xxx support backsigs on certification subkeys

1 files changed, 2 insertions, 2 deletions

diff --git a/openpgp/src/signature.rs b/openpgp/src/signature.rs
index 08c05b2e..00c8ca7e 100644
--- a/openpgp/src/signature.rs
+++ b/openpgp/src/signature.rs
@@ -422,7 +422,7 @@ impl Signature {
     pub fn verify_subkey_binding(&self, signer: &Key, pk: &Key, subkey: &Key)
         -> Result<bool>
     {
-        if self.sigtype != SignatureType::SubkeyBinding {
+        if self.sigtype != SignatureType::SubkeyBinding && self.sigtype != SignatureType::PrimaryKeyBinding {
             return Err(Error::UnsupportedSignatureType(self.sigtype).into());
         }
 
@@ -434,7 +434,7 @@ impl Signature {
             return Ok(false);
         }
 
-        if ! self.key_flags().can_sign() {
+        if ! (self.key_flags().can_sign() || self.key_flags().can_certify()) {
             // No backsig required.
             return Ok(true)
         }