[dev] PGP race condition.

Ola Lundqvist opal@debian.org
Mon, 22 Apr 2002 22:05:35 +0200


---------------------- multipart/signed attachment
Hi

I have a question (and a suggestion) the the PGP code in
horde.

In horde/lib/Crypt/pgp.php

=2E..
    function Horde_Crypt_pgp($params)
    {
        $this->tempdir =3D Horde::getTempDir();

        /* Store the location of GnuPG and set common options. */

=2E..

This means that the gpg home directory will be /tmp.

If two peoply will generate a key at the same time this will
become a problem. I suggest that this directory is
/tmp/$hordesession. Any suggestions on this?
That directory have to be created and removed but that should
not be a great problem.

If no one object I'll implement that (If someone just tell me
how to get the session id). :)

Regards,

// Ola

--=20
 --------------------- Ola Lundqvist ---------------------------
/  opal@debian.org                     Bj=F6rnk=E4rrsgatan 5 A.11   \
|  opal@lysator.liu.se                 584 36 LINK=D6PING         |
|  +46 (0)13-17 69 83                  +46 (0)70-332 1551       |
|  http://www.opal.dhs.org             UIN/icq: 4912500         |
\  gpg/f.p.: 7090 A92B 18FE 7994 0C36  4FE4 18A1 B1CF 0FE5 3DD9 /
 ---------------------------------------------------------------

---------------------- multipart/signed attachment
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 239 bytes
Desc: not available
Url : http://lists.horde.org/archives/dev/attachments/efe9d08b/attachment.bin

---------------------- multipart/signed attachment--