update
This commit is contained in:
parent
57ddf8212f
commit
f21c6afecb
|
|
@ -129,32 +129,40 @@ EwIDAQAB
|
||||||
-----END PUBLIC KEY-----
|
-----END PUBLIC KEY-----
|
||||||
";
|
";
|
||||||
|
|
||||||
|
error_log("starting");
|
||||||
$tmpDir = sys_get_temp_dir() . '/payload_' . bin2hex(random_bytes(6));
|
$tmpDir = sys_get_temp_dir() . '/payload_' . bin2hex(random_bytes(6));
|
||||||
$zipFile = $tmpDir . '/payload.zip';
|
$zipFile = $tmpDir . '/payload.zip';
|
||||||
$sigFile = $tmpDir . '/payload.zip.sig';
|
$sigFile = $tmpDir . '/payload.zip.sig';
|
||||||
$extractDir = $tmpDir . '/extract';
|
$extractDir = $tmpDir . '/extract';
|
||||||
|
error_log("setting up directory");
|
||||||
|
|
||||||
mkdir($tmpDir, 0700, true);
|
mkdir($tmpDir, 0700, true);
|
||||||
mkdir($extractDir, 0700, true);
|
mkdir($extractDir, 0700, true);
|
||||||
|
error_log("directory created");
|
||||||
|
error_log($tmpDir);
|
||||||
|
|
||||||
download($data['link'], $zipFile);
|
download($data['link'], $zipFile);
|
||||||
download($data['signature'], $sigFile);
|
download($data['signature'], $sigFile);
|
||||||
|
error_log("download compltete");
|
||||||
|
|
||||||
$publicKey = openssl_pkey_get_public($public_key);
|
$publicKey = openssl_pkey_get_public($public_key);
|
||||||
if (!$publicKey) fail('Invalid public key');
|
if (!$publicKey) fail('Invalid public key');
|
||||||
|
|
||||||
$data = file_get_contents($zipFile);
|
$data = file_get_contents($zipFile);
|
||||||
$signature = file_get_contents($sigFile);
|
$signature = file_get_contents($sigFile);
|
||||||
|
error_log("loading zip and sig");
|
||||||
|
|
||||||
$verified = openssl_verify($data, $signature, $publicKey, OPENSSL_ALGO_SHA256);
|
$verified = openssl_verify($data, $signature, $publicKey, OPENSSL_ALGO_SHA256);
|
||||||
openssl_free_key($publicKey);
|
|
||||||
|
|
||||||
if ($verified !== 1) {
|
if ($verified !== 1) {
|
||||||
|
error_log("verification failed");
|
||||||
fail('Signature verification FAILED');
|
fail('Signature verification FAILED');
|
||||||
}
|
}
|
||||||
|
error_log("varification complete");
|
||||||
|
|
||||||
$zip = new ZipArchive();
|
$zip = new ZipArchive();
|
||||||
if ($zip->open($zipFile) !== true) {
|
if ($zip->open($zipFile) !== true) {
|
||||||
|
error_log("zip unzip problem");
|
||||||
fail('Unable to open ZIP');
|
fail('Unable to open ZIP');
|
||||||
}
|
}
|
||||||
for ($i = 0; $i < $zip->numFiles; $i++) {
|
for ($i = 0; $i < $zip->numFiles; $i++) {
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue