diff options
| author | NIIBE Yutaka <[email protected]> | 2022-08-26 00:24:00 +0000 |
|---|---|---|
| committer | NIIBE Yutaka <[email protected]> | 2022-08-26 00:24:00 +0000 |
| commit | 0662b9444b5be61f6019ec301314f245c8f8fa3f (patch) | |
| tree | 387a7ec7112be5e425bdde6872081645557a68b2 /dirmngr/dirmngr.c | |
| parent | scd: Add npth_unprotect/npth_protect for blocking operations. (diff) | |
| download | gnupg-0662b9444b5be61f6019ec301314f245c8f8fa3f.tar.gz gnupg-0662b9444b5be61f6019ec301314f245c8f8fa3f.zip | |
dirmngr: Reject certificate which is not valid into cache.
* dirmngr/certcache.c (put_cert): When PERMANENT, reject the
certificate which is obviously invalid.
--
With this change, invalid certificates from system won't be registered
into cache. Then, an intermediate certificate which is issued by an
entity certified by such an invalid certificate will be also rejected
with GPG_ERR_INV_CERT_OBJ. With less invalid certificates in cache,
it helps the validate_cert_chain function work better.
GnuPG-bug-id: 6142
Signed-off-by: NIIBE Yutaka <[email protected]>
Diffstat (limited to 'dirmngr/dirmngr.c')
0 files changed, 0 insertions, 0 deletions