func primaryID(c context.Context) (string, error) {
rs := &model.AuthReplicationState{}
if err := model.GetReplicationState(c, rs); err != nil {
return "", err
}
return rs.PrimaryID, nil
}
// verifySignature verifies the signature for blob.
func verifySignature(c context.Context, keyName string, blob, sig []byte) error {
rs := &model.AuthReplicationState{}
if err := model.GetReplicationState(c, rs); err != nil {
return err
}
certs, err := signature.PrimaryPublicCertificates(c, rs.PrimaryURL)
if err != nil {
return err
}
pem := signature.X509CertByName(certs, keyName)
if pem == nil {
return fmt.Errorf("failed to find cert")
}
return signature.Check(blob, pem, sig)
}