diff options
| author | Werner Koch <[email protected]> | 2020-06-03 14:22:42 +0000 |
|---|---|---|
| committer | Werner Koch <[email protected]> | 2020-06-03 14:22:42 +0000 |
| commit | 48251cf9a7d3776667342f4705ac3de89bd75534 (patch) | |
| tree | 6b17f7b2a4c7d61efd0ce05738432df32bdd2cd6 /agent/cvt-openpgp.c | |
| parent | sm: Fix recently introduced regression in CSR creation. (diff) | |
| download | gnupg-48251cf9a7d3776667342f4705ac3de89bd75534.tar.gz gnupg-48251cf9a7d3776667342f4705ac3de89bd75534.zip | |
gpg: Improve generation of keys stored on card (brainpool,cv25519).
* g10/keygen.c (ask_key_flags_with_mask): Allow more than ECDH for
legacy curves.
(ask_algo): Tweak mapping of ECC to OpenPGP algos
(parse_key_parameter_part): Ditto.
(generate_subkeypair): Create the subkey with the time stored on the
card.
--
This fixes two problems with generating keys from a card:
1. The key usage is now set correctly for brainpool curves.
2. The add-key and --quick-add-key commands now also take the creation
time from the time stored on the card. Without that we would need
to update the creation time and fingerprint already stored on the
card which is a no-go if another key has already been created using
that on-card key.
Note: To create a key on a card without an OpenPGP keyblock use
gpg-card.
Signed-off-by: Werner Koch <[email protected]>
Diffstat (limited to 'agent/cvt-openpgp.c')
0 files changed, 0 insertions, 0 deletions