Skip to content

feat: return error if verifySignature fail#149

Open
guilhem wants to merge 1 commit intoProtonMail:mainfrom
guilhem:verifyStream
Open

feat: return error if verifySignature fail#149
guilhem wants to merge 1 commit intoProtonMail:mainfrom
guilhem:verifyStream

Conversation

@guilhem
Copy link
Copy Markdown

@guilhem guilhem commented Oct 3, 2021

This prevent hard plumbing and to only use io.Reader interface with
security.

Signed-off-by: Guilhem Lettron guilhem@barpilot.io

This prevent hard plumbing and to only use io.Reader interface with
security.
VerifySignature() doesn't return error if verifyKeyRing isn't specified.

Signed-off-by: Guilhem Lettron <guilhem@barpilot.io>
processSignatureExpiration(msg.details, msg.verifyTime)
err = verifyDetailsSignature(msg.details, msg.verifyKeyRing)
} else {
err = errors.New("gopenpgp: no verify keyring was provided before decryption")
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The API is such that if the caller sets the verification key ring to nil, the library should not do any verification. So I don't think we need an error here.

@lubux lubux added the v2 Targeting GopenPGP v2 label Jun 21, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

v2 Targeting GopenPGP v2

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants