security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2025-01-03 12:11:33 +01:00
Code Activity

dirmngr: Silence ocsp debug output.

Browse Source 
* dirmngr/ocsp.c (check_signature_core): No debug output
--

Also typo and doc fixes.
This commit is contained in:
Werner Koch 2022-11-25 09:21:58 +01:00
parent 1246e16432
commit d70779bdc6
No known key found for this signature in database
GPG Key ID: E3FDFF218E45B72B
3 changed files with 11 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
dirmngr/ocsp.c
View File

@ -504,8 +504,11 @@ check_signature_core (ctrl_t ctrl, ksba_cert_t cert, gcry_sexp_t s_sig,
goto leave; goto leave;
} }
gcry_log_debugsxp ("sig ", s_sig); if (DBG_CRYPTO)
gcry_log_debugsxp ("hash", s_hash); {
gcry_log_debugsxp ("sig ", s_sig);
gcry_log_debugsxp ("hash", s_hash);
}
err = gcry_pk_verify (s_sig, s_hash, s_pkey); err = gcry_pk_verify (s_sig, s_hash, s_pkey);
if (err) if (err)

4
doc/DETAILS
View File

@ -1694,6 +1694,10 @@ Description of some debug flags:
- RFC-6337 :: ECC in OpenPGP - RFC-6337 :: ECC in OpenPGP
- RFC-7292 :: PKCS #12: Personal Information Exchange Syntax v1.1 - RFC-7292 :: PKCS #12: Personal Information Exchange Syntax v1.1
- RFC-8351 :: The PKCS #8 EncryptedPrivateKeyInfo Media Type - RFC-8351 :: The PKCS #8 EncryptedPrivateKeyInfo Media Type
- RFC-8550 :: S/MIME Version 4.0 Certificate Handling
- RFC-8551 :: S/MIME Version 4.0 Message Specification
- RFC-2634 :: Enhanced Security Services for S/MIME
- RFC-5035 :: Enhanced Security Services (ESS) Update
- draft-koch-openpgp-2015-rfc4880bis :: Updates to RFC-4880 - draft-koch-openpgp-2015-rfc4880bis :: Updates to RFC-4880

4
sm/verify.c
View File

@ -634,8 +634,8 @@ gpgsm_verify (ctrl_t ctrl, int in_fd, int data_fd, estream_t out_fp)
/* FIXME: INFO_PKALGO correctly shows ECDSA but PKALGO is then /* FIXME: INFO_PKALGO correctly shows ECDSA but PKALGO is then
* ECC. We should use the ECDSA here and need to find a way to * ECC. We should use the ECDSA here and need to find a way to
* figure this oult without using the bodus assumtion in * figure this out without using the bogus assumption in
* gpgsm_check_cms_signature that ECC is alwas ECDSA. */ * gpgsm_check_cms_signature that ECC is always ECDSA. */
fpr = gpgsm_get_fingerprint_hexstring (cert, GCRY_MD_SHA1); fpr = gpgsm_get_fingerprint_hexstring (cert, GCRY_MD_SHA1);
tstr = strtimestamp_r (sigtime); tstr = strtimestamp_r (sigtime);