From 51c30aefb6f56bfb3c5b9bc44251ddbcfdeec4f9 Mon Sep 17 00:00:00 2001
From: "Scott E. Graves" <scott.e.graves@gmail.com>
Date: Tue, 28 May 2019 13:23:23 -0500
Subject: [PATCH] #21: Add signature validation during installations

---
 public/electron.js | 4 ++--
 src/App.js         | 1 +
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/public/electron.js b/public/electron.js
index 617a6ce..22d0931 100644
--- a/public/electron.js
+++ b/public/electron.js
@@ -727,8 +727,8 @@ ipcMain.on(Constants.IPC_Install_Upgrade, (event, data) => {
     }, err);
   };
 
-  const hasSignature = data.Signature && (data.Signature.length > 0);
-  const hasHash = data.Sha256 && (data.Sha256.length > 0);
+  const hasSignature = !data.SkipVerification && data.Signature && (data.Signature.length > 0);
+  const hasHash = !data.SkipVerification && data.Sha256 && (data.Sha256.length > 0);
   if (hasSignature) {
     try {
       const files = helpers.createSignatureFiles(data.Signature, Constants.DEV_PUBLIC_KEY);
diff --git a/src/App.js b/src/App.js
index 092404c..6574b0b 100644
--- a/src/App.js
+++ b/src/App.js
@@ -300,6 +300,7 @@ class App extends IPCContainer {
       this.sendRequest(Constants.IPC_Install_Upgrade, {
         Sha256: sha256,
         Signature: signature,
+        SkipVerification: false,
         Source: data.Destination,
       });
     } else {