chore(deps): bump rfc3161-client to >= 1.0.3 (#1450)

Author: woodruffw

pyproject.toml

@@ -36,7 +36,7 @@ dependencies = [
   "requests",
   "rich >= 13,< 15",
   "rfc8785 ~= 0.1.2",
-  "rfc3161-client >= 1.0.2,< 1.1.0",
+  "rfc3161-client >= 1.0.3,< 1.1.0",
   # NOTE(ww): Both under active development, so strictly pinned.
   "sigstore-protobuf-specs == 0.4.3",
   "sigstore-rekor-types == 0.0.18",

sigstore/verify/verifier.py

@@ -131,8 +131,7 @@ def _verify_signed_timestamp(
 
             verifier = builder.build()
             try:
-                # TODO: remove ignore after rfc3161-client upgrade
-                verifier.verify_message(timestamp_response, message)  # type: ignore[attr-defined]
+                verifier.verify_message(timestamp_response, message)
             except Rfc3161VerificationError as e:
                 _logger.debug("Unable to verify Timestamp with CA.")
                 _logger.exception(e)

test/unit/verify/test_verifier.py

@@ -350,8 +350,8 @@ def test_late_timestamp(self, caplog, verifier, asset, null_policy):
             )
 
         assert (
-            caplog.records[0].message
-            == "Error while verifying certificates: Unable to verify certificate"
+            "Error while verifying certificates: Unable to verify pkcs7 signature"
+            in caplog.records[0].message
         )
 
     def test_verifier_not_enough_timestamp(