Check uploaded data's MD5 sum against Content-MD5 header #4
Labels
No Label
AdminAPI
Bug
Check AWS
CI
Correctness
Critical
Documentation
Ideas
Improvement
Low priority
Newcomer
Performance
S3 Compatibility
Testing
Usability
No Milestone
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: Deuxfleurs/garage#4
Loading…
Reference in New Issue
No description provided.
Delete Branch "%!s(<nil>)"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Garage currently does not implement checking of the MD5 sum of the uploaded data, which should match the Content-MD5 header. Should be implemented.
This should be done for:
We should make sure that we implement this well enough so that the following is also verified: if a request to put an object contains a MD5 sum and the MD5 sum is part of the authenticated/signed request (AWS signatures v4 protocol), then we know that the data itself is authenticated properly by the signing key.
Closing for now.