* packet.h, sig-check.c (signature_check2, do_check, do_check_messages):

Provide a signing-key-is-revoked flag.  Change all callers.

* status.h, status.c (get_status_string): New REVKEYSIG status tag for a
good signature from a revoked key.

* mainproc.c (do_check_sig, check_sig_and_print): Use it here.

* import.c (import_revoke_cert, merge_blocks, merge_sigs): Compare actual
signatures on import rather than using keyid or class matching.  This does
not change actual behavior with a key, but does mean that all sigs are
imported whether they will be used or not.

* parse-packet.c (parse_signature): Don't give "signature packet without
xxxx" warnings for experimental pk algorithms.  An experimental algorithm
may not have a notion of (for example) a keyid (i.e. PGP's x.509 stuff).

1 files changed, 1 insertions, 0 deletions

diff --git a/g10/status.h b/g10/status.h
index 44a7d6d32..68da60d28 100644
--- a/g10/status.h
+++ b/g10/status.h
@@ -99,6 +99,7 @@
 #define STATUS_ATTRIBUTE        67
 #define STATUS_IMPORT_OK 	68
 #define STATUS_IMPORT_CHECK     69
+#define STATUS_REVKEYSIG        70
 
 /*-- status.c --*/
 void set_status_fd ( int fd );