unboundsoftware/nginx-s3-upload
Archived
6
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Activity

Add lua-module for signing

Browse Source
This commit is contained in:
Joakim Olsson
2019-06-28 16:07:04 +02:00
parent b90a0a23ed
commit cd38b8b25e
7 changed files with 4047 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Dockerfile
+3 -1
View File
@@ -27,7 +27,8 @@ RUN wget https://github.com/simpl/ngx_devel_kit/archive/v0.3.0.tar.gz -O ngx_dev
mkdir luajit2 && \
tar xf luajit2.tar.gz -C luajit2 --strip-components=1 && \
cd /tmp/luajit2 && \
make && \make install
make && \
make install
# Build Nginx
@@ -55,6 +56,7 @@ RUN ln -sf /dev/stdout /var/log/nginx/access.log \
# Apply Nginx config
ADD nginx.conf /etc/nginx/nginx.conf
ADD sign.lua sha256.lua /tmp/lua/
ADD start.sh /start.sh
# Set default command
deployment_files/deploy.yaml
+4 -4
View File
@@ -45,13 +45,13 @@ spec:
path: /healthcheck
port: 80
initialDelaySeconds: 5
periodSeconds: 5
periodSeconds: 6
timeoutSeconds: 5
imagePullPolicy: IfNotPresent
imagePullPolicy: Always
image: registry.gitlab.com/paidit-se/nginx-s3-upload:${COMMIT}
env:
- name: S3_BUCKET_NAME
value: upload.paidit.se
value: upload.unbound.se
ports:
- containerPort: 80
@@ -81,7 +81,7 @@ metadata:
nginx.ingress.kubernetes.io/proxy-body-size: 1g
spec:
rules:
- host: 'upload.paidit.se'
- host: 'upload.unbound.se'
http:
paths:
- backend:
luaunit.lua
+3174
View File
File diff suppressed because it is too large Load Diff
nginx.conf
+32 -4
View File
@@ -10,7 +10,13 @@ events {
http {
lua_load_resty_core off;
lua_package_path "/tmp/lua-resty-core/lib/?.lua;;";
lua_package_path "/tmp/lua-resty-core/lib/?.lua;/tmp/lua/?.lua;;";
client_max_body_size 100m;
client_body_buffer_size 128k;
proxy_buffer_size 32k;
proxy_buffers 4 32k;
lua_need_request_body on;
lua_socket_buffer_size 128k;
server {
listen 80;
@@ -40,17 +46,37 @@ http {
set_secure_random_alphanum $prefix 64;
set_sha1 $prefixsha $prefix;
set_by_lua $date "return ngx.cookie_time(ngx.time())";
set_by_lua $day "return ngx.today()";
set_by_lua $time "os.time()";
set_by_lua $date "return os.date('%a, %d %b %Y %H:%M:%S GMT', tonumber(ngx.var.time))";
set_by_lua $day "return os.date('%Y%m%d', tonumber(ngx.var.time))";
set_sha1 $datesha $date;
set $key $prefixsha$datesha;
set_by_lua $bucket "return os.getenv('S3_BUCKET_NAME')";
set $url https://$bucket.s3.amazonaws.com/$day/$key;
set $url https://$bucket.s3-eu-west-1.amazonaws.com/$day/$key;
set $returnurl https://uploads.paidit.se/$day/$key;
set $acl public-read;
set $contentSha256 "";
access_by_lua_block {
local sha256 = require("sha256")
ngx.req.read_body()
local body = ngx.req.get_body_data()
local contentSha256 = sha256.sha256(body)
ngx.var.contentSha256 = contentSha256
}
set_by_lua_block $authorization {
local sign = require("sign")
local headers = {["x-amz-acl"] = ngx.var.acl, ["x-amz-date"] = ngx.var.date, ["host"] = "upload.unbound.se.s3-eu-west-1.amazonaws.com"}
local region = "eu-west-1"
return sign.sign(os.getenv("AWS_ACCESS_KEY_ID"), os.getenv("AWS_SECRET_ACCESS_KEY"), os.time(), "upload.unbound.se", ngx.var.request_uri, headers, ngx.var.contentSha256, region)
}
proxy_set_header date $date;
proxy_set_header x-amz-acl $acl;
proxy_set_header x-amz-date $date;
proxy_set_header x-amz-content-sha256 $contentSha256;
proxy_set_header Authorization $authorization;
proxy_hide_header x-amz-id-2;
proxy_hide_header x-amz-request-id;
add_header X-File-URL $returnurl;
@@ -59,6 +85,8 @@ http {
resolver_timeout 10s;
add_header 'Access-Control-Expose-Headers' 'X-File-Url';
add_header X-debug-message $authorization always;
proxy_pass $url;
}
}
sha256.lua
+745
View File
@@ -0,0 +1,745 @@
--
-- SHA-256 secure hash computation, and HMAC-SHA256 signature computation
--
-- Copyright 2017 Jqqqi
--
local sha256 = { }
local MOD = 2 ^ 32
local MODM = MOD - 1
local function memoize(f)
local mt = { }
local t = setmetatable( { }, mt)
function mt:__index(k)
local v = f(k)
t[k] = v
return v
end
return t
end
local function make_bitop_uncached(t, m)
local function bitop(a, b)
local res, p = 0, 1
while a ~= 0 and b ~= 0 do
local am, bm = a % m, b % m
res = res + t[am][bm] * p
a =(a - am) / m
b =(b - bm) / m
p = p * m
end
res = res +(a + b) * p
return res
end
return bitop
end
local function make_bitop(t)
local op1 = make_bitop_uncached(t, 2 ^ 1)
local op2 = memoize( function(a) return memoize( function(b) return op1(a, b) end) end)
return make_bitop_uncached(op2, 2 ^(t.n or 1))
end
local bxor1 = make_bitop( { [0] = { [0] = 0, [1] = 1 }, [1] = { [0] = 1, [1] = 0 }, n = 4 })
local function bxor(a, b, c, ...)
