JankariTechUG/GitTrustedTimestamps
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Activity
67 Commits 5 Branches 0 Tags
d22f203ab5b04e04de0dbcdf0fce3ec6a18dbf51
Commit Graph
7 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Artur Neumann d22f203ab5 script to validate whether the hash of the trustanchors folder changed 
this is useful to make sure the same set of TSA are used on different
machines and that they haven't been changed.
E.g. I want to make sure I use the same TSA on my local machine as in CI
and I want to make sure the imported certificates in CI are the same as
in my local machine, so that I can trust them.
 2025-01-24 13:42:46 +05:45
Artur Neumann 0d7c3d324c -----TIMESTAMP COMMIT----- 
Version: 1

Algorithm: sha1

Preimage: version:1,parent:f397c5f7fd7cb224b29013e62bb44b99419edae4,tree:995421f50bc3b688e00ec304e4ace3b8ba811cc8

Digest: 92c69a749fd29e1aa57f40372c2544965334a713

Timestamp: https://freetsa.org/tsr
 Info: Timestamp generated with GitTrustedTimestamps by Mabulous GmbH

 Version: 1
 Policy OID: tsa_policy1
 Hash Algorithm: sha1
 Message data:
     0000 - 92 c6 9a 74 9f d2 9e 1a-a5 7f 40 37 2c 25 44 96   ...t......@7,%D.
     0010 - 53 34 a7 13                                       S4..
 Serial number: 0x052722F5
 Time stamp: Jan 24 07:49:57 2025 GMT
 Accuracy: unspecified
 Ordering: yes
 Nonce: 0xE85EEE82A965CA94
 TSA: DirName:/O=Free TSA/OU=TSA/description=This certificate digitally signs documents and time stamp requests made using the freetsa.org online services/CN=www.freetsa.org/emailAddress=busilezas@gmail.com/L=Wuerzburg/C=DE/ST=Bayern
 Extensions:

