myriation/doipjs
1
0
Fork 0
forked from Mirrors/doipjs
Code Pull requests Packages 1 Activity

Fix signature profile verification

Browse source
This commit is contained in:
Yarmo Mackenbach 2022-03-25 23:16:46 +01:00
parent fb101d8227
commit fcaf5215b4
No known key found for this signature in database
GPG key ID: 37367F4AF4087AD1
1 changed files with 17 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
src/signatures.js
View file

@ -45,13 +45,15 @@ const process = async (signature) => {
}
}
// Read the signature
try {
sigData = await openpgp.readCleartextMessage({
cleartextMessage: signature
})
} catch (error) {
throw new Error(`Signature could not be read (${error})`)
} catch (e) {
throw new Error(`Signature could not be read (${e.message})`)
}
const issuerKeyID = sigData.signature.packets[0].issuerKeyID.toHex()
const signersUserID = sigData.signature.packets[0].signersUserID
const preferredKeyServer =
@ -103,10 +105,22 @@ const process = async (signature) => {
result.key.data = await keys.fetchURI(result.key.uri)
result.key.fetchMethod = 'hkp'
} catch (e) {
throw new Error('key_not_found')
throw new Error('Public key not found')
}
}
// Verify the signature
const verificationResult = await openpgp.verify({
message: sigData,
verificationKeys: result.key.data
})
const { verified } = verificationResult.signatures[0]
try {
await verified
} catch (e) {
throw new Error(`Signature could not be verified (${e.message})`)
}
result.fingerprint = result.key.data.keyPacket.getFingerprint()
result.users[0].claims.forEach((claim) => {