local z = nil
if b then
a = a % MOD
b = b % MOD
z = bxor1(a, b)
if c then z = bxor(z, c, ...) end
return z
elseif a then
return a % MOD
else
return 0
end
end
local function band(a, b, c, ...)
local z
if b then
a = a % MOD
b = b % MOD
z =((a + b) - bxor1(a, b)) / 2
if c then z = bit32_band(z, c, ...) end
return z
elseif a then
return a % MOD
else
return MODM
end
end
local function bnot(x) return(-1 - x) % MOD end
local function rshift1(a, disp)
if disp < 0 then return lshift(a, - disp) end
return math.floor(a % 2 ^ 32 / 2 ^ disp)
end
local function rshift(x, disp)
if disp > 31 or disp < -31 then return 0 end
return rshift1(x % MOD, disp)
end
local function lshift(a, disp)
if disp < 0 then return rshift(a, - disp) end
return(a * 2 ^ disp) % 2 ^ 32
end
local function rrotate(x, disp)
x = x % MOD
disp = disp % 32
local low = band(x, 2 ^ disp - 1)
return rshift(x, disp) + lshift(low, 32 - disp)
end
local k = {
0x428a2f98,0x71374491,0xb5c0fbcf,0xe9b5dba5,
0x3956c25b,0x59f111f1,0x923f82a4,0xab1c5ed5,
0xd807aa98,0x12835b01,0x243185be,0x550c7dc3,
0x72be5d74,0x80deb1fe,0x9bdc06a7,0xc19bf174,
0xe49b69c1,0xefbe4786,0x0fc19dc6,0x240ca1cc,
0x2de92c6f,0x4a7484aa,0x5cb0a9dc,0x76f988da,
0x983e5152,0xa831c66d,0xb00327c8,0xbf597fc7,
0xc6e00bf3,0xd5a79147,0x06ca6351,0x14292967,
0x27b70a85,0x2e1b2138,0x4d2c6dfc,0x53380d13,
0x650a7354,0x766a0abb,0x81c2c92e,0x92722c85,
0xa2bfe8a1,0xa81a664b,0xc24b8b70,0xc76c51a3,
0xd192e819,0xd6990624,0xf40e3585,0x106aa070,
0x19a4c116,0x1e376c08,0x2748774c,0x34b0bcb5,
0x391c0cb3,0x4ed8aa4a,0x5b9cca4f,0x682e6ff3,
0x748f82ee,0x78a5636f,0x84c87814,0x8cc70208,
0x90befffa,0xa4506ceb,0xbef9a3f7,0xc67178f2,
}
local function str2hexa(s)
return(string.gsub(s, ".", function(c) return string.format("%02x", string.byte(c)) end))
end
local function num2s(l, n)
local s = ""
for i = 1, n do
local rem = l % 256
s = string.char(rem) .. s
l =(l - rem) / 256
end
return s
end
local function s232num(s, i)
local n = 0
for i = i, i + 3 do n = n * 256 + string.byte(s, i) end
return n
end
local function preproc(msg, len)
local extra = 64 -((len + 9) % 64)
len = num2s(8 * len, 8)
msg = msg .. "\128" .. string.rep("\0", extra) .. len
assert(#msg % 64 == 0)
return msg
end
local function initH256(H)
H[1] = 0x6a09e667
H[2] = 0xbb67ae85
H[3] = 0x3c6ef372
H[4] = 0xa54ff53a
H[5] = 0x510e527f
H[6] = 0x9b05688c
H[7] = 0x1f83d9ab
H[8] = 0x5be0cd19
return H
end
local function digestblock(msg, i, H)
local w = { }
for j = 1, 16 do w[j] = s232num(msg, i +(j - 1) * 4) end
for j = 17, 64 do
local v = w[j - 15]
local s0 = bxor(rrotate(v, 7), rrotate(v, 18), rshift(v, 3))
v = w[j - 2]
w[j] = w[j - 16] + s0 + w[j - 7] + bxor(rrotate(v, 17), rrotate(v, 19), rshift(v, 10))
end
local a, b, c, d, e, f, g, h = H[1], H[2], H[3], H[4], H[5], H[6], H[7], H[8]
for i = 1, 64 do
local s0 = bxor(rrotate(a, 2), rrotate(a, 13), rrotate(a, 22))
local maj = bxor(band(a, b), band(a, c), band(b, c))
local t2 = s0 + maj
local s1 = bxor(rrotate(e, 6), rrotate(e, 11), rrotate(e, 25))
local ch = bxor(band(e, f), band(bnot(e), g))
local t1 = h + s1 + ch + k[i] + w[i]
h, g, f, e, d, c, b, a = g, f, e, d + t1, c, b, a, t1 + t2
end
H[1] = band(H[1] + a)
H[2] = band(H[2] + b)
H[3] = band(H[3] + c)
H[4] = band(H[4] + d)
H[5] = band(H[5] + e)
H[6] = band(H[6] + f)
H[7] = band(H[7] + g)
H[8] = band(H[8] + h)
end
local function hex_to_binary(hex)
return hex:gsub('..', function(hexval)
return string.char(tonumber(hexval, 16))
end )
end
local blocksize = 64 -- 512 bits
local xor_with_0x5c = {
[string.char(0)] = string.char(92),
[string.char(1)] = string.char(93),
[string.char(2)] = string.char(94),
[string.char(3)] = string.char(95),
[string.char(4)] = string.char(88),
[string.char(5)] = string.char(89),
[string.char(6)] = string.char(90),
[string.char(7)] = string.char(91),
[string.char(8)] = string.char(84),
[string.char(9)] = string.char(85),
[string.char(10)] = string.char(86),
