Do not reject bnacksig signatures when they predate subkey binding date

Fixes #334
This commit is contained in:
Paul Schaub 2022-11-09 15:30:29 +01:00
parent faae5c64b1
commit c253732ad9
1 changed files with 3 additions and 1 deletions

View File

@ -375,7 +375,9 @@ public abstract class SignatureValidator {
public void verify(PGPSignature signature) throws SignatureValidationException {
signatureHasHashedCreationTime().verify(signature);
signatureDoesNotPredateSigningKey(creator).verify(signature);
signatureDoesNotPredateSigningKeyBindingDate(creator).verify(signature);
if (signature.getSignatureType() != SignatureType.PRIMARYKEY_BINDING.getCode()) {
signatureDoesNotPredateSigningKeyBindingDate(creator).verify(signature);
}
}
};
}