fixed signature check

SparebankenVest · Mar 17, 2020 · f2550fc · f2550fc
1 parent e18266c
commit f2550fc
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/cmd/azure-keyvault-env/main.go b/cmd/azure-keyvault-env/main.go
@@ -186,7 +186,7 @@ func verifyPKCS(signature string, plaintext string, pubkey rsa.PublicKey) bool {
 	sig, _ := base64.StdEncoding.DecodeString(signature)
 	hashed := sha256.Sum256([]byte(plaintext))
 	err := rsa.VerifyPKCS1v15(&pubkey, crypto.SHA256, hashed[:], sig)
-	return err != nil
+	return err == nil
 }
 
 func parseRsaPublicKey(pubPem string) (*rsa.PublicKey, error) {