solpbc.org / solstone
personal memory agent
Star
Fork 0
Watch

fix(link): browser pairing msg2 carries ca_spki so the extension can verify the CA sig from the 16-byte link pin master

The 0x06 pair link only carries the 16-byte ca_fp_spki pin, not the CA public key. Verifying the home identity signature needs the full key, so msg2 must supply it. Adds LoadedCa.public_spki_der() (reused by spki_fingerprint_sha256) and includes ca_spki in the identity payload; the test now verifies the sig using only the transmitted ca_spki, as the browser client does. Found in cross-repo review against the shipped solstone-browser extension. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author Jer Miller Co-author Claude Opus 4.8 Date Commit a87ed801 Parent 09ec3b0d
+31 -5
4 changed files