Fcalva/chibi-scheme
1
0
Fork 0
mirror of https://github.com/ashinn/chibi-scheme.git synced 2025-05-19 05:39:18 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

Handling missing rsa signatures in verify command.

Browse source 
Making automatic verification opt-in.
This commit is contained in:
Alex Shinn 2015-05-02 21:45:54 +09:00
parent f958a82028
commit a11ef977a8
1 changed files with 16 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
lib/chibi/snow/commands.scm
View file

@ -834,13 +834,21 @@
(sig (assoc-get sig-spec 'rsa)) (sig (assoc-get sig-spec 'rsa))
(rsa-key-sexp (or (and (string? email) (rsa-key-sexp (or (and (string? email)
(find (rsa-identity=? email) keys)) (find (rsa-identity=? email) keys))
(car keys))) (car keys))))
(rsa-key (extract-rsa-public-key rsa-key-sexp)) (cond
((not email)
(show #t "invalid signature - no email: " sig-spec))
((not sig)
(show #t "no rsa signature in key for: " email))
((not rsa-key-sexp)
(show #t "couldn't find public key in repo for: " email))
(else
(let* ((rsa-key (extract-rsa-public-key rsa-key-sexp))
(cipher (rsa-verify rsa-key (hex-string->bytevector sig))) (cipher (rsa-verify rsa-key (hex-string->bytevector sig)))
(digest-bv (hex-string->bytevector digest))) (digest-bv (hex-string->bytevector digest)))
(if (equal? cipher digest-bv) (if (equal? cipher digest-bv)
(show #t "signature valid " nl) (show #t "signature valid " nl)
(show #t "signature invalid " cipher " != " digest-bv nl)))) (show #t "signature invalid " cipher " != " digest-bv nl)))))))
;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
;; Upload - upload a package. ;; Upload - upload a package.
@ -1798,7 +1806,7 @@
(define (package-maybe-signature-mismatches repo impl cfg pkg raw) (define (package-maybe-signature-mismatches repo impl cfg pkg raw)
(cond (cond
((conf-get cfg 'ignore-signature?) #f) ((conf-get cfg 'ignore-signature? #t) #f)
((not (assq 'signature (cdr pkg))) ((not (assq 'signature (cdr pkg)))
(and (conf-get cfg 'require-signature?) (and (conf-get cfg 'require-signature?)
(not (yes-or-no? cfg "Package signature missing.\nProceed anyway?")) (not (yes-or-no? cfg "Package signature missing.\nProceed anyway?"))