1
0
mirror of git://git.gnupg.org/gnupg.git synced 2025-03-25 22:19:59 +01:00

* keygen.c (do_add_key_flags): The spec says that all primary keys MUST be

able to certify.  Force the certify flag on for primaries (and off for
subkeys).
This commit is contained in:
David Shaw 2004-10-10 14:19:39 +00:00
parent 65ec9772a7
commit aa50dcff2f
2 changed files with 10 additions and 6 deletions

@ -1,5 +1,9 @@
2004-10-10 David Shaw <dshaw@jabberwocky.com>
* keygen.c (do_add_key_flags): The spec says that all primary keys
MUST be able to certify. Force the certify flag on for primaries
(and off for subkeys).
* keygen.c (generate_keypair): Fix generating keys with the auth
flag.

@ -185,13 +185,13 @@ do_add_key_flags (PKT_signature *sig, unsigned int use)
return;
buf[0] = 0;
/* The spec says that all primary keys MUST be able to certify. */
if(sig->sig_class!=0x18)
buf[0] |= 0x01;
if (use & PUBKEY_USAGE_SIG)
{
if(sig->sig_class==0x18)
buf[0] |= 0x02; /* Don't set the certify flag for subkeys */
else
buf[0] |= 0x01 | 0x02;
}
buf[0] |= 0x02;
if (use & PUBKEY_USAGE_ENC)
buf[0] |= 0x04 | 0x08;
if (use & PUBKEY_USAGE_AUTH)