1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2025-07-03 22:56:33 +02:00

Split "--set-policy-url" into "--cert-policy-url" and "--sig-policy-url"

so the user can set different policies for key and data signing.  For
backwards compatibility, "--set-policy-url" sets both, as before.
This commit is contained in:
David Shaw 2002-02-03 14:42:56 +00:00
parent e245123907
commit 0c3e409fa3
5 changed files with 42 additions and 8 deletions

View file

@ -58,7 +58,7 @@
static void
mk_notation_and_policy( PKT_signature *sig )
{
const char *string, *s;
const char *string, *s=NULL;
byte *buf;
unsigned n1, n2;
@ -92,7 +92,22 @@ mk_notation_and_policy( PKT_signature *sig )
}
/* set policy URL */
if( (s=opt.set_policy_url) ) {
if( (sig->sig_class==0 || sig->sig_class==1) && opt.sig_policy_url )
{
if(sig->version<4)
log_info("can't put a policy URL into v3 signatures\n");
else
s=opt.sig_policy_url;
}
else if( !(sig->sig_class==0 || sig->sig_class==1) && opt.cert_policy_url )
{
if(sig->version<4)
log_info("can't put a policy URL into v3 key signatures\n");
else
s=opt.cert_policy_url;
}
if( s ) {
if( *s == '!' )
build_sig_subpkt( sig, SIGSUBPKT_POLICY | SIGSUBPKT_FLAG_CRITICAL,
s+1, strlen(s+1) );