1
0
Fork 0
mirror of https://github.com/pgpainless/pgpainless.git synced 2024-12-22 19:08:00 +01:00

OpenPgpMessageInputStream: Ignore non-integrity-protected data if configured

This commit is contained in:
Paul Schaub 2023-01-02 13:12:14 +01:00
parent 7be12b0aaa
commit 94d9efa1e7
Signed by: vanitasvitae
GPG key ID: 62BEE9264BF17311

View file

@ -409,8 +409,10 @@ public class OpenPgpMessageInputStream extends DecryptionStream {
PGPEncryptedDataList encDataList = packetInputStream.readEncryptedDataList(); PGPEncryptedDataList encDataList = packetInputStream.readEncryptedDataList();
if (!encDataList.isIntegrityProtected()) { if (!encDataList.isIntegrityProtected()) {
LOGGER.debug("Symmetrically Encrypted Data Packet is not integrity-protected and is therefore rejected."); LOGGER.warn("Symmetrically Encrypted Data Packet is not integrity-protected.");
throw new MessageNotIntegrityProtectedException(); if (!options.isIgnoreMDCErrors()) {
throw new MessageNotIntegrityProtectedException();
}
} }
SortedESKs esks = new SortedESKs(encDataList); SortedESKs esks = new SortedESKs(encDataList);