[string.char(11)] = string.char(87),
[string.char(12)] = string.char(80),
[string.char(13)] = string.char(81),
[string.char(14)] = string.char(82),
[string.char(15)] = string.char(83),
[string.char(16)] = string.char(76),
[string.char(17)] = string.char(77),
[string.char(18)] = string.char(78),
[string.char(19)] = string.char(79),
[string.char(20)] = string.char(72),
[string.char(21)] = string.char(73),
[string.char(22)] = string.char(74),
[string.char(23)] = string.char(75),
[string.char(24)] = string.char(68),
[string.char(25)] = string.char(69),
[string.char(26)] = string.char(70),
[string.char(27)] = string.char(71),
[string.char(28)] = string.char(64),
[string.char(29)] = string.char(65),
[string.char(30)] = string.char(66),
[string.char(31)] = string.char(67),
[string.char(32)] = string.char(124),
[string.char(33)] = string.char(125),
[string.char(34)] = string.char(126),
[string.char(35)] = string.char(127),
[string.char(36)] = string.char(120),
[string.char(37)] = string.char(121),
[string.char(38)] = string.char(122),
[string.char(39)] = string.char(123),
[string.char(40)] = string.char(116),
[string.char(41)] = string.char(117),
[string.char(42)] = string.char(118),
[string.char(43)] = string.char(119),
[string.char(44)] = string.char(112),
[string.char(45)] = string.char(113),
[string.char(46)] = string.char(114),
[string.char(47)] = string.char(115),
[string.char(48)] = string.char(108),
[string.char(49)] = string.char(109),
[string.char(50)] = string.char(110),
[string.char(51)] = string.char(111),
[string.char(52)] = string.char(104),
[string.char(53)] = string.char(105),
[string.char(54)] = string.char(106),
[string.char(55)] = string.char(107),
[string.char(56)] = string.char(100),
[string.char(57)] = string.char(101),
[string.char(58)] = string.char(102),
[string.char(59)] = string.char(103),
[string.char(60)] = string.char(96),
[string.char(61)] = string.char(97),
[string.char(62)] = string.char(98),
[string.char(63)] = string.char(99),
[string.char(64)] = string.char(28),
[string.char(65)] = string.char(29),
[string.char(66)] = string.char(30),
[string.char(67)] = string.char(31),
[string.char(68)] = string.char(24),
[string.char(69)] = string.char(25),
[string.char(70)] = string.char(26),
[string.char(71)] = string.char(27),
[string.char(72)] = string.char(20),
[string.char(73)] = string.char(21),
[string.char(74)] = string.char(22),
[string.char(75)] = string.char(23),
[string.char(76)] = string.char(16),
[string.char(77)] = string.char(17),
[string.char(78)] = string.char(18),
[string.char(79)] = string.char(19),
[string.char(80)] = string.char(12),
[string.char(81)] = string.char(13),
[string.char(82)] = string.char(14),
[string.char(83)] = string.char(15),
[string.char(84)] = string.char(8),
[string.char(85)] = string.char(9),
[string.char(86)] = string.char(10),
[string.char(87)] = string.char(11),
[string.char(88)] = string.char(4),
[string.char(89)] = string.char(5),
[string.char(90)] = string.char(6),
[string.char(91)] = string.char(7),
[string.char(92)] = string.char(0),
[string.char(93)] = string.char(1),
[string.char(94)] = string.char(2),
[string.char(95)] = string.char(3),
[string.char(96)] = string.char(60),
[string.char(97)] = string.char(61),
[string.char(98)] = string.char(62),
[string.char(99)] = string.char(63),
[string.char(100)] = string.char(56),
[string.char(101)] = string.char(57),
[string.char(102)] = string.char(58),
[string.char(103)] = string.char(59),
[string.char(104)] = string.char(52),
[string.char(105)] = string.char(53),
[string.char(106)] = string.char(54),
[string.char(107)] = string.char(55),
[string.char(108)] = string.char(48),
[string.char(109)] = string.char(49),
[string.char(110)] = string.char(50),
[string.char(111)] = string.char(51),
[string.char(112)] = string.char(44),
[string.char(113)] = string.char(45),
[string.char(114)] = string.char(46),
[string.char(115)] = string.char(47),
[string.char(116)] = string.char(40),
[string.char(117)] = string.char(41),
[string.char(118)] = string.char(42),
[string.char(119)] = string.char(43),
[string.char(120)] = string.char(36),
[string.char(121)] = string.char(37),
[string.char(122)] = string.char(38),
[string.char(123)] = string.char(39),
[string.char(124)] = string.char(32),
[string.char(125)] = string.char(33),
[string.char(126)] = string.char(34),
[string.char(127)] = string.char(35),
[string.char(128)] = string.char(220),
[string.char(129)] = string.char(221),
[string.char(130)] = string.char(222),
[string.char(131)] = string.char(223),
[string.char(132)] = string.char(216),
[string.char(133)] = string.char(217),
[string.char(134)] = string.char(218),
[string.char(135)] = string.char(219),
[string.char(136)] = string.char(212),
[string.char(137)] = string.char(213),
[string.char(138)] = string.char(214),
[string.char(139)] = string.char(215),
[string.char(140)] = string.char(208),
[string.char(141)] = string.char(209),
[string.char(142)] = string.char(210),
[string.char(143)] = string.char(211),
[string.char(144)] = string.char(204),
[string.char(145)] = string.char(205),
[string.char(146)] = string.char(206),
[string.char(147)] = string.char(207),
[string.char(148)] = string.char(200),
[string.char(149)] = string.char(201),
[string.char(150)] = string.char(202),
[string.char(151)] = string.char(203),
[string.char(152)] = string.char(196),
[string.char(153)] = string.char(197),
[string.char(154)] = string.char(198),
[string.char(155)] = string.char(199),
[string.char(156)] = string.char(192),
[string.char(157)] = string.char(193),
[string.char(158)] = string.char(194),
[string.char(159)] = string.char(195),
[string.char(160)] = string.char(252),
[string.char(161)] = string.char(253),
[string.char(162)] = string.char(254),
[string.char(163)] = string.char(255),
[string.char(164)] = string.char(248),
[string.char(165)] = string.char(249),
[string.char(166)] = string.char(250),
[string.char(167)] = string.char(251),
[string.char(168)] = string.char(244),
[string.char(169)] = string.char(245),
[string.char(170)] = string.char(246),
[string.char(171)] = string.char(247),
[string.char(172)] = string.char(240),
[string.char(173)] = string.char(241),
[string.char(174)] = string.char(242),
[string.char(175)] = string.char(243),
[string.char(176)] = string.char(236),
[string.char(177)] = string.char(237),
[string.char(178)] = string.char(238),
[string.char(179)] = string.char(239),
[string.char(180)] = string.char(232),
[string.char(181)] = string.char(233),
[string.char(182)] = string.char(234),
[string.char(183)] = string.char(235),
[string.char(184)] = string.char(228),
[string.char(185)] = string.char(229),
[string.char(186)] = string.char(230),
[string.char(187)] = string.char(231),
[string.char(188)] = string.char(224),
[string.char(189)] = string.char(225),
[string.char(190)] = string.char(226),
[string.char(191)] = string.char(227),
[string.char(192)] = string.char(156),
[string.char(193)] = string.char(157),
[string.char(194)] = string.char(158),
[string.char(195)] = string.char(159),
[string.char(196)] = string.char(152),
[string.char(197)] = string.char(153),
[string.char(198)] = string.char(154),
[string.char(199)] = string.char(155),
[string.char(200)] = string.char(148),
[string.char(201)] = string.char(149),
[string.char(202)] = string.char(150),
[string.char(203)] = string.char(151),
[string.char(204)] = string.char(144),
[string.char(205)] = string.char(145),
[string.char(206)] = string.char(146),
[string.char(207)] = string.char(147),
[string.char(208)] = string.char(140),
[string.char(209)] = string.char(141),
[string.char(210)] = string.char(142),
[string.char(211)] = string.char(143),
[string.char(212)] = string.char(136),
[string.char(213)] = string.char(137),
[string.char(214)] = string.char(138),
