An library for processing keybase's signature tree.
License: BSD 3-Clause "New" or "Revised" License
Include a hardcoded list of broken chainlinks, and check they fit into the sigchain properly, but otherwise discard them and don't consider their contents.
cc: @akalin-keybase whose sigchain is broken
Two chainlinks to add to the list:
[
"2a0da9730f049133ce728ba30de8c91b6658b7a375e82c4b3528d7ddb1a21f7a0f",
"0f175ef0d3b57a9991db5deb30f2432a85bc05922bbe727016f3fb660863a1890f"
]After we figure out a long term fix for the PGP deleted subkeys issue, bring coverage back up.
We'll want to test the Go client against them too.
Current plan is to pass in a list of sigs previously verified.
As per keybase/client#544, use a sloppy-merged PGP key before any full PGP body hash is specified in the sigchain, but afterwards, use only the specified PGP upload.
Installing the latest version of keybase gives me the following error (below) when trying to run some commands. Tracking down the issue, it looks like it is coming from this lib, and starting with 1.2.1, I tried 1.2.2 and 1.2.3 those also fail. If I revert to 1.2.0, it works fine. so it looks like something that was changed in between 1.2.0 and 1.2.1 broke this.
Not sure if this is just me, or a wider issue. I uninstalled keybase and keybase-installer and started from scratch and I still had the issue.
keybase (keybase.io CLI) v0.8.2
- node.js v0.10.35
- gpg (GnuPG/MacGPG2) 2.0.27
- libgcrypt 1.6.3
Identifies as: 'keybase.io node.js client v0.8.2 darwin'
$ keybase status
/usr/local/lib/node_modules/keybase/node_modules/libkeybase/lib/sigchain/sigchain.js:577
if (!verified_buffer.equals(unverified_buffer)) {
^
TypeError: Object {"body":{"cryptocurrency":{"address":"xxx","type":"xxx"},"key":{"fingerprint":"xxx","host":"keybase.io","key_id":"xxx","uid":"xxx","username":"xxx"},"type":"cryptocurrency","version":1},"ctime":xxx,"expire_in":157680000,"prev":null,"seqno":1,"tag":"signature"} has no method 'equals'
at exports.check_buffers_equal.check_buffers_equal (/usr/local/lib/node_modules/keybase/node_modules/libkeybase/lib/sigchain/sigchain.js:577:26)
at /usr/local/lib/node_modules/keybase/node_modules/libkeybase/lib/sigchain/sigchain.js:374:23
at /usr/local/lib/node_modules/keybase/node_modules/libkeybase/lib/sigchain/sigchain.js:378:23
at iced.Deferrals.parent (/usr/local/lib/node_modules/keybase/node_modules/libkeybase/lib/sigchain/sigchain.js:365:30)
at /usr/local/lib/node_modules/keybase/node_modules/libkeybase/lib/sigchain/sigchain.js:367:21
at Deferrals.exports.Deferrals.Deferrals._call (/usr/local/lib/node_modules/keybase/node_modules/iced-runtime/lib/runtime.js:86:16)
at /usr/local/lib/node_modules/keybase/node_modules/iced-runtime/lib/runtime.js:98:26
at exports.trampoline.trampoline (/usr/local/lib/node_modules/keybase/node_modules/iced-runtime/lib/runtime.js:64:14)
at Deferrals.exports.Deferrals.Deferrals._fulfill (/usr/local/lib/node_modules/keybase/node_modules/iced-runtime/lib/runtime.js:96:16)
at ret (/usr/local/lib/node_modules/keybase/node_modules/iced-runtime/lib/runtime.js:29:18)
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
Django
The Web framework for perfectionists with deadlines.
Laravel
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft
Open source projects and samples from Microsoft.
Google
Google ❤️ Open Source for everyone.
Alibaba
Alibaba Open Source for everyone
D3
Data-Driven Documents codes.
Tencent
China tencent open source team.