fix: strict split-gpg2 service

Split-gpg V1 allowed for querying public keys, but as split-gpg2 is
running as an agent, public keys are not queried. Allowing connection to
the server to query only public parts of the key exposes the server more
than needed to the client.

All clients now have to hold the public key they need locally in order
to do GPG operations.
This commit is contained in:
Ben Grande 2023-12-28 11:47:41 +01:00
parent 76079d2c7e
commit b52e4b1b63
8 changed files with 5 additions and 16 deletions

View file

@ -30,9 +30,6 @@ features:
- disable:
- service.cups
- service.cups-browsed
# tags:
# - add:
# - split-gpg2-client
{%- endload %}
{{ load(defaults) }}