Task #3940: verify_release() should remove whitespaces from fingerprints - Debian Support - Pulp

Actions

Send by e-mail Copy link

Task #3940

closed

verify_release() should remove whitespaces from fingerprints

Added by mbucher about 6 years ago. Updated over 5 years ago.

Status:

CLOSED - CURRENTRELEASE

Priority:

Normal

Assignee:

Sprint/Milestone:

Start date:

Due date:

% Done:

100%

Estimated time:

Platform Release:

2.17.1

Target Release - Debian:

Groomed:

Sprint Candidate:

Tags:

Pulp 2

Sprint:

Quarter:

Description

In importers/sync.rb the allowed_keys config should be sanitized before usage.
Otherwise remaining whitespaces within the fingerprint (e.g. "FFFF EEEE ...") will be interpreted as separator by the GPG-class.
That means GPG will look for key-id "FFFF" and key-id "EEEE".