[Pkg-freeipa-devel] Bug#927856: unblock: python-jwcrypto/0.6.0-1

[Paul Gevers]

Hi Timo,

On 04-06-2019 22:54, Timo Aaltonen wrote:
> That said, fixing the python-jwcrypto test is a trivial commit, so maybe
> this could be pushed too.
> 
> diff --git a/jwcrypto/jwa.py b/jwcrypto/jwa.py
> index a6554b5..bbcd24c 100644
> --- a/jwcrypto/jwa.py
> +++ b/jwcrypto/jwa.py
> @@ -141,7 +141,7 @@ class _RawEC(_RawJWS):
>      def sign(self, key, payload):
>          skey = key.get_op_key('sign', self._curve)
>          signature = skey.sign(payload, ec.ECDSA(self.hashfn))
> -        r, s = ec_utils.decode_rfc6979_signature(signature)
> +        r, s = ec_utils.decode_dss_signature(signature)
>          size = key.get_curve(self._curve).key_size
>          return _encode_int(r, size) + _encode_int(s, size)
> 
> @@ -149,7 +149,7 @@ class _RawEC(_RawJWS):
>          pkey = key.get_op_key('verify', self._curve)
>          r = signature[:len(signature) // 2]
>          s = signature[len(signature) // 2:]
> -        enc_signature = ec_utils.encode_rfc6979_signature(
> +        enc_signature = ec_utils.encode_dss_signature(
>              int(hexlify(r), 16), int(hexlify(s), 16))
>          pkey.verify(enc_signature, payload, ec.ECDSA(self.hashfn))

This change is with respect to the buster version I assume? Are you
proposing to do this via testing-proposed-updates or are you willing to
revert the new python-jwcrypto upstream version with a +really version?
If this happens, do you still need freeipa to migrate as well?

Paul