ogb912/micromdm
1
0
Fork 0
mirror of https://github.com/micromdm/micromdm/ synced 2026-08-07 10:05:48 +08:00
Code Issues Packages Projects Releases Wiki Activity

Fix #723 - Update intermediate cert and signature algorithm (#725)

Browse Source 
* Update vendor signature to SHA256 (issue #723)
* Updated Apple WWDR intermediate certificate (issue #723)
This commit is contained in:
Kory Prince
2021-02-10 12:48:35 -06:00
committed by GitHub
parent 4ad71810c7
commit b640fedb9f
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
pkg/crypto/mdmcertutil/certutil.go
View File

@@ -7,7 +7,7 @@ import (
"crypto"
"crypto/rand"
"crypto/rsa"
"crypto/sha1"
"crypto/sha256"
"crypto/x509"
"crypto/x509/pkix"
"encoding/base64"
@@ -72,7 +72,7 @@ func (p *PushCertificateRequest) Encode() ([]byte, error) {
}
const (
wwdrIntermediaryURL = "https://developer.apple.com/certificationauthority/AppleWWDRCA.cer"
wwdrIntermediaryURL = "https://www.apple.com/certificateauthority/AppleWWDRCAG3.cer"
appleRootCAURL = "http://www.apple.com/appleca/AppleIncRootCertificate.cer"
)
@@ -134,9 +134,9 @@ func makeCertChain(mdmPEM, wwdrPEM, rootPEM []byte) string {
}
func signPushCSR(csrData []byte, key *rsa.PrivateKey) ([]byte, error) {
h := sha1.New()
h := sha256.New()
h.Write(csrData)
signature, err := rsa.SignPKCS1v15(rand.Reader, key, crypto.SHA1, h.Sum(nil))
signature, err := rsa.SignPKCS1v15(rand.Reader, key, crypto.SHA256, h.Sum(nil))
return signature, errors.Wrap(err, "signing push CSR")
}