aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* * mkdtemp.c: Removed.David Shaw2004-02-204-101/+13
| | | | | | | | * Makefile.am: We get mkdtemp.c from libutil.a now, so don't link with @LIBOBJS@. * keyserver.c (keyserver_spawn): Pass the scheme to the keyserver helper.
* * gpgkeys_ldap.c: Replacement prototypes for setenv and unsetenv.David Shaw2004-02-203-37/+64
| | | | | | | | | | (search_key): Catch a SIZELIMIT_EXCEEDED error and show the user whatever the server did give us. (find_basekeyspacedn): There is no guarantee that namingContexts will be readable. * Makefile.am: Link gpgkeys_ldap with libutil.a to get the replacement functions (and eventually translations, etc).
* * gpgkeys_ldap.c (ldap2epochtime): LDAP timestamps are UTC, so do notDavid Shaw2004-02-192-10/+40
| | | | | | | correct for timezones. (main): Find the basekeyspacedn before we try to start TLS, so we can give a better error message when a user tries to use TLS with a LDAP keyserver.
* * configure.ac: Check for ln -s and add GPGKEYS_LDAP conditional, both forDavid Shaw2004-02-192-0/+5
| | | | | making gpgkeys_ldaps symlink to gpgkeys_ldap.
* * Makefile.am: Add automake conditionals to symlink gpgkeys_ldaps toDavid Shaw2004-02-193-12/+144
| | | | | | | | | | gpgkeys_ldap when needed. * gpgkeys_ldap.c (main): Add support for LDAPS and TLS connections. These are only useful and usable when talking to real LDAP keyservers. Add new "tls" option to tune TLS use from off, to try quietly, to try loudly, or to require TLS.
* * configure.ac: Simplify the LDAP checking code since OpenLDAP is far moreDavid Shaw2004-02-192-49/+18
| | | | | | mature these days and dependencies are cleaner. Add checks for ldap_set_option and ldap_start_tls_s.
* * gpgkeys_ldap.c (find_basekeyspacedn): New function to figure out whatDavid Shaw2004-02-192-63/+132
| | | | | | | | kind of LDAP server we're talking to (either real LDAP or the LDAP keyserver), and return the baseKeySpaceDN to find keys under. (main): Call it from here, and remove the old code that only handled the LDAP keyserver.
* * options.h, g10.c (main), plaintext.c (handle_plaintext): AddDavid Shaw2004-02-184-23/+81
| | | | | --max-output option to help people deal with decompression bombs.
* * gpgkeys_ldap.c (ldap_to_gpg_err): Make sure that LDAP_OPT_ERROR_NUMBERDavid Shaw2004-02-183-6/+14
| | | | | | | is defined before we use it. * gpgkeys_mailto.in: Fix VERSION number.
* * build-packet.c (do_user_id): Do not force a header for attribute packetsDavid Shaw2004-02-152-3/+7
| | | | | | as they require a new CTB, and we don't support forced headers for new CTBs yet.
* * build-packet.c (write_header2): If a suggested header length is providedDavid Shaw2004-02-154-36/+58
| | | | | | | | | | | | | along with a zero length, interpret this as an actual zero length packet and not as an indeterminate length packet. (do_comment, do_user_id): Use it here as these packets might be naturally zero length. * parse-packet.c (parse): Show packet type when failing due to an indeterminate length packet. * misc.c (parse_options): Only provide args for the true (i.e. not "no-xxx") form of options.
* * keyserver.c (argsep): Move to misc.c.David Shaw2004-02-147-93/+103
| | | | | | | * main.h, misc.c (parse_options), export.c (parse_export_options), import.c (parse_import_options), g10.c (main): Use it here to allow for options with optional arguments. Change all callers.
* * import.c (check_prefs): Some language fixes. (sec_to_pub_keyblock,David Shaw2004-02-142-7/+21
| | | | | | import_secret_one): Without knowing the number of MPIs there are, we cannot try and sk-to-pk-ize a key.
* * gnupg.7: Clarify that 'gpgv' doesn't encrypt, and that's not a bug.David Shaw2004-02-124-89/+128
| | | | | | | | | * samplekeys.asc: Update 99242560. * gpg.sgml: Clarify -u/--local-user and --default-key. Note what happens if you run 'gpg' without any commands. Document --multifile. Document list-option show-unusable-subkeys.
* * import.c (check_prefs): New function to check preferences on a publicDavid Shaw2004-02-122-10/+152
| | | | | | | | | key to ensure that it does not advertise any that we cannot fulfill. Use the keyedit command list function to optionally rewrite the prefs. (import_one, import_secret_one): Use it here when importing a public key that we have the secret half of, or when importing a secret key that we have the public half of.
* * main.h, keyedit.c (keyedit_menu): Remove sign_mode and enhance the moreDavid Shaw2004-02-124-110/+107
| | | | | | | | general command list functionality to replace it. * g10.c (main): Use the general command functionality to implement --sign-key, --lsign-key, --nrsign-key, and --nrlsign-key.
* * import.c (import_one): Do the revocation check even in the case when aDavid Shaw2004-02-122-7/+17
| | | | | | | key, a revocation key set in a direct key signature, and a revocation from that revocation key, all arrive piecemeal. Needless to say, this is pretty obscure.
* * options.h, g10.c (main), keylist.c (list_keyblock_print): AddDavid Shaw2004-02-114-4/+23
| | | | | | "show-unusable-subkeys" list-option to show revoked and/or expired subkeys.
* * keyedit.c (keyedit_menu): Prompt for subkey removal for both secret andDavid Shaw2004-02-117-21/+73
| | | | | | | | | | | | | | public subkeys. * keylist.c (list_keyblock_print), keyedit.c (show_key_with_all_names): Show the revocation date of a key/subkey, and general formatting work. * packet.h, getkey.c (merge_selfsigs_main, merge_selfsigs_subkey, merge_selfsigs): Keep track of the revocation date of a key. * keydb.h, keyid.c (revokestr_from_pk): New function to print the revocation date of a key.
* * keygen.c (keygen_set_std_prefs): Build the default preferences list atDavid Shaw2004-02-108-65/+111
| | | | | | | | | | | | | | | | | | | | | | runtime as it properly handles algorithms disabled at build or run time. * getkey.c (merge_selfsigs_main): Properly handle expired user IDs when the expired self-sig is not the only self-sig. * misc.c (compress_algo_to_string): Return NULL on failure like all of the other xxxx_algo_to_string() functions. * mainproc.c (list_node): Minor spacing tweak to match --list-keys output. * keylist.c (list_keyblock_print), mainproc.c (list_node): Mark revoked subkeys as revoked. Requested by Matthew Wilcox. Revoked overrides expiration when both apply. * keyedit.c (show_prefs): Use compress algo constants. (show_basic_key_info): Make revoked and expired tags translatable. * g10.c (rm_group): Properly ungroup from a list of groups.
* * clearsig.test, sigs.test: Properly detect RSA being missing, and use theDavid Shaw2004-02-093-4/+9
| | | | | proper key for doing an RSA test.
* * DETAILS: Details for --list-config.David Shaw2004-01-303-7/+81
| | | | | * gpg.sgml: Document --ungroup and --list-config.
* * g10.c (main, rm_group): Add --ungroup command to remove a particularDavid Shaw2004-01-306-34/+75
| | | | | | | | | | | | group. (add_group): When adding a group with the same name as an already existing group, merge the two groups. (list_config): Show an error message when listing a config item that doesn't exist. (main): Replace -z0 trick for no compression. * packet.h, keyedit.c (show_key_with_all_names_colon), keylist.c (list_keyblock_colon), mainproc.c (list_node, proc_tree): Minor cleanup to remove local_id, which is no longer used.
