don't bail out if a single self-signature fails to verify

keybase / go-crypto

[mirror] Go supplementary cryptography libraries

https://godoc.org/golang.org/x/crypto

BSD 3-Clause "New" or "Revised" License

50 stars 20 forks source link

Closed maxtaco closed 8 years ago

maxtaco commented 8 years ago

some keys have bad self-sigs, probably due to old buggy versions of gpg or bad key servers
can ignore self-signatures that don't verify as long as there is one that does
make a test case with freacky22527
add a debugging hash function

maxtaco commented 8 years ago

@patrickxb or @oconnor663, do you mind reviewing? it turns out this was a pretty easy one to fix...

patrickxb commented 8 years ago

LGTM