aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Preparing a releaseV1-9-16Werner Koch2005-04-216-215/+380
|
* (main): Optionally allow the input file as commandWerner Koch2005-04-212-1/+18
| | | | | line argument.
* * configure.ac: Do not build gpg by default.Werner Koch2005-04-2115-43/+97
| | | | | | | | | | | | * gpgsm.c: New options --{enable,disable}-trusted-cert-crl-check. * certchain.c (gpgsm_validate_chain): Make use of it. * certchain.c (gpgsm_validate_chain): Check revocations even for expired certificates. This is required because on signature verification an expired key is fine whereas a revoked one is not. * gpgconf-comp.c: Add gpgsm option disable-trusted-cert-crl-check.
* (gpgsm_validate_chain): Check revocations even forWerner Koch2005-04-213-7/+21
| | | | | | expired certificates. This is required because on signature verification an expired key is fine whereas a revoked one is not.
* .Werner Koch2005-04-205-11/+93
|
* (Agent Configuration): New section.Werner Koch2005-04-204-5/+101
|
* 2005-04-20 Moritz Schulte <[email protected]>Moritz Schulte2005-04-202-3/+5
| | | | | | * command-ssh.c (ssh_handler_request_identities): Removed debugging code (sleep call), which was commited unintenionally.
* 2005-04-19 Marcus Brinkmann <[email protected]>Marcus Brinkmann2005-04-192-28/+50
| | | | | * symcryptrun.c: Add --input option.
* * configure.ac: Require libksba 0.9.11.Werner Koch2005-04-1817-41/+302
| | | | | | | | | | | | sm/ * call-dirmngr.c (inq_certificate): Add new inquire SENDCERT_SKI. * certlist.c (gpgsm_find_cert): Add new arg KEYID and implement this filter. Changed all callers. * certchain.c (find_up_search_by_keyid): New helper. (find_up): Also try using the AKI.keyIdentifier. (find_up_external): Ditto.
* 2005-04-15 Marcus Brinkmann <[email protected]>Marcus Brinkmann2005-04-152-0/+17
| | | | | * symcryptrun.c (TEMP_FAILURE_RETRY): Define if not defined.
* 2005-04-15 Marcus Brinkmann <[email protected]>Marcus Brinkmann2005-04-154-19/+90
| | | | | | | | | | | | * configure.ac: Check for /usr/bin/shred and define SHRED. tools/ 2005-04-15 Marcus Brinkmann <[email protected]> * symcryptrun.c (remove_file): New function. (confucius_copy_file): Accept new argument PLAIN and shred the file if it is set on error.
* 2005-04-15 Marcus Brinkmann <[email protected]>Marcus Brinkmann2005-04-154-2/+33
| | | | | | | | | | | | | | | * configure.ac: Add --enable-symcryptrun, disabled by default. Define automake variable BUILD_SYMCRYPTRUN. Check for openpty -lutil, define LIBUTIL_LIBS. tools/ 2005-04-15 Marcus Brinkmann <[email protected]> * Makefile.am: Define symcryptrun make variable depending on BUILD_SYMCRYPTUN. (bin_PROGRAMS): Add ${symcryptrun} instead symcryptrun. (symcryptrun_LDADD): Use $(LIBUTIL_LIBS) instead of -lutil.
* (retrieve_key_material): Rewritten. Return aWerner Koch2005-04-143-335/+446
| | | | | | | | | proper error code. (retrieve_next_token): Removed. (retrieve_fpr_from_card): Rewritten to make use of DO caching and to take the KEYNO as arg. (get_public_key): Renamed variable for clarity.
* Added missing fileWerner Koch2005-04-131-0/+63
|
* (confucius_mktmpdir): Changed to use mkdtmp(3).Werner Koch2005-04-112-22/+11
|
* * gpg-connect-agent.c (start_agent): Use PATHSEP_C instead of ':'.Werner Koch2005-04-112-2/+6
|
* * call-dirmngr.c (start_dirmngr): Use PATHSEP_C instead of ':'.Werner Koch2005-04-113-2/+7
| | | | | * call-agent.c (start_agent): Ditto.
