aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* new FAQ maintainer David Scribner, minor corrections, 2nd trySTABLE-BRANCH-1-0Nils Ellmenreich2002-08-221-393/+480
|
* * DETAILS: Document "uat".David Shaw2002-06-213-10/+51
| | | | | | * gpg.sgml: Document --personal-{compress|digest|compress}-preferences, --group, and add comments to --expert.
* automake 1.6 updated files.Werner Koch2002-06-215-29/+143
|
* tidied up RISC OS specific stuffStefan Bellon2002-06-219-21/+44
|
* * NEWS: changes since 1.0.7.David Shaw2002-06-213-12/+67
| | | | | | * configure.ac: Set new version number (1.1.90), and fix Solaris compiler flags for shared objects.
* * keydb.h, pkclist.c (select_algo_from_prefs): Allow passing a suggestedDavid Shaw2002-06-2011-76/+184
| | | | | | | | | | | | | | | | | | | algorithm which will be used if available. * encode.c (encode_crypt, encrypt_filter), sign.c (sign_file): Use new select_algo_from_prefs feature to check if forcing an algorithm would violate the recipient preferences. * photoid.c (get_default_photo_command, show_photos): Use different default viewers on different platforms. Currently we have Win 9x, Win NT (2k, xp), Mac OSX, RISC OS, and "everybody else". These are #ifdefs as much as possible to avoid clutter. * g10.c (strusage, build_list), keyedit.c (show_prefs), main.h, misc.c (compress_algo_to_string, check_compress_algo), pkclist.c (algo_available), keygen.c (keygen_set_std_prefs): New algo_to_string and check functions for compress algorithms.
* * misc.c (setsysinfo): Removed a #warning for Alpha's uniligednWerner Koch2002-06-202-1/+5
| | | | | trap disabling - it is quite possible that this is a debug relict.
* image file system feature and filetype for RISC OSStefan Bellon2002-06-208-0/+64
|
* * hkp.c (parse_hkp_index): Don't leak memory when failing out of a bad HKPDavid Shaw2002-06-193-20/+18
| | | | | | | | keyserver. * g10.c (add_notation_data): Relax slightly the rules as to what can go into a notation name - 2440 allows "@", for example.
* * import.c (clean_subkeys, import_one): Only allow at most 1 binding sigDavid Shaw2002-06-183-6/+124
| | | | | | | | and at most 1 revocation sig on a subkey, as per 2440:11.1. * hkp.c (parse_hkp_index, hkp_search): Error if the keyserver returns an unparseable HKP response.
* * gpg.sgml: Grammar fix.Werner Koch2002-06-173-6/+16
|
* * keyedit.c (show_key_with_all_names), keylist.c (list_keyblock_print):David Shaw2002-06-154-13/+51
| | | | | | | | | | Show "[expired]" before expired uids. * keyedit.c (show_key_with_all_names_colon), mainproc.c (list_node), keylist.c (list_keyblock_colon): Use "uat" for user attribute packets instead of "uid". Also use '<count> <length>' rather than the fake user id string.
* * keygen.c (keygen_add_revkey): Remove unused code.David Shaw2002-06-155-12/+24
| | | | | | | | | | | | * misc.c (check_permissions): Check directory permissions properly - they are not special files. * pkclist.c (expand_id, expand_group, build_pk_list): When expanding groups before building a pk list, inherit flags from the original pre-expanded string. * pubkey-enc.c (is_algo_in_prefs): Don't use prefs from expired uids.
* * free-packet.c (copy_signature): Properly copy a signature that carries aDavid Shaw2002-06-142-2/+9
| | | | | revocation key on it.
* * pkclist.c (expand_id, expand_group, build_pk_list): Groups now workDavid Shaw2002-06-142-27/+44
| | | | | properly when used in the "Enter the user ID" prompt.
* * util.h: Add pop_strlist() from strgutil.c.David Shaw2002-06-142-0/+5
|
* * strgutil.c (pop_strlist): New function to pop the head off of a strlist.David Shaw2002-06-142-0/+21
|
* * keyedit.c (show_key_with_all_names): Display warning if a user tries toDavid Shaw2002-06-145-15/+45
| | | | | | | | | | | | show prefs on a v3 key with a v3 selfsig. * kbnode.c (dump_kbnode): Show if a uid is expired. * import.c (merge_blocks, import_revoke_cert): Show user ID receiving a revocation certificate. * free-packet.c (cmp_user_ids): Properly compare attribute ids.
* * pkclist.c (expand_groups): Maintain the strlist flags while expanding.David Shaw2002-06-146-8/+22
| | | | | | | | | | Members of an expansion inherit their flags from the expansion key. * options.h, cipher.c (write_header), g10.c (main), keygen.c (keygen_set_std_prefs): remove the personal_mdc flag. It no longer serves a purpose now that the personal preference lists are split into cipher/digest/zip.
* 2002-06-14 Timo Schulz <[email protected]>Timo Schulz2002-06-142-3/+26
| | | | | * skclist.c (is_insecure): Implemented.
