~bigbes/sourcehut-root: dd580993

patches: core-go-checksum — fix the actual sigv4 bug, not flexible-checksums

The previous version of the patch set RequestChecksumCalculation=WhenRequired,
which targeted the flexible-checksum middleware. That layer never causes the
seek; the bug is in the sigv4 dynamic-payload middleware, which only uses
UnsignedPayload over HTTPS. With s3-insecure=true to internal Garage the
SDK takes the ComputePayloadSHA256 branch and seeks the non-seekable body.

Updated patch:
- Swaps ComputePayloadHash middleware for v4.UnsignedPayload{} via
  opts.APIOptions in objects.NewClient — forces unsigned payload regardless
  of TLS.
- Adds s3.WithSigV4SigningRegion(region) to NewFromConfig so the V1 endpoint
  resolver can't override the signing region back to "default".

Mirrors phoebe-lab/srht/patches/core-go-checksum.patch (d8feacd).

Eugene Blikh <bigbes@gmail.com> — 2026-05-25 21:10:45 UTC

Commit dd5809939058008a526cca484aa65d07c3846a8e — view raw patch

Parent(s): 72581ff9

1 changed file(s)

File	Status	+	−
patches/core-go-checksum.patch	M	+29	-8