 -----BEGIN RFC3161 TOKEN-----
 MIIFOAYJKoZIhvcNAQcCoIIFKTCCBSUCAQMxDzANBglghkgBZQMEAgMFADCCAX8G
 CyqGSIb3DQEJEAEEoIIBbgSCAWowggFmAgEBBgQqAwQBMCEwCQYFKw4DAhoFAAQU
 ksaadJ/Snhqlf0A3LCVEllM0pxMCBAUnIvUYDzIwMjUwMTI0MDc0OTU3WgEB/wIJ
 AOhe7oKpZcqUoIIBEaSCAQ0wggEJMREwDwYDVQQKEwhGcmVlIFRTQTEMMAoGA1UE
 CxMDVFNBMXYwdAYDVQQNE21UaGlzIGNlcnRpZmljYXRlIGRpZ2l0YWxseSBzaWdu
 cyBkb2N1bWVudHMgYW5kIHRpbWUgc3RhbXAgcmVxdWVzdHMgbWFkZSB1c2luZyB0
 aGUgZnJlZXRzYS5vcmcgb25saW5lIHNlcnZpY2VzMRgwFgYDVQQDEw93d3cuZnJl
 ZXRzYS5vcmcxIjAgBgkqhkiG9w0BCQEWE2J1c2lsZXphc0BnbWFpbC5jb20xEjAQ
 BgNVBAcTCVd1ZXJ6YnVyZzELMAkGA1UEBhMCREUxDzANBgNVBAgTBkJheWVybjGC
 A4owggOGAgEBMIGjMIGVMREwDwYDVQQKEwhGcmVlIFRTQTEQMA4GA1UECxMHUm9v
 dCBDQTEYMBYGA1UEAxMPd3d3LmZyZWV0c2Eub3JnMSIwIAYJKoZIhvcNAQkBFhNi
 dXNpbGV6YXNAZ21haWwuY29tMRIwEAYDVQQHEwlXdWVyemJ1cmcxDzANBgNVBAgT
 BkJheWVybjELMAkGA1UEBhMCREUCCQDB6YYWDajpgjANBglghkgBZQMEAgMFAKCB
 uDAaBgkqhkiG9w0BCQMxDQYLKoZIhvcNAQkQAQQwHAYJKoZIhvcNAQkFMQ8XDTI1
 MDEyNDA3NDk1N1owKwYLKoZIhvcNAQkQAgwxHDAaMBgwFgQUkW2j2GDsyoLjS8Wd
 F5Pn6WiHXxQwTwYJKoZIhvcNAQkEMUIEQD/0eFSexwTaY0Vw451juQACBAkVA1ye
 K5pkczEjpLjYsYftunhRVIYAcqcQ+tKmSQM5kb1jQSL7RcFeBKEE6vswDQYJKoZI
 hvcNAQEBBQAEggIApg6aguPKzLzk/FmIXsXxG3D2snV+ueQ4XDrWU6LKo0Ai3ny4
 kfLrU6Tq/aerh+ZMwZiBTZyfHtiDi6b7kncUWEeqY6LWKb6BLRZwX2Tp/zaxUUIF
 IXfM3B5hL/dG+F46weHu1Uxw+TvOkCZO4uoEW7+cBHcL4FD4w4hRHWEvZFuuwlWx
 Hfaw6E5fm+t7QqXSX6dqP6z+LLFQ4bpQ7pxvHSy+mjMC+SjB7GNKxJuSxPdKdstU
 W+A5HQ7r28f8z2ssDk/419eLcrecWP4p8tlpZEkbRtKAKEhcG4x3kbhchnShzp5/
 QbruBhoXTtLLgbZtzYJKZ43scqCJbYXaRzNnO+SFQHfFf+vkoVERXvqCZHWnk6Wb
 2RE5ztaGOQ4fpyCS8ImfEcVHpB2ZxO3UDyIv9nwXm6sWt8cK1eYnAyIpqzIUh7+7
 a3C6/zlAGSO450V1bWhPzMtaYLB+KIAy8ZZwEwYYIsNoa6V5Qw6CeAIz1hUK8qhl
 T491K5uYw5Oqn+uCX1nV1N99sXM5weQgv3eRF4xtdtwyBG2/rHaZRavJDekGRXt5
 iZCPnK6qpVZurJHji9kzNf05STbv24iiGuiuuH0mDPlcGAjD9RoOJ86R8WgRvwcS
 zuCOxKqDrckEXcIhXNV9+iMjppY5kTsDrjULG1ewxqqLknxiTT48b/eu1Bk=
 -----END RFC3161 TOKEN-----

Timestamp: https://tsa.cesnet.cz:3162/tsa
 Info: Timestamp generated with GitTrustedTimestamps by Mabulous GmbH

 Version: 1
 Policy OID: 1.3.6.1.4.1.22408.1.2.3.45
 Hash Algorithm: sha1
 Message data:
     0000 - 92 c6 9a 74 9f d2 9e 1a-a5 7f 40 37 2c 25 44 96   ...t......@7,%D.
     0010 - 53 34 a7 13                                       S4..
 Serial number: 0x7A8A2B44AC62950C
 Time stamp: Jan 24 07:49:58 2025 GMT
 Accuracy: unspecified
 Ordering: no
 Nonce: 0xDA6CF555C1DFAFE5
 TSA: DirName:/DC=cz/DC=cesnet-ca/O=CESNET/CN=tsa.cesnet.cz
 Extensions:

 -----BEGIN RFC3161 TOKEN-----
 MIID1QYJKoZIhvcNAQcCoIIDxjCCA8ICAQMxDzANBglghkgBZQMEAgEFADCBzgYL
 KoZIhvcNAQkQAQSggb4EgbswgbgCAQEGDCsGAQQBga8IAQIDLTAhMAkGBSsOAwIa
 BQAEFJLGmnSf0p4apX9ANywlRJZTNKcTAgh6iitErGKVDBgPMjAyNTAxMjQwNzQ5
 NThaAgkA2mz1VcHfr+WgXKRaMFgxEjAQBgoJkiaJk/IsZAEZFgJjejEZMBcGCgmS
 JomT8ixkARkWCWNlc25ldC1jYTEPMA0GA1UECgwGQ0VTTkVUMRYwFAYDVQQDDA10
 c2EuY2VzbmV0LmN6MYIC2TCCAtUCAQEwbDBgMRIwEAYKCZImiZPyLGQBGRYCY3ox
 GTAXBgoJkiaJk/IsZAEZFgljZXNuZXQtY2ExEjAQBgNVBAoMCUNFU05FVCBDQTEb
 MBkGA1UEAwwSUGVyc29uYWwgU2lnbmluZyAyAghq94ZoOsDXcDANBglghkgBZQME
 AgEFAKCCAT4wGgYJKoZIhvcNAQkDMQ0GCyqGSIb3DQEJEAEEMBwGCSqGSIb3DQEJ
 BTEPFw0yNTAxMjQwNzQ5NThaMC0GCSqGSIb3DQEJNDEgMB4wDQYJYIZIAWUDBAIB
 BQChDQYJKoZIhvcNAQELBQAwLwYJKoZIhvcNAQkEMSIEIPy+31mLtwGGWfAlLvs4
 n1Aj3FmMKY3oYiITWP+zYrXNMIGhBgsqhkiG9w0BCRACDDGBkTCBjjCBizCBiAQU
 UCTsC5lLIjDwCg+Qpg0dKB0bP74wcDBkpGIwYDESMBAGCgmSJomT8ixkARkWAmN6
 MRkwFwYKCZImiZPyLGQBGRYJY2VzbmV0LWNhMRIwEAYDVQQKDAlDRVNORVQgQ0Ex
 GzAZBgNVBAMMElBlcnNvbmFsIFNpZ25pbmcgMgIIaveGaDrA13AwDQYJKoZIhvcN
 AQELBQAEggEAIUSByFz8bCvjsuHURClzt4bi4L/RTzjHOocrYUZXqx9h9ehyP/9X
 DEdw5NbSHinetUqFrLutvozINX64uXgVI2rHB3cFnwuGpJTAZb1+IHuatdAhDasO
 WBWpI51pD12pDNKaYCQYe5/a4ZLlWe/TwkEi5bx9lsaMSW6aWmoR66HMWJtyxUOs
 6GYzuxZsWsyIAgsbj7BdBDK/fMH/tbcNf/SpJ+DjdIirC7gSw839BlRv527Z2q6E
 V6mgIr+ldgItphV9/M0XWOv6PodaPeUh+JU76Cl5lEx2QV4A94TWGY1vhiVHIL81
 nljGBp9s16YNQX52XTTEcyUP0yRvWz10bA==
 -----END RFC3161 TOKEN-----
 2025-01-24 13:34:58 +05:45
Artur Neumann f397c5f7fd set execute permission on hooks 
that way one does not need to remember to set the permissions after
copieng the hooks
 2025-01-24 13:34:46 +05:45
Artur Neumann 24f4f7d071 -----TIMESTAMP COMMIT----- 
Version: 1

Algorithm: sha1

Preimage: version:1,parent:d134bc0c11b63ada9066cd74202b3c0c5ef84d2b,tree:baf5cc2f3b049ce7962af5ec9d89838b5a23f5a1

Digest: c73f263761221a420ea9708f4b0942c328d100d6

Timestamp: https://freetsa.org/tsr
 Info: Timestamp generated with GitTrustedTimestamps by Mabulous GmbH

