Fix an oversight in signed dictionaries: the timestamp and signing identity should themselves be part of the signature. Also include the raw dictionary in addition to the bin2c version in root-topology/

1 files changed, 6 insertions, 0 deletions

diff --git a/root-topology/mktopology.cpp b/root-topology/mktopology.cpp
index 516fd71b..d6a2be3c 100644
--- a/root-topology/mktopology.cpp
+++ b/root-topology/mktopology.cpp
@@ -43,6 +43,12 @@ int main(int argc,char **argv)
 		return 1;
 	}
 
+	Dictionary test(topology.toString());
+	if (!test.verify(topologyAuthority)) {
+		std::cerr << "Test verification of signed dictionary failed!" << std::endl;
+		return 1;
+	}
+
 	std::cout << topology.toString();
 	return 0;
 }