Dear all,

I am currently writing a client for integrating webauthn into naviserver. It's a bunch of Javascript, a lot of encoding/decoding and some crypthography.

The various kinks are ironed out, and I can register users and verify webauthn.get responses.

Here's my question: I am using

::ns_crypto::md string -digest sha256 -verify ${req}.pem -signature $signature -binary $data_to_sign

to verify the signature of the data I get from the webauthn provider.

For this I currently write the .pem file to disk (after conversion from .der to .pem). Is it possible to circumvent this? We store the public key data in the database and it would be nice to use it as string.

Thanks for your input,

Wolfgang Winkler

--

*Wolfgang Winkler*
Geschäftsführung
wolfgang.wink...@digital-concepts.com
mobil +43.699.19971172

dc:*büro*
digital concepts Novak Winkler OG
Software & Design
Landstraße 68, 5. Stock, 4020 Linz
www.digital-concepts.com <http://www.digital-concepts.com>
tel +43.732.997117.72
tel +43.699.1997117.2

Firmenbuchnummer: 192003h
Firmenbuchgericht: Landesgericht Linz

_______________________________________________
naviserver-devel mailing list
naviserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/naviserver-devel

Reply via email to