Ludovic Courtès 60b04024f8
substitute: Ignore irrelevant narinfo signatures.
Fixes <https://bugs.gnu.org/33733>.

Fixes a bug whereby 'guix substitute' would accept narinfos whose
signature does not cover the StorePath/NarHash/References tuple.

* guix/scripts/substitute.scm (narinfo-sha256)[%mandatory-fields]: New
variable.
Compute SIGNED-FIELDS; return #f unless each of the %MANDATORY-FIELDS
is among SIGNED-FIELDS.
 * tests/substitute.scm ("query narinfo with signature over nothing")
("query narinfo with signature over irrelevant bits"): New tests.
2018-12-14 00:02:59 +01:00
..
2018-09-04 17:25:11 +02:00
2017-01-26 13:49:56 +01:00
2018-09-04 17:25:11 +02:00
2018-09-04 17:25:11 +02:00
2018-09-04 17:25:11 +02:00
2018-11-28 10:39:58 +01:00
2018-09-04 17:25:11 +02:00
2018-06-06 14:37:35 +02:00
2018-09-07 11:40:22 +02:00
2018-03-27 14:51:44 +02:00
2018-09-04 17:25:11 +02:00
2018-09-04 17:25:11 +02:00
2018-09-04 17:25:11 +02:00
2017-09-28 13:10:10 +02:00
2018-10-29 00:13:38 +01:00
2018-09-04 17:25:11 +02:00
2018-10-18 23:46:33 -04:00
2017-06-15 17:03:19 +02:00
2018-05-10 14:53:56 +02:00
2018-05-13 13:29:27 +02:00
2017-11-17 10:47:49 +01:00