Warn on importing complete certificate chains (part of #1488).

diff --git a/src/lib/config.h b/src/lib/config.h
index 3518dc63fc4ea4a62985d03c161d9f260433e6c8..7f8dd0cd4be183b5259009fc1cc0d6c65f4243ce 100644 (file)
--- a/src/lib/config.h
+++ b/src/lib/config.h
@@ -370,6 +370,7 @@ public:
                NAG_BAD_SIGNER_CHAIN,
                /* Not really a nag but it's the same idea */
                NAG_INITIAL_SETUP,
+               NAG_IMPORT_DECRYPTION_CHAIN,
                NAG_COUNT
        };
 

diff --git a/src/wx/config_dialog.cc b/src/wx/config_dialog.cc
index 13a4056708b9978a614bfdc3fc5a955cd097ae1f..a32b5d9680eaa327ea92d2243f0dad7089e9d60c 100644 (file)
--- a/src/wx/config_dialog.cc
+++ b/src/wx/config_dialog.cc
@@ -841,6 +841,16 @@ KeysPage::export_decryption_chain_and_key ()
 void
 KeysPage::import_decryption_chain_and_key ()
 {
+       if (NagDialog::maybe_nag (
+                   _panel,
+                   Config::NAG_IMPORT_DECRYPTION_CHAIN,
+                   /* XXX: this needs to be marked translatable */
+                   wxT("If you continue with this operation you will no longer be able to use any DKDMs that you have created with the current certificates and key.  Also, any KDMs that have been sent to you for those certificates will become useless.  Proceed with caution!"),
+                   true
+                   )) {
+               return;
+       }
+
        wxFileDialog* d = new wxFileDialog (
                _panel, _("Select File To Import"), wxEmptyString, wxEmptyString, wxT ("DOM files (*.dom)|*.dom")
                );