Home GnuPG
Diffusion GnuPG 639f7f18fc65

gpgsm: Show rsaPSS certificates as de-vs compliant in listings.

Description

gpgsm: Show rsaPSS certificates as de-vs compliant in listings.

* sm/certcheck.c (extract_pss_params): Add arg 'silent'.
(gpgsm_check_cert_sig): Factor some code out to ...
(get_sig_val_from_cert): new function.
(gpgsm_pss_hash_algo_from_cert): New.
* sm/keylist.c (print_compliance_flags): Handle rsaPSS.

RSA-PSS certificates were not shown in key listings as de-vs
compliant. However verification showed tha they are compliant.

This patch fixes this.

Gotcha: When testing remember that the de-vs flag is only considered
in the global trustlist.

Details