removing Crypto sha256 dependency

1 files changed, 4 insertions, 2 deletions

diff --git a/monitor/josef_lib.py b/monitor/josef_lib.py
index 2d24bce..1d35a89 100644
--- a/monitor/josef_lib.py
+++ b/monitor/josef_lib.py
@@ -18,7 +18,7 @@ import zipfile
 import shutil
 from certkeys import publickeys
 
-from Crypto.Hash import SHA256
+# from Crypto.Hash import SHA256
 import Crypto.PublicKey.RSA as RSA
 from Crypto.Signature import PKCS1_v1_5
 
@@ -384,7 +384,9 @@ def check_signature(baseurl, signature, data, publickey=None):
         vk.verify(unpacked_signature, data, hashfunc=hashlib.sha256,
               sigdecode=ecdsa.util.sigdecode_der)
     else:
-        h = SHA256.new(data)
+        # h = SHA256.new(data)
+        h = hashlib.sha256(data).digest()
+
         rsa_key = RSA.importKey(publickey)
         verifier = PKCS1_v1_5.new(rsa_key)
         assert verifier.verify(h, unpacked_signature), \