Skip to content

Commit 47c18d8

Browse files
symbibotsymbibot
committed
add SchemaPin signature files and fix verification key lookup
Sign all 7 signature JSON files with ECDSA-P256-SHA256. Fix _verify_signature to accept both public_key and public_key_pem fields in .sig files.
1 parent 8d9024c commit 47c18d8

9 files changed

Lines changed: 40 additions & 1 deletion

File tree

‎agentsniff/signatures/__init__.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -52,7 +52,7 @@ def _verify_signature(data: Any, sig_filename: str) -> str:
5252
sig_data = json.load(f)
5353

5454
signature_b64 = sig_data.get("signature", "")
55-
public_key_pem = sig_data.get("public_key_pem", "")
55+
public_key_pem = sig_data.get("public_key_pem", "") or sig_data.get("public_key", "")
5656

5757
if not signature_b64 or not public_key_pem:
5858
return UNVERIFIED

‎agentsniff/signatures/agent_infra_domains.sig‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
{
2+
"signature": "MEQCIHjmHYSqhYGGuJYId/u7NXZiy0m0bdbROGEuC/xsvV7ZAiA1vcDnhOjRli6mH5RxuXsbT8gMb1FoG9zedSJ1B661VA==",
3+
"public_key": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEtWBDdK89Cr/0slpX6WuNDCj9nHJ/\nnGaueO0f7RhDViZLQIZ5GN8NakL85/doQIa1ct53WHhrvx5sihXFyrumhA==\n-----END PUBLIC KEY-----\n",
4+
"algorithm": "ECDSA-P256-SHA256"
5+
}

‎agentsniff/signatures/domain_suffixes.sig‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
{
2+
"signature": "MEYCIQDDJ+j4c7AzbxFHKhZ2zklUes6XiH+amQZ6fXdHiO3/HAIhAOBlUMqBtZiYL31u4dVtFMcsxcaeufiC3cFeqArcAQx0",
3+
"public_key": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEtWBDdK89Cr/0slpX6WuNDCj9nHJ/\nnGaueO0f7RhDViZLQIZ5GN8NakL85/doQIa1ct53WHhrvx5sihXFyrumhA==\n-----END PUBLIC KEY-----\n",
4+
"algorithm": "ECDSA-P256-SHA256"
5+
}

‎agentsniff/signatures/frameworks.sig‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
{
2+
"signature": "MEQCIBRiBqB73OTA/fkzgETYqh/gN5czrgCHW0Ypo8FuTY8KAiBE4wJQMOurx4FGcAbRpo2UR+6v9FKbBHp3j/JF6xGm0A==",
3+
"public_key": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEtWBDdK89Cr/0slpX6WuNDCj9nHJ/\nnGaueO0f7RhDViZLQIZ5GN8NakL85/doQIa1ct53WHhrvx5sihXFyrumhA==\n-----END PUBLIC KEY-----\n",
4+
"algorithm": "ECDSA-P256-SHA256"
5+
}

‎agentsniff/signatures/llm_domains.sig‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
{
2+
"signature": "MEUCIESJmDHcRRKK71ho79n/z/T9QOVcbeqmh2WDW+52NjQZAiEA38cAfO7HXObFHZkqr1ij0IFeTwu1I+nXz26vx/5tuuo=",
3+
"public_key": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEtWBDdK89Cr/0slpX6WuNDCj9nHJ/\nnGaueO0f7RhDViZLQIZ5GN8NakL85/doQIa1ct53WHhrvx5sihXFyrumhA==\n-----END PUBLIC KEY-----\n",
4+
"algorithm": "ECDSA-P256-SHA256"
5+
}

‎agentsniff/signatures/mcp_methods.sig‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
{
2+
"signature": "MEUCIQDpBijmsIhG0ho3PPcwOQgX1/D84JaBwIwtI8Awaw2SfAIgLgve835keNGo9cPlKZuiKi+vHItqYBJCOlCYg5gcFDA=",
3+
"public_key": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEtWBDdK89Cr/0slpX6WuNDCj9nHJ/\nnGaueO0f7RhDViZLQIZ5GN8NakL85/doQIa1ct53WHhrvx5sihXFyrumhA==\n-----END PUBLIC KEY-----\n",
4+
"algorithm": "ECDSA-P256-SHA256"
5+
}

‎agentsniff/signatures/ports.sig‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
{
2+
"signature": "MEUCIQDpCoHXGDMBqTWQ5mCeRMSfy2u+03fW80ir7+iXlAyoPQIgdOfJBpVEav81pZ90pJAghSpWhwu/8dq2gkIAhD3q5+U=",
3+
"public_key": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEtWBDdK89Cr/0slpX6WuNDCj9nHJ/\nnGaueO0f7RhDViZLQIZ5GN8NakL85/doQIa1ct53WHhrvx5sihXFyrumhA==\n-----END PUBLIC KEY-----\n",
4+
"algorithm": "ECDSA-P256-SHA256"
5+
}

‎agentsniff/signatures/signing_key.pub‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
-----BEGIN PUBLIC KEY-----
2+
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEtWBDdK89Cr/0slpX6WuNDCj9nHJ/
3+
nGaueO0f7RhDViZLQIZ5GN8NakL85/doQIa1ct53WHhrvx5sihXFyrumhA==
4+
-----END PUBLIC KEY-----

‎agentsniff/signatures/tls_fingerprints.sig‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
{
2+
"signature": "MEUCIGFiEp09R1lEi1aZzEIwODNhSGbux9H/vbaRfpoFfWn1AiEAilYk1+8Dg+oEd6J0iU2m3f9iNWalFjZEB4IKR3rlPKA=",
3+
"public_key": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEtWBDdK89Cr/0slpX6WuNDCj9nHJ/\nnGaueO0f7RhDViZLQIZ5GN8NakL85/doQIa1ct53WHhrvx5sihXFyrumhA==\n-----END PUBLIC KEY-----\n",
4+
"algorithm": "ECDSA-P256-SHA256"
5+
}

0 commit comments

Comments
 (0)