* * getkey.c: Set MAX_PK_CACHE_ENTRIES and MAX_UID_CACHE_ENTRIES toDavid Shaw2004-01-285-26/+79
| | | | | | | | | | | | | | | PK_UID_CACHE_SIZE (set in ./configure). * getkey.c (get_pubkey): When reading key data into the cache, properly handle keys that are partially (pk, no UIDs) cached already. This is Debian bug #176425 and #229549. * compress.c (init_compress, push_compress_filter2): Do the right thing (i.e. nothing) with compress algo 0. * main.h, decrypt.c (decrypt_messages): Accept filenames to decrypt on stdin. This is bug #253.
* * NEWS: Note --enable-key-cache, the OpenBSD/i386 and HPPA fixes, andDavid Shaw2004-01-284-2/+48
| | | | | | | | Elgamal removal. * README, configure.ac: Add --enable-key-cache=SIZE configure option. This sets the key/uid cache size. Default is 4096.
* * mainproc.c (list_node): Show sigs with --verbose.David Shaw2004-01-246-16/+45
| | | | | | | | | * options.h, g10.c (set_screen_dimensions): New function to look at COLUMNS and LINES. * keyserver.c (parse_keyrec, keyserver_search_prompt), keyedit.c (print_and_check_one_sig): Use new screen dimension variables.
* * g10.c (list_config): New function to dump config options to stdout.David Shaw2004-01-222-15/+169
| | | | | | | | | Currently requires --with-colons. (collapse_args): New function to turn argc/argv into a single string. (main): Use it here to pass list_config() more than one argument as a single string. (print_algo_numbers): Helper to print algorithm number for --list-config "pubkey", "cipher", "hash"/"digest", and "compress" config options.
* * packet.h, getkey.c (merge_selfsigs, merge_selfsigs_main), pkclist.cDavid Shaw2004-01-224-11/+21
| | | | | | (check_signatures_trust): Indicate who has revoked a key (the owner or a designated revoker). If a key was revoked by both, prefer the owner.
* * keyedit.c (print_and_check_one_sig, keyedit_menu): Use the COLUMNSDavid Shaw2004-01-212-1/+18
| | | | | | environment variable (if any) to hint how wide the terminal is. Disabled on _WIN32. Suggested by Janusz A. Urbanowicz.
* * keylist.c (set_attrib_fd): Open attribute fd in binary mode. This isn'tDavid Shaw2004-01-212-3/+8
| | | | | meaningful on POSIX systems, but the Mingw builds aren't exactly POSIX.
* hppa1.1/udiv-qrnnd.S: Alignment fix from Lamont Jones for Debian.David Shaw2004-01-212-0/+6
|
* * trustdb.c (reset_trust_records): New, faster, implementation thatDavid Shaw2004-01-212-86/+31
| | | | | doesn't involve a keyring scan. (clear_validity): Removed.
* * g10.c (main), keydb.h, keydb.c (keydb_rebuild_caches), keyring.h,David Shaw2004-01-207-12/+30
| | | | | | | | | | | keyring.c (keyring_rebuild_cache): Add "noisy" flag so cache rebuilds can remain noisy when called for itself, and quiet when called as part of the trustdb rebuild. * trustdb.c (validate_keys): Rebuild the sig caches before building the trustdb. Note that this is going to require some architectual re-thinking, as it is agonizingly slow.
* * sig-check.c (check_key_signature2): Comments.David Shaw2004-01-193-10/+29
| | | | | | | * keyring.c (keyring_rebuild_cache): Clear sig cache for any signatures that we can no longer process (say, if the user removed support for a necessary pubkey or digest algorithm).
* * misc.c (print_cipher_algo_note): May as well call Rijndael AESDavid Shaw2004-01-173-12/+18
| | | | | | | | at this point. * keygen.c (do_create), misc.c (openpgp_pk_algo_usage): Remove the last bits of Elgamal type 20 support.
* * cipher.h: Remove the old CIPHER_ALGO_RINJDAEL values. is_ELGAMAL() nowDavid Shaw2004-01-172-9/+11
| | | | | only matches type 16 and not type 20.
* * cipher.c (setup_cipher_table): May as well call Rijndael AES at thisDavid Shaw2004-01-172-4/+7
| | | | | point.
