Add support for a key fingerprint blacklist

[onak.git] / onak.ini.in

diff --git a/onak.ini.in b/onak.ini.in
index 8989f0704a28832ed4685c8671b562bf1fd32c98..a9745cd4a38c125ab5c42a27e4acad0f575552c5 100644 (file)
--- a/onak.ini.in
+++ b/onak.ini.in
@@ -16,6 +16,9 @@ max_reply_keys=128
 
 ; Settings related to key verification options available.
 [verification]
+; Blacklist certain fingerprints (e.g. EVIL32). One fingerprint per line,
+; comment lines start with #
+;blacklist=blacklist.txt
 ; Verify signature hashes - verify that the hash a signature claims to be
 ; over matches the hash of the data. Does not actually verify the signature.
 check_sighash=true