From 868dabb4027a03f4ce39be3c143b480bccde1a63 Mon Sep 17 00:00:00 2001 From: Werner Koch Date: Tue, 15 Nov 2022 09:56:13 +0100 Subject: dirmngr: Fix verification of ECDSA signed CRLs. * dirmngr/crlcache.c (finish_sig_check): Use raw value for the data. -- This had the usual signed/unsigned problem. By using the modern form we enforce Libgcrypt internal parsing as unsigned integer. --- dirmngr/validate.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'dirmngr/validate.c') diff --git a/dirmngr/validate.c b/dirmngr/validate.c index 231600ff6..399cca3a4 100644 --- a/dirmngr/validate.c +++ b/dirmngr/validate.c @@ -1164,7 +1164,7 @@ check_cert_sig (ksba_cert_t issuer_cert, ksba_cert_t cert) if (!err) err = gcry_pk_verify (s_sig, s_hash, s_pkey); if (DBG_X509) - log_debug ("gcry_pk_verify: %s\n", gpg_strerror (err)); + log_debug ("%s: gcry_pk_verify: %s\n", __func__, gpg_strerror (err)); leave: gcry_md_close (md); -- cgit v1.2.3