Skip to content

Feat: Use Fingerprint DB and SHA256#8152

Merged
nbolton merged 14 commits intomasterfrom
sha256
Feb 12, 2025
Merged

Feat: Use Fingerprint DB and SHA256#8152
nbolton merged 14 commits intomasterfrom
sha256

Conversation

@sithlord48
Copy link
Copy Markdown
Member

@sithlord48 sithlord48 commented Jan 29, 2025

Port of parts of debauchee#1343
Fixes parts of #7806
Includes #8098
Fixes: #7943
Uses the FingerprintDB
Enable SHA256 checks, Fallback to SHA1 if not present.
New: Fingerprint dialog

Works (as in my clients connect) when i use it on two machines

@sithlord48 sithlord48 changed the title Sha256 Refactor: port more ssl improvements from barrier Jan 29, 2025
@deskflow deskflow deleted a comment from github-actions bot Jan 29, 2025
@sithlord48 sithlord48 force-pushed the sha256 branch 7 times, most recently from 92a22a9 to b80bdbe Compare February 2, 2025 04:04
@sithlord48 sithlord48 requested a review from nbolton February 4, 2025 12:19
@nbolton nbolton removed their request for review February 4, 2025 18:13
@nbolton
Copy link
Copy Markdown
Member

nbolton commented Feb 4, 2025

Removed self as reviewer until PR is open.

@sithlord48 sithlord48 force-pushed the sha256 branch 3 times, most recently from f7ddc8f to 1886030 Compare February 5, 2025 03:16
@sithlord48 sithlord48 requested a review from nbolton February 5, 2025 03:46
@sithlord48 sithlord48 marked this pull request as ready for review February 5, 2025 03:47
@sithlord48 sithlord48 removed the request for review from nbolton February 5, 2025 03:50
@sithlord48 sithlord48 marked this pull request as draft February 5, 2025 03:50
@sithlord48
Copy link
Copy Markdown
Member Author

@nbolton please test CI builds from this on windows from scratch asap (thanks)

@nbolton
Copy link
Copy Markdown
Member

nbolton commented Feb 5, 2025

windows from scratch asap (thanks)

Will test CI builds on fresh Windows VM.

@nbolton

This comment was marked as resolved.

@sithlord48

This comment was marked as resolved.

@sithlord48
Copy link
Copy Markdown
Member Author

did it generate a new key ?

@nbolton

This comment was marked as resolved.

@sithlord48 sithlord48 force-pushed the sha256 branch 3 times, most recently from 18afc98 to d7b46f0 Compare February 8, 2025 21:00
Copy link
Copy Markdown
Member

@nbolton nbolton left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Happy to land as is, but it would be nice to fix a few minor nits before we do.

Copy link
Copy Markdown
Member

@nbolton nbolton left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Well that's odd, I just re-tested and I'm no longer able to connect. On the client, I always get this error after accepting the dialog:

[2025-02-12T11:03:11] NOTE: server fingerprint: (SHA1) 45:DD:9C:1B:A4:D9:7D:26:3A:A9:13:42:9B:4A:16:3D:79:EF:6D:8D (SHA256) BF:6F:FA:A9:4A:A8:DB:C5:3F:76:1B:DA:1C:EC:CA:ED:9C:08:1A:C9:F6:26:9C:C0:44:A7:82:4F:AB:EF:7E:2F
	/home/nick/Projects/deskflow/src/lib/net/SecureSocket.cpp:628
[2025-02-12T11:03:11] NOTE: read 1 fingerprints from /home/nick/.config/Deskflow/tls/trusted-servers
	/home/nick/Projects/deskflow/src/lib/net/SecureSocket.cpp:644
[2025-02-12T11:03:11] WARNING: fingerprint does not match trusted fingerprint
	/home/nick/Projects/deskflow/src/lib/net/SecureSocket.cpp:651
[2025-02-12T11:03:11] ERROR: failed to verify server certificate fingerprint

I tried rm /home/nick/.config/Deskflow/tls/trusted-servers and tried regenerating the cert on the server but that didn't help.

Fingerprint file contains:

v2:sha256:bf6ffaa94aa8dbc53f761bda1ceccaed9c081ac9f6269cc044a7824fabef7e2f

Edit: Found the bug: #8152 (comment)

@nbolton nbolton self-requested a review February 12, 2025 11:05
Copy link
Copy Markdown
Member

@nbolton nbolton left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Had another idea.

@nbolton nbolton enabled auto-merge (rebase) February 12, 2025 13:35
@nbolton nbolton merged commit eb19547 into master Feb 12, 2025
@nbolton nbolton deleted the sha256 branch February 12, 2025 13:41
@nbolton
Copy link
Copy Markdown
Member

nbolton commented Feb 18, 2025

/tip $100 @sithlord48

@algora-pbc
Copy link
Copy Markdown

algora-pbc bot commented Feb 18, 2025

🎉🎈 @sithlord48 has been awarded $100! 🎈🎊

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

✨ enhancement A suggested change to improve functionality

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Stop using openssl executable

3 participants