alemi/upub
alemi/upub
1
0
Fork 1
Code Issues 4 Pull requests Projects Releases Packages 1 Wiki Activity Actions

fix: force overrule signature algorithm

Browse source 
really what?????
This commit is contained in:
əlemi 2024-04-13 03:03:54 +02:00
parent 70c978caa0
commit 3a48e91655
Signed by: alemi
GPG key ID: A4895B84D311642C
1 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
src/server/fetcher.rs
View file

@ -6,7 +6,7 @@ use openssl::{hash::MessageDigest, pkey::{PKey, Private}, sign::Signer};
use reqwest::{header::{CONTENT_TYPE, USER_AGENT}, Method}; use reqwest::{header::{CONTENT_TYPE, USER_AGENT}, Method};
use sea_orm::{DatabaseConnection, EntityTrait, IntoActiveModel}; use sea_orm::{DatabaseConnection, EntityTrait, IntoActiveModel};
use crate::{errors::UpubError, model, VERSION}; use crate::{model, VERSION};
use super::Context; use super::Context;
@ -45,7 +45,7 @@ impl Fetcher {
.header("Host", host.clone()) .header("Host", host.clone())
.header("Date", date.clone()); .header("Date", date.clone());
let mut signature_cfg = Config::new(); let mut signature_cfg = Config::new().mastodon_compat();
let mut to_sign_raw = format!("(request-target): post {path}\nhost: {host}\ndate: {date}"); let mut to_sign_raw = format!("(request-target): post {path}\nhost: {host}\ndate: {date}");
let mut headers_to_inspect = "(request-target) host date"; let mut headers_to_inspect = "(request-target) host date";
@ -61,7 +61,6 @@ impl Fetcher {
} }
let signature_header_lib = signature_cfg let signature_header_lib = signature_cfg
.mastodon_compat()
.begin_sign("POST", &path, headers) .begin_sign("POST", &path, headers)
.unwrap() .unwrap()
.sign(format!("{from}#main-key"), |to_sign| { .sign(format!("{from}#main-key"), |to_sign| {
@ -72,7 +71,8 @@ impl Fetcher {
Ok(signature) as crate::Result<_> Ok(signature) as crate::Result<_>
}) })
.unwrap() .unwrap()
.signature_header(); .signature_header()
.replace("hs2019", "rsa-sha256"); // TODO what the fuck??? why isn't this customizable???
let signature_header = { let signature_header = {
let mut signer = Signer::new(MessageDigest::sha256(), key).unwrap(); let mut signer = Signer::new(MessageDigest::sha256(), key).unwrap();