SystemSh0cker/gocsaf
1
0
Fork 0
mirror of https://github.com/gocsaf/csaf.git synced 2025-12-22 18:15:42 +01:00
Code Issues Releases Activity Actions

Compare fingerprints case-insensitive

Browse source
This commit is contained in:
Sascha L. Teichmann 2022-06-09 16:30:20 +02:00 • committed by GitHub
parent 1e3f5ee1c4
commit 922e468d99
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
cmd/csaf_checker/processor.go
View file

@ -996,7 +996,7 @@ func (p *processor) checkPGPKeys(domain string) error {
continue continue
} }
if ckey.GetFingerprint() != string(key.Fingerprint) { if !strings.EqualFold(ckey.GetFingerprint(), string(key.Fingerprint)) {
p.badPGPs.error("Fingerprint of public OpenPGP key %s does not match remotely loaded.", u) p.badPGPs.error("Fingerprint of public OpenPGP key %s does not match remotely loaded.", u)
continue continue
} }

2
csaf/models.go
View file

@ -581,7 +581,7 @@ func (pmd *ProviderMetadata) SetLastUpdated(t time.Time) {
// If there is no such key it is append to the list of keys. // If there is no such key it is append to the list of keys.
func (pmd *ProviderMetadata) SetPGP(fingerprint, url string) { func (pmd *ProviderMetadata) SetPGP(fingerprint, url string) {
for i := range pmd.PGPKeys { for i := range pmd.PGPKeys {
if pmd.PGPKeys[i].Fingerprint == Fingerprint(fingerprint) { if strings.EqualFold(string(pmd.PGPKeys[i].Fingerprint), fingerprint) {
pmd.PGPKeys[i].URL = &url pmd.PGPKeys[i].URL = &url
return return
} }