Skip to content

Allow mirrored log origins to be configured#1067

Merged
AlCutter merged 3 commits into
transparency-dev:mainfrom
AlCutter:mirror_origin
Jul 21, 2026
Merged

Allow mirrored log origins to be configured#1067
AlCutter merged 3 commits into
transparency-dev:mainfrom
AlCutter:mirror_origin

Conversation

@AlCutter

Copy link
Copy Markdown
Collaborator

This PR updates the MTC mirror lifecycle & POSIX implementation to honour configured log origins.

This is required due to the ID and CA cosigner OID-based naming rules in the MTC spec.

Towards #945

@AlCutter
AlCutter requested a review from roger2hk July 21, 2026 12:44
@AlCutter
AlCutter requested a review from a team as a code owner July 21, 2026 12:44
o = c.Verifier.Name()
}
if _, seen := seenOrigins[o]; seen {
slog.ErrorContext(ctx, "Duplicate origin in mirror config", slog.String("origin", o))

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should this fail and exit immediately?

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good spot, yes it probably should - I don't love that a bad config will take the service out, but I don't think there's a safe way to easily continue here.

Updated to exit.

Comment thread mirror_lifecycle.go Outdated
}

// WithOrigin allows the source log's origin to be specified.
// If unsed, the name of the log verifier will be used.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
// If unsed, the name of the log verifier will be used.
// If unset, the name of the log verifier will be used.

@AlCutter
AlCutter merged commit db7eca7 into transparency-dev:main Jul 21, 2026
20 checks passed
@AlCutter
AlCutter deleted the mirror_origin branch July 21, 2026 17:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants