[PATCH gnupg] scd:piv: Let the card decide whether signing needs a PIN

NIIBE Yutaka gniibe at fsij.org
Fri Nov 6 06:14:04 CET 2026


Hello,

Thank you for your contribution.

David Seifert wrote:
> * scd/app-piv.c (YKPIV_METADATA_POLICY_TAG): Remove.
> (get_cached_data): Remove support for special tag 0xF7xx.
> (check_pin_policy): Remove.
> (do_sign): Do not verify the PIN before signing. If GENERAL
> AUTHENTICATE fails with GPG_ERR_BAD_PIN, force a verify and retry
> once.

Looks good.

Please have a look at gnupg/doc/HACKING, specifically, the "License
policy" section.  And please consider sending your signed DCO.
-- 


More information about the Gnupg-devel mailing list