mirror of
git://git.gnupg.org/gnupg.git
synced 2025-07-02 22:46:30 +02:00
* getkey.c (merge_selfsigs_subkey): Do not mark subkeys valid if we do not
support their pk algorithm. This allows for early (during get_*) rejection of a subkey, and selection of another. * passphrase.c (passphrase_to_dek): Give a little more information when we have room to do so.
This commit is contained in:
parent
1e01514529
commit
ea73c94bc6
3 changed files with 19 additions and 5 deletions
13
g10/getkey.c
13
g10/getkey.c
|
@ -1895,11 +1895,10 @@ merge_selfsigs_subkey( KBNODE keyblock, KBNODE subnode )
|
|||
}
|
||||
}
|
||||
|
||||
if ( !signode ) {
|
||||
return; /* no valid key binding */
|
||||
}
|
||||
/* no valid key binding */
|
||||
if ( !signode )
|
||||
return;
|
||||
|
||||
subpk->is_valid = 1;
|
||||
sig = signode->pkt->pkt.signature;
|
||||
|
||||
p = parse_sig_subpkt (sig->hashed, SIGSUBPKT_KEY_FLAGS, &n );
|
||||
|
@ -1929,6 +1928,12 @@ merge_selfsigs_subkey( KBNODE keyblock, KBNODE subnode )
|
|||
key_expire = 0;
|
||||
subpk->has_expired = key_expire >= curtime? 0 : key_expire;
|
||||
subpk->expiredate = key_expire;
|
||||
|
||||
/* algo doesn't exist */
|
||||
if(check_pubkey_algo(subpk->pubkey_algo))
|
||||
return;
|
||||
|
||||
subpk->is_valid = 1;
|
||||
}
|
||||
|
||||
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue