aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Preparing 1.3.1 release.V1-3-1Werner Koch2002-11-124-665/+765
|
* * gpgkeys_ldap.c (get_key): Fix typo in deduping code.David Shaw2002-11-102-1/+5
|
* * ttyio.c (TERMDEVICE): Removed.Werner Koch2002-11-093-14/+47
| | | | | | (tty_get_ttyname): New. (init_ttyfp): Use it here instead of the TERMDEVICE macro.
* * passphrase.c (agent_send_all_options): Use tty_get_ttyname toWerner Koch2002-11-092-2/+7
| | | | | get the default ttyname.
* Fixed copyright yearWerner Koch2002-11-091-1/+1
|
* * keyring.h, keyring.c (keyring_register_filename): Return the pointer ifDavid Shaw2002-11-086-29/+89
| | | | | | | | | | a given keyring is registered twice. * keydb.h, keydb.c (keydb_add_resource): Use flags to indicate a default keyring. (keydb_locate_writable): Prefer the default keyring if possible. * g10.c (main): Add --default-keyring option.
* * options.h, g10.c (main), trustdb.c (ask_ownertrust): AddDavid Shaw2002-11-074-6/+35
| | | | | | | | --force-ownertrust option for debugging purposes. This allows setting a whole keyring to a given trust during an --update-trustdb. Not for normal use - it's just easier than hitting "4" all the time to test a large trustdb.
* * w32reg.c (read_w32_registry_string): Fixed expanding of the environmentDavid Shaw2002-11-065-12/+31
| | | | | | | | | | | | | | buffer; didn't worked at all. Reported by Thijmen Klok. From Werner on stable branch. * secmem.c (secmem_free, secmem_term): Use wipememory2() instead of memset() to overwrite secure memory * iobuf.c (direct_open): Handle mode 'b' if O_BINARY is available. From Werner on stable branch. * fileutil.c: Comment from stable branch.
* * util.h: Add wipememory2() macro (same as wipememory, but can specify theDavid Shaw2002-11-062-1/+7
| | | | | byte to wipe with).
* * rndw32.c [__CYGWIN32__]: Don't include winioctl.h - it is not requiredDavid Shaw2002-11-0614-25/+41
| | | | | | | | | | | | | | | anymore. (From Werner) * random.c (read_seed_file,update_random_seed_file): Use binary mode for __CYGWIN__. (From Werner) * blowfish.c (burn_stack), cast5.c (burn_stack), des.c (burn_stack), md5.c (burn_stack), random.c (burn_stack, read_pool, fast_random_poll), rijndael.c (burn_stack), rmd160.c (burn_stack), rndegd.c (rndegd_gather_random), rndlinux.c (rndlinux_gather_random), sha1.c (burn_stack), tiger.c (burn_stack), twofish.c (burn_stack): Replace various calls to memset() with the more secure wipememory().
* * pubkey-enc.c (get_session_key): With hidden recipients or try a givenDavid Shaw2002-11-066-13/+57
| | | | | | | | | | | | | | | passphrase against all secret keys rather than trying all secret keys in turn. Don't if --try-all-secrets or --status-fd is enabled. * passphrase.c (passphrase_to_dek): Mode 1 means do a regular passphrase query, but don't prompt with the key info. * seckey-cert.c (do_check, check_secret_key): A negative ask count means to enable passphrase mode 1. * keydb.h, getkey.c (enum_secret_keys): Add flag to include secret-parts-missing keys (or not) in the list.
* * gpgkeys_ldap.c (key_in_keylist, add_key_to_keylist, free_keylist,David Shaw2002-11-052-198/+292
| | | | | | | get_key, search_key): The LDAP keyserver doesn't remove duplicates, so remove them locally. Do not include the key modification time in the search response.
* * keyserver.c (keyserver_search_prompt): When --with-colons is enabled,David Shaw2002-11-052-8/+16
| | | | | | don't try and fit the search output to the screen size - just dump the whole list.
* * keyserver.c (keyserver_search_prompt): When --with-colons is enabled,David Shaw2002-11-052-3/+27
| | | | | just dump the raw keyserver protocol to stdout and don't print the menu.
* * KEYSERVER: New. Documents the --with-colons format for keyserverDavid Shaw2002-11-053-3/+94
| | | | | | | listings. * DETAILS: Clarify meaning of 'u'. Noted by Timo.
