1
0
mirror of git://git.gnupg.org/gnupg.git synced 2025-01-22 14:57:02 +01:00
Werner Koch 1424c12e4c
sm: Consider certificates w/o CRL DP as valid.
* sm/certchain.c (is_cert_still_valid): Shortcut if tehre is no DP.
* common/audit.c (proc_type_verify): Print "n/a" if a cert has no
distribution point.
* sm/gpgsm.h (opt): Add field enable_issuer_based_crl_check.
* sm/gpgsm.c (oEnableIssuerBasedCRLCheck): New.
(opts): Add option --enable-issuer-based-crl-check.
(main): Set option.
--

If the issuer does not provide a DP and the user wants such an issuer,
we expect that a certificate does not need revocation checks.  The new
option --enable-issuer-based-crl-check can be used to revert to the
old behaviour which requires that a suitable LDAP server has been
configured to lookup a CRL by issuer.

Signed-off-by: Werner Koch <wk@gnupg.org>

(cherry picked from master)
2020-03-27 21:20:13 +01:00
..
2020-03-19 15:48:12 +01:00
2015-10-28 10:20:17 +01:00
2017-04-28 10:06:33 +09:00
2015-11-17 12:50:22 +01:00
2017-04-28 10:06:33 +09:00
2019-04-16 13:27:44 +09:00
2017-02-21 13:11:46 -05:00
2019-04-16 13:27:44 +09:00
2016-03-02 14:27:30 +01:00
2017-04-28 10:06:33 +09:00
2017-02-21 13:11:46 -05:00
2017-02-21 13:11:46 -05:00
2018-10-02 14:31:56 +09:00
2017-01-05 20:43:40 +01:00
2017-02-21 13:11:46 -05:00
2019-02-12 16:30:31 +01:00
2017-02-21 13:11:46 -05:00

Common functionality used by all modules of GnuPG.