exchange

commit 4f88960c502baa8f13064845bf66394429f35afb
parent 04849cb64430b4c05f0628e3045e81749f4a37a6
Author: Christian Grothoff <christian@grothoff.org>
Date:   Thu, 13 Aug 2026 20:02:15 +0200

do not use revoked keys

Diffstat:
M
src/util/secmod_eddsa.c
 | 
5
+++++

1 file changed, 5 insertions(+), 0 deletions(-)
diff --git a/src/util/secmod_eddsa.c b/src/util/secmod_eddsa.c
@@ -288,6 +288,11 @@ handle_sign_request (struct TES_Client *client,
     GNUNET_free (key);
     key = nxt;
   }
+  /* revoked keys must not be used for signing anymore; the replacement
+     key sits right behind the revoked one in the DLL */
+  while ( (NULL != key) &&
+          (key->purge) )
+    key = key->next;
   if (NULL == key)
   {
     GNUNET_break (0);