-
Notifications
You must be signed in to change notification settings - Fork 124
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add option to decrypt with signature keys #316
Conversation
e309689
to
497a411
Compare
- Refactors config handling in decryption - Adds option in decryption to allow to decrypt with signature keys
497a411
to
1db926f
Compare
crypto/decryption_handle_builder.go
Outdated
func (dpb *DecryptionHandleBuilder) AllowSignOnlyDecryptionKeys() *DecryptionHandleBuilder { | ||
dpb.handle.DisableNoSignatureKeyForDecryption = true |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We're introducing quite a lot of slightly different names for the exact same thing. Can we just call this function (and all related properties) InsecureAllowDecryptionWithSigningKeys
as well?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
profile/profile.go
Outdated
// AllowSingingKeyInDecryption is a flag to enable to decrypt with signing keys for compatibility reasons. | ||
AllowSingingKeyInDecryption bool |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Maybe same thing here?
// AllowSingingKeyInDecryption is a flag to enable to decrypt with signing keys for compatibility reasons. | |
AllowSingingKeyInDecryption bool | |
// InsecureAllowDecryptionWithSigningKeys is a flag to enable to decrypt with signing keys for compatibility reasons. | |
InsecureAllowDecryptionWithSigningKeys bool |
(arguably, AllowWeakRSA
should also be called InsecureAllowWeakRSA
, but that's an orthogonal point..)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I made it consistent 👍
4549b4e
to
10ef709
Compare
v1.1.3