ERROR: Extension is not signed

[8beeeaaat]

• Self-signing with --self-signed option results in successful signing, but failed verification.

% npx @anthropic-ai/dxt --version
0.1.0

% npx @anthropic-ai/dxt sign touchdesigner-mcp.dxt --self-signed
Using existing self-signed certificate
Signing touchdesigner-mcp.dxt...
Successfully signed touchdesigner-mcp.dxt

% npx @anthropic-ai/dxt verify touchdesigner-mcp.dxt
Verifying touchdesigner-mcp.dxt...
ERROR: Extension is not signed

% npx @anthropic-ai/dxt info touchdesigner-mcp.dxt
File: touchdesigner-mcp.dxt
Size: 3518.61 KB

WARNING: Not signed

• Sign with custom certificate and key, too

% npx @anthropic-ai/dxt sign touchdesigner-mcp.dxt --cert cert.pem --key key.pem
Signing touchdesigner-mcp.dxt...
Successfully signed touchdesigner-mcp.dxt

% npx @anthropic-ai/dxt verify touchdesigner-mcp.dxt
Verifying touchdesigner-mcp.dxt...
ERROR: Extension is not signed

ref: https://github.com/anthropics/dxt/blob/main/CLI.md#development-workflow

[oshchyhol]

dxt verify just ends up calling this code path from node-forge which throws, since it's not implemented, and then reports status: "unsigned" https://github.com/digitalbazaar/forge/blob/a0a4a4264bedb3296974b9675349c9c190144aeb/lib/pkcs7.js#L380-L382 🫠

    verify: function() {
      throw new Error('PKCS#7 signature verification not yet implemented.');
    },

https://github.com/anthropics/dxt/blob/a3ba5fc984d652be5d18a8bee3084e24345c50e4/src/node/sign.ts#L152

https://github.com/anthropics/dxt/blob/a3ba5fc984d652be5d18a8bee3084e24345c50e4/src/node/sign.ts#L175-L177

[asklar]

related to digitalbazaar/forge#1088

@joan-anthropic fyi

[joan-anthropic]

cc @MarshallOfSound

[bryan-anthropic]

Thank you for reporting this. The root cause is that the node-forge library's p7.verify() method is not implemented, as @oshchyhol identified. This causes the verification to always fall through to the error handler and report unsigned status.

A fix implementing manual PKCS#7 signature verification has been submitted in #205. The fix verifies the message digest and RSA signature directly, bypassing the unimplemented node-forge method.