Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Properly verify the publickey signing #1

Merged
merged 4 commits into from
Jun 1, 2022
Merged

Conversation

zeripath
Copy link

@zeripath zeripath commented Jun 1, 2022

Signed-off-by: Andrew Thornton art27@cantab.net

Signed-off-by: Andrew Thornton <art27@cantab.net>
@42wim
Copy link
Owner

42wim commented Jun 1, 2022

I'm testing with your changes and I'm getting
2022/06/01 22:41:54 ...ces/auth/httpsign.go:76:Verify() [D] [6297cf12-4] VerifyPubKey on request from [x.x.x.x]:45452: failed: ssh: short read

Fixed by using ParseAuthorizedKey

Signed-off-by: Andrew Thornton <art27@cantab.net>
services/auth/httpsign.go Outdated Show resolved Hide resolved
Signed-off-by: Andrew Thornton <art27@cantab.net>
Signed-off-by: Andrew Thornton <art27@cantab.net>
@42wim
Copy link
Owner

42wim commented Jun 1, 2022

Just tested your changes, works fine with certificate and pub/priv key
Let me know if I can merge

@zeripath
Copy link
Author

zeripath commented Jun 1, 2022

OK I think that's it.

The original code wasn't actually verifying that public key we'd found actually signed the request.

@42wim
Copy link
Owner

42wim commented Jun 1, 2022

The original code wasn't actually verifying that public key we'd found actually signed the request.

Yes, I was a bit too fast there.

@zeripath
Copy link
Author

zeripath commented Jun 1, 2022

no problem I hope you don't mind the pr to your pr

@42wim
Copy link
Owner

42wim commented Jun 1, 2022

No of course not 👍

@42wim 42wim merged commit c3ad5e8 into 42wim:httpsign Jun 1, 2022
@zeripath zeripath deleted the httpsign branch December 29, 2022 19:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants