[PATCH gnupg] scd:piv: Let the card decide whether signing needs a PIN
NIIBE Yutaka
gniibe at fsij.org
Fri Nov 6 06:14:04 CET 2026
Hello,
Thank you for your contribution.
David Seifert wrote:
> * scd/app-piv.c (YKPIV_METADATA_POLICY_TAG): Remove.
> (get_cached_data): Remove support for special tag 0xF7xx.
> (check_pin_policy): Remove.
> (do_sign): Do not verify the PIN before signing. If GENERAL
> AUTHENTICATE fails with GPG_ERR_BAD_PIN, force a verify and retry
> once.
Looks good.
Please have a look at gnupg/doc/HACKING, specifically, the "License
policy" section. And please consider sending your signed DCO.
--
More information about the Gnupg-devel
mailing list