Encode base64 logo

[robin-gustafsson]

What is the best way to base64 the logo to the CovidPass? I have converted my PNG to base64 but when I generating the CovidPass I got "Covid.pkpass, could not be opened."

We are using https://github.com/covidpass-org/CovidPassApiNet as backend, do we need to hash the image here to?

[hauketoenjes]

I think the hashes have to be the same on both server and client because only a hash is sent to the server to sign it. If the server returns a signed hash that doesn't fit to the pass on the client, the pass is invalid. And the icons are used within the hashing.

[robin-gustafsson]

Thanks!

What type of hash is on the server side?

Is the hash "9dcdd385e848610f020cf3bfc65ddc413beb5e87" on server side based on the base64 on the client side?

[marvinsxtr]

I think the hash is generated from the actual icon.png file inside the zip folder. Basically the manifest.json contains the hashes of all other files in the folder. On the server, we just check for CovidPass icon's hash to prevent generation of arbitrary passes.