Mailinglist Archive: opensuse-buildservice (138 mails)

< Previous Next >
Re: [opensuse-buildservice] v4 signs in obs-signd
On Thu, Feb 11, 2016 at 03:50:47AM -0500, Michal Novotny wrote:
The preferred solution would be to send just the base hash state made just of
rpm data (rpm's header-only SHA1/SHA256 hash and header+payload hash). It's
the state before writing any
additional values into the hash - that should be done on the remote
(key-)server.

The problem with this approach is that libgrypt library does not easily allow
this as far as I have discovered. So far I haven't found a way to initialize
gcry_md_context by the
received data and then continue with hashing from there.

Yeah, I'd prefer that as well. Unfortunatelly the sha1/sha256 state is
very dependent on the implementation and not standardized.

Cheers,
Michael.

--
Michael Schroeder mls@xxxxxxx
SUSE LINUX GmbH, GF Jeff Hawn, HRB 16746 AG Nuernberg
main(_){while(_=~getchar())putchar(~_-1/(~(_|32)/13*2-11)*13);}
--
To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse-buildservice+owner@xxxxxxxxxxxx

< Previous Next >
References