security-and-privacy/gnupg
security-and-privacy
/
gnupg
mirror of git://git.gnupg.org/gnupg.git
1
0
Fork 0
Code Releases Activity

gpg: Always use version >= 4 to generate signature. 

* g10/sign.c (update_keysig_packet): Make sure sig->version >= 4.

--

GnuPG-bug-id: 5809
Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
This commit is contained in:
NIIBE Yutaka 2022-03-19 13:38:37 +09:00
parent 06b70daa50
commit 0ba69e5581
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
g10/sign.c
View File

@ -1928,6 +1928,15 @@ update_keysig_packet (ctrl_t ctrl,
/* Create a new signature packet. */
sig = copy_signature (NULL, orig_sig);
/* Don't generate version 3 signature, but newer. */
if (sig->version == 3)
{
if (pk->version > 3)
sig->version = pk->version;
else
sig->version = 4;
}
sig->digest_algo = digest_algo;
/* We need to create a new timestamp so that new sig expiration