* * app-openpgp.c (do_check_pin): Add hack to allow verification ofWerner Koch2005-04-115-90/+241
| | | | | | | | CHV3. (get_public_key): Don't use gcry functions to create S-expressions. (do_deinit, do_readkey, do_genkey, send_keypair_info): Adjust for above change.
* * sexputil.c: New.Werner Koch2005-04-113-1/+9
|
* typo fixesWerner Koch2005-04-112-2/+2
|
* 2005-04-11 Marcus Brinkmann <[email protected]>Marcus Brinkmann2005-04-102-7/+82
| | | | | * symcryptrun.c: Implement config file parsing.
* 2005-04-11 Marcus Brinkmann <[email protected]>Marcus Brinkmann2005-04-103-1/+860
| | | | | | | * Makefile.am (bin_PROGRAMS): Add symcryptrun. (symcryptrun_SOURCES, symcryptrun_LDADD): New variables. * symcryptrun.c: New file.
* 2005-04-11 Marcus Brinkmann <[email protected]>Marcus Brinkmann2005-04-102-1/+5
| | | | | * simple-pwquery.c (simple_pwquery): Use spwq_secure_free.
* 2005-04-03 Moritz Schulte <[email protected]>Moritz Schulte2005-04-092-60/+106
| | | | | | | | | | * command-ssh.c (ssh_request_spec): New member: secret_input. (REQUEST_SPEC_DEFINE): New argument: secret_input. (request_specs): Add secret_input flag. (request_spec_lookup): New function ... (ssh_request_process): ... use it here; depending on secret_input flag allocate secure or non-secure memory.
* 2005-03-29 Moritz Schulte <[email protected]>Moritz Schulte2005-03-292-14/+324
| | | | | | | | | * app-openpgp.c (retrieve_fpr_from_card): New function. (retrieve_next_token): New function. (retrieve_key_material): New function. (get_public_key): Implement retrival of key through expernal helper (gpg) in case the openpgp card is not cooperative enough.
* * certcheck.c: Fixed use of DBG_CRYPTO and DBG_X509.Werner Koch2005-03-173-56/+99
| | | | | | | | | * certchain.c (gpgsm_basic_cert_check): Dump certificates after a failed gcry_pk_verify. (find_up): Do an external lookup also for an authorityKeyIdentifier lookup. Factored external lookup code out to .. (find_up_external): .. new.
* Fixed description for dirmngr:honor-http-proxyWerner Koch2005-03-091-1/+1
|
* Add honor-http-proxy.Werner Koch2005-03-092-0/+7
|
* * acinclude.m4 (GNUPG_PTH_VERSION_CHECK): Accidently usedWerner Koch2005-03-039-5/+21
| | | | | | | | | --ldflags instead of --cflags. Reported by Kazu Yamamoto. * Makefile.am (AM_CFLAGS): Added PTH_CFLAGS. Noted by Kazu Yamamoto. * Makefile.am (gpgsm_LDADD): Added PTH_LIBS. Noted by Kazu Yamamoto.
* 2005-03-02 Moritz Schulte <[email protected]>Moritz Schulte2005-03-022-28/+70
| | | | | | | | | | | | | | | | | | | | | | * command-ssh.c (sexp_key_extract): Removed FIXME, since xtrymallos does set errno correctly by now. (sexp_extract_identifier): Remove const attribute from identifier. (ssh_handler_request_identities): Remove const attribute from key_type; removes ugly casts and FIXME. (sexp_key_extract): Remove const attribute from comment. (ssh_send_key_public): Remove const attribute from key_type/comment; removes ugly cast. (data_sign): Remove const attribute from identifier; removes ugly cast. (key_secret_to_public): Remove const attribute from comment; removes ugly cast. (ssh_handler_sign_request): Remove const attribute from p. (sexp_key_extract): Use make_cstring(). (ssh_key_extract_comment): Likewise. (ssh_key_to_buffer): Use secure memory for memory area to hold the key S-Expression. Added more comments.
