encrypt/gancio
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix digest httpsignature header

Browse Source
This commit is contained in:
les
2021-03-18 17:57:37 +01:00
parent 5bb7a709aa
commit e95096dd97
1 changed files with 4 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
server/federation/helpers.js
View File

@@ -34,7 +34,6 @@ const Helpers = {
}, },
async signAndSend (message, inbox) { async signAndSend (message, inbox) {
log.debug('sign and send', inbox)
// get the URI of the actor object and append 'inbox' to it // get the URI of the actor object and append 'inbox' to it
const inboxUrl = new url.URL(inbox) const inboxUrl = new url.URL(inbox)
const privkey = settingsController.secretSettings.privateKey const privkey = settingsController.secretSettings.privateKey
@@ -44,26 +43,26 @@ const Helpers = {
const digest = crypto.createHash('sha256') const digest = crypto.createHash('sha256')
.update(message) .update(message)
.digest('base64') .digest('base64')
const stringToSign = `(request-target): post ${inboxUrl.pathname}\nhost: ${inboxUrl.hostname}\ndate: ${d.toUTCString()}\ndigest: ${digest}` const stringToSign = `(request-target): post ${inboxUrl.pathname}\nhost: ${inboxUrl.hostname}\ndate: ${d.toUTCString()}\ndigest: SHA-256=${digest}`
signer.update(stringToSign) signer.update(stringToSign)
signer.end() signer.end()
const signature = signer.sign(privkey) const signature = signer.sign(privkey)
const signature_b64 = signature.toString('base64') const signature_b64 = signature.toString('base64')
const header = `keyId="${config.baseurl}/federation/u/${settingsController.settings.instance_name}",headers="(request-target) host date digest",signature="${signature_b64}"` const header = `keyId="${config.baseurl}/federation/u/${settingsController.settings.instance_name}",algorithm="rsa-sha265",headers="(request-target) host date digest",signature="${signature_b64}"`
try { try {
const ret = await axios(inbox, { const ret = await axios(inbox, {
headers: { headers: {
Host: inboxUrl.hostname, Host: inboxUrl.hostname,
Date: d.toUTCString(), Date: d.toUTCString(),
Signature: header, Signature: header,
Digest: `SHA256=${digest}`, Digest: `SHA-256=${digest}`,
'Content-Type': 'application/activity+json; charset=utf-8', 'Content-Type': 'application/activity+json; charset=utf-8',
Accept: 'application/activity+json, application/json; chartset=utf-8' Accept: 'application/activity+json, application/json; chartset=utf-8'
}, },
method: 'post', method: 'post',
data: message data: message
}) })
log.debug(`sign ${ret.status} => ${ret.data}`) log.debug(`signed ${ret.status} => ${ret.data}`)
} catch (e) { } catch (e) {
log.error(`Response: ${e.response.status} ${e.response.data}`) log.error(`Response: ${e.response.status} ${e.response.data}`)
} }