PGPainless/pgpainless
PGPainless/pgpainless
1
0
Fork 0
mirror of https://github.com/pgpainless/pgpainless.git synced 2024-11-10 14:35:59 +01:00
Code Issues Releases Wiki Activity

CertificateValidator: Skip revocation signatures not made by primary key

Browse source
This commit is contained in:
Paul Schaub 2023-05-03 17:25:59 +02:00
parent 495ff6aa5d
commit e08505e07d
Signed by: vanitasvitae
GPG key ID: 62BEE9264BF17311
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
pgpainless-core/src/main/java/org/pgpainless/signature/consumer/CertificateValidator.java
View file

@ -74,6 +74,7 @@ public final class CertificateValidator {
PGPSignature revocation = primaryKeyRevocationIterator.next(); PGPSignature revocation = primaryKeyRevocationIterator.next();
if (revocation.getKeyID() != primaryKey.getKeyID()) { if (revocation.getKeyID() != primaryKey.getKeyID()) {
// Revocation was not made by primary key, skip // Revocation was not made by primary key, skip
continue;
// TODO: What about external revocation keys? // TODO: What about external revocation keys?
} }
try { try {