Check cross-signature details when signing/certifying

ProtonMail · Jan 15, 2025 · 118cc34 · 118cc34
1 parent 1bcd185
commit 118cc34
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/openpgp/v2/subkeys.go b/openpgp/v2/subkeys.go
@@ -189,6 +189,9 @@ func (s *Subkey) LatestValidBindingSignature(date time.Time, config *packet.Conf
 				if err == nil {
 					err = checkSignatureDetails(s.Primary.PrimaryKey, sig.Packet, date, config)
 				}
+				if err == nil && (sig.Packet.FlagCertify || sig.Packet.FlagSign || sig.Packet.FlagAuthenticate) {
+					err = checkSignatureDetails(s.PublicKey, sig.Packet.EmbeddedSignature, date, config)
+				}
 				valid := err == nil
 				sig.Valid = &valid
 			}