diff --git a/config/default.json b/config/default.json index 6d4d1f3fb..8a8f67d7f 100644 --- a/config/default.json +++ b/config/default.json @@ -10,7 +10,7 @@ }, "contentProxyUrl": "http://contentproxy.signal.org:443", "updatesUrl": "https://updates2.signal.org/desktop", - "updatesPublicKey": "fd7dd3de7149dc0a127909fee7de0f7620ddd0de061b37a2c303e37de802a401", + "updatesPublicKey": "05fd7dd3de7149dc0a127909fee7de0f7620ddd0de061b37a2c303e37de802a401", "sfuUrl": "https://sfu.voip.signal.org/", "updatesEnabled": false, "openDevTools": false, diff --git a/ts/test-node/updater/curve_test.ts b/ts/test-node/updater/curve_test.ts index c9c527cc8..cd8e36545 100644 --- a/ts/test-node/updater/curve_test.ts +++ b/ts/test-node/updater/curve_test.ts @@ -2,6 +2,7 @@ // SPDX-License-Identifier: AGPL-3.0-only import { assert } from 'chai'; +import { get as getFromConfig } from 'config'; import { keyPair, sign, verify } from '../../updater/curve'; @@ -14,4 +15,22 @@ describe('updater/curve', () => { assert.strictEqual(verified, true); }); + + it('verifies with our own key', () => { + const message = Buffer.from( + '7761a7761eccc0af7ab67546ec044e40dd1e9762f03d0c504d53fb40ceba5738-1.40.0-beta.3' + ); + const signature = Buffer.from( + '982eee37076a391392879ce7a69e6ce24708cf12abd87624ae116c665e75b5404bf29fe2cd76c6213753bd16d7529f0f9116d63a63e90d2c6c8b57e17cc17100', + 'hex' + ); + const publicKey = Buffer.from( + getFromConfig('updatesPublicKey'), + 'hex' + ); + + const verified = verify(publicKey, message, signature); + + assert.strictEqual(verified, true); + }); });