| Subject: | GnuPG::SubKey should have a list of signatures, not a single one [PATCH] |
| Date: | Sat, 01 May 2010 23:46:13 -0400 |
| To: | bug-GnuPG-Interface [...] rt.cpan.org, submit [...] bugs.debian.org |
| From: | Daniel Kahn Gillmor <dkg [...] fifthhorseman.net> |
Package: libgnupg-interface-perl
Tags: patch
GnuPG::SubKey currently reports a single signature object. However, it
should have a list of signatures. RFC 4880 permits multiple binding
signatures to exist on a subkey.
For example:
* primary key X has subkey Y, with an initial binding signature A.
* This bundle is uploaded to the public keyservers.
* the keyholder then decides to set (or modify) the expiration date for
subkey Y, generating a new subkey binding signature.
* the new binding signature is uploaded to the keyservers, which now
have two signatures over the subkey.
* another user downloading the key from the keyservers (or importing it
from a file) will find two 'sig' lines after the 'sub' line.
The attached patch deprecates the signature() function of GnuPG::SubKey
(code that calls this function will carp()) and introduces two
functions: signatures() and push_signatures().
It also updates the test suite and the documentation.
Regards,
--dkg
Message body is not shown because sender requested not to inline it.
Message body not shown because it is not plain text.