* * keyserver.c (keyserver_spawn): Properly handle PROGRAM responses whenDavid Shaw2002-06-122-2/+4
| | | | | they have a CRLF ending. Noted by Keith Ray.
* * keyserver.c (keyserver_spawn): Handle CRLF endings from keyserverDavid Shaw2002-06-126-32/+77
| | | | | | | | | | | | | helpers. Also don't leak the last line worth of memory from the keyserver response. * main.h, misc.c (deprecated_warning): New function to warn about deprecated options and commands. * g10.c (main), keyserver-internal.h, keyserver.c (parse_keyserver_uri): Use new deprecated function to warn about honor-http-proxy, auto-key-retrieve, and x-broken-hkp.
* * configure.ac: Move -lsocket and -lnsl checks before LDAP link tests soDavid Shaw2002-06-112-32/+52
| | | | | | | | | they work properly on Solaris. Noted by David Champion. Also, check for the Mozilla LDAP library if the OpenLDAP library check fails. Put -lsocket and -lnsl in NETLIBS rather than LIBS so not all programs are forced to link to them.
* * Makefile.am: link gpg with NETLIBS for the built-in HKP access.David Shaw2002-06-112-4/+6
|
* * Makefile.am: Don't hard-code the LDAP libraries - get them from LDAPLIBSDavid Shaw2002-06-112-4/+11
| | | | | via configure. Also, gpgkeys_hkp is a program, not a script.
* * gpgkeys_ldap.c (include_subkeys): Default "include-subkeys" to off,David Shaw2002-06-102-1/+6
| | | | | since GnuPG now defaults it to on.
* * options.h, keyserver.c (keyserver_opts), g10.c (main): New keyserverDavid Shaw2002-06-105-63/+93
| | | | | | | | | | | | | option "include-subkeys". This feature already existed, but now can be turned off. It defaults to on. * options.h, keyserver.c (parse_keyserver_options, keyserver_spawn): There are now enough options to justify making a structure for the keyserver options rather than a page of if-then-else-if-then-etc. * getkey.c (merge_keys_and_selfsig, merge_selfsigs_main): Fix bug in calculating key expiration dates.
* * keydb.h, getkey.c (get_user_id_native), import.c (import_one): DisplayDavid Shaw2002-06-095-17/+54
| | | | | | | | | user ID while importing a key. Note this applies to both --import and keyserver --recv-keys. * exec.c (exec_finish): Log unnatural exit (core dump, killed manually, etc) for fork/exec/pipe child processes.
* 2002-06-08 Timo Schulz <[email protected]>Timo Schulz2002-06-082-1/+10
| | | | | | * encode.c (encode_symmetric): Disable the compat flag when the expert mode is enabled.
* * options.skel, options.h, main.h, keydb.h, pkclist.c (build_pk_list,David Shaw2002-06-0710-56/+149
| | | | | | | | | | | | | | | | | | | expand_groups), g10.c (main, add_group): Add new "group" command to allow one name to expand into multiple keys. For simplicity, and to avoid potential loops, we only expand once - you can't make an alias that points to an alias. * main.h, g10.c (main), keygen.c (build_personal_digest_list): Simplify the default digest list - there is really no need for the other hashes since they will never be used after SHA-1 in the list. * options.skel, options.h, g10.c (main), hkp.c (hkp_ask_import, hkp_export, hkp_search), keyserver.c (parse_keyserver_options, parse_keyserver_uri, keyserver_work, keyserver_refresh): Make the "x-broken-hkp" keyserver scheme into keyserver-option "broken-http-proxy". Move honor_http_proxy into keyserver_options. Canonicalize the three variations of "hkp", "x-hkp", and "x-broken-hkp" into "hkp".
* RISC OS specific changesStefan Bellon2002-06-077-5/+47
|
* * main.h, g10.c (main), keygen.c (build_personal_digest_list): Put in aDavid Shaw2002-06-067-44/+167
| | | | | | | | | | | | | | | | default digest preference list consisting of SHA-1, followed by every other installed digest except MD5. Note this is the same as having no digest preference at all except for SHA-1 being favored. * options.h, g10.c (main), keygen.c (keygen_set_std_prefs), pkclist.c (select_algo_from_prefs): Split --personal-preference-list into three: --personal-{cipher|digest|compress}-preferences. This allows a user to set one without affecting another (i.e. setting only a digest pref doesn't imply an empty cipher pref). * exec.c (exec_read): This is a safer way of guessing the return value of system(). Noted by Stefan Bellon.
* * gpgkeys_hkp.c (parse_hkp_index): Type tweaks.David Shaw2002-06-062-2/+10
| | | | | * gpgkeys_hkp.c (main): Add experimental code warning.
* * hkp.c (parse_hkp_index): Be more robust with keyservers returning veryDavid Shaw2002-06-063-6/+23
| | | | | | | | | unparseable responses. * exec.c (exec_read): Catch and display an error when the remote process exits unnaturally (i.e. segfault) so the user knows what happened. Also fix exec_write stub which has a different number of arguments now.
