Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

hc1_verify.py argument "--xy" doesn't work, tries to load certificate from file instead #17

Closed
Jakub-KK opened this issue Nov 4, 2021 · 0 comments · Fixed by #18
Closed

Comments

@Jakub-KK
Copy link
Contributor

Jakub-KK commented Nov 4, 2021

When using "--xy" argument to provide X,Y elliptic curve point (public key) for hc1_verify.py to use when verifying signature of DCC, the program outputs an error (in fresh repo without dsc-worker.pem file):

Traceback (most recent call last):
  File "hc1_verify.py", line 203, in <module>
    with open(args.cert, "rb") as file:
FileNotFoundError: [Errno 2] No such file or directory: 'dsc-worker.pem'

What should happen is that instead of trying to load public from certificate located in the file (which doesn't exist in repo and must be manually created to be present, as action not needed for signature validation of DCC generated by official means), the program should accept given argument --xy as public key and use it to verify DCC signature.

Note: using only --xy option to provide public key is not sufficient, per hc1_verify.py usage one must also provide key id (KID) using --kid argument or request that KID is ignored using --ignore-kid. At present using those arguments also results in erroneous behavior described above.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant