aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* * gpgkeys_hkp.c (get_key): Properly handle CRLF line endings in theDavid Shaw2003-03-113-3/+28
| | | | | | | | | armored key. (main): Accept "try-dns-srv" option. * Makefile.am: Use @CAPLIBS@ to link in -lcap if we are using capabilities. Use @SRVLIBS@ to link in the resolver if we are using DNS SRV.
* * http.h: Add HTTP_FLAG_TRY_SRV.David Shaw2003-03-112-1/+6
|
* * configure.ac: Look for res_query so we can use DNS SRV, and addDavid Shaw2003-03-112-0/+48
| | | | | --disable-dns-srv to disable it.
* * compress.c (init_uncompress): Use a 15 bit window size so thatWerner Koch2003-03-102-1/+12
| | | | | | the output of implementations which don't run for PGP 2 compatibility won't get garbled.
* * configure.ac: Define @CAPLIBS@ to link in -lcap if we are usingDavid Shaw2003-03-042-1/+6
| | | | | capabilities.
* * trustdb.c (validate_keys): Mask the ownertrust when building the list ofDavid Shaw2003-03-0413-26/+103
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | fully valid keys so that disabled keys are still counted in the web of trust. (get_ownertrust_with_min): Do the same for the minimum ownertrust calculation. * parse-packet.c (dump_sig_subpkt): Show the notation names for not-human-readable notations. Fix cosmetic off-by-one length counter. * options.skel: Add explantion and commented-out "no-mangle-dos-filenames". * mainproc.c (proc_encrypted): Make string translatable. * keyserver.c (keyserver_spawn): Quote ':', '%', and any 8-bit characters in the uid strings sent to the keyserver helper. * keyring.c (keyring_rebuild_cache): Lock the keyring while rebuilding the signature caches to prevent another gpg from tampering with the temporary copy. * keygen.c (keygen_set_std_prefs): Include AES192 and AES256 in default prefs. * keyedit.c (show_prefs): Make strings translatable. * keydb.c: Double the maximum number of keyrings to 40. * gpgv.c (main): Fix bug #113 - gpgv should accept the --ignore-time-conflict option. * g10.c (main): --openpgp disables --pgpX. Double the amount of secure memory to 32k (keys are getting bigger these days). * Makefile.am: Makefile.am: Use @CAPLIBS@ to link in -lcap if we are using capabilities.
* * keyserver.c (keyserver_spawn): Include various pieces of informationDavid Shaw2003-02-264-9/+100
| | | | | | | | | | | | about the key in the data sent to the keyserver helper. This allows the helper to use it in instructing a remote server which may not have any actual OpenPGP smarts in parsing keys. * main.h, export.c (export_pubkeys_stream, do_export_stream): Add ability to return only the first match in an exported keyblock for keyserver usage. This should be replaced at some point with a more flexible solution where each key can be armored seperately.
* * distfiles, gnupg.spec.in: convert-from-106 is in the tools directoryDavid Shaw2003-02-233-2/+4
| | | | | now.
* * Makefile.am: Distribute convert-from-106.David Shaw2003-02-232-2/+4
|
* * convert-from-106: Script to automate the 1.0.6->later conversion. ItDavid Shaw2003-02-232-0/+59
| | | | | | marks all secret keys as ultimately trusted, adds the signature caches, and checks the trustdb. Moved from the scripts directory.
* * convert-from-106: Move to the tools directory.David Shaw2003-02-232-52/+4
|
* * sign.c (sign_file): Do not push textmode filter onto an unopened IOBUFDavid Shaw2003-02-226-17/+101
| | | | | | | | | | | | | (segfault). Noted by Marcus Brinkmann. Push and reinitialize textmode filter for each file in a multiple file list. * packet.h, getkey.c (fixup_uidnode), keyedit.c (show_prefs): Set and show the keyserver no-modify flag. * keygen.c (add_keyserver_modify): New. (keygen_upd_std_prefs): Call it here. (keygen_set_std_prefs): Accept "ks-modify" and "no-ks-modify" as prefs to set and unset keyserver modify flag.
* * ttyio.c (tty_print_utf8_string, tty_print_utf8_string2): Use 0 toDavid Shaw2003-02-222-3/+10
| | | | | | indicate a string with no maximum size. This prevents early truncation of strings that contain control chars which are expanded into \xXX form.
* * configure.ac: Add --disable-idea for IDEA. Note that disabling IDEADavid Shaw2003-02-222-29/+40
| | | | | | | disables both the real IDEA and the possibility of using the IDEA loadable module. Remove the --disable-dynload option since it is no longer meaningful (it is only used if idea-stub is used).
* * g10.c (main): Accept "s1" in addition to "idea" to match the otherDavid Shaw2003-02-224-1/+17
| | | | | | | | ciphers. * main.h, misc.c (idea_cipher_warn): We don't need this if IDEA has been disabled.
