mirror of
git://git.gnupg.org/gnupg.git
synced 2025-07-02 22:46:30 +02:00
* getkey.c (merge_selfsigs_main), main.h, sig-check.c
(check_key_signature2): Pass the ultimately trusted pk directly to check_key_signature2 to avoid going through the key selection mechanism. This prevents a deadly embrace when two keys without selfsigs each sign the other.
This commit is contained in:
parent
1fb55cd173
commit
63246fe693
4 changed files with 21 additions and 9 deletions
|
@ -110,7 +110,7 @@ int sign_symencrypt_file (const char *fname, STRLIST locusr);
|
|||
/*-- sig-check.c --*/
|
||||
int check_revocation_keys (PKT_public_key *pk, PKT_signature *sig);
|
||||
int check_key_signature( KBNODE root, KBNODE node, int *is_selfsig );
|
||||
int check_key_signature2( KBNODE root, KBNODE node,
|
||||
int check_key_signature2( KBNODE root, KBNODE node, PKT_public_key *pk,
|
||||
int *is_selfsig, u32 *r_expiredate, int *r_expired );
|
||||
|
||||
/*-- delkey.c --*/
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue