From 83374554830904dfc6f2010e3fcdd9a1a864a2e6 Mon Sep 17 00:00:00 2001
From: Werner Koch <wk@gnupg.org>
Date: Tue, 12 Mar 2002 13:36:29 +0000
Subject: * verify.c (gpgsm_verify): Detect certs-only message.

---
 sm/certpath.c | 16 ++++++++++++++--
 1 file changed, 14 insertions(+), 2 deletions(-)

(limited to 'sm/certpath.c')

diff --git a/sm/certpath.c b/sm/certpath.c
index c3c09dcdd..083f7bb5f 100644
--- a/sm/certpath.c
+++ b/sm/certpath.c
@@ -282,6 +282,13 @@ gpgsm_validate_path (KsbaCert cert)
   KsbaCert subject_cert = NULL, issuer_cert = NULL;
   time_t current_time = time (NULL);
 
+  if ((opt.debug & 4096))
+    {
+      log_info ("WARNING: bypassing path validation\n");
+      return 0;
+    }
+      
+
   if (!kh)
     {
       log_error (_("failed to allocated keyDB handle\n"));
@@ -521,6 +528,12 @@ gpgsm_basic_cert_check (KsbaCert cert)
   KEYDB_HANDLE kh = keydb_new (0);
   KsbaCert issuer_cert = NULL;
 
+  if ((opt.debug & 4096))
+    {
+      log_info ("WARNING: bypassing basic certificate checks\n");
+      return 0;
+    }
+
   if (!kh)
     {
       log_error (_("failed to allocated keyDB handle\n"));
@@ -532,8 +545,7 @@ gpgsm_basic_cert_check (KsbaCert cert)
   subject = ksba_cert_get_subject (cert, 0);
   if (!issuer)
     {
-      if (DBG_X509)
-        log_debug ("ERROR: issuer missing\n");
+      log_error ("no issuer found in certificate\n");
       rc = GNUPG_Bad_Certificate;
       goto leave;
     }
-- 
cgit v1.2.3