* * findkey.c (modify_description): Keep invalid % escapes, so thatWerner Koch2005-02-2518-108/+368
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | %0A may pass through. * agent.h (server_control_s): New field USE_AUTH_CALL. * call-scd.c (agent_card_pksign): Make use of it. * command-ssh.c (data_sign): Set the flag. (ssh_send_key_public): New arg OVERRIDE_COMMENT. (card_key_available): Add new arg CARDSN. (ssh_handler_request_identities): Use the card s/n as comment. (sexp_key_extract): Use GCRYMPI_FMT_STD. (data_sign): Ditto. * learncard.c (make_shadow_info): Moved to .. * protect.c (make_shadow_info): .. here. Return NULL on malloc failure. Made global. * agent.h: Add prototype. * xasprintf.c (xtryasprintf): New. * app-openpgp.c (get_public_key): Make sure not to return negative numbers. (do_sign): Allow passing of indata with algorithm prefix. (do_auth): Allow OPENPGP.3 as an alternative ID. * app.c (app_getattr): Return just the S/N but not the timestamp. * no-libgcrypt.c (gcry_strdup): New.
* * call-scd.c (unescape_status_string): New. Actual a copy ofWerner Koch2005-02-247-84/+323
| | | | | | | | | | | | | | | | | | | | | | ../g10/call-agent.c (card_getattr_cb, agent_card_getattr): New. * command-ssh.c (card_key_available): New. (ssh_handler_request_identities): First see whether a card key is available. * app.c (app_getattr): Return APPTYPE or SERIALNO type even if the application does dot support the getattr call. * app.c (select_application): Return an error code and the application context in an new arg. * command.c (open_card): Adjusted for that. Don't use the fallback if no card is present. Return an error if the card has been removed without a reset. (do_reset, cmd_serialno): Clear that error flag. (TEST_CARD_REMOVAL): New. Use it with all command handlers. (scd_update_reader_status_file): Set the error flag on all changes.
* * gpg-agent.c (handle_connections): Need to check for events ifWerner Koch2005-02-2418-240/+840
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | select returns with -1. * tools.texi (gpg-connect-agent): New. * app-openpgp.c (get_one_do): Never try to get a non cacheable object from the cache. (get_one_do): Add new arg to return an error code. Changed all callers. (do_getattr): Let it return a proper error code. * app.c (select_application): Return an error code and the application context in an new arg. * command.c (open_card): Adjusted for that. Don't use the fallback if no card is present. Return an error if the card has been removed without a reset. (do_reset, cmd_serialno): Clear that error flag. (TEST_CARD_REMOVAL): New. Use it with all command handlers. * scdaemon.c (ticker_thread): Termintate if a shutdown is pending. * apdu.c: Added some PCSC error codes. (pcsc_error_to_sw): New. (reset_pcsc_reader, pcsc_get_status, pcsc_send_apdu) (open_pcsc_reader): Do proper error code mapping. * gpg-connect-agent.c: New. * Makefile.am: Add it.
* * command-ssh.c (get_passphrase): Removed.Werner Koch2005-02-239-149/+690
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | (ssh_identity_register): Partly rewritten. (open_control_file, search_control_file, add_control_entry): New. (ssh_handler_request_identities): Return only files listed in our control file. * findkey.c (unprotect): Check for allocation error. * agent.h (opt): Add fields to record the startup terminal settings. * gpg-agent.c (main): Record them and do not force keep display with --enable-ssh-support. * command-ssh.c (start_command_handler_ssh): Use them here. * gpg-agent.c: Renamed option --ssh-support to --enable-ssh-support. * command.c (cmd_readkey): New. (register_commands): Register new command "READKEY". * command-ssh.c (ssh_request_process): Improved logging. * findkey.c (agent_write_private_key): Always use plain open. Don't depend on an umask for permissions. (agent_key_from_file): Factored file reading code out to .. (read_key_file): .. new function. (agent_public_key_from_file): New.
