<@U29KBCJDP> <@UP0GS40AF> Hi Jeff and Tomas, I am ...
# suitescriptt
Tim Pilgrim
02/15/2022, 12:54 AM@jeffmillies @Watz Hi Jeff and Tomas, I am tagging you because I found a PGP document in this channel that had your names through it.
I have tried to implement PGP in the way described in the documents. I am having issues with the openpgp.encrypt() where it appears to just timeout and throws an empty error.
I was wondering if you PGP implementations are both still working and if so you guys or anyone else can point me in the right direction. As far I can tell I have followed the steps documented exactly.
j
jeffmillies
02/15/2022, 1:05 AMI can take a look in a few, but mine is still working. Which version of pgp are you using, I remember that being specific for it to work as well
t
Tim Pilgrim
02/15/2022, 1:06 AMI went and found the same version v4.10.8 I believe
j
jeffmillies
02/15/2022, 1:10 AMOk, I can look after an hour or so
t
Tim Pilgrim
02/15/2022, 1:12 AMthanks
Tim Pilgrim
02/15/2022, 2:08 AMhi jeff, just to make this easier when you have a couple of mins and so you can see what I have done I have zipped up the SDF and placed it here https://drive.google.com/file/d/1JyI71Z_f472uI5BcACh4vsah72iUFIOA/view?usp=sharing My guess is it might be something where word make have converted something import in one of the files to a different quote or something like that.
Tim Pilgrim
02/15/2022, 2:09 AMalso here is the current error I am getting
https://drive.google.com/file/d/1Jyze10W0G_RW0aYtYLnOPWSHCQmj8iJX/view?usp=sharing
j
jeffmillies
02/15/2022, 2:42 AM@Tim Pilgrim Everything looks pretty good from what I've seen so far. This is the version that I'm using. There might be something that NetSuite is picky about with yours being 4.10.8, not sure. However your error doesn't show much, I would suggest updating it to this, might show more info
function onRequest(scriptContext){
log.audit('start script');
mainAsyncExecution().then(function (result) {
log.audit(result);
let output = '';
result.forEach(function(logmsg){
output += (logmsg + '\n');
});
scriptContext.response.write(output);
})
.catch(function (e) {
log.error("e", e.message);
log.error("e.stack", JSON.stringify(e.stack));
}); }
return {onRequest: onRequest};that way you can see the message and then the stringify should show you the stack
jeffmillies
02/15/2022, 2:43 AMbut your shim looks good and the base64 and polyfill file matches mine. The way you have it included in the other script looks good too.
t
Tim Pilgrim
02/15/2022, 2:59 AMI have changed the library over to 4.10.9 I have change the onRequest and the error is still generating with e.stack returning blank
Tim Pilgrim
02/15/2022, 2:59 AMlooks like a good little problem
Tim Pilgrim
02/15/2022, 3:00 AMthere was a openphp.worker.js in the dist folder for openpgp are you using that? or does this implementation not need it?
j
jeffmillies
02/15/2022, 3:04 AMit does need it, it's referenced in the openpgp. file
jeffmillies
02/15/2022, 3:05 AMI was just looking at your log messages and seeing where it stopped before the error, its right before the encrypt part. Place the worker file in the same directory
t
Tim Pilgrim
02/15/2022, 3:12 AMI have put the worker file in and its made no difference
Tim Pilgrim
02/15/2022, 3:13 AMI have put wrap the encrypt with this
Copy code
log.debug({title: 'just before encrypt'});
const { data: encrypted } = await openpgp.encrypt({
message: openpgp.message.fromText(fileString), // input as Message object
publicKeys: (await openpgp.key.readArmored(publicKeyArmored)).keys, // for encryption
privateKeys: [privateKey] // for signing (optional)
});
log.debug({title: 'just after encrypt'});Tim Pilgrim
02/15/2022, 3:13 AMand it prints the just before encrypt debug message then takes about 45 seconds and then throws the error
Tim Pilgrim
02/15/2022, 3:14 AMso i guess I have broken something in the library itself
j
jeffmillies
02/15/2022, 3:14 AMwhat version are the keys you're using?
t
Tim Pilgrim
02/15/2022, 3:15 AMthats a read good question I couldn't get openpgp to generate them.
Tim Pilgrim
02/15/2022, 3:15 AMI might try and do that again now
j
jeffmillies
02/15/2022, 3:17 AMyeah, try to get that library to generate them for you now, instead of using the ones you have in the variables. I think its related to that. its stopping before it can encrypt, which means its having some trouble with the public and private that you have. I think anyway
t
Tim Pilgrim
02/15/2022, 3:40 AMYeah something v odd is happening if I try and use
Copy code
const { privateKeyArmored, publicKeyArmored, revocationCertificate } = await openpgp.generateKey({ userIds: [{ name: 'Test', email: 'test@email' }] });Tim Pilgrim
02/15/2022, 3:40 AMITS WORKING!!!!!!!!!
Tim Pilgrim
02/15/2022, 3:40 AMthanks so much Jeff!
j
jeffmillies
02/15/2022, 3:45 AMaw hell yeah! Nice one!
g
Gareth
02/15/2022, 11:11 PMJust want to say thank you for posting this. Really need OpenPGP.js and was not previously aware of it.
So, thank you!
Gareth
02/15/2022, 11:16 PMJust want to confirm though, that the library is trustable, and is production ready?
j
jeffmillies
02/18/2022, 2:25 PM@Gareth which specific library? openpgp.4.10.9.js is downloaded from openpgp, the others you can download the files yourself and review the code. I use it in production
g
Gareth
02/20/2022, 7:43 PMHey @jeffmillies, yeah with the random number generator. Thinking if it's cryptographic random enough to use in the process of generating CSRF tokens?
Guess third party tools are used to test the guess-ability and general security of those tokens though.
5 Views