From d5e88c7c79fc03a6cb0f95043ae4e68db159671b Mon Sep 17 00:00:00 2001 From: Aydar Zartdinov <zartdinov@gmail.com> Date: Sat, 4 Mar 2017 18:47:33 +0000 Subject: [PATCH] Prevent self signing by fingerprint instead of keyId --- src/key.js | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/key.js b/src/key.js index 49ee75b3..d2749d85 100644 --- a/src/key.js +++ b/src/key.js @@ -802,8 +802,8 @@ User.prototype.sign = function(primaryKey, privateKeys) { if (privateKey.isPublic()) { throw new Error('Need private key for signing'); } - if (privateKey.primaryKey.getKeyId().equals(primaryKey.getKeyId())) { - throw new Error('Not implemented for self signing'); + if (privateKey.primaryKey.getFingerprint() === primaryKey.getFingerprint()) { + throw new Error('Not implemented for self signing'); } signingKeyPacket = privateKey.getSigningKeyPacket(); if (!signingKeyPacket) {