1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2025-07-02 22:46:30 +02:00

* keygen.c (do_add_key_flags): The spec says that all primary keys MUST be

able to certify.  Force the certify flag on for primaries (and off for
subkeys).
This commit is contained in:
David Shaw 2004-10-10 14:19:39 +00:00
parent 65ec9772a7
commit aa50dcff2f
2 changed files with 10 additions and 6 deletions

View file

@ -185,13 +185,13 @@ do_add_key_flags (PKT_signature *sig, unsigned int use)
return;
buf[0] = 0;
/* The spec says that all primary keys MUST be able to certify. */
if(sig->sig_class!=0x18)
buf[0] |= 0x01;
if (use & PUBKEY_USAGE_SIG)
{
if(sig->sig_class==0x18)
buf[0] |= 0x02; /* Don't set the certify flag for subkeys */
else
buf[0] |= 0x01 | 0x02;
}
buf[0] |= 0x02;
if (use & PUBKEY_USAGE_ENC)
buf[0] |= 0x04 | 0x08;
if (use & PUBKEY_USAGE_AUTH)