Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

bundle: Roundtrip manifest before hashing #4242

Merged

Commits on Jan 18, 2022

  1. bundle: Roundtrip manifest before hashing

    When OPA verifies the content of the manifest file,
    it first parses it into a JSON structure and then recursively orders
    the fields of all objects alphabetically and then applies the
    hash function. The same process was not followed while generating
    the hash for the manifest content which would result in a digest
    mismatch during verification. This can be observed with a manifest
    that contains metadata.
    
    Fixes: open-policy-agent#4233
    
    Signed-off-by: Ashutosh Narkar <anarkar4387@gmail.com>
    ashutosh-narkar committed Jan 18, 2022
    Configuration menu
    Copy the full SHA
    e011c15 View commit details
    Browse the repository at this point in the history