Date: Tue, 20 Mar 2018 15:06:51 +0200
From: Timo Teras <timo.teras@iki.fi>
To: Ferris Ellis <ferris@ferrisellis.com>
Cc: alpine-devel@lists.alpinelinux.org
Subject: Re: [alpine-devel] Upgrading package signatures from SHA1 to SHA2
 digest.
Message-ID: <20180320150651.49fbcbae@vostro>
In-Reply-To: <E8AC11A9-84FB-4252-A0D3-7EB396C6DA1B@ferrisellis.com>
References: <257B6969-21FD-4D51-A8EC-95CB95CEF365@ferrisellis.com>
	<20180308145356.6355eafe@vostro.util.wtbts.net>
	<E8AC11A9-84FB-4252-A0D3-7EB396C6DA1B@ferrisellis.com>
Precedence: list
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On Fri, 9 Mar 2018 08:02:50 -0500
Ferris Ellis <ferris@ferrisellis.com> wrote:

> Also, as I mentioned in my last reply to A. Wilcox, I think since the
> RSA signature is ASN1 encoded. If so you shouldn=E2=80=99t need a new pre=
fix
> type, as the ASN1 blob states the hash that it contains. But please
> correct me if I=E2=80=99m wrong on this! Just trying to be of help :)

I was just looking at the code again, and we did add support for sha256
and sha512 + rsa signatures earlier. It detects the signature type from
the filename (RSA, RSA256, RSA512).

The signature it self is raw output of "openssl dgst -sha -sign
pkey.pem" output, and IIRC it is not asn1 but the raw signature for the
mechanism selected.

Cheers,
Timo


---
Unsubscribe:  alpine-devel+unsubscribe@lists.alpinelinux.org
Help:         alpine-devel+help@lists.alpinelinux.org
---