diff options
author | KB Sriram <kbsriram@google.com> | 2016-01-15 15:28:40 -0800 |
---|---|---|
committer | KB Sriram <kbsriram@google.com> | 2016-01-15 15:28:40 -0800 |
commit | 36bffc3ef5363d51ec3fc49e6b74b593a712b80e (patch) | |
tree | 0df7aac040d3b9eb2887ab765d988723cf865c95 /.gitmodules | |
parent | efbe9ac363132d3280f544d8377978286b828c79 (diff) | |
download | open-keychain-36bffc3ef5363d51ec3fc49e6b74b593a712b80e.tar.gz open-keychain-36bffc3ef5363d51ec3fc49e6b74b593a712b80e.tar.bz2 open-keychain-36bffc3ef5363d51ec3fc49e6b74b593a712b80e.zip |
Always revoke subkeys with a revocation signature.
Unlike UID revocations which are "reversible" by newer UID
self-signatures, a subkey revocation should be "permanent" even if
followed by a newer self-signature.
The RFC is ambiguous on this, but this is the convention used by (e.g.)
GnuPG. The rationale for this behaviour is available as comments within
the GnuPG source.
UID signatures:
https://github.com/mtigas/gnupg/blob/50c98c7ed6b542857ee2f902eca36cda37407737/g10/getkey.c#L1668-L1674
Subkey signatures:
https://github.com/mtigas/gnupg/blob/50c98c7ed6b542857ee2f902eca36cda37407737/g10/getkey.c#L1990-L1997
Diffstat (limited to '.gitmodules')
-rw-r--r-- | .gitmodules | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/.gitmodules b/.gitmodules index 0855c2f2a..fc4c5f5e0 100644 --- a/.gitmodules +++ b/.gitmodules @@ -22,3 +22,6 @@ path = extern/safeslinger-exchange url = https://github.com/open-keychain/exchange-android ignore = dirty +[submodule "OpenKeychain/src/test/resources/openpgp-interop"] + path = OpenKeychain/src/test/resources/openpgp-interop + url = https://github.com/google/openpgp-interop |