aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Preparing a releaseV1-4-1Werner Koch2005-03-1531-6042/+6067
|
* * card-util.c (card_status): Use isotimestamp and not theWerner Koch2005-03-147-4/+77
| | | | | | | | localized asctimestamp to match the timezone used in the key information. * miscutil.c (isotimestamp): New.
* * cardglue.c (pin_cb): Disable debug output.Werner Koch2005-03-1414-40/+141
| | | | | | | | * mk-w32-dist: Check for patch files. * w32installer.nsi: Translated a few more strings. Print a warning if permssions are not suitable for the installation. Add Uninstaller entries.
* * configure.ac: New option --enable-noexecstack.Werner Koch2005-03-118-3/+49
| | | | | | * Makefile.am (ASFLAGS): Renamed to AM_CCASFLAGS and added the variable for non exectubale stack options. Adapted users.
* * keyserver.c (parse_keyserver_options): Accept honor-http-proxy as anDavid Shaw2005-03-102-0/+11
| | | | | alias for http-proxy.
* * delkey.c (do_delete_key, delete_keys): Fix problem with --expertDavid Shaw2005-03-102-22/+38
| | | | | preventing --delete-secret-and-public-keys from deleting secret keys.
* (keyedit_menu) [W32]: Run the trustdb stale checkWerner Koch2005-03-102-1/+19
| | | | | earlier.
* (secmem_realloc): Take control information into accountWerner Koch2005-03-103-5/+28
| | | | | when checking whether a resize is needed.
* * primegen.c (is_prime): Free A2. Noted by [email protected].Werner Koch2005-03-0711-394/+420
| | | | | | | | | | | | | | | | | | | Fixes #423. * DETAILS: Document new status codes. * cardglue.c (agent_scd_pkdecrypt, agent_scd_pksign) (agent_scd_genkey, agent_scd_setattr, agent_scd_change_pin) (agent_scd_checkpin, agent_openpgp_storekey): Make sure to send a SC_OP_FAILURE after card operations which might change data. * card-util.c (change_pin): Send a SC_OP_SUCCESS after a PIN has been changed. (change_name): Removed a debug output. * status.h, status.c: New codes BAD_PASSPHRASE_PIN, SC_OP_FAILURE and SC_OP_SUCCESS. * de.po: Updated. Translation is still in the works, though.
* * libcurl.m4: Use $LIBS instead of $LDFLAGS. This should help buildDavid Shaw2005-03-012-4/+9
| | | | | problems on Mingw32.
* * keyedit.c (keyedit_menu): Only print the key signing hint when signingDavid Shaw2005-02-242-1/+8
| | | | | from a place where it is useful (i.e. --edit-key and not --sign-key).
* * gnupg.spec.in: Fix problem with storing the gpgkeys helpers inDavid Shaw2005-02-172-3/+12
| | | | | libexec, but calling them in libexec/gnupg.
* about to release 1.4.1rc2RC-1-4-1rc2Werner Koch2005-02-1626-2099/+2258
|
* * card-util.c (fetch_url): Fetch the key from the defaultWerner Koch2005-02-1637-14566/+14259
| | | | | | | | keyserver if no URL is available. * w32installer.nsi: Added page to select the language. * mk-w32-dist: Create the opt.ini using the available languages.
* * w32installer.nsi: Added page to select the language.Werner Koch2005-02-163-47/+167
| | | | | * mk-w32-dist: Create the opt.ini using the available languages.
* * gpg.sgml: Add bkuptocard command for --edit-key.Werner Koch2005-02-159-41/+222
| | | | | | | | * passphrase.c (agent_get_passphrase): Don't call free_public_key if PK is NULL. (passphrase_clear_cache): Ditto. Removed debug output. (passphrase_to_dek): Ditto.
* * curl-shim.c (curl_easy_perform): Fix compile warning.David Shaw2005-02-125-2/+67
| | | | | | * curl-shim.h, gpgkeys_curl.c (main), gpgkeys_ldap.c (main): Add ca-cert-file option, to pass in the SSL cert.
* * curl-shim.h, curl-shim.c: New. This is code to fake the curl API inDavid Shaw2005-02-115-0/+243
| | | | | | | | terms of the current HTTP iobuf API. * gpgkeys_curl.c [FAKE_CURL], Makefile.am: If FAKE_CURL is set, link with the iobuf code rather than libcurl.
* * configure.ac: Add --enable-fake-curl option to help test no-curl HTTP.David Shaw2005-02-113-7/+25
| | | | | * NEWS: Note Mister/Zuccherato CFB countermeasures.
* Disable the "quick check" bytes for PK decryptions. This is inDavid Shaw2005-02-105-13/+32
| | | | | regards to the Mister and Zuccherato attack on OpenPGP CFB mode.
* * trustdb.h, trustdb.c (trustdb_check_or_update): New. If the trustdbDavid Shaw2005-02-065-15/+55
| | | | | | | | | | | | | | is dirty and --interactive is set, do an --update-trustdb. If not interactive, do a --check_trustdb unless --no-auto-check-trustdb is set. * import.c (import_keys_internal): Moved from here. * keyserver.c (keyserver_refresh): Call it here after all refreshing has happened so that we don't rebuild after each preferred keyserver set of imports, but do one big rebuild at the end. This is Debian bug #293816, noted by Kurt Roeckx.
* * gpg.sgml: Note that level 0 signatures are always acceptedDavid Shaw2005-02-052-7/+15
| | | | | regardless of --min-cert-level.
* * gpgkeys_finger.c (main), gpgkeys_hkp.c (main): Fix --version output.David Shaw2005-02-054-4/+13
| | | | | | * gpgkeys_curl.c (main): Make sure the curl handle is cleaned up on failure.