* * pubkey.c (setup_pubkey_table), elgamal.c (sign, verify, test_keys,David Shaw2004-01-173-182/+13
| | | | | | elg_sign, elg_verify, elg_get_info): Remove the last bits of Elgamal type 20 support.
* * argparse.c (default_strusage): Update copyright date. (initialize):David Shaw2004-01-163-24/+48
| | | | | | | | | Avoid a number of -Wformat-nonliteral warnings. These aren't actual problems, but the warnings bothered me. * miscutil.c (print_string2): New variation on print_string that allows two delimiters. (print_string): Call print_string2 to do work.
* * util.h: Add prototype for print_string2().David Shaw2004-01-162-1/+7
|
* (send_key): Add a content type.Werner Koch2004-01-132-0/+8
|
* * configure.ac: Use -Wformat-nonliteral in maintainer-mode.Werner Koch2004-01-132-0/+5
|
* * gpgkeys_hkp.c (search_key): Catch a mangled input file (useful ifDavid Shaw2004-01-123-5/+22
| | | | | | | | something other than GnuPG is calling the program). (main): Avoid possible pre-string write. Noted by Christian Biere. * gpgkeys_ldap.c (main): Avoid possible pre-string write.
* * configure.ac: Include stdio.h when checking for bzlib.h. Solaris 9 has aDavid Shaw2004-01-123-1/+15
| | | | | | | | very old bzip2 library and we can at least guarantee that it won't fail because of the lack of stdio.h. * THANKS: Added Phong Nguyen, who found the Elgamal signing key problem.
* * convert-from-106, lspgpot: Check for gpg binary before proceeding.David Shaw2004-01-124-7/+24
| | | | | | | | Don't hardcode the path to gpg. * gpgsplit.c (handle_bzip2): Remove two cut and paste typecast errors. Noted by Stefan Bellon.
* * config.links: OpenBSD 3.4 is now ELF, so use the proper assembler codeDavid Shaw2004-01-125-31/+102
| | | | | | | | | | | | | | | for that. Use the portable C MPI code for OpenBSD before 3.4, and remove the special i386-openbsd assembly directory. * Makefile.am: Add the portable C links to DISTCLEANFILES. Noted by Nelson H. F. Beebe. * mpi-mpow.c (build_index): s/index/idx/ to avoid gcc warning. From Werner on stable branch. * longlong.h: Added PowerPC 64 bit code from GPM-4.1.2 but didn't enable it yet. From Werner on stable branch.
* Use the portable C MPI code for OpenBSD before 3.4, and remove the specialDavid Shaw2004-01-1210-774/+0
| | | | | i386-openbsd assembly directory.
* * gpg.sgml: Fix a few minor typos. Clarify what --textmode is useful for.David Shaw2004-01-082-60/+90
| | | | | | | | | | | | | * gpg.sgml: List proper documentation URL. Note that addrevoker takes an optional "sensitive" argument. Remind that $GNUPGHOME can be used instead of --homedir. Clarify --no-default-keyring, and note why it may not take effect if there are no other keyrings present. Remove --pgp2 from the list of --pgpXes that are just for bad preference lists. Explain more why locking memory pages is good. * gpg.sgml: Add an example of what an exclamation mark is, as people seem to miss it often.
* Only use ZLib module on RISC OS when configuredStefan Bellon2004-01-032-2/+7
|
* * clearsig.test, conventional-mdc.test, conventional.test, defs.inc,David Shaw2003-12-3115-873/+1041
| | | | | | | | | | encrypt-dsa.test, encrypt.test, genkey1024.test, plain-1.asc, plain-1-pgp.asc, plain-2.asc, plain-3.asc, pubring.asc, secring.asc, sigs.test: Rework tests to work properly with a gpg binary that doesn't have all ciphers and all pk algos. Basically, we test for the ciphers we have, only test signing with non-160-bit hashes with RSA (we test all hashes as hashes). Test all key lengths of AES.