* * configure.ac: Add --disable-xxx options for CAST5, BLOWFISH, AES (all),David Shaw2003-02-212-13/+107
| | | | | | TWOFISH, TIGER192, SHA256, and SHA384/512. Add a --enable-minimal that disables all of them as well as --disable-exec.
* * keygen.c (keygen_set_std_prefs): Don't put AES or CAST5 in default prefsDavid Shaw2003-02-212-4/+22
| | | | | if they are disabled.
* * cipher.c (setup_cipher_table): #ifdef all optional ciphers.David Shaw2003-02-213-4/+22
| | | | | * md.c (load_digest_module): #ifdef all optional digests.
* * g10.c (main): Use 3DES instead of CAST5 if we don't have CAST5 support.David Shaw2003-02-212-19/+38
| | | | | | Use 3DES for the s2k cipher in --openpgp mode. (print_mds): #ifdef all of the optional digest algorithms.
* * keydb.h, getkey.c (classify_user_id, classify_user_id2): Make 'exact' aDavid Shaw2003-02-127-34/+127
| | | | | | | | | | | | | | | | | | per-desc item. Merge into one function since 'force_exact' is no longer needed. (key_byname): Use new classify_user_id function, and new exact flag in KEYDB_SEARCH_DESC. * keyring.h, keyring.c (keyring_search): Return an optional index to show which KEYDB_SEARCH_DESC was the matching one. * keydb.h, keydb.c (keydb_search): Rename to keydb_search2, and pass the optional index to keyring_search. Add a macro version of keydb_search that calls this new function. * export.c (do_export_stream): If the keyid! syntax is used, export only that specified key. If the key in question is a subkey, export the primary plus that subkey only.
* * exec.c (set_exec_path): Add debugging line.David Shaw2003-02-123-61/+110
| | | | | | | | | * g10.c (print_hex, print_mds): Print long hash strings a lot neater. This assumes at least an 80-character display, as there are a few other similar assumptions here and there. Users who need unformatted hashes can still use with-colons. Check that SHA384 and 512 are available before using them as they are no longer always available.
* * Makefile.am: Use a local copy of libexecdir along with @PACKAGE@ asDavid Shaw2003-02-122-1/+8
| | | | | GNUPG_LIBEXECDIR so it can be easily overridden at make time.
* * configure.ac: Do not set GNUPG_LIBEXECDIR in ./configure, so thatDavid Shaw2003-02-122-18/+33
| | | | | | makefiles can override it. Verify that we have a 64-bit type before building tiger.c or sha512.c. Add uint64_t as a possible 64-bit type.
* * Makefile.am, md.c (load_digest_module): Only build in SHA384/512 andDavid Shaw2003-02-123-6/+14
| | | | | TIGER if specifically enabled by the 64-bit type check in configure.
* * types.h: Try and use uint64_t for a 64-bit type.David Shaw2003-02-122-0/+11
|
* * Makefile.am: Use a local copy of libexecdir along with @PACKAGE@ so itDavid Shaw2003-02-122-1/+6
| | | | | can be easily overridden at make time.
* * armor.c (parse_hash_header, armor_filter): Accept the new SHAs in theDavid Shaw2003-02-043-19/+51
| | | | | | | | armor Hash: header. * g10.c (print_hex): Print long hash strings a little neater. (print_mds): Add the new SHAs to the hash list.
* * sha256.c, sha512.c: New.David Shaw2003-02-046-2/+792
| | | | | | * Makefile.am, algorithms.h, md.c (load_digest_module, string_to_digest_algo): Add read-only support for the new SHAs.
* * cipher.h: Add constants for new SHAs.David Shaw2003-02-042-0/+7
|
* * NEWS: Add notes about disabled keys, trustdb tweaks, and "revuid".David Shaw2003-02-022-1/+18
|
* * keyedit.c (menu_revuid): Properly handle a nonselfsigned uid on a v4 keyDavid Shaw2003-02-023-16/+17
| | | | | | | (treat as a v4 revocation). * import.c (print_import_check): Do not re-utf8 convert user IDs.
* * gpgkeys_mailto.in: Fix regexp to work properly if the "keyid" is not aDavid Shaw2003-01-292-4/+9
| | | | | keyid, but rather a text string from the user ID.
* * DETAILS: Document trust depth, value, and regexp.David Shaw2003-01-272-2/+10
|
* * mainproc.c (list_node): Show signature expiration date in with-colonsDavid Shaw2003-01-273-7/+35
| | | | | | | | sig records. * keylist.c (list_keyblock_colon), mainproc.c (list_node): Show trust sig information in with-colons sig records.
* * g10.c (add_group): Trim whitespace after a group name so it does notDavid Shaw2003-01-165-7/+26
| | | | | | | | | | | | | | | | matter where the user puts the = sign. * options.skel: Comment out the first three lines in case someone manually copies the skel file to their homedir. * sign.c (clearsign_file): Only use pgp2mode with v3 keys and MD5. This matches what we do when decoding such messages and prevents creating a message (v3+RIPEMD/160) that we can't verify. * sig-check.c (signature_check2): Use G10ERR_GENERAL as the error for signature digest conflict. BAD_SIGN implies that a signature was checked and we may try and print out a user ID for a key that doesn't exist.
* * trustdb.c (init_trustdb, get_validity): Don't use a changed trust modelDavid Shaw2003-01-153-3/+13
| | | | | | | | to indicate a dirty trustdb, and never auto-rebuild a dirty trustdb with the "always" trust model. * g10.c (add_group): Last commit missed the \t ;)
* * gpg.sgml: Minor language tweaks, spell check, copyright date,David Shaw2003-01-153-18/+28
| | | | | | | | etc. * DETAILS: Note that user IDs/UATs fill in creation and expiration date. Document namehash.
* * packet.h, parse-packet.c (setup_user_id), free-packet.c (free_user_id),David Shaw2003-01-148-39/+65
| | | | | | | | | | | | keydb.h, keyid.c (namehash_from_uid): New function to rmd160-hash the contents of a user ID packet and cache it in the uid object. * keylist.c (list_keyblock_colon): Use namehash in field 8 of uids. Show dates for creation (selfsig date), and expiration in fields 6 and 7. * trustdb.c (get_validity, get_validity_counts, update_validity): Use new namehash function rather than hashing it locally.
* * g10.c (add_group): Fixed group parsing to allow more than oneWerner Koch2003-01-142-2/+10
| | | | | delimiter in a row and also allow tab as delimiter.
* * tdbio.c (tdbio_set_dbname): Fix assertion failure withDavid Shaw2003-01-122-3/+17
| | | | | non-fully-qualified trustdb names.
* * trustdb.c (get_validity_info, get_ownertrust_info, trust_letter):David Shaw2003-01-114-48/+98
| | | | | | | | | | | | | | | | Simplify by returning a ? for error directly. * keyedit.c (show_key_with_all_names): Use get_validity_string and get_ownertrust_string to show full word versions of trust (i.e. "full" instead of 'f'). * trustdb.h, trustdb.c (get_ownertrust_string, get_validity_string): Same as get_ownertrust_info, and get_validity_info, except returns a full string. * trustdb.c (get_ownertrust_with_min): New. Same as 'get_ownertrust' but takes the min_ownertrust value into account.
* * armor.c (armor_filter): Comment about PGP's end of line tab problem.David Shaw2003-01-1110-58/+65
| | | | | | | | | | | | | | | * trustdb.h, trustdb.c (trust_letter): Make static. (get_ownertrust_info, get_validity_info): Don't mask the trust level twice. * trustdb.h, gpgv.c, trustdb.c (get_validity, get_validity_info), keylist.c (list_keyblock_colon), keyedit.c (show_key_with_all_names_colon, menu_revuid): Pass a user ID in rather than a namehash, so we only have to do the hashing in one place. * packet.h, pkclist.c (build_pk_list), free-packet.c (release_public_key_parts): Remove unused namehash element for public keys.
* Updated from latest NewPG projectWerner Koch2003-01-0913-129/+266
|
* Updated from latest NewPG projectWerner Koch2003-01-0928-175/+902
|
* * keygen.c (keygen_set_std_prefs): Warn when setting an IDEA preferenceDavid Shaw2003-01-072-1/+12
| | | | | when IDEA is not available.
* * trustdb.c (get_validity_info): 'd' for disabled is not a validity valueDavid Shaw2003-01-072-2/+3
| | | | | any more.
* * gpgkeys_hkp.c (get_key): Use options=mr when getting a key so keyserverDavid Shaw2003-01-062-1/+7
| | | | | doesn't attach the HTML header which we will just have to discard.
* * packet.h, tdbio.h, tdbio.c (tdbio_read_record, tdbio_write_record),David Shaw2003-01-065-93/+178
| | | | | | | | | | | | trustdb.c (update_validity): Store temporary full & marginal counts in the trustdb. (clear_validity, get_validity_counts): Return and clear temp counts. (store_validation_status): Keep track of which keyids have been stored. (validate_one_keyblock, validate_key_list): Use per-uid copies of the full & marginal counts so they can be recalled for multiple levels. (validate_keys): Only use unused keys for each new round. (reset_unconnected_keys): Rename to reset_trust_records, and only skip specifically excluded records.
* * DETAILS: Document disabled flag in capabilities field.David Shaw2003-01-062-3/+10
|
* * keylist.c (print_capabilities): Show 'D' for disabled keys inDavid Shaw2003-01-063-3/+21
| | | | | | | capabilities section. * trustdb.c (is_disabled): Remove incorrect comment.