Fix: use verifyTime in the config time instead of Now()

When decrypting message, we have to use verifyTime in the config
otherwise signatures not valid at verifyTime but valid at Now()
will be seen as valid.
This commit is contained in:
marin thiercelin 2021-09-23 10:40:56 +02:00
parent 0b639a2d93
commit 5558d4a177
No known key found for this signature in database
GPG key ID: 117C025B1F21B2C6
4 changed files with 68 additions and 2 deletions

View file

@ -4,6 +4,12 @@ All notable changes to this project will be documented in this file.
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
## Unreleased
### Fixed
- Use the provided `verifyTime` instead of the current time when verifying embedded signatures.
## [2.2.3] 2021-09-21
### Changed
- Keys are now generated with ZLIB as preferred compression algorithm