aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* * pkclist.c (algo_available): PGP 8 can use the SHA-256 hash.David Shaw2003-04-043-21/+29
| | | | | | * sign.c (sign_file, clearsign_file, sign_symencrypt_file): Remove unused code.
* * keydb.h: Err on the side of making an unknown signature a SIG ratherDavid Shaw2003-03-247-14/+48
| | | | | | | | | | | | | | | | | | | than a CERT. * import.c (delete_inv_parts): Discard any key signatures that aren't key types (i.e. 0x00, 0x01, etc.) * g10.c (main): Add deprecated option warning for --list-ownertrust. Add --compression-algo alias for --compress-algo. Change --version output strings to match "showpref" strings, and make translatable. * status.c (do_get_from_fd): Accept 'y' as well as 'Y' for --command-fd boolean input. * trustdb.c: Fix typo (DISABLE_REGEXP -> DISABLE_REGEX) * keyedit.c (show_key_with_all_names_colon): Show no-ks-modify flag.
* * acinclude.m4 (GNUPG_CHECK_ENDIAN): When crosscompiling assumeWerner Koch2003-03-244-7/+29
| | | | | | | | little only for Intel CPUs. * configure.ac: Check for ranlib and ar. This is required for cross compiling.
* * argparse.c (default_strusage): Change copyright date.David Shaw2003-03-232-2/+11
|
* * srv.h, srv.c (getsrv): Use unsigned char rather than char. Noted byDavid Shaw2003-03-152-6/+8
| | | | | Stefan Bellon.
* * options.h, g10.c (main), keyserver.c (kopts): Add "try-dns-srv"David Shaw2003-03-115-5/+20
| | | | | | | | | keyserver option. Defaults to on. * passphrase.c (agent_get_passphrase): Fix memory leak with symmetric messages. Fix segfault with symmetric messages. Fix incorrect prompt with symmetric messages.
* * http.c (connect_server): Use DNS SRV to get a server list. Fail over toDavid Shaw2003-03-115-55/+387
| | | | | | | A records if necessary. * Makefile.am, srv.h, srv.c: New DNS SRV handling code.
* * Makefile.am: Use @CAPLIBS@ to link in -lcap if we are usingDavid Shaw2003-03-112-1/+6
| | | | | capabilities.
* * gpgkeys_hkp.c (get_key): Properly handle CRLF line endings in theDavid Shaw2003-03-113-3/+28
| | | | | | | | | armored key. (main): Accept "try-dns-srv" option. * Makefile.am: Use @CAPLIBS@ to link in -lcap if we are using capabilities. Use @SRVLIBS@ to link in the resolver if we are using DNS SRV.
* * http.h: Add HTTP_FLAG_TRY_SRV.David Shaw2003-03-112-1/+6
|
* * configure.ac: Look for res_query so we can use DNS SRV, and addDavid Shaw2003-03-112-0/+48
| | | | | --disable-dns-srv to disable it.
* * compress.c (init_uncompress): Use a 15 bit window size so thatWerner Koch2003-03-102-1/+12
| | | | | | the output of implementations which don't run for PGP 2 compatibility won't get garbled.
* * configure.ac: Define @CAPLIBS@ to link in -lcap if we are usingDavid Shaw2003-03-042-1/+6
| | | | | capabilities.
* * trustdb.c (validate_keys): Mask the ownertrust when building the list ofDavid Shaw2003-03-0413-26/+103
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | fully valid keys so that disabled keys are still counted in the web of trust. (get_ownertrust_with_min): Do the same for the minimum ownertrust calculation. * parse-packet.c (dump_sig_subpkt): Show the notation names for not-human-readable notations. Fix cosmetic off-by-one length counter. * options.skel: Add explantion and commented-out "no-mangle-dos-filenames". * mainproc.c (proc_encrypted): Make string translatable. * keyserver.c (keyserver_spawn): Quote ':', '%', and any 8-bit characters in the uid strings sent to the keyserver helper. * keyring.c (keyring_rebuild_cache): Lock the keyring while rebuilding the signature caches to prevent another gpg from tampering with the temporary copy. * keygen.c (keygen_set_std_prefs): Include AES192 and AES256 in default prefs. * keyedit.c (show_prefs): Make strings translatable. * keydb.c: Double the maximum number of keyrings to 40. * gpgv.c (main): Fix bug #113 - gpgv should accept the --ignore-time-conflict option. * g10.c (main): --openpgp disables --pgpX. Double the amount of secure memory to 32k (keys are getting bigger these days). * Makefile.am: Makefile.am: Use @CAPLIBS@ to link in -lcap if we are using capabilities.
* * keyserver.c (keyserver_spawn): Include various pieces of informationDavid Shaw2003-02-264-9/+100
| | | | | | | | | | | | about the key in the data sent to the keyserver helper. This allows the helper to use it in instructing a remote server which may not have any actual OpenPGP smarts in parsing keys. * main.h, export.c (export_pubkeys_stream, do_export_stream): Add ability to return only the first match in an exported keyblock for keyserver usage. This should be replaced at some point with a more flexible solution where each key can be armored seperately.
* * distfiles, gnupg.spec.in: convert-from-106 is in the tools directoryDavid Shaw2003-02-233-2/+4
| | | | | now.
* * Makefile.am: Distribute convert-from-106.David Shaw2003-02-232-2/+4
|
* * convert-from-106: Script to automate the 1.0.6->later conversion. ItDavid Shaw2003-02-232-0/+59
| | | | | | marks all secret keys as ultimately trusted, adds the signature caches, and checks the trustdb. Moved from the scripts directory.
* * convert-from-106: Move to the tools directory.David Shaw2003-02-232-52/+4
|
* * sign.c (sign_file): Do not push textmode filter onto an unopened IOBUFDavid Shaw2003-02-226-17/+101
| | | | | | | | | | | | | (segfault). Noted by Marcus Brinkmann. Push and reinitialize textmode filter for each file in a multiple file list. * packet.h, getkey.c (fixup_uidnode), keyedit.c (show_prefs): Set and show the keyserver no-modify flag. * keygen.c (add_keyserver_modify): New. (keygen_upd_std_prefs): Call it here. (keygen_set_std_prefs): Accept "ks-modify" and "no-ks-modify" as prefs to set and unset keyserver modify flag.
* * ttyio.c (tty_print_utf8_string, tty_print_utf8_string2): Use 0 toDavid Shaw2003-02-222-3/+10
| | | | | | indicate a string with no maximum size. This prevents early truncation of strings that contain control chars which are expanded into \xXX form.
* * configure.ac: Add --disable-idea for IDEA. Note that disabling IDEADavid Shaw2003-02-222-29/+40
| | | | | | | disables both the real IDEA and the possibility of using the IDEA loadable module. Remove the --disable-dynload option since it is no longer meaningful (it is only used if idea-stub is used).
* * g10.c (main): Accept "s1" in addition to "idea" to match the otherDavid Shaw2003-02-224-1/+17
| | | | | | | | ciphers. * main.h, misc.c (idea_cipher_warn): We don't need this if IDEA has been disabled.
* * configure.ac: Add --disable-xxx options for CAST5, BLOWFISH, AES (all),David Shaw2003-02-212-13/+107
| | | | | | TWOFISH, TIGER192, SHA256, and SHA384/512. Add a --enable-minimal that disables all of them as well as --disable-exec.
* * keygen.c (keygen_set_std_prefs): Don't put AES or CAST5 in default prefsDavid Shaw2003-02-212-4/+22
| | | | | if they are disabled.
* * cipher.c (setup_cipher_table): #ifdef all optional ciphers.David Shaw2003-02-213-4/+22
| | | | | * md.c (load_digest_module): #ifdef all optional digests.
* * g10.c (main): Use 3DES instead of CAST5 if we don't have CAST5 support.David Shaw2003-02-212-19/+38
| | | | | | Use 3DES for the s2k cipher in --openpgp mode. (print_mds): #ifdef all of the optional digest algorithms.
* * keydb.h, getkey.c (classify_user_id, classify_user_id2): Make 'exact' aDavid Shaw2003-02-127-34/+127
| | | | | | | | | | | | | | | | | | per-desc item. Merge into one function since 'force_exact' is no longer needed. (key_byname): Use new classify_user_id function, and new exact flag in KEYDB_SEARCH_DESC. * keyring.h, keyring.c (keyring_search): Return an optional index to show which KEYDB_SEARCH_DESC was the matching one. * keydb.h, keydb.c (keydb_search): Rename to keydb_search2, and pass the optional index to keyring_search. Add a macro version of keydb_search that calls this new function. * export.c (do_export_stream): If the keyid! syntax is used, export only that specified key. If the key in question is a subkey, export the primary plus that subkey only.
* * exec.c (set_exec_path): Add debugging line.David Shaw2003-02-123-61/+110
| | | | | | | | | * g10.c (print_hex, print_mds): Print long hash strings a lot neater. This assumes at least an 80-character display, as there are a few other similar assumptions here and there. Users who need unformatted hashes can still use with-colons. Check that SHA384 and 512 are available before using them as they are no longer always available.
* * Makefile.am: Use a local copy of libexecdir along with @PACKAGE@ asDavid Shaw2003-02-122-1/+8
| | | | | GNUPG_LIBEXECDIR so it can be easily overridden at make time.
* * configure.ac: Do not set GNUPG_LIBEXECDIR in ./configure, so thatDavid Shaw2003-02-122-18/+33
| | | | | | makefiles can override it. Verify that we have a 64-bit type before building tiger.c or sha512.c. Add uint64_t as a possible 64-bit type.
* * Makefile.am, md.c (load_digest_module): Only build in SHA384/512 andDavid Shaw2003-02-123-6/+14
| | | | | TIGER if specifically enabled by the 64-bit type check in configure.
* * types.h: Try and use uint64_t for a 64-bit type.David Shaw2003-02-122-0/+11
|
* * Makefile.am: Use a local copy of libexecdir along with @PACKAGE@ so itDavid Shaw2003-02-122-1/+6
| | | | | can be easily overridden at make time.
* * armor.c (parse_hash_header, armor_filter): Accept the new SHAs in theDavid Shaw2003-02-043-19/+51
| | | | | | | | armor Hash: header. * g10.c (print_hex): Print long hash strings a little neater. (print_mds): Add the new SHAs to the hash list.
* * sha256.c, sha512.c: New.David Shaw2003-02-046-2/+792
| | | | | | * Makefile.am, algorithms.h, md.c (load_digest_module, string_to_digest_algo): Add read-only support for the new SHAs.
* * cipher.h: Add constants for new SHAs.David Shaw2003-02-042-0/+7
|
* * NEWS: Add notes about disabled keys, trustdb tweaks, and "revuid".David Shaw2003-02-022-1/+18
|
* * keyedit.c (menu_revuid): Properly handle a nonselfsigned uid on a v4 keyDavid Shaw2003-02-023-16/+17
| | | | | | | (treat as a v4 revocation). * import.c (print_import_check): Do not re-utf8 convert user IDs.
* * gpgkeys_mailto.in: Fix regexp to work properly if the "keyid" is not aDavid Shaw2003-01-292-4/+9
| | | | | keyid, but rather a text string from the user ID.
* * DETAILS: Document trust depth, value, and regexp.David Shaw2003-01-272-2/+10
|
* * mainproc.c (list_node): Show signature expiration date in with-colonsDavid Shaw2003-01-273-7/+35
| | | | | | | | sig records. * keylist.c (list_keyblock_colon), mainproc.c (list_node): Show trust sig information in with-colons sig records.
* * g10.c (add_group): Trim whitespace after a group name so it does notDavid Shaw2003-01-165-7/+26
| | | | | | | | | | | | | | | | matter where the user puts the = sign. * options.skel: Comment out the first three lines in case someone manually copies the skel file to their homedir. * sign.c (clearsign_file): Only use pgp2mode with v3 keys and MD5. This matches what we do when decoding such messages and prevents creating a message (v3+RIPEMD/160) that we can't verify. * sig-check.c (signature_check2): Use G10ERR_GENERAL as the error for signature digest conflict. BAD_SIGN implies that a signature was checked and we may try and print out a user ID for a key that doesn't exist.
* * trustdb.c (init_trustdb, get_validity): Don't use a changed trust modelDavid Shaw2003-01-153-3/+13
| | | | | | | | to indicate a dirty trustdb, and never auto-rebuild a dirty trustdb with the "always" trust model. * g10.c (add_group): Last commit missed the \t ;)
* * gpg.sgml: Minor language tweaks, spell check, copyright date,David Shaw2003-01-153-18/+28
| | | | | | | | etc. * DETAILS: Note that user IDs/UATs fill in creation and expiration date. Document namehash.
* * packet.h, parse-packet.c (setup_user_id), free-packet.c (free_user_id),David Shaw2003-01-148-39/+65
| | | | | | | | | | | | keydb.h, keyid.c (namehash_from_uid): New function to rmd160-hash the contents of a user ID packet and cache it in the uid object. * keylist.c (list_keyblock_colon): Use namehash in field 8 of uids. Show dates for creation (selfsig date), and expiration in fields 6 and 7. * trustdb.c (get_validity, get_validity_counts, update_validity): Use new namehash function rather than hashing it locally.
* * g10.c (add_group): Fixed group parsing to allow more than oneWerner Koch2003-01-142-2/+10
| | | | | delimiter in a row and also allow tab as delimiter.
* * tdbio.c (tdbio_set_dbname): Fix assertion failure withDavid Shaw2003-01-122-3/+17
| | | | | non-fully-qualified trustdb names.
* * trustdb.c (get_validity_info, get_ownertrust_info, trust_letter):David Shaw2003-01-114-48/+98
| | | | | | | | | | | | | | | | Simplify by returning a ? for error directly. * keyedit.c (show_key_with_all_names): Use get_validity_string and get_ownertrust_string to show full word versions of trust (i.e. "full" instead of 'f'). * trustdb.h, trustdb.c (get_ownertrust_string, get_validity_string): Same as get_ownertrust_info, and get_validity_info, except returns a full string. * trustdb.c (get_ownertrust_with_min): New. Same as 'get_ownertrust' but takes the min_ownertrust value into account.
* * armor.c (armor_filter): Comment about PGP's end of line tab problem.David Shaw2003-01-1110-58/+65
| | | | | | | | | | | | | | | * trustdb.h, trustdb.c (trust_letter): Make static. (get_ownertrust_info, get_validity_info): Don't mask the trust level twice. * trustdb.h, gpgv.c, trustdb.c (get_validity, get_validity_info), keylist.c (list_keyblock_colon), keyedit.c (show_key_with_all_names_colon, menu_revuid): Pass a user ID in rather than a namehash, so we only have to do the hashing in one place. * packet.h, pkclist.c (build_pk_list), free-packet.c (release_public_key_parts): Remove unused namehash element for public keys.
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-23 04:01:05 +0000