Fix NPE when signing key is not found during signature verification

pgpainless · Dec 16, 2020 · ff8c6d8 · ff8c6d8
1 parent 4870bda
commit ff8c6d8
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/...ss-core/src/main/java/org/pgpainless/decryption_verification/DecryptionStreamFactory.java b/...ss-core/src/main/java/org/pgpainless/decryption_verification/DecryptionStreamFactory.java
@@ -95,6 +95,9 @@ public static DecryptionStream create(@Nonnull InputStream inputStream,
             pgpInputStream = inputStream;
             for (PGPSignature signature : detachedSignatures) {
                 PGPPublicKey signingKey = factory.findSignatureVerificationKey(signature.getKeyID());
+                if (signingKey == null) {
+                    continue;
+                }
                 signature.init(new BcPGPContentVerifierBuilderProvider(), signingKey);
                 factory.resultBuilder.addDetachedSignature(
                         new DetachedSignature(signature, new OpenPgpV4Fingerprint(signingKey)));