aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* some late minor fixes.V1-3-6Werner Koch2004-05-2214-2523/+2603
|
* About to release 1.3.6Werner Koch2004-05-2210-2431/+2329
|
* * NEWS: Note --sig-keyserver-url and the ability to use a preferredDavid Shaw2004-05-222-0/+10
| | | | | keyserver in a regular data sig to fetch the signing key.
* * mainproc.c (check_sig_and_print): If we're honoring preferredDavid Shaw2004-05-225-41/+107
| | | | | | | | | | | | | | | | keyservers, and auto-key-retrieve is set, try and get a missing key from the preferred keyserver subpacket when we verify the sig. * gpgv.c (parse_preferred_keyserver, free_keyserver_spec): Stubs. * keyserver.c (keyidlist): Use new parse_preferred_keyserver function. (keyserver_work): Use the passed-in keyserver spec rather than the options global one. * keyserver-internal.h, keyserver.c (parse_preferred_keyserver): New function to take a sig and return a split out keyserver_spec. (keyserver_import_keyid): Now takes a keyserver_spec.
* * gpgkeys_http.c (get_key): Cosmetic fix - make sure that URLs with noDavid Shaw2004-05-222-4/+7
| | | | | path use a path of "/".
* * gpg.sgml: Document --edit-key "keyserver" command, --keyid-format,David Shaw2004-05-222-5/+41
| | | | | | --keyserver-option honor-keyserver-url, and --list and --verify option show-std/user-notations.
* * keyserver.c (keyidlist): Go back to the old fast keyid lister. OnlyDavid Shaw2004-05-214-99/+166
| | | | | | | | | merge selfsigs if we have to for honor-keyserver-url. (keyserver_refresh): Keyserver URL handler moved here. (calculate_keyid_fpr): Removed. * keydb.h, keyid.c (keystr_from_desc): Calculate a key string from a KEYDB_SEARCH_DESC.
* * gpgkeys_ldap.c (ldap2epochtime): We can always rely on timegm() beingDavid Shaw2004-05-212-22/+8
| | | | | available now, since it's a replacement function.
* * configure.ac: Replacement function for timegm(). No need to check forDavid Shaw2004-05-212-2/+7
| | | | | setenv() any longer.
* * timegm.c: New replacement function. Removes the need for setenv.c andDavid Shaw2004-05-214-109/+76
| | | | | | | | | unsetenv.c. * setenv.c: Removed. * unsetenv.c: Removed.
* * keyserver.c (keyserver_spawn): Fix keyserver options on tempfile onlyDavid Shaw2004-05-212-1/+6
| | | | | platforms. Noted by Roger Sondermann.
* * keyserver.c (keyserver_work): Allow --refresh-keys with a preferredDavid Shaw2004-05-204-119/+57
| | | | | | | | | | | keyserver to happen even if there is no global keyserver set. * sig-check.c (do_check_messages): No need to check for Elgamal signatures any longer. (do_check_messages, do_check, check_key_signature2): --keyid-format conversion. * pkclist.c (show_paths, edit_ownertrust): Remove some unused code.
* * NEWS: Note HTTP key fetching.David Shaw2004-05-204-8/+34
| | | | | | | | * README: Update version and note that HKP is no longer build in. * configure.ac: Handle --disable-http and other code to properly build gpgkeys_http.
* * gpgkeys_http.c: New program to do a simple HTTP file fetch using theDavid Shaw2004-05-203-2/+391
| | | | | | | keyserver interface. * Makefile.am: Build it.
* * options.h (ctrl): New for member IN_AUTO_KEY_RETRIEVE.David Shaw2004-05-204-6/+62
| | | | | | | | | | | * mainproc.c (check_sig_and_print): track whether we are retrieving a key. * status.c (status_currently_allowed): New. (write_status_text, write_status_text_and_buffer): Use it here. * g10.c: New command --gpgconf-list. (gpgconf_list): New. From Werner on stable branch.
* * longlong.h: Typo.David Shaw2004-05-203-8/+16
| | | | | | * mpi-pow.c (mpi_powm): s/exp/exponent/ to shutup a compiler warning. From Werner on stable branch.
* * dsa.c (verify): s/exp/exponent/ to fix a compiler warning. From WernerDavid Shaw2004-05-202-5/+10
| | | | | on stable branch.
* * g10.c: New command --gpgconf-list. (gpgconf_list): New. From Werner onDavid Shaw2004-05-202-11/+59
| | | | | stable branch.
* * NEWS: Note the addition of preferred keyserver support,David Shaw2004-05-203-5/+42
| | | | | | | | | --ask-cert-level, --keyid-format, and the removal of show-long-keyids, the quasi-1991 partial length encoding, --export-all, and include-non-rfc. * acinclude.m4 (GNUPG_SYS_NM_PARSE): Remove a leftover slash in a sed expression.
