continuwuity/changelog.d/2415.bufix at push-wkvumosuykpx - hexchen/continuwuity - Ellis Git

hexchen/continuwuity

Watch

forked from continuwuation/continuwuity

hexchen c52456063a fix: verify_server_keys_response fails on non-standard json fields

Previously `verify_server_keys_response` would work with re-serialized 
ServerSigningKeys, which drops any extra, non-standard fields from the
origin server response. The signature is made over the whole response
though, meaning that any response including extra fields will not pass
signature verification.

2026-10-26 16:04:43 +00:00

1 line

94 B

Text

Raw Permalink Blame History

Fix remote server key signature verification when extra fields exist. Contributed by @hexchen