Ludovic Courtès 60b04024f8
substitute: Ignore irrelevant narinfo signatures.
Fixes <https://bugs.gnu.org/33733>.

Fixes a bug whereby 'guix substitute' would accept narinfos whose
signature does not cover the StorePath/NarHash/References tuple.

* guix/scripts/substitute.scm (narinfo-sha256)[%mandatory-fields]: New
variable.
Compute SIGNED-FIELDS; return #f unless each of the %MANDATORY-FIELDS
is among SIGNED-FIELDS.
 * tests/substitute.scm ("query narinfo with signature over nothing")
("query narinfo with signature over irrelevant bits"): New tests.
2018-12-14 00:02:59 +01:00
..
2018-11-06 18:21:24 +01:00
2017-07-21 17:03:24 +02:00
2017-01-28 18:55:20 +01:00
2018-08-26 01:47:40 +02:00
2018-11-28 10:39:58 +01:00
2018-09-07 11:40:22 +02:00
2018-09-25 18:45:50 +02:00
2018-12-04 10:57:56 +01:00
2018-09-04 17:25:11 +02:00
2017-11-08 22:31:58 +01:00
2018-03-20 17:17:58 +01:00
2018-06-01 15:21:28 +02:00
2018-09-04 17:25:11 +02:00
2018-10-26 20:05:21 +02:00
2017-12-12 18:11:22 +01:00
2015-01-11 23:50:01 +01:00
2018-11-24 19:52:16 +01:00