github/slsa-verifier
1
0
Fork 0
mirror of https://github.com/slsa-framework/slsa-verifier.git synced 2026-05-17 05:56:37 +00:00
Code Issues Packages Projects Releases Wiki Activity

literl hash algo

Browse Source 
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
This commit is contained in:
Ramon Petgrave
2024-06-20 19:56:21 +00:00
parent 00fed87dbc
commit e47312f593
3 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
cli/slsa-verifier/verify/verify_vsa.go
View File

@@ -81,7 +81,7 @@ func (c *VerifyVSACommand) Exec(ctx context.Context) (*utils.TrustedAttesterID,
VerificationOpts := &options.VerificationOpts{
PublicKey: &pubKey,
PublicKeyID: c.PublicKeyID,
PublicKeyHashAlgo: &hashHalgo,
PublicKeyHashAlgo: hashHalgo,
}
attestations, err := os.ReadFile(*c.AttestationsPath)
if err != nil {

2
options/options.go
View File

@@ -63,5 +63,5 @@ type VerificationOpts struct {
PublicKeyID *string
// PublicKeyHashAlgo is the hash algorithm used to hash the signature
PublicKeyHashAlgo *crypto.Hash
PublicKeyHashAlgo crypto.Hash
}

2
verifiers/internal/vsa/verifier.go
View File

@@ -72,7 +72,7 @@ func VerifyVSA(ctx context.Context,
// verifyEnvelopeSignature verifies the signature of the envelope.
func verifyEnvelopeSignature(ctx context.Context, sigstoreEnvelope *sigstoreBundle.Envelope, verificationOpts *options.VerificationOpts) error {
signatureVerifier, err := sigstoreSignature.LoadVerifier(*verificationOpts.PublicKey, *verificationOpts.PublicKeyHashAlgo)
signatureVerifier, err := sigstoreSignature.LoadVerifier(*verificationOpts.PublicKey, verificationOpts.PublicKeyHashAlgo)
if err != nil {
return fmt.Errorf("%w: loading sigstore DSSE envolope verifier %w", serrors.ErrorInvalidPublicKey, err)
}