From 62ea6a86d8405bbd147d45ff905d640d9a6f1bb3 Mon Sep 17 00:00:00 2001 From: ianhundere <138915+ianhundere@users.noreply.github.com> Date: Fri, 22 Mar 2024 12:05:19 -0400 Subject: [PATCH] removes faulty checks that raise error when local_scheme not passed. --- securesystemslib/signer/_aws_signer.py | 15 --------------- 1 file changed, 15 deletions(-) diff --git a/securesystemslib/signer/_aws_signer.py b/securesystemslib/signer/_aws_signer.py index 586f013f..06a680c3 100644 --- a/securesystemslib/signer/_aws_signer.py +++ b/securesystemslib/signer/_aws_signer.py @@ -147,21 +147,6 @@ def import_( else: raise ValueError(f"Unsupported key type: {keytype}") - if keytype == "ecdsa" and local_scheme != cls._get_ecdsa_scheme( - aws_scheme - ): - raise ValueError( - f"The AWS KMS key does not support the scheme: {local_scheme}" - ) - - if ( - keytype == "rsa" - and local_scheme not in cls.aws_signing_algorithms.values() - ): - raise ValueError( - f"The AWS KMS key does not support the scheme: {local_scheme}" - ) - kms_pubkey = serialization.load_der_public_key(request["PublicKey"]) public_key_pem = kms_pubkey.public_bytes(