about summary refs log tree commit diff
path: root/ops/secrets/nix-cache-pub.age
diff options
context:
space:
mode:
authorFlorian Klink <flokli@flokli.de>2023-12-30T00·59+0100
committertazjin <tazjin@tvl.su>2024-01-03T13·01+0000
commit7a84a8fe89e244bf667acc23a6a639fdf977a4e4 (patch)
tree6df877e90d25751c9e85c39d214cdd5d8a5d23d4 /ops/secrets/nix-cache-pub.age
parent3307791855fcce717c9265fab8868e3d8b5443ea (diff)
fix(nix-compat/nix-hash): relax padding requirements r/7309
Nix is quite tolerant when it comes to parsing SRI hashes and their
padding (and only for SRI hashes, it funnily is strict about that in the
non-SRI-hash case).

Nix essentially accepts any number of padding characters, no matter if
it's too much or too little. So we do the only sane thing - simply strip
all padding characters, and parse it with BASE64_NOPAD and the length
the algo uses.

Change-Id: I6a721aa289b06cc36741589792b9dd4c4f930b86
Reviewed-on: https://cl.tvl.fyi/c/depot/+/10468
Reviewed-by: raitobezarius <tvl@lahfa.xyz>
Reviewed-by: tazjin <tazjin@tvl.su>
Tested-by: BuildkiteCI
Diffstat (limited to 'ops/secrets/nix-cache-pub.age')
0 files changed, 0 insertions, 0 deletions