mirror of
git://git.gnupg.org/gnupg.git
synced 2025-07-02 22:46:30 +02:00
* sig-check.c (signature_check2): Signatures made by invalid subkeys
(bad/missing binding sig) are also invalid. * keylist.c (print_fingerprint): Show the primary as well as the secondary key fingerprint in modes 1 & 2.
This commit is contained in:
parent
d83e64968f
commit
4623605645
3 changed files with 62 additions and 3 deletions
|
@ -65,6 +65,11 @@ signature_check2( PKT_signature *sig, MD_HANDLE digest,
|
|||
*r_expiredate = 0;
|
||||
if( get_pubkey( pk, sig->keyid ) )
|
||||
rc = G10ERR_NO_PUBKEY;
|
||||
else if(!pk->is_valid &&
|
||||
(pk->main_keyid[0]!=pk->keyid[0] ||
|
||||
pk->main_keyid[1]!=pk->keyid[1]))
|
||||
rc=G10ERR_BAD_PUBKEY; /* you cannot have a good sig from an
|
||||
invalid subkey */
|
||||
else {
|
||||
*r_expiredate = pk->expiredate;
|
||||
rc = do_check( pk, sig, digest, r_expired );
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue