aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* about to release 1.4.1rc2RC-1-4-1rc2Werner Koch2005-02-1626-2099/+2258
|
* * card-util.c (fetch_url): Fetch the key from the defaultWerner Koch2005-02-1637-14566/+14259
| | | | | | | | keyserver if no URL is available. * w32installer.nsi: Added page to select the language. * mk-w32-dist: Create the opt.ini using the available languages.
* * w32installer.nsi: Added page to select the language.Werner Koch2005-02-163-47/+167
| | | | | * mk-w32-dist: Create the opt.ini using the available languages.
* * gpg.sgml: Add bkuptocard command for --edit-key.Werner Koch2005-02-159-41/+222
| | | | | | | | * passphrase.c (agent_get_passphrase): Don't call free_public_key if PK is NULL. (passphrase_clear_cache): Ditto. Removed debug output. (passphrase_to_dek): Ditto.
* * curl-shim.c (curl_easy_perform): Fix compile warning.David Shaw2005-02-125-2/+67
| | | | | | * curl-shim.h, gpgkeys_curl.c (main), gpgkeys_ldap.c (main): Add ca-cert-file option, to pass in the SSL cert.
* * curl-shim.h, curl-shim.c: New. This is code to fake the curl API inDavid Shaw2005-02-115-0/+243
| | | | | | | | terms of the current HTTP iobuf API. * gpgkeys_curl.c [FAKE_CURL], Makefile.am: If FAKE_CURL is set, link with the iobuf code rather than libcurl.
* * configure.ac: Add --enable-fake-curl option to help test no-curl HTTP.David Shaw2005-02-113-7/+25
| | | | | * NEWS: Note Mister/Zuccherato CFB countermeasures.
* Disable the "quick check" bytes for PK decryptions. This is inDavid Shaw2005-02-105-13/+32
| | | | | regards to the Mister and Zuccherato attack on OpenPGP CFB mode.
* * trustdb.h, trustdb.c (trustdb_check_or_update): New. If the trustdbDavid Shaw2005-02-065-15/+55
| | | | | | | | | | | | | | is dirty and --interactive is set, do an --update-trustdb. If not interactive, do a --check_trustdb unless --no-auto-check-trustdb is set. * import.c (import_keys_internal): Moved from here. * keyserver.c (keyserver_refresh): Call it here after all refreshing has happened so that we don't rebuild after each preferred keyserver set of imports, but do one big rebuild at the end. This is Debian bug #293816, noted by Kurt Roeckx.
* * gpg.sgml: Note that level 0 signatures are always acceptedDavid Shaw2005-02-052-7/+15
| | | | | regardless of --min-cert-level.
* * gpgkeys_finger.c (main), gpgkeys_hkp.c (main): Fix --version output.David Shaw2005-02-054-4/+13
| | | | | | * gpgkeys_curl.c (main): Make sure the curl handle is cleaned up on failure.
* * getkey.c (merge_selfsigs_subkey): Merged away definition from theDavid Shaw2005-02-052-0/+6
| | | | | backsigs code.
* (GNUPG_CHECK_GNUMAKE): Removed. Not needed forWerner Koch2005-02-044-5/+20
| | | | | decent automakes.
* * libcurl.m4: More comments.David Shaw2005-02-042-7/+5
|
* * NEWS: Fix typo.David Shaw2005-02-032-1/+5
|
* Last changes for W32RC-1-4-1rc1Werner Koch2005-02-035-5/+25
|
* About to do a release candidateWerner Koch2005-02-0331-23218/+25478
|
* Updated to match the switch to the NSIS installer.Werner Koch2005-02-037-199/+330
|
* * gpgkeys_hkp.c (get_key), gpgkeys_http.c (get_key): Fix missingDavid Shaw2005-02-013-0/+5
| | | | | http_close() calls. Noted by Phil Pennock.
* * http.c (connect_server): Fix fd leak when connecting to a round-robinDavid Shaw2005-02-012-1/+15
| | | | | server set that has some down servers. Noted by Phil Pennock.
* * ksutil.h: Up the default timeout to two minutes.David Shaw2005-02-012-2/+6
|
* * keygen.c (do_generate_keypair): Write the auth key to the cardDavid Shaw2005-02-012-11/+27
| | | | | | | | | before the encryption key. This is a partial workaround for a PGP bug (as of this writing, all versions including 8.1), that causes it to try and encrypt to the most recent subkey regardless of whether that subkey is actually an encryption type. In this case, the auth key is an RSA key so it succeeds.
* * keyid.c (keyid_from_sk, keyid_from_pk): Use 0xFFFFFFFFFFFFFFFFDavid Shaw2005-01-284-6/+15
| | | | | | | | | instead of 0x0000000000000000 for the invalid key ID since all-zeroes is reserved for the anonymous recipient. * keyedit.c (change_passphrase), keygen.c (generate_subkeypair): Fix a string ;)
* * keygen.c (generate_subkeypair): Detect primary key on-card andWerner Koch2005-01-273-18/+75
| | | | | | | | | | ask for the passphrase. Return an error if the primary key is a plain stub. * keyedit.c (change_passphrase): Don't ever change any stub key. Print a note if a key consists of only stub keys. Reported by Dany Nativel. These are bugs #401 and #402.
* Updated to the version from 1.2.7.Werner Koch2005-01-275-324/+662
|
* * keyserver.c (parse_keyserver_uri): Allow RFC-2732 IPv6 [literalDavid Shaw2005-01-262-4/+42
| | | | | | address] syntax in keyserver URLs. (keyserver_typemap): Map ftps if we are supporting it.
* * w32installer.nsi: Create a start menu entry and enhanced theWerner Koch2005-01-264-23/+224
| | | | | | build environment. * mk-w32-dist: Add more support for above.
* (do_generate_keypair): Don't continue after an error;Werner Koch2005-01-252-3/+7
| | | | | | fixed at two places. Why at all didn't I used a goto to cleanup, tsss?
* (get_cached_data): New arg GET_IMMEDIATE to bypassWerner Koch2005-01-254-48/+67
| | | | | | | | | | | | | | | | the cache. Changed all callers. (get_one_do): Bypass the cache if the value would have been read directly for v1.1 cards.It makes things a bit slower but obnly for 1.0 cards and there are not that many cards out in the wild. This is required to fix a caching bug when generating new keys; as a side effect of the retrieval of the the C4 DO from the 6E DO the chaced fingerprint will get updated to the old value and later when signing the generated key the checking of the fingerprint fails becuase it won't match the new one. Thanks to Moritz for analyzing this problem. (verify_chv3): Removed the CHV status reread logic because we won't cache the C4 DO anymore.
* * libcurl.m4: All versions of curl-config support --feature.David Shaw2005-01-252-6/+11
|
* * gpgkeys_ldap.c (print_nocr): New. (get_key): Call it here toDavid Shaw2005-01-243-9/+77
| | | | | | | | | canonicalize line endings. * gpgkeys_curl.c (writer): Discard everything outside the BEGIN and END lines when retrieving keys. Canonicalize line endings. (main): Accept FTPS.
* * configure.ac: Define FTPS flag if we're using curl, and FTPS isDavid Shaw2005-01-234-30/+45
| | | | | | | | | | available. * README: Fix some typos (noted by Norihiko Murase), update to 1.4.1, and tweak some descriptions. * NEWS: Note FTPS.
* * libcurl.m4: Note that FTPS existed, but wasn't fullyDavid Shaw2005-01-222-14/+38
| | | | | standards-compliant until version 7.11.0.
* * keyserver.c (free_keyserver_spec): Fix small leak.David Shaw2005-01-222-0/+11
| | | | | (keyserver_typemap): Map https if we are supporting it.
* * gpgkeys_ldap.c (main): Add "check-cert" option to disable SSLDavid Shaw2005-01-223-14/+69
| | | | | | | | | certificate checking (which is on by default). * gpgkeys_curl.c (main): Add "debug" option to match the LDAP helper. Add "check-cert" option to disable SSL certificate checking (which is on by default).
* (open_card): Issue new CARDCTRL(4) status.Werner Koch2005-01-202-1/+4
|
* * gpgv.c (tty_fprintf): New stub.Werner Koch2005-01-2010-34/+397
| | | | | | | | | * card-util.c (card_status): Create asecret key stub on the fly and print more information about a card key. * import.c (pub_to_sec_keyblock, auto_create_card_key_stub): New. * getkey.c (get_seckeyblock_byfprint): New. * keylist.c (print_card_key_info): New.
* Minor changesWerner Koch2005-01-202-2/+144
|
* * g10.c (i18n_init) [W32]: Pass registry key to gettextWerner Koch2005-01-2019-143/+350
| | | | | | | | | initialization. * gpgv.c (i18n_init) [W32]: Ditto. * simple-gettext.c (set_gettext_file): Use MO files depending on the installation directory. Add new arg REGKEY.
* * NEWS: Note --rfc2440-text import/export-unusable-sigs andDavid Shaw2005-01-193-3/+31
| | | | | | | | gpgkeys_curl. * configure.ac: gpgkeys_mailto is disabled by default. Define HTTPS flag if we're using curl, and HTTPS is available.
* * gpgkeys_curl.c: Fix typo.David Shaw2005-01-182-1/+5
|
* * gpgkeys_curl.c: s/MAX_PATH/URLMAX_PATH/g to avoid a clash withWerner Koch2005-01-184-11/+29
| | | | | | | | the W32 defined macro. Removed unneeded initialization of static variables. * gpgkeys_http.c: Ditto. * ksutil.h: s/MAX_PATH/URLMAX_PATH/.
* (public_key_list): Do a trustdb staleness check beforeWerner Koch2005-01-182-0/+15
| | | | | | opening the keyring. (secret_key_list): Ditto.
* * gpgkeys_curl.c (main): Only allow specified protocols to use theDavid Shaw2005-01-183-8/+18
| | | | | | | curl handler. * Makefile.am: Use LIBCURL_CPPFLAGS instead of LIBCURL_INCLUDES.
* * libcurl.m4: Use LIBCURL_CPPFLAGS and not LIBCURL_INCLUDES to matchDavid Shaw2005-01-182-5/+10
| | | | | automake syntax.
* Same forWerner Koch2005-01-176-13/+100
| | | | | --without-included-regex.
* Make --without-included-zlib work asWerner Koch2005-01-172-1/+6
| | | | | expected. Reported by Norihiko Murase.
* Make --without-included-zlib work asWerner Koch2005-01-171-0/+1
| | | | | expected. Reported by Norihiko Murase.
* * ksutil.h, gpgkeys_curl.c, gpgkeys_hkp.c, gpgkeys_ldap.c,David Shaw2005-01-137-99/+51
| | | | | | gpgkeys_finger.c, gpgkeys_http.c: Part 2 of the cleanup. Move all the various defines to ksutil.h.
* * gpgkeys_finger.c, gpgkeys_hkp.c, gpgkeys_http.c, gpgkeys_ldap.c: Part 1David Shaw2005-01-135-73/+109
| | | | | of a minor cleanup to use #defines instead of hard-coded sizes.