 Version: 1
 Policy OID: tsa_policy1
 Hash Algorithm: sha1
 Message data:
     0000 - c7 3f 26 37 61 22 1a 42-0e a9 70 8f 4b 09 42 c3   .?&7a".B..p.K.B.
     0010 - 28 d1 00 d6                                       (...
 Serial number: 0x04F6F4C0
 Time stamp: Jan 10 10:40:57 2025 GMT
 Accuracy: unspecified
 Ordering: yes
 Nonce: 0x063214AB522ED97C
 TSA: DirName:/O=Free TSA/OU=TSA/description=This certificate digitally signs documents and time stamp requests made using the freetsa.org online services/CN=www.freetsa.org/emailAddress=busilezas@gmail.com/L=Wuerzburg/C=DE/ST=Bayern
 Extensions:

 -----BEGIN RFC3161 TOKEN-----
 MIIFNwYJKoZIhvcNAQcCoIIFKDCCBSQCAQMxDzANBglghkgBZQMEAgMFADCCAX4G
 CyqGSIb3DQEJEAEEoIIBbQSCAWkwggFlAgEBBgQqAwQBMCEwCQYFKw4DAhoFAAQU
 xz8mN2EiGkIOqXCPSwlCwyjRANYCBAT29MAYDzIwMjUwMTEwMTA0MDU3WgEB/wII
 BjIUq1Iu2XygggERpIIBDTCCAQkxETAPBgNVBAoTCEZyZWUgVFNBMQwwCgYDVQQL
 EwNUU0ExdjB0BgNVBA0TbVRoaXMgY2VydGlmaWNhdGUgZGlnaXRhbGx5IHNpZ25z
 IGRvY3VtZW50cyBhbmQgdGltZSBzdGFtcCByZXF1ZXN0cyBtYWRlIHVzaW5nIHRo
 ZSBmcmVldHNhLm9yZyBvbmxpbmUgc2VydmljZXMxGDAWBgNVBAMTD3d3dy5mcmVl
 dHNhLm9yZzEiMCAGCSqGSIb3DQEJARYTYnVzaWxlemFzQGdtYWlsLmNvbTESMBAG
 A1UEBxMJV3VlcnpidXJnMQswCQYDVQQGEwJERTEPMA0GA1UECBMGQmF5ZXJuMYID
 ijCCA4YCAQEwgaMwgZUxETAPBgNVBAoTCEZyZWUgVFNBMRAwDgYDVQQLEwdSb290
 IENBMRgwFgYDVQQDEw93d3cuZnJlZXRzYS5vcmcxIjAgBgkqhkiG9w0BCQEWE2J1
 c2lsZXphc0BnbWFpbC5jb20xEjAQBgNVBAcTCVd1ZXJ6YnVyZzEPMA0GA1UECBMG
 QmF5ZXJuMQswCQYDVQQGEwJERQIJAMHphhYNqOmCMA0GCWCGSAFlAwQCAwUAoIG4
 MBoGCSqGSIb3DQEJAzENBgsqhkiG9w0BCRABBDAcBgkqhkiG9w0BCQUxDxcNMjUw
 MTEwMTA0MDU3WjArBgsqhkiG9w0BCRACDDEcMBowGDAWBBSRbaPYYOzKguNLxZ0X
 k+fpaIdfFDBPBgkqhkiG9w0BCQQxQgRA6Qbf3HNOUNu5/0pHPx5swXaNr4Etmobg
 QDDhrgdgqkw8DHLoiyD88z9XGkmOPVoSf469hXWV7c9GO36Aeha1qjANBgkqhkiG
 9w0BAQEFAASCAgBHXQyRkOkAVvMDazcZuE8wVNI9vUKdRmVr0fl6LXMq+5uTjjrC
 kciI5hJK83HCsnkeLzCZc4v3TKfpdItyalnJIrW6CDI82EzbkwvzkYO+UePlOhOw
 AS3Cr2PmzH1JDhb/1c7+6B2AEFRuCuBIRNk/D840VYadmPS7cJd6mL7zNq4VTDoh
 4VriA/TPWpPMkO4Kn6fQIL5LI/sYOU1q/9kpMhnJfTezJ1U4RPefuLKivVkm1JUp
 dh4sDBFQXN72inmNYYy/I0DJW7rUaabg+9IfPWjMKGfkG6Q84C42oXyw+TdQW7BF
 La+bbTOQ8+nFHr4qQdE11TiH5kf6omI4X/AWNqacuKyAN6FX6V1hSBxnMUgQcP0j
 QJT5Xz0EiGn9gXamFjDg9Y6YX7hy2OsmxwS0kFE4yNZwkrNjnel6b16ptivYjofc
 rEKbtOf442QR1nzTlg+SDt5eGMoF0ym7up3Yhyz/b0MG9sJzFu/83Q6tpYmr7fC1
 8TcZtMK4S+UuiWkAPO3NoEnPHsTiI1v5m/vQ9TsGs9NftBlQrZBrw+qmFRgS7wFm
 NaWfsZdu56bPDYVrhe/1fIpoV/JMlB7ywJt6pm8A0/MgyvKZ1YRuSqZqySpjxKjh
 uvUYnjQZG0WROBCOW1L7L9J+urrbky6TgR90SnAucAYgiXoOVYm7k31vHQ==
 -----END RFC3161 TOKEN-----
 2025-01-10 16:25:58 +05:45
Artur Neumann d134bc0c11 fix comparison 
spaces are needed around the comparison operator.

