mirrors/dendrite
1
0
Fork 0
mirror of https://github.com/matrix-org/dendrite.git synced 2024-11-22 14:21:55 -06:00
Code Issues Packages Projects Releases Wiki Activity

Allow verification without specifying a server name

Browse source
This commit is contained in:
Brendan Abolivier 2017-09-04 15:03:36 +01:00
parent 9344201031
commit fd27afbf82
No known key found for this signature in database
GPG key ID: 8EF1500759F70623
1 changed files with 26 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

33
src/github.com/matrix-org/dendrite/common/threepid/checksignature.go
View file

@ -30,18 +30,37 @@ import (
// Returns nil if all the verifications succeeded.
// Returns an error if something failed in the process.
func CheckIDServerSignatures(idServer string, signatures map[string]map[string]string, marshalledBody []byte) error {
// TODO: Check if the domain is part of a list of trusted ID servers
idServerSignatures, ok := signatures[idServer]
if !ok {
return errors.New("No signature for domain " + idServer)
if len(idServer) > 0 {
// TODO: Check if the domain is part of a list of trusted ID servers
idServerSignatures, ok := signatures[idServer]
if !ok {
return errors.New("No signature for domain " + idServer)
}
return retrieveAndVerify(idServer, idServerSignatures, marshalledBody)
}
for keyID := range idServerSignatures {
pubKey, err := queryIDServerPubKey(idServer, keyID)
for domain, sigs := range signatures {
if err := retrieveAndVerify(domain, sigs, marshalledBody); err != nil {
return err
}
}
return nil
}
// retrieveAndVerify iterates over a given set of signatures and, for each of them,
// requests the corresponding public key to the identity server and verify the
// signature.
// Returns an error if the verification failed or if something went wrong in the
// process.
func retrieveAndVerify(domain string, signatures map[string]string, marshalledBody []byte) error {
for keyID := range signatures {
pubKey, err := queryIDServerPubKey(domain, keyID)
if err != nil {
return err
}
if err = gomatrixserverlib.VerifyJSON(idServer, gomatrixserverlib.KeyID(keyID), pubKey, marshalledBody); err != nil {
if err = gomatrixserverlib.VerifyJSON(domain, gomatrixserverlib.KeyID(keyID), pubKey, marshalledBody); err != nil {
return err
}
}