projects / gatekeeper.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 3ee72b4) | patch
Begin to implement new gpgv clearsigned message verification
authorJacob Bachmeyer <jcb@gnu.org>
Sun, 23 Oct 2022 03:55:33 +0000 (22:55 -0500)
committerJacob Bachmeyer <jcb@gnu.org>
Sun, 23 Oct 2022 03:55:33 +0000 (22:55 -0500)
commitd3526beebaea6df54c472b783df8e681177adf69
tree9c0f3b4a77e2adef22a50cb4cd85058272edf6d4tree | snapshot (zip tar.gz)
parent3ee72b44ac081c7d80196a0a652674a7deed610bcommit | diff
Begin to implement new gpgv clearsigned message verification

The new code allows presenting gpgv with exactly the directive that was parsed
and eliminates all risk of confusion by keeping the output, log, and status
channels separate.  This also avoids using the shell to run gpgv.

The use of a dedicated pipe with --status-fd protects against CVE-2018-12020
and any similar future vulnerabilities.
gatekeeper.pl diff | blob | blame | history