openpgp: Rework stream verification logic.

  - Select keys only when verifying the signatures: the relevant keys
    depend on the timestamp in the signature, and different signatures
    may have different time stamps.

  - If the signature doens't have a Signature Creation Time stamp,
    return that the signature is invalid.

1 files changed, 2 insertions, 0 deletions

diff --git a/ffi/src/error.rs b/ffi/src/error.rs
index 5b1c6ea0..5c58f0b0 100644
--- a/ffi/src/error.rs
+++ b/ffi/src/error.rs
@@ -76,6 +76,8 @@ impl<'a> FromSequoiaError<'a> for Status {
                     Status::NotYetLive,
                 &openpgp::Error::NoBindingSignature(_) =>
                     Status::NoBindingSignature,
+                &openpgp::Error::InvalidKey(_) =>
+                    Status::InvalidKey,
                 openpgp::Error::__Nonexhaustive => unreachable!(),
             }
         }