Skip to content

Commit eae5e8f

Browse files
committed
Remove suspicion of extension bytes
SCTs produced by a Static CT log have the extension field populated[1], do not reject it. [1] https://github.com/C2SP/C2SP/blob/main/static-ct-api.md#sct-extension Signed-off-by: Colleen Murphy <colleenmurphy@google.com>
1 parent 379054c commit eae5e8f

File tree

1 file changed

+0
-5
lines changed

1 file changed

+0
-5
lines changed

sigstore/_internal/sct.py

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -101,11 +101,6 @@ def _pack_digitally_signed(
101101
The format of the digitally signed data is described in IETF's RFC 6962.
102102
"""
103103

104-
# No extensions are currently specified, so we treat the presence
105-
# of any extension bytes as suspicious.
106-
if len(sct.extension_bytes) != 0:
107-
raise VerificationError("Unexpected trailing extension bytes")
108-
109104
# This constructs the "core" `signed_entry` field, which is either
110105
# the public bytes of the cert *or* the TBSPrecertificate (with some
111106
# filtering), depending on whether our SCT is for a precertificate.

0 commit comments

Comments
 (0)