[Rpm-maint] [rpm-software-management/rpm] Justus/openpgp fixes (PR #1813)

[Vincent Breitmoser]

@Valodim commented on this pull request.



> @@ -1295,6 +1325,10 @@ rpmRC pgpVerifySignature(pgpDigParams key, pgpDigParams sig, DIGEST_CTX hashctx)
     if (sig == NULL || ctx == NULL)
 	goto exit;
 
+    /* Check whether the hash algorithm meets our policy */
+    if (!pgpHashAlgorithmPolicy(sig->hash_algo))

Are you saying that signatures made over an MD5 hash should be accepted by RPM? Or that it's an upstream issue that should be addressed somewhere else?

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/1813#discussion_r739177097
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20211029/a504ebfe/attachment.html>