Validate SHA1 hashes in the manifest

tomasmcguinness / pkpassvalidator

Checks the validity of a PKPASS file by checking it's signature and contents match the Apple specification

MIT License

77 stars 20 forks source link

Validate SHA1 hashes in the manifest #3

Open tomasmcguinness opened 5 years ago

tomasmcguinness commented 5 years ago

I had a report from a user struggling to open a pass. Turns out that one of the hashes in the manifest.json file was incorrect. It would be useful to have the validator actually check this.

fly2high1 commented 2 years ago

I altered the file pass.json but the SHA1 hash was not checked and pkpass file is vilidated. This not ok, this not enhancement is it core functionality missing.