* (stream_read_string): Removed call to abort onWerner Koch2005-02-2210-202/+87
| | | | | | | memory error because the CVS version of libgcrypt makes sure that ERRNO gets always set on error even with a faulty user supplied function.
* Renmoved stale fileWerner Koch2005-02-221-290/+0
|
* * app-openpgp.c (app_local_s): New field PK.Werner Koch2005-02-225-13/+316
| | | | | | | | | | | (do_deinit, do_genkey, app_openpgp_storekey): Clear it. (get_public_key, send_keypair_info): New. (do_learn_status): Send KEYPAIR info * app-common.h (app_ctx_t): Add function pointer READKEY. * app.c (app_readkey): New. * command.c (cmd_readkey): Use READKEY function if possible.
* 2005-02-19 Moritz Schulte <[email protected]>Moritz Schulte2005-02-192-38/+92
| | | | | | | | | | | | | | | | * command-ssh.c (ssh_receive_mpint_list): Slightly rewritten, do not use elems_secret member of key_spec. (ssh_key_type_spec): Removed member: elems_secret. (ssh_key_types): Removed elems_secret data. (ssh_sexp_construct): Renamed to ... (sexp_key_construct): ... this; changed callers. (ssh_sexp_extract): Renamed to ... (sexp_key_extract): ... this; changed callers. (ssh_sexp_extract_key_type): Renamed to ... (sexp_extract_identifier): ... this; changed callers; use make_cstring(). Added more comments.
* 2005-02-18 Moritz Schulte <[email protected]>Moritz Schulte2005-02-182-111/+48
| | | | | | | | | | * command-ssh.c (ssh_sexp_construct): Rewritten generation of sexp template, clarified. (ssh_sexp_extract): Support shadowed-private-key-sexp; treat protected-private key and shadowed-private-key as public keys. (key_secret_to_public): Rewritten: simply use ssh_sexp_extract() and ssh_sexp_construct().
* (modify_description): Don't increment OUT_LEN duringWerner Koch2005-02-152-4/+12
| | | | | the second pass.
* 2005-02-14 Moritz Schulte <[email protected]>Moritz Schulte2005-02-143-18/+15
| | | | | | * command-ssh.c (uint32_construct): New macro ... (stream_read_uint32): ... use it; removed unnecessary cast.
* 2005-02-14 Moritz Schulte <[email protected]>Moritz Schulte2005-02-142-128/+156
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * command-ssh.c (es_read_byte): Renamed to ... (stream_es_read_byte): ... this; changed callers. (es_write_byte): Renamed to ... (stream_write_byte): ... this; changed callers. (es_read_uint32): Renamed to ... (stream_read_uint32): ... this; changed callers. (es_write_uint32): Renamed to ... (stream_write_uint32): ... this; changed callers. (es_read_data): Renamed to ... (stream_read_data): ... this; changed callers. (es_write_data): Renamed to ... (stream_write_data): ... this; changed callers. (es_read_string): Renamed to ... (stream_read_string): ... this; changed callers. (es_read_cstring): Renamed to ... (stream_read_cstring): ... this; changed callers. (es_write_string): Renamed to ... (stream_write_string): ... this; changed callers. (es_write_cstring): Renamed to ... (stream_write_cstring): ... this; changed callers. (es_read_mpi): Renamed to ... (stream_read_mpi): ... this; changed callers. (es_write_mpi): Renamed to ... (stream_write_mpi): ... this; changed callers. (es_copy): Renamed to ... (stream_copy): ... this; changed callers. (es_read_file): Renamed to ... (file_to_buffer): ... this; changed callers. (ssh_identity_register): Removed variable description_length; changed code to use asprintf for description. (stream_write_uint32): Do not filter out the last byte of shift expression.
