From 0e3098eb8e34756eb889bcc3565a2db34d0b63f8 Mon Sep 17 00:00:00 2001 From: "Scott E. Graves" Date: Sat, 8 Jun 2019 12:29:24 -0500 Subject: [PATCH] Disable signature/hash validation until 1.0.4 --- public/electron.js | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/public/electron.js b/public/electron.js index d81769a..c68935a 100644 --- a/public/electron.js +++ b/public/electron.js @@ -699,7 +699,7 @@ ipcMain.on(Constants.IPC_Install_Dependency, (event, data) => { }); ipcMain.on(Constants.IPC_Install_Upgrade, (event, data) => { - let allowSkipVerification = false; + let allowSkipVerification = true; let tempSig; let tempPub; @@ -723,8 +723,9 @@ ipcMain.on(Constants.IPC_Install_Upgrade, (event, data) => { }, err); }; - const hasSignature = !data.SkipVerification && data.Signature && (data.Signature.length > 0); - const hasHash = !data.SkipVerification && data.Sha256 && (data.Sha256.length > 0); + // TODO Enable verification in 1.0.4 + const hasSignature = false;//!data.SkipVerification && data.Signature && (data.Signature.length > 0); + const hasHash = false;//!data.SkipVerification && data.Sha256 && (data.Sha256.length > 0); if (hasSignature) { try { const files = helpers.createSignatureFiles(data.Signature, Constants.DEV_PUBLIC_KEY);