diff --git a/src/Web/HTTPSig.php b/src/Web/HTTPSig.php index 2aac24fc6..2d248c0a3 100644 --- a/src/Web/HTTPSig.php +++ b/src/Web/HTTPSig.php @@ -213,6 +213,9 @@ class HTTPSig logger('verified: ' . intval($x), LOGGER_DEBUG); if (!$x) { + + + // try again, ignoring the local actor (xchan) cache and refetching the key // from its source @@ -226,9 +229,12 @@ class HTTPSig if (!$y) { btlogger('verify failed for ' . $result['signer'] . ' alg=' . $algorithm . (($fkey['public_key']) ? '' : ' no key')); $sig_block['signature'] = base64_encode($sig_block['signature']); + logger('affected sigblock: ' . print_r($sig_block, true)); logger('headers: ' . print_r($headers, true)); logger('server: ' . print_r($_SERVER, true)); + logger('signed_data: ' . print_r($signed_data,true)); + return $result; } }