aboutsummaryrefslogtreecommitdiffstats
path: root/common/compliance.c
diff options
context:
space:
mode:
authorWerner Koch <[email protected]>2020-07-14 10:25:50 +0000
committerWerner Koch <[email protected]>2020-07-14 10:27:45 +0000
commit5fe3cdfc7646c2c88beb168ba34fc64f9dd2c156 (patch)
tree4955b55a4034c6139370a2844ff848963b09cb8b /common/compliance.c
parentagent: Fix regression with --newsymkey in loopback mode. (diff)
downloadgnupg-5fe3cdfc7646c2c88beb168ba34fc64f9dd2c156.tar.gz
gnupg-5fe3cdfc7646c2c88beb168ba34fc64f9dd2c156.zip
gpgsm: Make rsaPSS a compliant scheme in de-vs mode.
-- GnuPG-bug-id: 4538 Signed-off-by: Werner Koch <[email protected]>
Diffstat (limited to 'common/compliance.c')
-rw-r--r--common/compliance.c12
1 files changed, 4 insertions, 8 deletions
diff --git a/common/compliance.c b/common/compliance.c
index c6a20b886..a40d609b1 100644
--- a/common/compliance.c
+++ b/common/compliance.c
@@ -149,10 +149,9 @@ gnupg_pk_is_compliant (enum gnupg_compliance_mode compliance, int algo,
result = (keylength == 2048
|| keylength == 3072
|| keylength == 4096);
- /* rsaPSS was not part of the evaluation and thus we don't
- * claim compliance. */
- if ((algo_flags & PK_ALGO_FLAG_RSAPSS))
- result = 0;
+ /* Although rsaPSS was not part of the original evaluation
+ * we got word that we can claim compliance. */
+ (void)algo_flags;
break;
case is_dsa:
@@ -234,10 +233,7 @@ gnupg_pk_is_allowed (enum gnupg_compliance_mode compliance,
default:
log_assert (!"reached");
}
- /* rsaPSS was not part of the evaluation and thus we don't
- * claim compliance. */
- if ((algo_flags & PK_ALGO_FLAG_RSAPSS))
- result = 0;
+ (void)algo_flags;
break;
case PUBKEY_ALGO_DSA: