myriation/keyoxide-web
1
0
Fork 0
forked from Mirrors/keyoxide-web
Code Pull requests Activity

Fix signature profile generation

Browse source
This commit is contained in:
Yarmo Mackenbach 2022-02-26 15:09:44 +01:00
parent f51afd2ead
commit e5265a899d
No known key found for this signature in database
GPG key ID: 37367F4AF4087AD1
1 changed files with 6 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
server/keys.js
View file

@ -138,7 +138,9 @@ const fetchSignature = (signature) => {
// Check validity of signature
let signatureData
try {
signatureData = await openpgp.cleartext.readArmored(signature)
signatureData = await openpgp.readCleartextMessage({
cleartextMessage: signature
})
} catch (error) {
reject(new Error(`Signature could not be properly read (${error.message})`))
}
@ -161,10 +163,10 @@ const fetchSignature = (signature) => {
// Check validity of signature
const verified = await openpgp.verify({
message: signatureData,
publicKeys: output.publicKey
verificationKeys: output.publicKey
})
const { valid } = verified.signatures[0]
if (!valid) {
if (!await verified.signatures[0].verified) {
reject(new Error('Signature was invalid'))
}