Skip to content
This repository has been archived by the owner on May 10, 2024. It is now read-only.

Fixes incorrect HmacAuthV4 header ordering #3824

Open
wants to merge 3 commits into
base: develop
Choose a base branch
from

Conversation

KeyboardNerd
Copy link

  • Fixes incorrect header ordering in HmacAuthV4
  • added test

The header ordering was incorrect. The headers should be sorted based on the header name instead of the whole header strings.

More details about why the old sorting was incorrect and the expected behavior can be found in issue #3749.

Fixes #3822, #3749

* Fixes incorrect header ordering in HmacAuthV4

* added test
Fix python 3 boto auth canonical sorting
gaudenz added a commit to cloudscale-ch/s3-tests that referenced this pull request Feb 28, 2019
There is an unresolved bug in boto in the signature v4 signing code. The
issue is that the ordering of the signed headers is wrong. See
boto/boto#3749
boto/boto#3822

When applying the fix from boto/boto#3824 all
these tests pass.

Tag these tests with aws4_boto_header_ordering_bug so they can be
skipped.
gaudenz added a commit to cloudscale-ch/s3-tests that referenced this pull request Feb 28, 2019
There is an unresolved bug in boto in the signature v4 signing code. The
issue is that the ordering of the signed headers is wrong. See
boto/boto#3749
boto/boto#3822

When applying the fix from boto/boto#3824 all
these tests pass.

Tag these tests with aws4_boto_header_ordering_bug so they can be
skipped.
gaudenz added a commit to cloudscale-ch/s3-tests that referenced this pull request Aug 27, 2020
There is an unresolved bug in boto in the signature v4 signing code. The
issue is that the ordering of the signed headers is wrong. See
boto/boto#3749
boto/boto#3822

When applying the fix from boto/boto#3824 all
these tests pass.

Tag these tests with aws4_boto_header_ordering_bug so they can be
skipped.
ctx pushed a commit to cloudscale-ch/s3-tests that referenced this pull request Dec 7, 2022
There is an unresolved bug in boto in the signature v4 signing code. The
issue is that the ordering of the signed headers is wrong. See
boto/boto#3749
boto/boto#3822

When applying the fix from boto/boto#3824 all
these tests pass.

Tag these tests with aws4_boto_header_ordering_bug so they can be
skipped.
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant