diff options
| author | Werner Koch <[email protected]> | 2023-02-26 18:11:27 +0000 |
|---|---|---|
| committer | Werner Koch <[email protected]> | 2023-02-26 18:14:22 +0000 |
| commit | 5d96aab27dcf1b1c826c483e39d7265b89736b53 (patch) | |
| tree | 381520171bb8b13f7aba48c06b2a8b08c6e7e7ec /sm/gpgsm.h | |
| parent | sm: Fix dirmngr loadcrl for intermediate certs (diff) | |
| download | gnupg-5d96aab27dcf1b1c826c483e39d7265b89736b53.tar.gz gnupg-5d96aab27dcf1b1c826c483e39d7265b89736b53.zip | |
gpgsm: Improve cert lookup callback from dirmngr.
* sm/gpgsm.h (FIND_CERT_ALLOW_AMBIG): New.
(FIND_CERT_WITH_EPHEM): New.
* sm/certlist.c (gpgsm_find_cert): Replace arg allow_ambiguous by a
generic flags arg. Implement the new flag FIND_CERT_WITH_EPHEM.
* sm/call-dirmngr.c (inq_certificate): Return also ephemeral marked
certs.
--
The dirmngr may need to get a certificate from gpgsm's store in the
course of verifying a CRL. In some cases the certificate is still
marked as epehemeral - this needs to be returned as well.
This _may_ also fix
GnuPG-bug-id: 4436
Diffstat (limited to 'sm/gpgsm.h')
| -rw-r--r-- | sm/gpgsm.h | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/sm/gpgsm.h b/sm/gpgsm.h index ced2d679f..e09dd75e9 100644 --- a/sm/gpgsm.h +++ b/sm/gpgsm.h @@ -404,8 +404,11 @@ int gpgsm_add_cert_to_certlist (ctrl_t ctrl, ksba_cert_t cert, int gpgsm_add_to_certlist (ctrl_t ctrl, const char *name, int secret, certlist_t *listaddr, int is_encrypt_to); void gpgsm_release_certlist (certlist_t list); + +#define FIND_CERT_ALLOW_AMBIG 1 +#define FIND_CERT_WITH_EPHEM 2 int gpgsm_find_cert (ctrl_t ctrl, const char *name, ksba_sexp_t keyid, - ksba_cert_t *r_cert, int allow_ambiguous); + ksba_cert_t *r_cert, unsigned int flags); /*-- keylist.c --*/ gpg_error_t gpgsm_list_keys (ctrl_t ctrl, strlist_t names, |