1
0
Fork 0
mirror of https://github.com/pgpainless/pgpainless.git synced 2025-04-16 03:28:37 +02:00

Do not reject bnacksig signatures when they predate subkey binding date

Fixes 
This commit is contained in:
Paul Schaub 2022-11-09 15:30:29 +01:00
parent faae5c64b1
commit c253732ad9

View file

@ -375,7 +375,9 @@ public abstract class SignatureValidator {
public void verify(PGPSignature signature) throws SignatureValidationException {
signatureHasHashedCreationTime().verify(signature);
signatureDoesNotPredateSigningKey(creator).verify(signature);
signatureDoesNotPredateSigningKeyBindingDate(creator).verify(signature);
if (signature.getSignatureType() != SignatureType.PRIMARYKEY_BINDING.getCode()) {
signatureDoesNotPredateSigningKeyBindingDate(creator).verify(signature);
}
}
};
}