Cordy/Cairn
2
1
Fork 0
Code Issues 20 Pull requests Projects Releases Packages Wiki Activity Actions

ocm: verify Nextcloud RSA-SHA512 signatures and SHA-512 digests (#454) #458

Merged
Cordy merged 3 commits from fix-454c-nc into main 2026-09-09 21:34:23 +00:00
Conversation 0 Commits 3 Files changed 3 +106 -14
Cordy commented 2026-09-09 21:32:25 +00:00
Owner
Copy link

Root-cause fix for #454. NC 34 signs OCM requests with SHA-512 digests + RSA-SHA512 over "(request-target) content-length date digest host" (confirmed in their OCMSignatoryManager). Verifier now honours the declared digest algorithm (SHA-256/512, unsupported refused by name), the declared signature algorithm, and rebuilds the base from the sender's headers list with host taken from the request authority (HTTP/2-safe). SignLegacy dialect unchanged via fallback list. TDD: red test is a byte-faithful NC-34 signed request; witnessed red on runner, full suite green.

Root-cause fix for #454. NC 34 signs OCM requests with SHA-512 digests + RSA-SHA512 over "(request-target) content-length date digest host" (confirmed in their OCMSignatoryManager). Verifier now honours the declared digest algorithm (SHA-256/512, unsupported refused by name), the declared signature algorithm, and rebuilds the base from the sender's headers list with host taken from the request authority (HTTP/2-safe). SignLegacy dialect unchanged via fallback list. TDD: red test is a byte-faithful NC-34 signed request; witnessed red on runner, full suite green.
ocm: verify Nextcloud RSA-SHA512 signatures and SHA-512 digests (#454)
All checks were successful
ci / test-and-build (pull_request) Successful in 49s
Details
e369b7c5d6
Cordy merged commit ba5933f12c into main 2026-09-09 21:34:23 +00:00
Cordy deleted branch fix-454c-nc 2026-09-09 21:34:25 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: Cordy/Cairn#458
No description provided.
Delete branch "fix-454c-nc"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?