Support for RS256 (RSA Signature with SHA-256)

[spyder]

Hi,

Does encdec support rsa with sha256? I would like to generate a JWT token.

Thanks

[spyder]

I found this library https://github.com/spacewander/lua-resty...ty/rsa.lua, which seems to use openssl. I believe this is installed and should work?

Would the usage then be similar as described in this post?
https://forum.logicmachine.net/showthrea...7#pid10237

Do I need to do anything special to use the bitops?
http://bitop.luajit.org/

Thanks

[admin]

See this: https://forum.logicmachine.net/showthrea...2#pid15322

[spyder]

See this: https://forum.logicmachine.net/showthrea...2#pid15322

Hi, I am not sure if the encdec or AES implementation are the same as the RSA encryption, in the JWT spec https://tools.ietf.org/html/rfc7518#section-3 I read RS256 is equal to RSASSA-PKCS1-v1_5 using SHA-256. Are you suggesting to calculate the signature myself using the hmacsha256 of encdec instead of using the openssl implementation?

[admin]

Here are JWT libraries from https://github.com/cdbattags/lua-resty-jwt with some minor changes to work on LM. Create a use library with the same name for each attached file.

Code:

jwt = require "user.jwt"

jwt_token = jwt:sign(
  "my-secrect-key",
  {
    header={typ="JWT", alg="HS256"},
    payload={foo="bar"}
  }
)

log(jwt_token)

[spyder]

Here are JWT libraries from https://github.com/cdbattags/lua-resty-jwt with some minor changes to work on LM. Create a use library with the same name for each attached file.

Code:

jwt = require "user.jwt"

jwt_token = jwt:sign(
  "my-secrect-key",
  {
    header={typ="JWT", alg="HS256"},
    payload={foo="bar"}
  }
)

log(jwt_token)

I get

User library hmac:85: Symbol not found: EVP_md5
stack traceback:
[C]: in function '__index'
User library hmac:85: in main chunk
[C]: in function 'require'
Library user-autoload:5: in main chunk

Tried to upgrade to the latest firmware, but that did not resolve the issue. I am using a LM3 Reactor v2.

[admin]

You need to disable auto-load for this library. user.aes must be loaded first because it loads ssl library, otherwise you will get this error.