Merge pull request #1840 from MVrachev/from-securesystemslib-key-sslib-error

Key.from_securesystemslib_key() raise ValueError

Author: Lukas Pühringer

tests/test_api.py

@@ -379,6 +379,11 @@ def test_key_class(self) -> None:
         key = Key.from_securesystemslib_key(sslib_key)
         self.assertFalse("private" in key.keyval.keys())
 
+        # Test raising ValueError with non-existent keytype
+        sslib_key["keytype"] = "bad keytype"
+        with self.assertRaises(ValueError):
+            Key.from_securesystemslib_key(sslib_key)
+
     def test_root_add_key_and_remove_key(self) -> None:
         root_path = os.path.join(self.repo_dir, "metadata", "root.json")
         root = Metadata[Root].from_file(root_path)

tuf/api/metadata.py

@@ -620,12 +620,22 @@ def from_securesystemslib_key(cls, key_dict: Dict[str, Any]) -> "Key":
 
         Args:
             key_dict: Key in securesystemlib dict representation.
+
+        Raises:
+            ValueError: ``key_dict`` value is not following the securesystemslib
+                format.
         """
-        key_meta = sslib_keys.format_keyval_to_metadata(
-            key_dict["keytype"],
-            key_dict["scheme"],
-            key_dict["keyval"],
-        )
+        try:
+            key_meta = sslib_keys.format_keyval_to_metadata(
+                key_dict["keytype"],
+                key_dict["scheme"],
+                key_dict["keyval"],
+            )
+        except sslib_exceptions.FormatError as e:
+            raise ValueError(
+                "key_dict value is not following the securesystemslib format"
+            ) from e
+
         return cls(
             key_dict["keyid"],
             key_meta["keytype"],