aboutsummaryrefslogtreecommitdiffstats
path: root/g10/trustdb.c
diff options
context:
space:
mode:
authorDavid Shaw <[email protected]>2004-02-23 04:00:51 +0000
committerDavid Shaw <[email protected]>2004-02-23 04:00:51 +0000
commit643665c963f9ebdd96b15598ec1b165a1cc22445 (patch)
treede48b61e18be5da868a0ecf487fc406ac8b968d0 /g10/trustdb.c
parent* gpgkeys_ldap.c (delete_one_attr): New function to replace attributes (diff)
downloadgnupg-643665c963f9ebdd96b15598ec1b165a1cc22445.tar.gz
gnupg-643665c963f9ebdd96b15598ec1b165a1cc22445.zip
* options.h, g10.c (main), trustdb.c (mark_usable_uid_certs): Add
--min-cert-check-level option to specify minimum cert check level. Defaults to 2 (so 0x11 sigs are ignored). 0x10 sigs cannot be ignored.
Diffstat (limited to 'g10/trustdb.c')
-rw-r--r--g10/trustdb.c7
1 files changed, 5 insertions, 2 deletions
diff --git a/g10/trustdb.c b/g10/trustdb.c
index 95359c492..ab3b12527 100644
--- a/g10/trustdb.c
+++ b/g10/trustdb.c
@@ -1,6 +1,6 @@
/* trustdb.c
- * Copyright (C) 1998, 1999, 2000, 2001, 2002
- * 2003 Free Software Foundation, Inc.
+ * Copyright (C) 1998, 1999, 2000, 2001, 2002, 2003,
+ * 2004 Free Software Foundation, Inc.
*
* This file is part of GnuPG.
*
@@ -1381,6 +1381,9 @@ mark_usable_uid_certs (KBNODE keyblock, KBNODE uidnode,
continue; /* ignore self-signatures */
if (!IS_UID_SIG(sig) && !IS_UID_REV(sig))
continue; /* we only look at these signature classes */
+ if(sig->sig_class>=0x11 && sig->sig_class<=0x13 &&
+ sig->sig_class-0x10<opt.min_cert_check_level)
+ continue;
if (!is_in_klist (klist, sig))
continue; /* no need to check it then */
if (check_key_signature (keyblock, node, NULL))