1
0
mirror of git://git.gnupg.org/gnupg.git synced 2025-03-22 21:49:59 +01:00

scd:nks: Don't flag the ESIGN keypair EF as encryption capable.

* scd/app-nks.c (filelist): Tweak 0x4531.
--

Actually the certificate has no encryption usage but we should also
tell that via KEYINFO so that this key is never tried to create an
encryption certificate.

(cherry picked from commit 3a2fb1c30633373d17880469e0b84ab2a9524585)
This commit is contained in:
Werner Koch 2022-06-01 17:55:49 +02:00
parent f24904ee35
commit 1e69676981
No known key found for this signature in database
GPG Key ID: E3FDFF218E45B72B

@ -158,7 +158,7 @@ static struct
{ 1, 0xC008, 3, 101 }, /* EF_C.CA.SIG */
{ 1, 0xC00E, 3, 111 }, /* EF_C.RCA.SIG */
{ 2, 0x4531, 15, 0, 0xC001, 0,1,1, 0x84}, /* EF_PK.CH.SIG */
{ 2, 0x4531, 15, 0, 0xC001, 0,1,0, 0x84}, /* EF_PK.CH.SIG */
{ 2, 0xC000, 15,101 }, /* EF.C.SCA.QES (SubCA) */
{ 2, 0xC001, 15,100 }, /* EF.C.ICC.QES (Cert) */
{ 2, 0xC00E, 15,111 }, /* EF.C.RCA.QES (RootCA */