Matrix-Mirrors/anonymousland-synapse
1
0
Fork 0
mirror of https://git.anonymousland.org/anonymousland/synapse.git synced 2025-05-03 20:14:50 -04:00
Code Issues Projects Releases Packages Wiki Activity

Only sign when we respond to remote key requests

Browse source
This commit is contained in:
Erik Johnston 2019-08-21 10:39:45 +01:00
parent 5906be8589
commit 97cbc96093
2 changed files with 15 additions and 22 deletions
Download patch file Download diff file Expand all files Collapse all files

11
synapse/crypto/keyring.py
View file

@ -30,7 +30,6 @@ from signedjson.key import (
from signedjson.sign import (
SignatureVerifyException,
encode_canonical_json,
sign_json,
signature_ids,
verify_signed_json,
)
@ -540,15 +539,7 @@ class BaseV2KeyFetcher(object):
verify_key=verify_key, valid_until_ts=key_data["expired_ts"]
)
# re-sign the json with our own keys, so that it is ready if we are
# asked to give it out as a notary server
signed_key_json = response_json
for signing_key in self.config.key_server_signing_keys:
signed_key_json = sign_json(
signed_key_json, self.config.server_name, signing_key
)
signed_key_json_bytes = encode_canonical_json(signed_key_json)
signed_key_json_bytes = encode_canonical_json(response_json)
yield make_deferred_yieldable(
defer.gatherResults(