Make Issuer Key ID subpacket non-critical (#175)

Fix signature verification in RPM versions prior to 4.17.
ProtonMail · Jun 26, 2023 · 7e9e039 · 7e9e039
1 parent 3fbb1f1
commit 7e9e039
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/openpgp/packet/signature.go b/openpgp/packet/signature.go
@@ -904,7 +904,7 @@ func (sig *Signature) buildSubpackets(issuer PublicKey) (subpackets []outputSubp
 	if sig.IssuerKeyId != nil && sig.Version == 4 {
 		keyId := make([]byte, 8)
 		binary.BigEndian.PutUint64(keyId, *sig.IssuerKeyId)
-		subpackets = append(subpackets, outputSubpacket{true, issuerSubpacket, true, keyId})
+		subpackets = append(subpackets, outputSubpacket{true, issuerSubpacket, false, keyId})
 	}
 	if sig.IssuerFingerprint != nil {
 		contents := append([]uint8{uint8(issuer.Version)}, sig.IssuerFingerprint...)