Merge branch 'm19-MDL-16858-fixed' of git://github.com/mouneyrac/moodle into MOODLE_19_STABLE

2010-12-27 11:50:17 +01:00
parent 010758adb2 612d671fbc
commit 535037f521
1 changed files with 8 additions and 0 deletions
@@ -332,6 +332,14 @@ class mnet_xmlrpc_client {
                $this->error[] = $this->response['faultCode'] . " : " . $this->response['faultString'];
            }
        }
+
+        // ok, it's signed, but is it signed with the right certificate ?
+        // do this *after* we check for an out of date key
+        if (!openssl_verify($this->xmlrpcresponse, base64_decode($sig_parser->signature), 
+                $mnet_peer->public_key)) {
+            $this->error[] = 'Invalid signature';
+        }
+
        return empty($this->error);
    }
 }