Diffusion GnuPG e7fc6e3bf0eb

dirmngr: Forbid redirects from .onion to clearnet URIs.
e7fc6e3bf0eb
Actions

Tags

None

Subscribers

None

Description

dirmngr: Forbid redirects from .onion to clearnet URIs.

* dirmngr/ks-engine-hkp.c (send_request): Forbid redirects from .onion
to clearnet URIs.
* dirmngr/ks-engine-http.c (ks_http_fetch): Likewise.

This protects users from misconfigured .onion services.

GnuPG-bug-id: T3087
Signed-off-by: Justus Winter <justus@g10code.com>

Details

Provenance

Authored on Jul 19 2017, 4:02 PM

Parents

rG2e5459457473: gpg: Avoid asking by fpr and then by keyid during auto-key-retrieve.

Branches

Unknown

Tags

Unknown

Tasks

T3087: dirmngr, when configured to use an .onion address, should not permit HTTP redirects to a non-onion address

Event Timeline

justus added a task: T3087: dirmngr, when configured to use an .onion address, should not permit HTTP redirects to a non-onion address.Jul 19 2017, 5:04 PM

justus committed rGe7fc6e3bf0eb: dirmngr: Forbid redirects from .onion to clearnet URIs. (authored by justus).Jul 19 2017, 5:02 PM

justus mentioned this in T3087: dirmngr, when configured to use an .onion address, should not permit HTTP redirects to a non-onion address.Jul 19 2017, 5:40 PM

Changes (2)

Path

Size

dirmngr/

ks-engine-hkp.c

ks-engine-http.c

rGe7fc6e3bf0eb

dirmngr/ks-engine-hkp.c

Loading...

dirmngr/ks-engine-http.c

Loading...