Closed Bug 1657094 Opened 5 years ago Closed 2 years ago

Need RNP update to support keys that use a variety of hashes for self signatures

Categories

(MailNews Core :: Security: OpenPGP, defect)

Product:
MailNews Core
Component:
Security: OpenPGP
Type:
defect

Tracking

(thunderbird_esr102 unaffected)

Status:
RESOLVED FIXED
Milestone:
87 Branch
Tracking Flags:
Tracking Status
thunderbird_esr102 --- unaffected

People

(Reporter: KaiE, Unassigned)

References

Details

(Whiteboard: [fix with RNP 0.14.0])

Reported in detail at https://github.com/rnpgp/rnp/issues/1226

Thunderbird reports an invalid signature for certain keys, if the key contains owner signatures with different hash algorithms. An expiration change signature might get ignored, causing the key to get rejected.

This will require a fix at the RNP level.

Upstream reported fix with RNP 0.14.0, which we released with thunderbird 87 and 78.8.1 (see bug 1692909)

Status: NEW → RESOLVED
Closed: 2 years ago
Resolution: --- → FIXED
See Also: → 1692909
Target Milestone: --- → 87 Branch
Whiteboard: [fix with RNP 0.14.0]
You need to log in before you can comment on or make changes to this bug.