indymedia
/
epicyon
mirror of https://gitlab.com/bashrc2/epicyon
7
4
Fork 1
Code Issues 14 Releases Wiki Activity

Separate cases

merge-requests/30/head
Bob Mottram 2019-11-12 18:48:29 +00:00
parent f2b295ed7b
commit 808b5a4c8b
1 changed files with 13 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
httpsig.py
View File

@ -191,7 +191,7 @@ def verifyPostHeaders(httpPrefix: str,publicKeyPem: str,headers: dict, \
signedHeaderList.append(f'digest: SHA-256={bodyDigest}') signedHeaderList.append(f'digest: SHA-256={bodyDigest}')
#print('***************************Verify digest: SHA-256='+bodyDigest) #print('***************************Verify digest: SHA-256='+bodyDigest)
#print('***************************Verify messageBodyJsonStr: '+messageBodyJsonStr) #print('***************************Verify messageBodyJsonStr: '+messageBodyJsonStr)
elif signedHeader == 'content-length' or signedHeader == 'Content-Length': elif signedHeader == 'content-length':
if headers.get(signedHeader): if headers.get(signedHeader):
if int(headers[signedHeader])!=contentLength: if int(headers[signedHeader])!=contentLength:
if debug: if debug:
@ -203,6 +203,18 @@ def verifyPostHeaders(httpPrefix: str,publicKeyPem: str,headers: dict, \
else: else:
if debug: if debug:
print('DEBUG: verifyPostHeaders '+signedHeader+' not found in '+str(headers)) print('DEBUG: verifyPostHeaders '+signedHeader+' not found in '+str(headers))
elif signedHeader == 'Content-Length':
if headers.get(signedHeader):
if int(headers[signedHeader])!=contentLength:
if debug:
print('DEBUG: verifyPostHeaders Content-Length does not match '+headers[signedHeader]+' != '+str(contentLength))
return False
if debug:
print('DEBUG: verifyPostHeaders adding Content-Length to signedHeaderList')
signedHeaderList.append(f'Content-Length: {headers[signedHeader]}')
else:
if debug:
print('DEBUG: verifyPostHeaders '+signedHeader+' not found in '+str(headers))
else: else:
if headers.get(signedHeader): if headers.get(signedHeader):
if signedHeader=='date': if signedHeader=='date':