[string.char(215)] = string.char(139),
[string.char(216)] = string.char(132),
[string.char(217)] = string.char(133),
[string.char(218)] = string.char(134),
[string.char(219)] = string.char(135),
[string.char(220)] = string.char(128),
[string.char(221)] = string.char(129),
[string.char(222)] = string.char(130),
[string.char(223)] = string.char(131),
[string.char(224)] = string.char(188),
[string.char(225)] = string.char(189),
[string.char(226)] = string.char(190),
[string.char(227)] = string.char(191),
[string.char(228)] = string.char(184),
[string.char(229)] = string.char(185),
[string.char(230)] = string.char(186),
[string.char(231)] = string.char(187),
[string.char(232)] = string.char(180),
[string.char(233)] = string.char(181),
[string.char(234)] = string.char(182),
[string.char(235)] = string.char(183),
[string.char(236)] = string.char(176),
[string.char(237)] = string.char(177),
[string.char(238)] = string.char(178),
[string.char(239)] = string.char(179),
[string.char(240)] = string.char(172),
[string.char(241)] = string.char(173),
[string.char(242)] = string.char(174),
[string.char(243)] = string.char(175),
[string.char(244)] = string.char(168),
[string.char(245)] = string.char(169),
[string.char(246)] = string.char(170),
[string.char(247)] = string.char(171),
[string.char(248)] = string.char(164),
[string.char(249)] = string.char(165),
[string.char(250)] = string.char(166),
[string.char(251)] = string.char(167),
[string.char(252)] = string.char(160),
[string.char(253)] = string.char(161),
[string.char(254)] = string.char(162),
[string.char(255)] = string.char(163),
}
local xor_with_0x36 = {
[string.char(0)] = string.char(54),
[string.char(1)] = string.char(55),
[string.char(2)] = string.char(52),
[string.char(3)] = string.char(53),
[string.char(4)] = string.char(50),
[string.char(5)] = string.char(51),
[string.char(6)] = string.char(48),
[string.char(7)] = string.char(49),
[string.char(8)] = string.char(62),
[string.char(9)] = string.char(63),
[string.char(10)] = string.char(60),
[string.char(11)] = string.char(61),
[string.char(12)] = string.char(58),
[string.char(13)] = string.char(59),
[string.char(14)] = string.char(56),
[string.char(15)] = string.char(57),
[string.char(16)] = string.char(38),
[string.char(17)] = string.char(39),
[string.char(18)] = string.char(36),
[string.char(19)] = string.char(37),
[string.char(20)] = string.char(34),
[string.char(21)] = string.char(35),
[string.char(22)] = string.char(32),
[string.char(23)] = string.char(33),
[string.char(24)] = string.char(46),
[string.char(25)] = string.char(47),
[string.char(26)] = string.char(44),
[string.char(27)] = string.char(45),
[string.char(28)] = string.char(42),
[string.char(29)] = string.char(43),
[string.char(30)] = string.char(40),
[string.char(31)] = string.char(41),
[string.char(32)] = string.char(22),
[string.char(33)] = string.char(23),
[string.char(34)] = string.char(20),
[string.char(35)] = string.char(21),
[string.char(36)] = string.char(18),
[string.char(37)] = string.char(19),
[string.char(38)] = string.char(16),
[string.char(39)] = string.char(17),
[string.char(40)] = string.char(30),
[string.char(41)] = string.char(31),
[string.char(42)] = string.char(28),
[string.char(43)] = string.char(29),
[string.char(44)] = string.char(26),
[string.char(45)] = string.char(27),
[string.char(46)] = string.char(24),
[string.char(47)] = string.char(25),
[string.char(48)] = string.char(6),
[string.char(49)] = string.char(7),
[string.char(50)] = string.char(4),
[string.char(51)] = string.char(5),
[string.char(52)] = string.char(2),
[string.char(53)] = string.char(3),
[string.char(54)] = string.char(0),
[string.char(55)] = string.char(1),
[string.char(56)] = string.char(14),
[string.char(57)] = string.char(15),
[string.char(58)] = string.char(12),
[string.char(59)] = string.char(13),
[string.char(60)] = string.char(10),
[string.char(61)] = string.char(11),