See https://github.com/koalaman/shellcheck/wiki/SC2077

This fixes the issue that even `validate.sh` finds an issue the return
code is `0`
 2025-01-10 16:24:48 +05:45
Artur Neumann 1e605e2546 -----TIMESTAMP COMMIT----- 
Version: 1

Algorithm: sha1

Preimage: version:1,parent:0e523bd1eebd78ea32cbea9039430e524b03fdc7,tree:3ef134ca2565fbc752c0a64f70c7b5626180e9e3

Digest: 428d55f092cb5f9d755e71aec632bcdca3ac5a79

Timestamp: https://freetsa.org/tsr
 Info: Timestamp generated with GitTrustedTimestamps by Mabulous GmbH

 Version: 1
 Policy OID: tsa_policy1
 Hash Algorithm: sha1
 Message data:
     0000 - 42 8d 55 f0 92 cb 5f 9d-75 5e 71 ae c6 32 bc dc   B.U..._.u^q..2..
     0010 - a3 ac 5a 79                                       ..Zy
 Serial number: 0x04F6D723
 Time stamp: Jan 10 10:08:05 2025 GMT
 Accuracy: unspecified
 Ordering: yes
 Nonce: 0xC9B0B1E16D30B23C
 TSA: DirName:/O=Free TSA/OU=TSA/description=This certificate digitally signs documents and time stamp requests made using the freetsa.org online services/CN=www.freetsa.org/emailAddress=busilezas@gmail.com/L=Wuerzburg/C=DE/ST=Bayern
 Extensions:

