diff options
| author | 2019-09-15 10:43:46 +0100 | |
|---|---|---|
| committer | 2019-09-15 10:43:46 +0100 | |
| commit | 54ee1b35946b587e85c8995ed10b9d5eecab802d (patch) | |
| tree | 9a28d65fd909bd74f848567b695c5fbb50b7658e /modules/fediverse_server/security.py | |
| parent | remove unneeded "`"s (diff) | |
re-merge fediverse an fediverse_server, so they can share utils
Diffstat (limited to 'modules/fediverse_server/security.py')
| -rw-r--r-- | modules/fediverse_server/security.py | 32 |
1 files changed, 0 insertions, 32 deletions
diff --git a/modules/fediverse_server/security.py b/modules/fediverse_server/security.py deleted file mode 100644 index 6ae75cd3..00000000 --- a/modules/fediverse_server/security.py +++ /dev/null @@ -1,32 +0,0 @@ -import base64, typing -from cryptography.hazmat.primitives import hashes, serialization -from cryptography.hazmat.primitives.asymmetric import padding, rsa -from cryptography.hazmat.backends import default_backend - -SIGNATURE_FORMAT = ( - "keyId=\"%s\",headers=\"%s\",signature=\"%s\",algorithm=\"rsa-sha256\"") - - -def private_key(key_filename: str) -> rsa.RSAPrivateKey: - with open(key_filename) as key_file: - return serialization.load_pem_private_key( - key_file.read(), password=None, backend=default_backend()) - -def signature(key: rsa.RSAPrivateKey, key_id: str, - headers: typing.List[typing.Tuple[str, str]]) -> str: - private_key = _private_key(key_filename) - sign_header_keys = " ".join(h[0] for h in headers) - - sign_string_parts = ["%s: %s" % (k, v) for k, v in headers] - sign_string = "\n".join(sign_string_parts) - - signature = private_key.sign( - sign_string.encode("utf8"), - padding.PSS( - mgf=padding.MGF1(hashes.SHA256()), - salt_length=padding.PSS.MAX_LENGTH), - hashes.SHA256() - ) - - signature = base64.b64encode(signature).decode("ascii") - return SIGNATURE_FORMAT % (key_id, sign_header_keys, signature) |
