mirror of
git://git.gnupg.org/gnupg.git
synced 2025-07-02 22:46:30 +02:00
* keygen.c (generate_subkeypair): 2440bis04 adds that creating subkeys on
v3 keys is a MUST NOT. * getkey.c (finish_lookup): The --pgp6 "use the primary key" behavior should only apply while data signing and not encryption. Noted by Roger Sondermann.
This commit is contained in:
parent
f06ee291db
commit
3b97ac9ef8
3 changed files with 16 additions and 4 deletions
|
@ -1827,9 +1827,10 @@ finish_lookup (GETKEY_CTX ctx)
|
|||
#define USAGE_MASK (PUBKEY_USAGE_SIG|PUBKEY_USAGE_ENC)
|
||||
unsigned int req_usage = ( ctx->req_usage & USAGE_MASK );
|
||||
/* Request the primary if we're certifying another key, and also
|
||||
if --pgp6 is on (since pgp 6 (and 7) do not understand
|
||||
signatures made by a signing subkey. */
|
||||
int req_prim = (ctx->req_usage & PUBKEY_USAGE_CERT) | opt.pgp6;
|
||||
if signing data while --pgp6 is on (since pgp 6 (and 7) do not
|
||||
understand signatures made by a signing subkey. */
|
||||
int req_prim = (ctx->req_usage & PUBKEY_USAGE_CERT) ||
|
||||
(opt.pgp6 && (ctx->req_usage & PUBKEY_USAGE_SIG));
|
||||
u32 latest_date;
|
||||
KBNODE latest_key;
|
||||
u32 curtime = make_timestamp ();
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue