mirror of
git://git.gnupg.org/gnupg.git
synced 2025-01-22 14:57:02 +01:00
Fix bug#1059 (missing status line signature verification done with a
subkey while on the main key has expired).
This commit is contained in:
parent
a929b77b1c
commit
18392e8d61
@ -1,3 +1,8 @@
|
||||
2009-12-17 Werner Koch <wk@g10code.com>
|
||||
|
||||
* sig-check.c (do_check_messages): Evaluate the HAS_EXPIRED flag.
|
||||
Fixes bug#1059.
|
||||
|
||||
2009-12-15 Werner Koch <wk@g10code.com>
|
||||
|
||||
* iso7816.c (do_generate_keypair): s/readonly/read_only/.
|
||||
|
@ -209,7 +209,11 @@ do_check_messages( PKT_public_key *pk, PKT_signature *sig,
|
||||
return G10ERR_TIME_CONFLICT;
|
||||
}
|
||||
|
||||
if( pk->expiredate && pk->expiredate < cur_time ) {
|
||||
/* Check whether the key has expired. We check the has_expired
|
||||
flag which is set after a full evaluation of the key (getkey.c)
|
||||
as well as a simple compare to the current time in case the
|
||||
merge has for whatever reasons not been done. */
|
||||
if (pk->has_expired || (pk->expiredate && pk->expiredate < cur_time)) {
|
||||
char buf[11];
|
||||
if (opt.verbose)
|
||||
log_info(_("NOTE: signature key %s expired %s\n"),
|
||||
|
Loading…
x
Reference in New Issue
Block a user