[Rpm-maint] [rpm-software-management/rpm] OpenPGP implementation improvements (#1612)

[Demi Marie Obenour]

See individual commit messages for details.
You can view, comment on, or merge this pull request online at:

  https://github.com/rpm-software-management/rpm/pull/1612

-- Commit Summary --

  * Remove dead code
  * A signature is not a key
  * Reject unimplemented critical PGP packets
  * Reset the saved flags after each signature
  * Fingerprint packet parsing support
  * Require all subpackets except Key ID to be hashed
  * Reject invalid encodings
  * Reject multiple creation times
  * Restrict toplevel signatures
  * Check that fingerprints in signatures and keys match

-- File Changes --

    M lib/rpmvs.c (2)
    M rpmio/digest.h (2)
    M rpmio/rpmkeyring.c (4)
    M rpmio/rpmpgp.c (137)
    M rpmio/rpmpgp.h (9)

-- Patch Links --

https://github.com/rpm-software-management/rpm/pull/1612.patch
https://github.com/rpm-software-management/rpm/pull/1612.diff

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/1612
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20210329/3275ce2a/attachment-0001.html>