* * getkey.c (merge_selfsigs_subkey): Merged away definition from theDavid Shaw2005-02-052-0/+6
| | | | | backsigs code.
* (GNUPG_CHECK_GNUMAKE): Removed. Not needed forWerner Koch2005-02-044-5/+20
| | | | | decent automakes.
* * libcurl.m4: More comments.David Shaw2005-02-042-7/+5
|
* * NEWS: Fix typo.David Shaw2005-02-032-1/+5
|
* Last changes for W32RC-1-4-1rc1Werner Koch2005-02-035-5/+25
|
* About to do a release candidateWerner Koch2005-02-0331-23218/+25478
|
* Updated to match the switch to the NSIS installer.Werner Koch2005-02-037-199/+330
|
* * gpgkeys_hkp.c (get_key), gpgkeys_http.c (get_key): Fix missingDavid Shaw2005-02-013-0/+5
| | | | | http_close() calls. Noted by Phil Pennock.
* * http.c (connect_server): Fix fd leak when connecting to a round-robinDavid Shaw2005-02-012-1/+15
| | | | | server set that has some down servers. Noted by Phil Pennock.
* * ksutil.h: Up the default timeout to two minutes.David Shaw2005-02-012-2/+6
|
* * keygen.c (do_generate_keypair): Write the auth key to the cardDavid Shaw2005-02-012-11/+27
| | | | | | | | | before the encryption key. This is a partial workaround for a PGP bug (as of this writing, all versions including 8.1), that causes it to try and encrypt to the most recent subkey regardless of whether that subkey is actually an encryption type. In this case, the auth key is an RSA key so it succeeds.
* * keyid.c (keyid_from_sk, keyid_from_pk): Use 0xFFFFFFFFFFFFFFFFDavid Shaw2005-01-284-6/+15
| | | | | | | | | instead of 0x0000000000000000 for the invalid key ID since all-zeroes is reserved for the anonymous recipient. * keyedit.c (change_passphrase), keygen.c (generate_subkeypair): Fix a string ;)
* * keygen.c (generate_subkeypair): Detect primary key on-card andWerner Koch2005-01-273-18/+75
| | | | | | | | | | ask for the passphrase. Return an error if the primary key is a plain stub. * keyedit.c (change_passphrase): Don't ever change any stub key. Print a note if a key consists of only stub keys. Reported by Dany Nativel. These are bugs #401 and #402.
* Updated to the version from 1.2.7.Werner Koch2005-01-275-324/+662
|
* * keyserver.c (parse_keyserver_uri): Allow RFC-2732 IPv6 [literalDavid Shaw2005-01-262-4/+42
| | | | | | address] syntax in keyserver URLs. (keyserver_typemap): Map ftps if we are supporting it.
* * w32installer.nsi: Create a start menu entry and enhanced theWerner Koch2005-01-264-23/+224
| | | | | | build environment. * mk-w32-dist: Add more support for above.
* (do_generate_keypair): Don't continue after an error;Werner Koch2005-01-252-3/+7
| | | | | | fixed at two places. Why at all didn't I used a goto to cleanup, tsss?
* (get_cached_data): New arg GET_IMMEDIATE to bypassWerner Koch2005-01-254-48/+67
| | | | | | | | | | | | | | | | the cache. Changed all callers. (get_one_do): Bypass the cache if the value would have been read directly for v1.1 cards.It makes things a bit slower but obnly for 1.0 cards and there are not that many cards out in the wild. This is required to fix a caching bug when generating new keys; as a side effect of the retrieval of the the C4 DO from the 6E DO the chaced fingerprint will get updated to the old value and later when signing the generated key the checking of the fingerprint fails becuase it won't match the new one. Thanks to Moritz for analyzing this problem. (verify_chv3): Removed the CHV status reread logic because we won't cache the C4 DO anymore.
* * libcurl.m4: All versions of curl-config support --feature.David Shaw2005-01-252-6/+11
|
* * gpgkeys_ldap.c (print_nocr): New. (get_key): Call it here toDavid Shaw2005-01-243-9/+77
| | | | | | | | | canonicalize line endings. * gpgkeys_curl.c (writer): Discard everything outside the BEGIN and END lines when retrieving keys. Canonicalize line endings. (main): Accept FTPS.
* * configure.ac: Define FTPS flag if we're using curl, and FTPS isDavid Shaw2005-01-234-30/+45
| | | | | | | | | | available. * README: Fix some typos (noted by Norihiko Murase), update to 1.4.1, and tweak some descriptions. * NEWS: Note FTPS.
* * libcurl.m4: Note that FTPS existed, but wasn't fullyDavid Shaw2005-01-222-14/+38
| | | | | standards-compliant until version 7.11.0.
* * keyserver.c (free_keyserver_spec): Fix small leak.David Shaw2005-01-222-0/+11
| | | | | (keyserver_typemap): Map https if we are supporting it.
* * gpgkeys_ldap.c (main): Add "check-cert" option to disable SSLDavid Shaw2005-01-223-14/+69
| | | | | | | | | certificate checking (which is on by default). * gpgkeys_curl.c (main): Add "debug" option to match the LDAP helper. Add "check-cert" option to disable SSL certificate checking (which is on by default).
* (open_card): Issue new CARDCTRL(4) status.Werner Koch2005-01-202-1/+4
|
* * gpgv.c (tty_fprintf): New stub.Werner Koch2005-01-2010-34/+397
| | | | | | | | | * card-util.c (card_status): Create asecret key stub on the fly and print more information about a card key. * import.c (pub_to_sec_keyblock, auto_create_card_key_stub): New. * getkey.c (get_seckeyblock_byfprint): New. * keylist.c (print_card_key_info): New.
* Minor changesWerner Koch2005-01-202-2/+144
|