* * trustdb.c (trust_model_string, check_trustdb, update_trustdb,David Shaw2002-11-042-23/+54
| | | | | | | validate_one_keyblock): It's not clear what a trustdb rebuild or check means with a trust model other than "classic" or "openpgp", so disallow this.
* * gpgkeys_hkp.c (send_key), gpgkeys_ldap.c (send_key): Properly handle anDavid Shaw2002-11-043-16/+21
| | | | | input file that does not include any key data at all.
* * options.h, g10.c (main): Add --trust-model option. Current models areDavid Shaw2002-11-037-16/+45
| | | | | | | | | | | | | | "openpgp" which is classic+trustsigs, "classic" which is classic only, and "always" which is the same as the current option --always-trust (which still works). Default is "openpgp". * trustdb.c (validate_one_keyblock): Use "openpgp" trust model to enable trust sigs. * gpgv.c (main), mainproc.c (check_sig_and_print), pkclist.c (do_we_trust, do_we_trust_pre, check_signatures_trust): Use new --trust-model option in place of --always-trust.
* * gpg.sgml: Document "tsign", clarify "setpref", clarify --recipient,David Shaw2002-11-032-8/+50
| | | | | | document --hidden-recipient, document --hidden-encrypt-to, clarify --no-encrypt-to, clarify --throw-keyid, document --no-throw-keyid.
* * NEWS: Note trust signature support,David Shaw2002-11-032-0/+31
| | | | | | --hidden-encrypt-to/--hidden-recipient, and long algorithm name support everywhere.
* * keyedit.c (sign_mk_attrib, trustsig_prompt, sign_uids, keyedit_menu):David Shaw2002-11-034-39/+191
| | | | | | | | | | | Prompt for and create a trust signature with "tsign". This is functional, but needs better UI text. * build-packet.c (build_sig_subpkt): Able to build trust and regexp subpackets. * pkclist.c (do_edit_ownertrust): Comment.
* * keygen.c (set_one_pref, keygen_set_std_prefs): Allow using the fullDavid Shaw2002-11-035-85/+130
| | | | | | | | | | | algorithm name (CAST5, SHA1) rather than the short form (S3, H2). * main.h, keygen.c (keygen_get_std_prefs), keyedit.c (keyedit_menu): Return and use a fake uid packet rather than a string since we already have a nice parser/printer in keyedit.c:show_prefs. * main.h, misc.c (string_to_compress_algo): New.
* * cipher.c (string_to_cipher_algo), md.c (string_to_digest_algo): AllowDavid Shaw2002-11-023-8/+33
| | | | | the Sxxx and Hxxx format for cipher and digest names.
* * g10.c (main): Add --no-throw-keyid.David Shaw2002-11-016-12/+69
| | | | | | | | | | * keydb.h, encode.c (write_pubkey_enc_from_list), g10.c (main), pkclist.c (build_pk_list): Add --hidden-recipient (-R) and --hidden-encrypt-to, which do a single-user variation on --throw-keyid. The "hide this key" flag is carried in bit 0 of the pk_list flags field. * keyserver.c (parse_keyrec): Fix shadowing warning.
* * Makefile.am: Put gnupg.spec in the root directory so rpm -ta works.David Shaw2002-10-312-1/+4
|
* * gnupg.spec.in: Update source ftp path.David Shaw2002-10-312-2/+6
|
* added RISC OS module loading supportStefan Bellon2002-10-3119-133/+395
|
* * build-packet.c (do_plaintext), encode.c (encode_sesskey, encode_simple,David Shaw2002-10-314-5/+12
| | | | | | | encode_crypt), sign.c (write_plaintext_packet): Use wipememory() instead of memset() to wipe sensitive memory as the memset() might be optimized away.
* * util.h: Add wipememory() macro.David Shaw2002-10-312-0/+6
|
* * configure.ac: Add a check for volatile.David Shaw2002-10-312-1/+5
|
* * trustdb.c (check_regexp): Modern regexps require REG_EXTENDED.David Shaw2002-10-302-1/+5
|
* * packet.h, trustdb.h, trustdb.c (trust_string): New. Return a stringDavid Shaw2002-10-309-37/+334
| | | | | | | | | | | | | | | | | | | | | | | | | | like "fully trusted", "marginally trusted", etc. (get_min_ownertrust): New. Return minimum ownertrust. (update_min_ownertrust): New. Set minimum ownertrust. (check_regexp): New. Check a regular epression against a user ID. (ask_ownertrust): Allow specifying a minimum value. (get_ownertrust_info): Follow the minimum ownertrust when returning a letter. (clear_validity): Remove minimum ownertrust when a key becomes invalid. (release_key_items): Release regexp along with the rest of the info. (validate_one_keyblock, validate_keys): Build a trust sig chain while validating. Call check_regexp for regexps. Use the minimum ownertrust if the user does not specify a genuine ownertrust. * pkclist.c (do_edit_ownertrust): Only allow user to select a trust level greater than the minimum value. * parse-packet.c (can_handle_critical): Can handle critical trust and regexp subpackets. * trustdb.h, trustdb.c (clear_ownertrusts), delkey.c (do_delete_key), import.c (import_one): Rename clear_ownertrust to clear_ownertrusts and have it clear the min_ownertrust value as well. * keylist.c (list_keyblock_print): Indent uid to match pub and sig.