[string.char(62)] = string.char(8),
[string.char(63)] = string.char(9),
[string.char(64)] = string.char(118),
[string.char(65)] = string.char(119),
[string.char(66)] = string.char(116),
[string.char(67)] = string.char(117),
[string.char(68)] = string.char(114),
[string.char(69)] = string.char(115),
[string.char(70)] = string.char(112),
[string.char(71)] = string.char(113),
[string.char(72)] = string.char(126),
[string.char(73)] = string.char(127),
[string.char(74)] = string.char(124),
[string.char(75)] = string.char(125),
[string.char(76)] = string.char(122),
[string.char(77)] = string.char(123),
[string.char(78)] = string.char(120),
[string.char(79)] = string.char(121),
[string.char(80)] = string.char(102),
[string.char(81)] = string.char(103),
[string.char(82)] = string.char(100),
[string.char(83)] = string.char(101),
[string.char(84)] = string.char(98),
[string.char(85)] = string.char(99),
[string.char(86)] = string.char(96),
[string.char(87)] = string.char(97),
[string.char(88)] = string.char(110),
[string.char(89)] = string.char(111),
[string.char(90)] = string.char(108),
[string.char(91)] = string.char(109),
[string.char(92)] = string.char(106),
[string.char(93)] = string.char(107),
[string.char(94)] = string.char(104),
[string.char(95)] = string.char(105),
[string.char(96)] = string.char(86),
[string.char(97)] = string.char(87),
[string.char(98)] = string.char(84),
[string.char(99)] = string.char(85),
[string.char(100)] = string.char(82),
[string.char(101)] = string.char(83),
[string.char(102)] = string.char(80),
[string.char(103)] = string.char(81),
[string.char(104)] = string.char(94),
[string.char(105)] = string.char(95),
[string.char(106)] = string.char(92),
[string.char(107)] = string.char(93),
[string.char(108)] = string.char(90),
[string.char(109)] = string.char(91),
[string.char(110)] = string.char(88),
[string.char(111)] = string.char(89),
[string.char(112)] = string.char(70),
[string.char(113)] = string.char(71),
[string.char(114)] = string.char(68),
[string.char(115)] = string.char(69),
[string.char(116)] = string.char(66),
[string.char(117)] = string.char(67),
[string.char(118)] = string.char(64),
[string.char(119)] = string.char(65),
[string.char(120)] = string.char(78),
[string.char(121)] = string.char(79),
[string.char(122)] = string.char(76),
[string.char(123)] = string.char(77),
[string.char(124)] = string.char(74),
[string.char(125)] = string.char(75),
[string.char(126)] = string.char(72),
[string.char(127)] = string.char(73),
[string.char(128)] = string.char(182),
[string.char(129)] = string.char(183),
[string.char(130)] = string.char(180),
[string.char(131)] = string.char(181),
[string.char(132)] = string.char(178),
[string.char(133)] = string.char(179),
[string.char(134)] = string.char(176),
[string.char(135)] = string.char(177),
[string.char(136)] = string.char(190),
[string.char(137)] = string.char(191),
[string.char(138)] = string.char(188),
[string.char(139)] = string.char(189),
[string.char(140)] = string.char(186),
[string.char(141)] = string.char(187),
[string.char(142)] = string.char(184),
[string.char(143)] = string.char(185),
[string.char(144)] = string.char(166),
[string.char(145)] = string.char(167),
[string.char(146)] = string.char(164),
[string.char(147)] = string.char(165),
[string.char(148)] = string.char(162),
[string.char(149)] = string.char(163),
[string.char(150)] = string.char(160),
[string.char(151)] = string.char(161),
[string.char(152)] = string.char(174),
[string.char(153)] = string.char(175),
[string.char(154)] = string.char(172),
[string.char(155)] = string.char(173),
[string.char(156)] = string.char(170),
[string.char(157)] = string.char(171),
[string.char(158)] = string.char(168),
[string.char(159)] = string.char(169),
[string.char(160)] = string.char(150),
[string.char(161)] = string.char(151),
[string.char(162)] = string.char(148),
[string.char(163)] = string.char(149),
