deb_control_files:
- control
- md5sums
deb_fields:
Architecture: all
Depends: golang-github-beevik-ntp-dev, golang-github-digitorus-pkcs7-dev, golang-github-digitorus-timestamp-dev,
golang-github-go-chi-chi-dev, golang-github-go-openapi-errors-dev, golang-github-go-openapi-loads-dev,
golang-github-go-openapi-runtime-dev, golang-github-go-openapi-spec-dev, golang-github-go-openapi-strfmt-dev,
golang-github-go-openapi-swag-dev, golang-github-google-go-cmp-dev, golang-github-mitchellh-go-homedir-dev,
golang-github-mitchellh-mapstructure-dev, golang-github-pkg-errors-dev, golang-github-rs-cors-dev,
golang-github-sigstore-sigstore-dev, golang-github-spf13-cobra-dev, golang-github-spf13-pflag-dev,
golang-github-spf13-viper-dev, golang-github-urfave-negroni-dev, golang-go.uber-zap-dev,
golang-golang-x-net-dev, golang-google-cloud-dev, golang-google-protobuf-dev,
golang-gopkg-yaml.v3-dev, golang-k8s-sigs-release-utils-dev, golang-prometheus-client-dev
Description: |-
Sigstore RFC3161 Timestamp Authority (Go library)
Sigstore Timestamp Authority
.
A service for issuing RFC 3161 timestamps
(https://datatracker.ietf.org/doc/html/rfc3161).
.
Timestamps conform to the RFC 3628 policy
(https://datatracker.ietf.org/doc/html/rfc3628). The timestamp structure
conforms to the updates in RFC 5816
(https://datatracker.ietf.org/doc/rfc5816).
.
Trusted timestamping
(https://en.wikipedia.org/wiki/Trusted_timestamping) is a process that
has been around for some time. It provides a timestamp record of when a
document was created or modified.
.
A timestamp authority creates signed timestamps using public key
infrastructure. The operator of the timestamp authority must secure the
signing key material to prevent unauthorized timestamp signing.
.
Timestamping within Sigstore
.
Timestamps are a critical component of Rekor
(https://github.com/sigstore/rekor), Sigstore's signature transparency
log. Timestamps are used to verify short-lived certificates. Currently,
the timestamp comes from Rekor's own internal clock, which is not
externally verifiable or immutable. Using signed timestamps issued from
timestamp authorities mitigates the risk of Rekor's clock being
manipulated.
Homepage: https://github.com/sigstore/timestamp-authority
Installed-Size: '430'
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Multi-Arch: foreign
Package: golang-github-sigstore-timestamp-authority-dev
Priority: optional
Section: golang
Source: golang-github-sigstore-timestamp-authority
Version: 1.2.3-2
srcpkg_name: golang-github-sigstore-timestamp-authority
srcpkg_version: 1.2.3-2