From fd66babbab0dc2f63972a16e7a148cff4621ed71 Mon Sep 17 00:00:00 2001 From: Konstantin Ryabitsev Date: Fri, 14 May 2021 16:35:16 -0400 Subject: Restore check for attestation-check-dkim Seems we have lost this check in the rewrite, so restore it to make sure that we only check dkim if b4.attestation-check-dkim == 'yes' (default). Signed-off-by: Konstantin Ryabitsev --- b4/__init__.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/b4/__init__.py b/b4/__init__.py index dee182e..11ad012 100644 --- a/b4/__init__.py +++ b/b4/__init__.py @@ -954,7 +954,7 @@ class LoreMessage: if self.msg.get(DEVSIG_HDR): self._load_patatt_attestors() - if self.msg.get('dkim-signature'): + if self.msg.get('dkim-signature') and config['attestation-check-dkim'] == 'yes': self._load_dkim_attestors() return self._attestors -- cgit v1.2.3