From 86dac84e9c4bacfde4db2656d88aa5d42487b3d8 Mon Sep 17 00:00:00 2001 From: Josef Gustafsson Date: Thu, 24 Sep 2015 14:35:23 +0200 Subject: removing Crypto sha256 dependency --- monitor/josef_lib.py | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) (limited to 'monitor/josef_lib.py') diff --git a/monitor/josef_lib.py b/monitor/josef_lib.py index 2d24bce..1d35a89 100644 --- a/monitor/josef_lib.py +++ b/monitor/josef_lib.py @@ -18,7 +18,7 @@ import zipfile import shutil from certkeys import publickeys -from Crypto.Hash import SHA256 +# from Crypto.Hash import SHA256 import Crypto.PublicKey.RSA as RSA from Crypto.Signature import PKCS1_v1_5 @@ -384,7 +384,9 @@ def check_signature(baseurl, signature, data, publickey=None): vk.verify(unpacked_signature, data, hashfunc=hashlib.sha256, sigdecode=ecdsa.util.sigdecode_der) else: - h = SHA256.new(data) + # h = SHA256.new(data) + h = hashlib.sha256(data).digest() + rsa_key = RSA.importKey(publickey) verifier = PKCS1_v1_5.new(rsa_key) assert verifier.verify(h, unpacked_signature), \ -- cgit v1.1