Support for checking whether the signer's email address is contained in

his certificate.

diff --git a/gpgmeplug/ChangeLog b/gpgmeplug/ChangeLog
index 0c60d16ca5781e427d724ec1146f4a80b3506707..220dea9666295c33d887e476fa5e15a5b08316e9 100644 (file)
--- a/gpgmeplug/ChangeLog
+++ b/gpgmeplug/ChangeLog
@@ -2,7 +2,11 @@
 
        * gpgmeplug.c (signMessage): Implemented warning when signature
        certificates are about to expire 
-       * cryptplug.h: dito
+       (isEmailInCertificate): Added support for checking whether the
+       signer's email address is contained in his certificate.
+
+       * cryptplug.h: Implemented warning when signature
+       certificates are about to expire
 
 2002-02-27  Marcus Brinkmann  <marcus@g10code.de>
 

diff --git a/gpgmeplug/cryptplug.h b/gpgmeplug/cryptplug.h
index 592432da63fca69f8b4b92698f2c9cec418f302a..b891c1271e9337cadca5377c92c397ce0280c97c 100644 (file)
--- a/gpgmeplug/cryptplug.h
+++ b/gpgmeplug/cryptplug.h
@@ -461,6 +461,13 @@ void setWarnNoCertificate( bool );
 */
 bool warnNoCertificate( void );
 
+/*!
+  \ingroup groupConfigSign
+  \brief Returns true if the specified email address is contained
+  in the specified certificate.
+*/
+bool isEmailInCertificate( const char* email, const char* certificate );
+
 /*! \ingroup groupConfigSign
    \brief Specifies how often the PIN is requested when
             accessing the secret signature key.

diff --git a/gpgmeplug/gpgmeplug.c b/gpgmeplug/gpgmeplug.c
index 3c73b4c757cf8fc54dbabffc4167fa9b300bff50..2cb067ebad3ce3c57a9b0d108e950f5403ceb6c7 100644 (file)
--- a/gpgmeplug/gpgmeplug.c
+++ b/gpgmeplug/gpgmeplug.c
@@ -343,6 +343,22 @@ bool warnNoCertificate()
   return config.warnNoCertificate;
 }
 
+
+bool isEmailInCertificate( const char* email, const char* certificate )
+{
+    /* PENDING(g10) this function should return true if the email
+       address passed as the first parameter is contained in the
+       certificate passed as the second parameter, and false
+       otherwise. This is used to alert the user if his own email
+       address is not contained in the certificate he uses for
+       signing.
+       Note that the parameter email can be anything that is allowed
+       in a From: line.
+    */
+    return false; // dummy
+}
+
+
 void setNumPINRequests( PinRequests reqMode )
 {
   config.numPINRequests = reqMode;