[string.char(164)] = string.char(146),
[string.char(165)] = string.char(147),
[string.char(166)] = string.char(144),
[string.char(167)] = string.char(145),
[string.char(168)] = string.char(158),
[string.char(169)] = string.char(159),
[string.char(170)] = string.char(156),
[string.char(171)] = string.char(157),
[string.char(172)] = string.char(154),
[string.char(173)] = string.char(155),
[string.char(174)] = string.char(152),
[string.char(175)] = string.char(153),
[string.char(176)] = string.char(134),
[string.char(177)] = string.char(135),
[string.char(178)] = string.char(132),
[string.char(179)] = string.char(133),
[string.char(180)] = string.char(130),
[string.char(181)] = string.char(131),
[string.char(182)] = string.char(128),
[string.char(183)] = string.char(129),
[string.char(184)] = string.char(142),
[string.char(185)] = string.char(143),
[string.char(186)] = string.char(140),
[string.char(187)] = string.char(141),
[string.char(188)] = string.char(138),
[string.char(189)] = string.char(139),
[string.char(190)] = string.char(136),
[string.char(191)] = string.char(137),
[string.char(192)] = string.char(246),
[string.char(193)] = string.char(247),
[string.char(194)] = string.char(244),
[string.char(195)] = string.char(245),
[string.char(196)] = string.char(242),
[string.char(197)] = string.char(243),
[string.char(198)] = string.char(240),
[string.char(199)] = string.char(241),
[string.char(200)] = string.char(254),
[string.char(201)] = string.char(255),
[string.char(202)] = string.char(252),
[string.char(203)] = string.char(253),
[string.char(204)] = string.char(250),
[string.char(205)] = string.char(251),
[string.char(206)] = string.char(248),
[string.char(207)] = string.char(249),
[string.char(208)] = string.char(230),
[string.char(209)] = string.char(231),
[string.char(210)] = string.char(228),
[string.char(211)] = string.char(229),
[string.char(212)] = string.char(226),
[string.char(213)] = string.char(227),
[string.char(214)] = string.char(224),
[string.char(215)] = string.char(225),
[string.char(216)] = string.char(238),
[string.char(217)] = string.char(239),
[string.char(218)] = string.char(236),
[string.char(219)] = string.char(237),
[string.char(220)] = string.char(234),
[string.char(221)] = string.char(235),
[string.char(222)] = string.char(232),
[string.char(223)] = string.char(233),
[string.char(224)] = string.char(214),
[string.char(225)] = string.char(215),
[string.char(226)] = string.char(212),
[string.char(227)] = string.char(213),
[string.char(228)] = string.char(210),
[string.char(229)] = string.char(211),
[string.char(230)] = string.char(208),
[string.char(231)] = string.char(209),
[string.char(232)] = string.char(222),
[string.char(233)] = string.char(223),
[string.char(234)] = string.char(220),
[string.char(235)] = string.char(221),
[string.char(236)] = string.char(218),
[string.char(237)] = string.char(219),
[string.char(238)] = string.char(216),
[string.char(239)] = string.char(217),
[string.char(240)] = string.char(198),
[string.char(241)] = string.char(199),
[string.char(242)] = string.char(196),
[string.char(243)] = string.char(197),
[string.char(244)] = string.char(194),
[string.char(245)] = string.char(195),
[string.char(246)] = string.char(192),
[string.char(247)] = string.char(193),
[string.char(248)] = string.char(206),
[string.char(249)] = string.char(207),
[string.char(250)] = string.char(204),
[string.char(251)] = string.char(205),
[string.char(252)] = string.char(202),
[string.char(253)] = string.char(203),
[string.char(254)] = string.char(200),
[string.char(255)] = string.char(201),
}
-------------------------------------------------------------------------
function sha256.sha256(msg)
msg = preproc(msg, #msg)
local H = initH256( { })
for i = 1, #msg, 64 do digestblock(msg, i, H) end
return str2hexa(num2s(H[1], 4) .. num2s(H[2], 4) .. num2s(H[3], 4) .. num2s(H[4], 4) ..
