security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2025-07-02 22:46:30 +02:00
Code Activity

* sig-check.c (signature_check2): Print the backsig warning when there

Browse source 
is no backsig present.  Give a URL for more information.

* keyedit.c (menu_backsign): Small tweak to work properly with keys
originally generated with older GnuPGs that included comments in the
secret keys.
This commit is contained in:
David Shaw 2006-03-12 15:33:57 +00:00
parent 48773e4c15
commit 7e3ba27aef
3 changed files with 20 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

14
g10/sig-check.c
View file

@ -96,15 +96,17 @@ signature_check2( PKT_signature *sig, MD_HANDLE digest, u32 *r_expiredate,
signaures issued by it. */
if(rc==0 && !pk->is_primary && pk->backsig<2)
{
/* TODO: In a future version, once enough signing subkeys
have backsigs, change this to always give the warning,
and have --require-backsigs enable or disable the
G10ERR_GENERAL. */
if(pk->backsig==0 && opt.flags.require_cross_cert)
if(pk->backsig==0)
{
log_info(_("WARNING: signing subkey %s is not"
" cross-certified\n"),keystr_from_pk(pk));
rc=G10ERR_GENERAL;
log_info(_("please see %s for more information\n"),
"http://www.gnupg.org/subkey-cross-certify.html");
/* --require-cross-certification makes this warning an
error. TODO: change the default to require this
after more keys have backsigs. */
if(opt.flags.require_cross_cert)
rc=G10ERR_GENERAL;
}
else if(pk->backsig==1)
{