Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
openSUSE:Leap:15.2:Rings:1-MinimalX
python-PyJWT
0001-Catch-BadSignatureError-raised-by-ecdsa-0....
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File 0001-Catch-BadSignatureError-raised-by-ecdsa-0.13.3.patch of Package python-PyJWT
From e4563939727281cd982c3a228ea80e4b8bf69997 Mon Sep 17 00:00:00 2001 From: StefanBruens <stefan.bruens@rwth-aachen.de> Date: Fri, 18 Oct 2019 22:10:16 +0200 Subject: [PATCH] Catch BadSignatureError raised by ecdsa 0.13.3 on verification errors The new ecdsa no longer uses AssertionError when the signature is too long. This happens in the test suite, where "123" is appended to the signature. Fixes #447 --- jwt/contrib/algorithms/py_ecdsa.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/jwt/contrib/algorithms/py_ecdsa.py b/jwt/contrib/algorithms/py_ecdsa.py index bf0dea5..adb33f4 100644 --- a/jwt/contrib/algorithms/py_ecdsa.py +++ b/jwt/contrib/algorithms/py_ecdsa.py @@ -56,5 +56,7 @@ def verify(self, msg, key, sig): try: return key.verify(sig, msg, hashfunc=self.hash_alg, sigdecode=ecdsa.util.sigdecode_string) - except AssertionError: + # ecdsa <= 0.13.2 raises AssertionError on too long signatures, + # ecdsa >= 0.13.3 raises BadSignatureError for verification errors. + except (AssertionError, ecdsa.BadSignatureError): return False
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor