diff options
author | Werner Koch <[email protected]> | 2023-09-06 10:09:55 +0000 |
---|---|---|
committer | Werner Koch <[email protected]> | 2023-09-06 10:09:55 +0000 |
commit | 80e442348dd871994944fa46fbd6cdb097b2f53b (patch) | |
tree | 0dade726007650550a1b47099065644858258b7c | |
parent | dirmngr: Allow conf files to disable default keyservers. (diff) | |
download | gnupg-80e442348dd871994944fa46fbd6cdb097b2f53b.tar.gz gnupg-80e442348dd871994944fa46fbd6cdb097b2f53b.zip |
gpg: Fix validity of re-imported keys.
* g10/trustdb.c (tdb_clear_ownertrusts): Detect stale validity
records.
--
GnuPG-bug-id: 6399
This problem was introduced by an actually very useful patch
2002-12-13 David Shaw <[email protected]>
[...]
* import.c (import_keys_internal): Used here so we don't rebuild
the trustdb if it is still clean.
(import_one, chk_self_sigs): Only mark trustdb dirty if the key
that is being imported has any sigs other than self-sigs.
Suggested by Adrian von Bidder.
[the last part]
The bug exhibited itself only after signing a key, deleting that key
and then re-importing the original non-signed key.
-rw-r--r-- | g10/trustdb.c | 23 |
1 files changed, 22 insertions, 1 deletions
diff --git a/g10/trustdb.c b/g10/trustdb.c index fd9a245cc..e930e5a13 100644 --- a/g10/trustdb.c +++ b/g10/trustdb.c @@ -687,7 +687,7 @@ tdb_check_or_update (ctrl_t ctrl) if (opt.interactive) update_trustdb (ctrl); else if (!opt.no_auto_check_trustdb) - check_trustdb (ctrl); + check_trustdb (ctrl); } } @@ -944,6 +944,7 @@ update_min_ownertrust (ctrl_t ctrl, u32 *kid, unsigned int new_trust) /* * Clear the ownertrust and min_ownertrust values. + * Also schedule a revalidation if a stale validity record exists. * * Return: True if a change actually happened. */ @@ -977,6 +978,26 @@ tdb_clear_ownertrusts (ctrl_t ctrl, PKT_public_key *pk) do_sync (); return 1; } + else + { + /* Check whether we have a stale RECTYPE_VALID for that key + * and if its validity ist set, schedule a revalidation. */ + ulong recno = rec.r.trust.validlist; + while (recno) + { + read_record (recno, &rec, RECTYPE_VALID); + if (rec.r.valid.validity) + break; + recno = rec.r.valid.next; + } + if (recno) + { + if (DBG_TRUST) + log_debug ("stale validity value detected" + " - scheduling check\n"); + tdb_revalidation_mark (ctrl); + } + } } else if (gpg_err_code (err) != GPG_ERR_NOT_FOUND) { |