[Asterisk-code-review] res_stir_shaken: Implemented signing of JSON payload. (asterisk[master])
Corey Farrell
asteriskteam at digium.com
Mon Mar 30 11:02:22 CDT 2020
Corey Farrell has posted comments on this change. ( https://gerrit.asterisk.org/c/asterisk/+/14031 )
Change subject: res_stir_shaken: Implemented signing of JSON payload.
......................................................................
Patch Set 1:
(1 comment)
https://gerrit.asterisk.org/c/asterisk/+/14031/1/res/res_stir_shaken.c
File res/res_stir_shaken.c:
https://gerrit.asterisk.org/c/asterisk/+/14031/1/res/res_stir_shaken.c@340
PS1, Line 340: json_str = ast_json_dump_string(json);
ast_json_dump_string will dump objects using insertion order in jansson 2.8+. I'm not sure what older versions do might be undefined/hash order but that only matters if this gets backported to Asterisk 13. You may want to create a way for main/json.c to dump strings using the jansson JSON_SORT_KEYS flag so the signature does not depend on object insertion order (though I don't see the signature verification so I'm not positive on this).
--
To view, visit https://gerrit.asterisk.org/c/asterisk/+/14031
To unsubscribe, or for help writing mail filters, visit https://gerrit.asterisk.org/settings
Gerrit-Project: asterisk
Gerrit-Branch: master
Gerrit-Change-Id: I74fa41c0640ab2a64a1a80110155bd7062f13393
Gerrit-Change-Number: 14031
Gerrit-PatchSet: 1
Gerrit-Owner: Benjamin Keith Ford <bford at digium.com>
Gerrit-Reviewer: Friendly Automation
Gerrit-Reviewer: Joshua Colp <jcolp at sangoma.com>
Gerrit-CC: Corey Farrell <git at cfware.com>
Gerrit-Comment-Date: Mon, 30 Mar 2020 16:02:22 +0000
Gerrit-HasComments: Yes
Gerrit-Has-Labels: No
Gerrit-MessageType: comment
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-code-review/attachments/20200330/1ad751d7/attachment.html>
More information about the asterisk-code-review
mailing list