From 687a12e8a7a5c2fb5a3a4b6a6efa3500c5bb913c Mon Sep 17 00:00:00 2001 From: Julio Capote Date: Thu, 5 Jan 2023 07:57:40 -0500 Subject: sign more headers --- registry/registry.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'registry/registry.go') diff --git a/registry/registry.go b/registry/registry.go index 1f1c27a..93f8926 100644 --- a/registry/registry.go +++ b/registry/registry.go @@ -257,7 +257,7 @@ func (r *Registry) deliverAcceptToInbox(url, actorUrl *url.URL, follow vocab.Act prefs := []httpsig.Algorithm{httpsig.RSA_SHA512, httpsig.RSA_SHA256} digestAlgorithm := httpsig.DigestSha256 // The "Date" and "Digest" headers must already be set on r, as well as r.URL. - headersToSign := []string{httpsig.RequestTarget, "date", "digest"} + headersToSign := []string{httpsig.RequestTarget, "host", "date", "digest", "content-type"} signer, _, err := httpsig.NewSigner(prefs, digestAlgorithm, headersToSign, httpsig.Signature, 0) if err != nil { return err -- cgit v1.2.3