num2s(H[5], 4) .. num2s(H[6], 4) .. num2s(H[7], 4) .. num2s(H[8], 4))
end
function sha256.sha256_binary(msg)
return hex_to_binary(sha256.sha256(msg))
end
function sha256.hmac_sha256(key, text)
assert(type(key) == 'string', "key passed to hmac_sha256 should be a string")
assert(type(text) == 'string', "text passed to hmac_sha256 should be a string")
if #key > blocksize then
key = sha256.sha256_binary(key)
end
local key_xord_with_0x36 = key:gsub('.', xor_with_0x36) .. string.rep(string.char(0x36), blocksize - #key)
local key_xord_with_0x5c = key:gsub('.', xor_with_0x5c) .. string.rep(string.char(0x5c), blocksize - #key)
return sha256.sha256(key_xord_with_0x5c .. sha256.sha256_binary(key_xord_with_0x36 .. text))
end
return sha256
sign.lua
+52
View File
@@ -0,0 +1,52 @@
local sign = {}
local sha256 = require("sha256")
function sign.sign(key, secret, time, host, path, headers, contentSha256, region)
local day = os.date("%Y%m%d", time)
local date = os.date("%a, %d %b %Y %H:%M:%S GMT", time)
local timestamp = os.date("%Y%m%dT%H%M%SZ", time)
local dateKey = sha256.hmac_sha256("AWS4" .. secret, day)
local dateRegionKey = sha256.hmac_sha256(dateKey, region)
local dateRegionSvcKey = sha256.hmac_sha256(dateRegionKey, 's3')
local signingKey = sha256.hmac_sha256(dateRegionSvcKey, 'aws4_request')
print("DateKey: " .. dateKey)
print("DateRegionKey: " .. dateRegionKey)
print("DateRegionSvcKey: " .. dateRegionSvcKey)
print("SigningKey: " .. signingKey)
headers["x-amz-content-sha256"] = contentSha256
headers["date"] = date
headers["host"] = host
local keys = {}
for k in pairs(headers) do
table.insert(keys, k)
end
table.sort(keys)
local signedHeaders = ""
local request = "PUT\n" .. path .. "\n"
for _, k in ipairs(keys) do
request = request .. "\n" .. k .. ":" .. headers[k]
signedHeaders = signedHeaders .. ";" .. k
end
signedHeaders = string.sub(signedHeaders, 2)
request = request .. "\n\n" .. signedHeaders .. "\n" .. contentSha256
print("Request:\n" .. request)
print("-------")
local stringToSign = "AWS4-HMAC-SHA256\n" .. timestamp .. "\n" .. day .. "/" .. region .. "/s3/aws4_request\n" .. sha256.sha256(request)
print("String to sign:\n" .. stringToSign)
print("-------")
local signature = sha256.hmac_sha256(signingKey, stringToSign)
print("Signature:\n" .. signature)
print("-------")
local result = "AWS4-HMAC-SHA256 Credential=" .. key .. "/" .. day .. "/" .. region .. "/s3/aws4_request,SignedHeaders=" .. signedHeaders
result = result .. ",Signature=" .. signature
return result
end
return sign
test.lua
+37
View File
@@ -0,0 +1,37 @@
lu = require('luaunit')
local sign = require("sign")
local sha256 = require("sha256")
--local key = os.getenv("AWS_ACCESS_KEY_ID")
--local secret = os.getenv("AWS_SECRET_ACCESS_KEY")
-- local headers = {["x-amz-acl"] = acl, ["x-amz-date"] = date, ["x-amz-content-sha256"] = "UNSIGNED-PAYLOAD"}
function TestPut()
local key = "AKIAIOSFODNN7EXAMPLE"
local secret = "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY"
local time = os.time({year = 2013, month = 5, day = 24, hour = 0})
local headers = {["x-amz-storage-class"] = "REDUCED_REDUNDANCY", ["x-amz-date"] = "20130524T000000Z" }
local contentSha256 = sha256.sha256("Welcome to Amazon S3.")
local signature = sign.sign(key, secret, time, "examplebucket.s3.amazonaws.com", "/test%24file.text", headers, contentSha256, "us-east-1")
print(signature)
lu.assertEquals( type(signature), 'string' )
lu.assertEquals( signature, "AWS4-HMAC-SHA256 Credential=AKIAIOSFODNN7EXAMPLE/20130524/us-east-1/s3/aws4_request,SignedHeaders=date;host;x-amz-content-sha256;x-amz-date;x-amz-storage-class,Signature=98ad721746da40c64f1a55b78f14c238d841ea1380cd77a1b5971af0ece108bd" )
end
function TestPut2()
local key = "AKIAI2BOGUMMDPX2WKSQ"
local secret = "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"
local time = os.time({year = 2019, month = 6, day = 28, hour = 15, min = 56, sec = 16})
local headers = {["x-amz-acl"] = "public-read", ["x-amz-date"] = "20190628T135616Z" }
local contentSha256 = sha256.sha256("fluff2")
local signature = sign.sign(key, secret, time, "upload.unbound.se.s3-eu-west-1.amazonaws.com", "/20190628/d25f1855e0cab108cb898ca2bebbb35ed228c1134f9d89492f2c705d5b3c6c355767d37a823ccb31", headers, contentSha256, "eu-west-1")
print(signature)
lu.assertEquals( type(signature), 'string' )
lu.assertEquals( signature, "AWS4-HMAC-SHA256 Credential=AKIAI2BOGUMMDPX2WKSQ/20190628/eu-west-1/s3/aws4_request,SignedHeaders=date;host;x-amz-acl;x-amz-content-sha256;x-amz-date,Signature=38683969ed1a023aedbd0e14bf4beae48a6430c6e13c93f59257c5596578721d" )
end
-- class TestSign
os.exit(lu.LuaUnit:run())