Prevent self signing by fingerprint instead of keyId

This commit is contained in:
Aydar Zartdinov 2017-03-04 18:47:33 +00:00
parent d9cb8e681d
commit d5e88c7c79

View File

@ -802,8 +802,8 @@ User.prototype.sign = function(primaryKey, privateKeys) {
if (privateKey.isPublic()) {
throw new Error('Need private key for signing');
}
if (privateKey.primaryKey.getKeyId().equals(primaryKey.getKeyId())) {
throw new Error('Not implemented for self signing');
if (privateKey.primaryKey.getFingerprint() === primaryKey.getFingerprint()) {
throw new Error('Not implemented for self signing');
}
signingKeyPacket = privateKey.getSigningKeyPacket();
if (!signingKeyPacket) {