* * Makefile.am, gpgkeys_hkp.c (new): Experimental HKP keyserver interface.David Shaw2002-06-063-2/+989
|
* * configure.ac: Add a switch for the experimental external HKP keyserverDavid Shaw2002-06-062-0/+18
| | | | | interface.
* 2002-06-05 Timo Schulz <[email protected]>Timo Schulz2002-06-053-1/+13
| | | | | | | * encode.c (encode_simple): Ignore the new mode for RFC1991. * mainproc.c (symkey_sesskey_decrypt): Better check for weird keysizes.
* 2002-06-05 Timo Schulz <[email protected]>Timo Schulz2002-06-053-9/+57
| | | | | | | * encode.c (encode_sesskey): New. (encode_simple): Use it here. But by default we use the compat mode which supress to generate encrypted session keys.
* *** empty log message ***Timo Schulz2002-06-051-2/+0
|
* 2002-06-05 Timo Schulz <[email protected]>Timo Schulz2002-06-052-0/+32
| | | | | | * mainproc.c (symkey_decrypt_sesskey): New. (proc_symkey_enc): Support for encrypted session keys.
* 2002-06-05 Timo Schulz <[email protected]>Timo Schulz2002-06-052-22/+35
| | | | | | * fileutil.c (is_file_compressed): Corrected the magic values for bzip2 and gzip. Noted by David.
* * sign.c (hash_for, sign_file): When encrypting and signing at the sameDavid Shaw2002-06-046-20/+115
| | | | | | | | | | | | | | | | | time, consult the various hash prefs to pick a hash algorithm to use. Pass in a 160-bit hint if any of the signing keys are DSA. * keydb.h, pkclist.c (select_algo_from_prefs, algo_available): Pass a "hints" opaque pointer in to let the caller give hints as to what algorithms would be acceptable. The only current hint is for PREFTYPE_HASH to require a 160-bit hash for DSA. Change all callers in encode.c (encode_crypt, encrypt_filter) and sign.c (sign_file). If we settle on MD5 as the best algorithm based solely on recepient keys and SHA1 is also a possibility, use SHA1 unless the user intentionally chose MD5. This is as per 2440:13. * exec.c (make_tempdir): Fix duplicated filename problem.
* forgot the changelog :)David Shaw2002-06-031-0/+10
|
* * packet.h, parse-packet.c (enum_sig_subpkt): Report back fromDavid Shaw2002-06-035-18/+27
| | | | | | | | | | enum_sig_subpkt when a subpacket is critical and change all callers in keylist.c (show_policy_url, show_notation), mainproc.c (print_notation_data), and pkclist.c (do_show_revocation_reason). * keylist.c (show_policy_url, show_notation): Display if the policy or notation is critical.
* * DETAILS: Details of ATTRIBUTE.David Shaw2002-06-033-2/+31
| | | | | * gpg.sgml: Document --attribute-fd
* 2002-06-03 Timo Schulz <[email protected]>Timo Schulz2002-06-032-0/+7
| | | | | * DETAILS: Add ATTRIBUTE.
* * main.h, g10.c (main), keylist.c (dump_attribs, set_attrib_fd,David Shaw2002-06-0310-28/+132
| | | | | | | | | | | | | | | | | list_keyblock_print, list_keyblock_colon), status.h, status.c (get_status_string): New --attribute-fd feature to dump the contents of attribute subpackets for frontends. If --status-fd is also used, then a new status tag ATTRIBUTE is provided for each subpacket. * packet.h, getkey.c (fixup_uidnode, merge_selfsigs_main, merge_selfsigs_subkey), parse-packet.c (setup_user_id): Keep track of the expiration time of a user ID, and while we're at it, use the expired flag from the selfsig rather than reparsing the SIG_EXPIRE subpacket. * photoid.c (generate_photo_id): When adding a new photo ID, showing the photo for confirmation is not safe when noninteractive since the "user" may not be able to dismiss a viewer window. Noted by Timo Schulz.
* * options.skel: Sample photo viewers for Win32.David Shaw2002-06-037-5/+30
| | | | | | | | | | | * misc.c (pct_expando): Use the seckey for %k/%K if the pubkey is not available. * photoid.h, photoid.c (show_photos): Include the seckey in case a user tries to view a photo on a secret key, and change all callers in keyedit.c (menu_showphoto), keylist.c (list_keyblock_print), and photoid.c (generate_photo_id).
* * photoid.c (show_photos): Work properly when not called with a publicDavid Shaw2002-06-022-2/+8
| | | | | key.
* * sign.c (mk_notation_and_policy): Free unneeded buffer.David Shaw2002-06-015-5/+35
| | | | | | | | | | | | * hkp.c (parse_hkp_index): Properly handle the '&' character (i.e. "&amp;") in HKP responses. * getkey.c (merge_selfsigs_main): Fix reversed expiration time check with self-sigs. * keyedit.c (sign_uids): When making a new self-sig on a v3 key, make a v3 self-sig unless it is currently a v3 self-sig being promoted to v4.
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-10 13:29:29 +0000