tree 8faed378fcce8fc3339618df5d2b28caefdb22e9
parent 9bb6804526991bffca3b19d65c610a747df6e60a
author Erick Tryzelaar <etryzelaar@google.com> 1553311593 -0700
committer Erick Tryzelaar <etryzelaar@google.com> 1554217637 -0700

Fix checking if metadata version number is correct

In TUF 1.0, the snapshot and timestamp metadata only requires that it
contains the version number of the target files. To be backwards
compatible, I added support to generate these files that includes the
version number, but the logic to confirm if version matched was
incorrect.

It assumed that the version number was in the snapshot/timestamp
metadata, and could error out if the snapshot/timestamp was generated by
an older go-tuf that didn't insert the version numbers. This patch
changes the check to only verify versions if the version number is
present in the snapshot/timestamp. It also includes a number of tests to
make sure the logic is correct.

Change-Id: I97e5f5cdf847e3326027d58c7a191c033e70050b