| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
|
|
|
|
| |
keyserver if no URL is available.
* w32installer.nsi: Added page to select the language.
* mk-w32-dist: Create the opt.ini using the available languages.
|
|
|
|
|
| |
* mk-w32-dist: Create the opt.ini using the available languages.
|
|
|
|
|
|
|
|
| |
* passphrase.c (agent_get_passphrase): Don't call free_public_key
if PK is NULL.
(passphrase_clear_cache): Ditto. Removed debug output.
(passphrase_to_dek): Ditto.
|
|
|
|
|
|
| |
* curl-shim.h, gpgkeys_curl.c (main), gpgkeys_ldap.c (main): Add
ca-cert-file option, to pass in the SSL cert.
|
|
|
|
|
|
|
|
| |
terms of the current HTTP iobuf API.
* gpgkeys_curl.c [FAKE_CURL], Makefile.am: If FAKE_CURL is set, link with
the iobuf code rather than libcurl.
|
|
|
|
|
| |
* NEWS: Note Mister/Zuccherato CFB countermeasures.
|
|
|
|
|
| |
regards to the Mister and Zuccherato attack on OpenPGP CFB mode.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
is dirty and --interactive is set, do an --update-trustdb. If not
interactive, do a --check_trustdb unless --no-auto-check-trustdb is
set.
* import.c (import_keys_internal): Moved from here.
* keyserver.c (keyserver_refresh): Call it here after all refreshing
has happened so that we don't rebuild after each preferred keyserver
set of imports, but do one big rebuild at the end. This is Debian bug
#293816, noted by Kurt Roeckx.
|
|
|
|
|
| |
regardless of --min-cert-level.
|
|
|
|
|
|
| |
* gpgkeys_curl.c (main): Make sure the curl handle is cleaned up on
failure.
|
|
|
|
|
| |
backsigs code.
|
|
|
|
|
| |
decent automakes.
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
| |
http_close() calls. Noted by Phil Pennock.
|
|
|
|
|
| |
server set that has some down servers. Noted by Phil Pennock.
|
| |
|
|
|
|
|
|
|
|
|
| |
before the encryption key. This is a partial workaround for a PGP bug
(as of this writing, all versions including 8.1), that causes it to
try and encrypt to the most recent subkey regardless of whether that
subkey is actually an encryption type. In this case, the auth key is
an RSA key so it succeeds.
|
|
|
|
|
|
|
|
|
| |
instead of 0x0000000000000000 for the invalid key ID since all-zeroes
is reserved for the anonymous recipient.
* keyedit.c (change_passphrase), keygen.c (generate_subkeypair): Fix a
string ;)
|
|
|
|
|
|
|
|
|
|
| |
ask for the passphrase. Return an error if the primary key is a
plain stub.
* keyedit.c (change_passphrase): Don't ever change any stub key.
Print a note if a key consists of only stub keys. Reported by
Dany Nativel. These are bugs #401 and #402.
|
| |
|
|
|
|
|
|
| |
address] syntax in keyserver URLs. (keyserver_typemap): Map ftps if
we are supporting it.
|
|
|
|
|
|
| |
build environment.
* mk-w32-dist: Add more support for above.
|
|
|
|
|
|
| |
fixed at two places. Why at all didn't I used a goto to cleanup,
tsss?
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
the cache. Changed all callers.
(get_one_do): Bypass the cache if the value would have been read
directly for v1.1 cards.It makes things a bit slower but obnly for
1.0 cards and there are not that many cards out in the wild. This
is required to fix a caching bug when generating new keys; as a
side effect of the retrieval of the the C4 DO from the 6E DO the
chaced fingerprint will get updated to the old value and later
when signing the generated key the checking of the fingerprint
fails becuase it won't match the new one. Thanks to Moritz for
analyzing this problem.
(verify_chv3): Removed the CHV status reread logic because we
won't cache the C4 DO anymore.
|
| |
|
|
|
|
|
|
|
|
|
| |
canonicalize line endings.
* gpgkeys_curl.c (writer): Discard everything outside the BEGIN and
END lines when retrieving keys. Canonicalize line endings. (main):
Accept FTPS.
|
|
|
|
|
|
|
|
|
|
| |
available.
* README: Fix some typos (noted by Norihiko Murase), update to 1.4.1,
and tweak some descriptions.
* NEWS: Note FTPS.
|
|
|
|
|
| |
standards-compliant until version 7.11.0.
|
|
|
|
|
| |
(keyserver_typemap): Map https if we are supporting it.
|
|
|
|
|
|
|
|
|
| |
certificate checking (which is on by default).
* gpgkeys_curl.c (main): Add "debug" option to match the LDAP helper.
Add "check-cert" option to disable SSL certificate checking (which is
on by default).
|
| |
|
|
|
|
|
|
|
|
|
| |
* card-util.c (card_status): Create asecret key stub on the fly
and print more information about a card key.
* import.c (pub_to_sec_keyblock, auto_create_card_key_stub): New.
* getkey.c (get_seckeyblock_byfprint): New.
* keylist.c (print_card_key_info): New.
|
| |
|
|
|
|
|
|
|
|
|
| |
initialization.
* gpgv.c (i18n_init) [W32]: Ditto.
* simple-gettext.c (set_gettext_file): Use MO files depending on
the installation directory. Add new arg REGKEY.
|
|
|
|
|
|
|
|
| |
gpgkeys_curl.
* configure.ac: gpgkeys_mailto is disabled by default. Define HTTPS
flag if we're using curl, and HTTPS is available.
|
| |
|
|
|
|
|
|
|
|
| |
the W32 defined macro. Removed unneeded initialization of static
variables.
* gpgkeys_http.c: Ditto.
* ksutil.h: s/MAX_PATH/URLMAX_PATH/.
|
|
|
|
|
|
| |
opening the keyring.
(secret_key_list): Ditto.
|
|
|
|
|
|
|
| |
curl handler.
* Makefile.am: Use LIBCURL_CPPFLAGS instead of LIBCURL_INCLUDES.
|
|
|
|
|
| |
automake syntax.
|
|
|
|
|
| |
--without-included-regex.
|
|
|
|
|
| |
expected. Reported by Norihiko Murase.
|
|
|
|
|
| |
expected. Reported by Norihiko Murase.
|
|
|
|
|
|
| |
gpgkeys_finger.c, gpgkeys_http.c: Part 2 of the cleanup. Move all the
various defines to ksutil.h.
|
|
|
|
|
| |
of a minor cleanup to use #defines instead of hard-coded sizes.
|