Skip to content

Add PQC (ML-DSA) coverage to manifest signing tests - #2484

Open
dralley wants to merge 1 commit into
pulp:mainfrom
dralley:pqc-tests
Open

Add PQC (ML-DSA) coverage to manifest signing tests#2484
dralley wants to merge 1 commit into
pulp:mainfrom
dralley:pqc-tests

Conversation

@dralley

@dralley dralley commented Aug 31, 2026

Copy link
Copy Markdown
Contributor

Parameterize the existing manifest signing and push-signature tests over both a traditional GPG key and a post-quantum ML-DSA/Sequoia key, covering signing with either a primary key or a dedicated signing subkey. Replaces python-gnupg verification with pysequoia.

closes #2280
closes #2281

Assisted-By: Claude Opus 4.8

@dralley

dralley commented Sep 1, 2026

Copy link
Copy Markdown
Contributor Author

I can squash the commits once done, I wanted to retain the history for now.

@dralley

dralley commented Sep 3, 2026

Copy link
Copy Markdown
Contributor Author

The tests have decided to break all of a sudden, but it's not specific to this PR, it's the nightly job too.

https://github.com/pulp/pulp_container/actions/runs/33714487446

Maybe something to do with the new pulpcore release.

Parameterize the existing manifest signing and push-signature tests over
both a traditional GPG key and a post-quantum ML-DSA/Sequoia key, covering
signing with either a primary key or a dedicated signing subkey. Replaces
python-gnupg verification with pysequoia.

closes pulp#2280
closes pulp#2281

Assisted-By: Claude Opus 4.8
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Test pushing PQC signed content to pulp_container Test a container plugin signing service with PQC

1 participant