 -----BEGIN RFC3161 TOKEN-----
 MIIFOAYJKoZIhvcNAQcCoIIFKTCCBSUCAQMxDzANBglghkgBZQMEAgMFADCCAX8G
 CyqGSIb3DQEJEAEEoIIBbgSCAWowggFmAgEBBgQqAwQBMCEwCQYFKw4DAhoFAAQU
 Qo1V8JLLX511XnGuxjK83KOsWnkCBAT21yMYDzIwMjUwMTEwMTAwODA1WgEB/wIJ
 AMmwseFtMLI8oIIBEaSCAQ0wggEJMREwDwYDVQQKEwhGcmVlIFRTQTEMMAoGA1UE
 CxMDVFNBMXYwdAYDVQQNE21UaGlzIGNlcnRpZmljYXRlIGRpZ2l0YWxseSBzaWdu
 cyBkb2N1bWVudHMgYW5kIHRpbWUgc3RhbXAgcmVxdWVzdHMgbWFkZSB1c2luZyB0
 aGUgZnJlZXRzYS5vcmcgb25saW5lIHNlcnZpY2VzMRgwFgYDVQQDEw93d3cuZnJl
 ZXRzYS5vcmcxIjAgBgkqhkiG9w0BCQEWE2J1c2lsZXphc0BnbWFpbC5jb20xEjAQ
 BgNVBAcTCVd1ZXJ6YnVyZzELMAkGA1UEBhMCREUxDzANBgNVBAgTBkJheWVybjGC
 A4owggOGAgEBMIGjMIGVMREwDwYDVQQKEwhGcmVlIFRTQTEQMA4GA1UECxMHUm9v
 dCBDQTEYMBYGA1UEAxMPd3d3LmZyZWV0c2Eub3JnMSIwIAYJKoZIhvcNAQkBFhNi
 dXNpbGV6YXNAZ21haWwuY29tMRIwEAYDVQQHEwlXdWVyemJ1cmcxDzANBgNVBAgT
 BkJheWVybjELMAkGA1UEBhMCREUCCQDB6YYWDajpgjANBglghkgBZQMEAgMFAKCB
 uDAaBgkqhkiG9w0BCQMxDQYLKoZIhvcNAQkQAQQwHAYJKoZIhvcNAQkFMQ8XDTI1
 MDExMDEwMDgwNVowKwYLKoZIhvcNAQkQAgwxHDAaMBgwFgQUkW2j2GDsyoLjS8Wd
 F5Pn6WiHXxQwTwYJKoZIhvcNAQkEMUIEQKR4DpvUtZonK5BM7DykS6qcAH3E8gBj
 k8Vuox9uKuVN0d0ASvKm0FiSiErbpKYZ1UbGM7dGRqSN+UAfTvNS1oUwDQYJKoZI
 hvcNAQEBBQAEggIARq0Am0lVhNjpGocNEN9qB2Cg3s8Z6Mj3h8k7FmSutPKK/QrM
 FMhOWeMZonYpiKr7HGuOgwAeHbLkdhwJD3YBo9VyFtP+6p8YPattgr+HjHxlKQkE
 7klDimjw3HuCpbPXcd3PJBKIFdUCRiwSh+53O26oW5MTqPvEv7SitYeUEydOb/G+
 GbcmWkUnzrn6LYvsQuLCWtGb5Lpw2tbeeUZNOvD4ToBBz4ZFd7eoCyh6TWtv0Bix
 uakZ7WfNIeSOdmjPyQvBBOjDoD1J6qibYu83cOQzwKWXd6R+f7g2o89f8CtIdL4o
 1dTzokAtYTH/bobDk85Z/ZAPA7GFo6D6Za9lNMTMiQm3LeRKji5bZrQ8KiEVTLAW
 ycINQAuXrDOP+mydYbAnmyUmdvA3CoNgIh/0E8r/TQxdBKycnpwySyF4VxFjga59
 SO0yVZCflowTDz2BjZYfVhnWvSVbPV4x04QxaeRbP3tNHxinpdVj+Hor7is9emna
 O/sowOuh6rPZF7G3HligQVZRinxpiH7DJ1KDV9kvqeEuLVQDBICTRCgllTyqmrCL
 NnIxtAYbTfxAkoySxr0kbbWWFo9hcU2dAIbd1U6JlSvYV757fwBGw5Ayi+RgfkYP
 4Cmo2vCepmHhasz7pKAE7CoGW07xbCQ0Z0n6HFF9cJ7mlB44EtqlT8rQDto=
 -----END RFC3161 TOKEN-----
 2025-01-10 15:53:05 +05:45
Artur Neumann 0e523bd1ee fix running validate with -v 
running ./.git/hooks/validate.sh -v gives me

Assertion failed: Precondition: hash -v must have length 64.
Backtrace:
  [1]: ./.git/hooks/timestamping : extract_token_from_commit line 200
  [2]: ./.git/hooks/validate.sh : validate_commit line 97
  [3]: ./.git/hooks/validate.sh : validate_commit_and_parents line 300
  [4]: ./.git/hooks/validate.sh : main line 329

this commit fixes the issue
 2025-01-10 15:52:58 +05:45