cursive

library0.2.3pypypi✓ verified 84d ago

cursive is an OpenStack library for validating digital signatures, primarily used in Glance and other OpenStack services to verify image signatures. Version 0.2.3 implements OpenStack-specific signature validation. It has a low release cadence, with no recent major updates.

auth-security

pip install cursive

package ↗homepage ↗

INSTALL

IMPORT

SIG · CURSIVE

cursive

auth-securitypythonv0.2.3

harness data pending

Install & Compatibility

Where this runs

No compatibility data collected yet for this library.

Code

Verified usage

Verified import paths — ran on the pinned version, not inferred.

pbr

✓ from cursive import pbr

✗ from cursive import validate_signature

Basic signature validation using cursive. Requires a key manager for production.

from cursive import validate_signature # OpenStack image signature validation image_data = b'...' # binary image content signature = b'...' # base64 decoded signature certificate = b'...' # PEM encoded certificate # Example using a mock key_manager (castellan required for real usage) # result = validate_signature(image_data, signature, certificate) # print(result) print('Signature validation requires OpenStack key management setup.')

Debug

Known issues

gotchacursive depends on castellan for key management, which is often not installed by default. Without castellan, most validation functions will fail with an import error.

fix

Install castellan: pip install castellan

affects: all

deprecatedThe function `validate_signature` may be deprecated in favor of `CursiveSignatureVerifier` in future releases. Check documentation for current usage.

fix

Use CursiveSignatureVerifier class for forward compatibility.

affects: >=0.2.0

gotchaSignature validation requires a specific chain of trust: certificate -> intermediate CAs. Cursive does not handle certificate chain building; you must provide the full chain.

fix

Ensure the certificate argument includes the complete chain (leaf and intermediates) if needed.

affects: all

Upgrade

Version history

0.2.3latest on PyPI · released Nov 21, 2022

Audit

Dependencies

castellanoptionalKey management interface for signature verification.

cryptographyrequiredCore cryptographic operations for signature validation.

Agent activity

23 hits · last 30 days

node

OpenAI (training)

Resources

packagehttps://pypi.org/project/cursive/ ↗

homepagehttp://www.openstack.org/ ↗