messageSignature":{"messageDigest":{"algorithm":"SHA2_256", "digest":"oM/HEnHW4njlfNMy/5V8P3BD/do1TEy7GQow1W76Ab8="}, "signature":"MEYCIQDhnmtNa9Fn4N+XzdUAB+I+5D7GaVUwPIKVR0MPUOvc+wIhAPos8QEECn/BBMLiewTHXTPYbQ6pIc30TOqdN1tI+8rT"}}

test/assets/bundle-verify/bundle-with-sct-with-extensions/trusted_root.json

@@ -0,0 +1 @@
+{"mediaType":"application/vnd.dev.sigstore.trustedroot+json;version=0.1","tlogs":[{"baseUrl":"http://rekor-local","hashAlgorithm":"SHA2_256","publicKey":{"rawBytes":"MCowBQYDK2VwAyEAREvJyNZGjX6B3DAIuD3BTg9rIwV00GY8Xg5FU+IFDUQ=","keyDetails":"PKIX_ED25519","validFor":{"start":"2026-01-15T22:45:54Z"}},"logId":{"keyId":"2AtEIMfG6Y41yK0tcwRTBS2tjhOrjKGIpDkHFgp65g0="}}],"certificateAuthorities":[{"subject":{"organization":"Sigstore","commonName":"fulcio.test"},"uri":"http://localhost:5555","certChain":{"certificates":[{"rawBytes":"MIIFnDCCA4SgAwIBAgIUKtqlJxnzLTkmaLkbLBYXOk/gj5swDQYJKoZIhvcNAQELBQAwSzELMAkGA1UEBhMCVVMxEzARBgNVBAgMClNvbWUtU3RhdGUxETAPBgNVBAoMCFNpZ3N0b3JlMRQwEgYDVQQDDAtmdWxjaW8udGVzdDAeFw0yNjAxMTUyMjQyNDVaFw0zNjAxMTMyMjQyNDVaMEsxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApTb21lLVN0YXRlMREwDwYDVQQKDAhTaWdzdG9yZTEUMBIGA1UEAwwLZnVsY2lvLnRlc3QwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCdkrnnBGO5L+zR+4pwLrSF9MClpjKVEp5zAOdKszPvOP4XQQQyDyZFFWwTugwsv7PwpL4U6KJmoinJkozkoV9kWACuxY8QXcuUMLDbHdTnYY9KNbGEspRuydsmM1Nw1D+qYV2ABFUiAgGDM1bZ7OAJarlxi1gFf+mcdyeyv3j6ZBOl7nYHovnhfupXwq38FDiSKS2GD6SFQcfRBKdJ3XlaKkWtnacsRGSezdSAZP5ekHD5RDmKIiEOFt+BwIrRHkudveOPMbJ4wRzFPSXgoQ8Hr26M7ByZn0/IZyGkcuX3fdk8D7nPh6f5DtK2/ZvjLIJNy2FZPGWgKp+xHSpOTTI2hxlHHZ4etCUMxYfIcfhHXHb/RmS22yRsYyIubVhcYd7/ung9KjU/GWQbZbOXZjl+RmghvfDN1X+zsDTmeD/YgoaujauaTMfN/vwJYZ0e9knZyPKAk/nVsfJXNts28yGMCDWPHK0CzmpP5/+856A2rdOUo/QrujDWcbuSZcNa11TV6+kklhpHbehDDhRH+8mXH28Kry+rxfnVnrIkHOhbDMSSLFOnNiCItwLqRhf0uUSsl/o3ZlzOuJzj7Xj1xFJX2CQWSiEx3l+A5S7Q1Zs6rFYivwFn9rrnedf/GPmEWS6rW1QXdT5ZBeMsl2EsAQFsr9Kq2OmwKJGmCTggWTq7xQIDAQABo3gwdjAdBgNVHQ4EFgQUL+FBAcQV1hHs6yI2UEhokFNbxe4wHwYDVR0jBBgwFoAUL+FBAcQV1hHs6yI2UEhokFNbxe4wDwYDVR0TAQH/BAUwAwEB/zATBgNVHSUEDDAKBggrBgEFBQcDAzAOBgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQELBQADggIBAI2EGHMB/t2FxZCIJOndzbGagrU2F699xg6LcondPKVbOh1uP3AgnL82l8Z7EMq/Dt051jTcP/15Eu6AnWu8OBQBGAsWaEXsd0pBSt9WdbrMyu6LpUKdl44jQBTguutYz+BE8ZhFFOMlLO+L5rjQKuPvYOTfdbltuPpPzkruBBmJt+0KJs5dTjD9Kx3muZuE02OL4s/WrWPuXgkKxU7Wf+ljlVAr5RIHoqyApHbTRxRd9HZ8kGfFMErGR+MWLdxEnyxIj5yAAinSNwQ3uWFsFaRNqi4QuBxyAsVxAzUUzWrSkyTIDTLKWiwiEtPPZzwNNkfshvnc0oBI7ySbnW+49sKYQAoggRaTPHIWp/+nMIlkAXazCkqtT/ueUTjLekeS0tEa+x0E4RmvZn/v3NwGgty46hc682IpYrqzGU1MtH54myzI+Z9bjL3g3SRT6EH7b9LH9h1wDd7JWmrAPDYPk08VXATaHjjWnRePuWCy/r+kS3ipLu/elnLmN/u3/6wPhSBZobxqj9SN3fNmM8FX+4qyvvueG7w6QkrwST5r387yBUHWbjTCIk/8HooTaPvxz63coOo/pXNSimBbGd6XWAEhWPC82eu/viTigdscnQ3g6bn8pZt39351GOFHK5jFmhd9tXut8Dnvo42yexkGpUco3ikwLYrmqJE7vodjxyQG"}]},"validFor":{"start":"2026-01-15T22:45:54Z"}}],"ctlogs":[{"baseUrl":"http://tesseract","hashAlgorithm":"SHA2_256","publicKey":{"rawBytes":"MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEiFqVZDih9Jff02pEQcyhGFH+Vm8YnKoWOMoTdgeEej8SgDE4kXnGCe0LK4kvXvrbgiMuN0Ih6a45aVnEaQOjSQ==","keyDetails":"PKIX_ECDSA_P256_SHA_256","validFor":{"start":"2026-01-15T22:45:54Z"}},"logId":{"keyId":"LKXNJ6iUhMOOdIaNLTveHnhSr+fidx5vice9Zn38+O8="}}],"timestampAuthorities":[{"subject":{"organization":"sigstore.dev","commonName":"sigstore-tsa-selfsigned"},"uri":"https://timestamp.sigstore.dev/api/v1/timestamp","certChain":{"certificates":[{"rawBytes":"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"},{"rawBytes":"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"}]},"validFor":{"start":"2025-07-04T00:00:00Z"}}]}