[Rpm-maint] [rpm-software-management/rpm] Require creation time to be unique and hashed (PR #1912)

Demi Marie Obenour notifications at github.com
Sun Feb 6 20:55:04 UTC 2022


According to RFC 4880 §5.2.3.4 the signature creation time MUST be a
hashed subpacket.  Enforce this requirement in RPM.  Also set the saved
flags to PGPDIG_SAVED_TIME for v3 signatures.
You can view, comment on, or merge this pull request online at:

  https://github.com/rpm-software-management/rpm/pull/1912

-- Commit Summary --

  * Require creation time to be unique and hashed

-- File Changes --

    M rpmio/rpmpgp.c (24)

-- Patch Links --

https://github.com/rpm-software-management/rpm/pull/1912.patch
https://github.com/rpm-software-management/rpm/pull/1912.diff

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/1912
You are receiving this because you are subscribed to this thread.

Message ID: <rpm-software-management/rpm/pull/1912 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20220206/a8914c1c/attachment.html>


More information about the Rpm-maint mailing list