https://bugs.documentfoundation.org/show_bug.cgi?id=160184

--- Comment #8 from Patrick Luby (volunteer) <guibomac...@gmail.com> ---
After reading the gpg man page for --trust-model, I tried using "tofu+pgp"
which appears to do some validation of trust in the following debug patch. The
man page mentions setting --tofu-default-policy=unknown so I set that as well
and encryption still works.

@Thorsten is tofu+gpg too loose of a trust model?:


diff --git a/comphelper/source/misc/storagehelper.cxx
b/comphelper/source/misc/storagehelper.cxx
index 1d504cb91725..8ba27b41408f 100644
--- a/comphelper/source/misc/storagehelper.cxx
+++ b/comphelper/source/misc/storagehelper.cxx
@@ -480,6 +480,8 @@ uno::Sequence< beans::NamedValue >
OStorageHelper::CreateGpgPackageEncryptionDat
     if (ctx == nullptr)
         throw uno::RuntimeException("The GpgME library failed to initialize
for the OpenPGP protocol.");
     ctx->setArmor(false);
+    ctx->setFlag("trust-model", "tofu+pgp");
+    ctx->setFlag("tofu-default-policy", "unknown");

     for (const auto & cert : xSignCertificates)
     {

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to