PGPainless/pgpainless

1,176 Commits 76 Branches 114 Tags 11 MiB

Author	SHA1	Message	Date
Paul Schaub	f6c6b9aded	Do not attempt to verify signatures made by external keys using primary key. This aims at fixing #266 in combination with #267.	2022-04-05 14:10:04 +02:00
Paul Schaub	ffdbd21491	Implement configuration option for SignerUserId subpacket verification level. By default we ignore SignerUserId subpackets on signatures. This behavior can be changed by calling Policy.setSignerUserIdValidationLevel(). Right now, STRICT and DISABLED are available as options, but it may make sense to implement another option PARTIALLY, which will accept signatures made by key with user-id 'A <foo@bar>' but where the sig contains a signer user id of value 'foo@bar' for example.	2022-03-14 11:10:12 +01:00
Paul Schaub	26d79679f0	Fix crash when validating unmatched signer's user-id subpacket TODO: We might want to deprecate Signer's UserID subpackets completely and ignore them. See results of sequoias test suite once PR below gets merged. https://gitlab.com/sequoia-pgp/openpgp-interoperability-test-suite/-/merge_requests/28	2022-03-09 21:05:00 +01:00
Paul Schaub	352f099d8a	Refactoring: Move signature verification stuff to consumer subpacket	2021-11-16 13:40:33 +01:00

Renamed from pgpainless-core/src/main/java/org/pgpainless/signature/CertificateValidator.java (Browse further)