]> source.dussan.org Git - nextcloud-server.git/commitdiff
Remove ownCloud Root Authority as per todo 3983/head
authorJoas Schilling <coding@schilljs.com>
Wed, 22 Mar 2017 07:54:40 +0000 (08:54 +0100)
committerJoas Schilling <coding@schilljs.com>
Wed, 22 Mar 2017 07:54:40 +0000 (08:54 +0100)
Signed-off-by: Joas Schilling <coding@schilljs.com>
lib/private/IntegrityCheck/Checker.php

index 419f989fa0fa8e36d87d55503d066f3954c02423..d051dae11a7c32e339ed17ef5e1e64492ebda9e9 100644 (file)
@@ -347,14 +347,7 @@ class Checker {
                $x509->loadCA($rootCertificatePublicKey);
                $x509->loadX509($certificate);
                if(!$x509->validateSignature()) {
-                       // FIXME: Once Nextcloud has it's own appstore we should remove the ownCloud Root Authority from here
-                       $x509 = new \phpseclib\File\X509();
-                       $rootCertificatePublicKey = $this->fileAccessHelper->file_get_contents($this->environmentHelper->getServerRoot().'/resources/codesigning/owncloud.crt');
-                       $x509->loadCA($rootCertificatePublicKey);
-                       $x509->loadX509($certificate);
-                       if(!$x509->validateSignature()) {
-                               throw new InvalidSignatureException('Certificate is not valid.');
-                       }
+                       throw new InvalidSignatureException('Certificate is not valid.');
                }
                // Verify if certificate has proper CN. "core" CN is always trusted.
                if($x509->getDN(X509::DN_OPENSSL)['CN'] !== $certificateCN && $x509->getDN(X509::DN_OPENSSL)['CN'] !== 'core') {