* * configure.ac: Add --disable-regex in case some platform just can'tDavid Shaw2002-10-292-20/+38
| | | | | | handle the regex stuff. This means they can't fully handle trust sigs with an attached regex either.
* * keyedit.c (print_and_check_one_sig, show_key_and_fingerprint,David Shaw2002-10-297-11/+56
| | | | | | | | | | | | | menu_addrevoker), keylist.c (list_keyblock_print, print_fingerprint): Show "T" or the trust depth for trust signatures, and add spaces to some strings to make room for it. * packet.h, parse-packet.c (dump_sig_subpkt, parse_one_sig_subpkt, parse_signature): Parse trust signature values. * tdbio.h, tdbio.c (tdbio_read_record, tdbio_write_record): Reserve a byte for the minimum ownertrust value (for use with trust signatures).
* tidied RISC OS filetype supportStefan Bellon2002-10-2910-72/+109
|
* filetype support for RISC OSStefan Bellon2002-10-2811-35/+137
|
* * gnupg.spec.in: Use new path for keyserver helpers, /usr/lib is no longerDavid Shaw2002-10-262-5/+14
| | | | | | used for cipher/hash plugins, and include gpgv, gpgsplit, and the new gnupg.7 man page.
* * gpgkeys_hkp.c (main), gpgkeys_ldap.c (main): Add -V flag to outputDavid Shaw2002-10-243-2/+17
| | | | | protocol and program version.
* * gpg.sgml: Document --refresh-keys.David Shaw2002-10-242-4/+29
| | | | | * gpg.sgml: Clarify --force-mdc, and document --disable-mdc.
* * main.h, import.c (sec_to_pub_keyblock, import_secret_one,David Shaw2002-10-234-5/+85
| | | | | | | parse_import_options), g10.c (main): New import-option "convert-sk-to-pk" to convert a secret key into a public key during import. It is on by default.
* * gpgsplit.c: New options --secret-to-public and --no-split.Werner Koch2002-10-232-364/+597
| | | | | GNUified the indentation style.
* * pubkey-enc.c (get_it): Fix segv, test for revoked only when PKWerner Koch2002-10-232-1/+6
| | | | | has been assigned.
* * Makefile.am: Anything linking with libutil.a needs INTLLIBS as well onDavid Shaw2002-10-212-2/+7
| | | | | platforms where INTLLIBS is set.
* * distfiles, _regex.h: Add _regex.h from glibc 2.3.1.David Shaw2002-10-193-0/+579
|
* * configure.ac: Regex tests adapted from mutt to decide whether to use theDavid Shaw2002-10-192-3/+40
| | | | | internal regex code or not.
* * Makefile.am, regcomp.c, regex.c, regex_internal.c, regex_internal.h,David Shaw2002-10-197-0/+8658
| | | | | regexec.c: Add new regex files from glibc 2.3.1.
* 2002-10-18 Timo Schulz <[email protected]>Timo Schulz2002-10-185-57/+69
| | | | | | | | | * keylist.c: (print_pubkey_info): New. (print_seckey_info): New. * main.h: Prototypes for the new functions. * delkey.c (do_delete_key): Use it here. * revoke.c (gen_desig_revoke): Ditto.
* Bumped version number for cvs versionWerner Koch2002-10-182-1/+5
|
* * POTFILES.in (hkp.c): Removed.V1-3-0Werner Koch2002-10-183-484/+565
|
* * configure.ac: Changed version number comments.Werner Koch2002-10-184-6/+18
| | | | | | | (ALL_LINGUAS): Removed all except for de. During development it might not be a good idea to keep all of them - they get outdated too soon and diff files will be far too large.