[CAMEL-7283] PGP Data Format: Signature Verification Options

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.13.0
• Component/s: camel-crypto
• Patch Info: Patch Available
• Estimated Complexity: Unknown
• Assignee: Claus Ibsen
• Reporter: Franz Forsthofer
• Created: 11/Mar/14 09:18
• Updated: 14/Mar/14 06:12
• Resolved: 14/Mar/14 06:12

Description

The current PGP Data Format does verify a signature if the PGP message does contain one and it does execute no verification if the PGP message does not contain a signature. There is a use case where a signature verification is always required because the receiver wants to check that the message came from a specific sender. In this case PGP messages not containing a signature should be rejected.

I added the new parameter "signatureVerificationOption" so that you now can specify if a signature is requried, optional, or no signature is allowed during the decryption process.