[Rpm-maint] [rpm-software-management/rpm] Justus/openpgp fixes (PR #1813)

[Panu Matilainen]

@pmatilai commented on this pull request.



> @@ -1295,6 +1325,10 @@ rpmRC pgpVerifySignature(pgpDigParams key, pgpDigParams sig, DIGEST_CTX hashctx)
     if (sig == NULL || ctx == NULL)
 	goto exit;
 
+    /* Check whether the hash algorithm meets our policy */
+    if (!pgpHashAlgorithmPolicy(sig->hash_algo))

On a related note: while we want to keep such policies out of rpm, patches to better align/integrate with outside policy mechanisms would be welcome in principle (but I don't know what that may entail in practice)

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/1813#discussion_r740041889
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20211101/7c0ac472/attachment-0001.html>