jorgelbg / pinentry-touchid

Custom GPG pinentry program for macOS that allows using Touch ID for fetching the password from the macOS keychain.
Apache License 2.0
521 stars 23 forks source link

Key identifier is assumed to have a specific format despite warning in spec #37

Open xurtis opened 7 months ago

xurtis commented 7 months ago

Describe the bug

The key info is parsed to obtain a key grip and fails for key descriptions that don't conform to the format. The pinentry documentation states that the key identifier must be considered opaque.

Although --clear may be passed here for unidentified keys, they should not set the allow-external-password-cache option and the key identifier shouldn't be mapped to any cache.