#21: Add signature validation during installations

This commit is contained in:
Scott E. Graves
2019-05-28 13:23:23 -05:00
parent 43598a08bb
commit 51c30aefb6
2 changed files with 3 additions and 2 deletions

View File

@@ -727,8 +727,8 @@ ipcMain.on(Constants.IPC_Install_Upgrade, (event, data) => {
}, err); }, err);
}; };
const hasSignature = data.Signature && (data.Signature.length > 0); const hasSignature = !data.SkipVerification && data.Signature && (data.Signature.length > 0);
const hasHash = data.Sha256 && (data.Sha256.length > 0); const hasHash = !data.SkipVerification && data.Sha256 && (data.Sha256.length > 0);
if (hasSignature) { if (hasSignature) {
try { try {
const files = helpers.createSignatureFiles(data.Signature, Constants.DEV_PUBLIC_KEY); const files = helpers.createSignatureFiles(data.Signature, Constants.DEV_PUBLIC_KEY);

View File

@@ -300,6 +300,7 @@ class App extends IPCContainer {
this.sendRequest(Constants.IPC_Install_Upgrade, { this.sendRequest(Constants.IPC_Install_Upgrade, {
Sha256: sha256, Sha256: sha256,
Signature: signature, Signature: signature,
SkipVerification: false,
Source: data.Destination, Source: data.Destination,
}); });
} else { } else {