Maniphest T5387

Accept key signatures from LDAP servers
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	• werner
	Apr 9 2021, 12:25 PM

Tags

Subscribers

Description

Due do the DoS on the SKS servers we don't accept any key signatures by default. However, for LDAP servers we can lift this restriction because it can be assumed thar the LDAP servers are well curated

Revisions and Commits

rG GnuPG
	rG99db4b0c7fd1 gpg: Do not use import-clean for LDAP keyserver imports.
	rG1303b0ed84da gpg: Do not use self-sigs-only for LDAP keyserver imports.
	rG6c26e593df51 gpg: Do not use self-sigs-only for LDAP keyserver imports.

Related Objects

Mentioned In: T5482: Release GnuPG 2.2.28
T5386: Release GnuPG 2.3.1
T5405: Release GnuPG 2.3.2

Event Timeline

• werner triaged this task as High priority.Apr 9 2021, 12:25 PM

• werner created this task.

• werner added a commit: rG6c26e593df51: gpg: Do not use self-sigs-only for LDAP keyserver imports..Apr 13 2021, 2:47 PM

• werner added a commit: rG1303b0ed84da: gpg: Do not use self-sigs-only for LDAP keyserver imports..Apr 13 2021, 2:51 PM

Done for 2.2. and 2.3.

• werner mentioned this in T5405: Release GnuPG 2.3.2.Apr 20 2021, 3:19 PM

• werner mentioned this in T5386: Release GnuPG 2.3.1.Apr 20 2021, 3:34 PM

• werner added a commit: rG99db4b0c7fd1: gpg: Do not use import-clean for LDAP keyserver imports..Apr 26 2021, 3:36 PM

• werner mentioned this in T5482: Release GnuPG 2.2.28.Jun 10 2021, 5:42 PM