[Libreoffice-bugs] [Bug 134041] New: "X-WOPI-Proof" generation.

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=134041

            Bug ID: 134041
           Summary: "X-WOPI-Proof" generation.
           Product: LibreOffice Online
           Version: unspecified
          Hardware: All
                OS: All
            Status: UNCONFIRMED
          Severity: normal
          Priority: medium
         Component: LibreOffice
          Assignee: libreoffice-bugs at lists.freedesktop.org
          Reporter: damian.walkowski at primesoft.pl

I think that there is a problem with generating "X-WOPI-Proof" header. It works
fine only for the 1st request. Then, it keeps returning the same value each
time. I managed to solve it by tweaking the SignProof method
(wsd/ProofKey.cpp):

std::string Proof::SignProof(const std::vectorchar>& proof) const
{
    assert(m_pKey);
    static Poco::Crypto::RSADigestEngine digestEngine(*m_pKey, "SHA256");
    digestEngine.reset(); #this line fixed the issue
    digestEngine.update(proof.data(), proof.size()); 
    return BytesToBase64(digestEngine.signature());
} 

I'm unsure if fully understand wopi proof key docs, so instead of creating a
merge request, I submit this bug.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20200616/1ff3d4dc/attachment.htm>