* * AUTHORS: Copied from 1.4 and edited to refelct the changes inWerner Koch2005-02-038-419/+729
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 1.9. * agent.h (agent_exit): Add JNLIB_GCC_A_NR to indicate that this function won't return. * gpg-agent.c (check_for_running_agent): Initialize pid to a default value if not needed. * command-ssh.c: Removed stdint.h. s/byte_t/unsigned char/, s/uint32/u32/ becuase that is what we have always used in GnuPG. (ssh_request_specs): Moved to top of file. (ssh_key_types): Ditto. (make_cstring): Ditto. (data_sign): Don't use a variable for the passphrase prompt, make it translatable. (ssh_request_process): * findkey.c (modify_description): Renamed arguments for clarity, polished documentation. Make comment a C-string. Fixed case of DESCRIPTION being just "%". (agent_key_from_file): Make sure comment string to a C-string. * gpg-agent.c (create_socket_name): Cleanup the implemntation, use DIMof, agent_exit, removed superflous args and return the allocated string as value. Documented. Changed callers. (create_server_socket): Cleanups similar to above. Changed callers. (cleanup_do): Renamed to .. (remove_socket): .. this. Changed caller. (handle_connections): The signals are to be handled in the select and not in the accept. Test all FDs after returning from a select. Remove the event tests from the accept calls. The select already assured that the accept won't block.
* Forgot to commit the recent fixed to scd and logging - doing it nowWerner Koch2005-02-038-101/+188
|
* This commit was manufactured by cvs2svn to create branchRepo Admin2005-02-031-0/+186
| | | | 'GNUPG-1-9-BRANCH'.
* 2005-01-29 Moritz Schulte <[email protected]>Moritz Schulte2005-01-292-214/+240
| | | | | | | | | | | | | | | | | | | | * command-ssh.c (ssh_handler_request_identities) (ssh_handler_sign_request, ssh_handler_add_identity) (ssh_handler_remove_identity, ssh_handler_remove_all_identities) (ssh_handler_lock, ssh_handler_unlock): Changed to return an error code instead of a boolean. (ssh_request_process): Changed to return a boolean instead of an error; adjust caller. (ssh_request_handle_t): Adjusted type. (ssh_request_spec): New member: identifier. (REQUEST_SPEC_DEFINE): New macro; use it for initialization of request_specs[]. (ssh_request_process): In debugging mode, log identifier of handler to execute. (start_command_handler_ssh): Moved most of the stream handling code ... (ssh_request_process): ... here.
* 2005-01-28 Moritz Schulte <[email protected]>Moritz Schulte2005-01-282-16/+37
| | | | | | | | | | | | | | | | * command-ssh.c (ssh_handler_add_identity): Pass ctrl to ssh_identity_register(). (ssh_identity_register): New argument: ctrl; pass ctrl to get_passphrase(). (get_passphrase): Pass ctrl instead of NULL to agent_askpin(). (start_command_handler_ssh): Use agent_init_default_ctrl(); deallocate structure members, which might be dynamically allocated. (lifetime_default): Removed variable. (ssh_handler_add_identity): Fix ttl handling; renamed variable `death' to `ttl'. (ssh_identity_register): Fix key grip handling.
* 2005-01-27 Moritz Schulte <[email protected]>Moritz Schulte2005-01-262-0/+38
| | | | | * gpg-agent.texi: Document ssh-agent emulation layer.
* 2005-01-26 Moritz Schulte <[email protected]>Moritz Schulte2005-01-262-5/+9
| | | | | | * command-ssh.c (ssh_handler_sign_request): Confirm to agent protocol in case of failure.
* added missing fileMoritz Schulte2005-01-261-0/+2327
|
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-18 22:14:16 +0000