* * gpg.sgml: Clarify that --charset applies to informational strings andDavid Shaw2004-05-202-10/+10
| | | | | | does not recode messages themselves. Remove include-non-rfc export-option.
* * pubkey-enc.c (get_session_key, get_it), keyedit.cDavid Shaw2004-05-203-24/+32
| | | | | (show_key_with_all_names, show_basic_key_info): --keyid-format conversion.
* * sign.c (update_keysig_packet): Policies and notations should be strippedDavid Shaw2004-05-193-3/+23
| | | | | | | out when remaking a self-signature. Noted by Atom Smasher. * keyserver.c (parse_keyserver_uri): Fix compiler warnings.
* * options.h, keyserver-internal.h, keyserver.c (parse_keyserver_uri):David Shaw2004-05-114-45/+70
| | | | | | | Improved URI parser that keeps track of the path information and doesn't modify the input string. (keyserver_spawn): Tell keyserver plugins about the path.
* * keylist.c (show_policy_url, show_keyserver_url, show_notation)Werner Koch2004-05-114-4/+35
| | | | | | | | | | (list_one): Use const char* for i18n string helpers. * keygen.c (do_generate_keypair, read_parameter_file): Really close the files. (do_generate_keypair): Create the secret key file using safe permissions. Noted by Atom Smasher.
* * options.h, mainproc.c (symkey_decrypt_seskey), keyserver.c (structDavid Shaw2004-05-106-15/+27
| | | | | | keyrec, parse_keyrec, keyserver_search_prompt), keyedit.c (keyedit_menu), g10.c (add_keyserver_url, add_policy_url): Fix some compiler warnings.
* * DETAILS, credits-1.0, credits-1.2: ElGamal -> Elgamal.David Shaw2004-05-086-13/+31
| | | | | | | * gpg.sgml: Document --no-use-embedded-filename and --min-cert-level. * gpgv.sgml: Removed leftover </para>.
* * keyedit.c (keyedit_menu, menu_set_keyserver_url): Allow passingDavid Shaw2004-05-085-88/+134
| | | | | | | | | | preferred keyserver on "keyserver" command line. Sanity check keyserver URL before accepting it. * keyserver-internal.h, g10.c (main), keyserver.c (parse_keyserver_uri): Add an option to require the scheme:// and change all callers. (free_keyserver_spec): Make public.
* (write_plaintext_packet): Fixed the detection of tooWerner Koch2004-05-072-8/+18
| | | | | large files in the same way as in encode.c.
* * keylist.c (show_notation): Use bits to select which sort of notation toDavid Shaw2004-05-056-47/+75
| | | | | | | | | | show. Don't allow a not-shown notation to prevent us from issuing the proper --status-fd message. * options.h, g10.c (main): Add show-std/standard-notations and show-user-notations. show-notations is both. Default is to show standard notations only during verify. Change all callers.
* Removed reference to non-available optionWerner Koch2004-05-032-1/+5
| | | | | --no-default-keyring.
* (ac_pipe_works): Fixed BRE syntax \? -> \{0,1\}.Werner Koch2004-05-013-3/+11
| | | | | Reported by Todd Vierling.
* * main.h, keylist.c (show_notation): Add argument to show only userDavid Shaw2004-04-296-7/+28
| | | | | | | notations, only standard notations, or both. Change all callers. * keyserver.c (keyserver_spawn): We still need EXEC_TEMPFILE_ONLY.
* * card-util.c (card_edit): Require PIN only for generate.Werner Koch2004-04-283-33/+37
| | | | | * app-openpgp.c (do_setattr): Sync FORCE_CHV1.
* (keyserver_spawn) [EXEC_TEMPFILE_ONLY]: RemovedWerner Koch2004-04-272-4/+3
| | | | | setting use_temp_file because this option has been removed.
* Renamed prototype parameter name to avoid gcc warnings.Werner Koch2004-04-272-1/+5
|
* * DETAILS (NEWSIG): Documented.Werner Koch2004-04-272-0/+23
|
* A bunch of changes for the openpgp card.Werner Koch2004-04-2719-259/+1954
|
* * getkey.c (get_seckey_byname2): Significantly simplify this function byDavid Shaw2004-04-262-32/+18
| | | | | | | using key_byname to do the heavy lifting. Note that this also fixes an old problem when the first key on the secret keyring has an unusable stub primary, but is still chosen.
* * getkey.c (key_byname): If namelist is NULL, return the first key in theDavid Shaw2004-04-262-29/+46
| | | | | keyring.
* * keygen.c (make_backsig): If DO_BACKSIGS is not defined, do not createDavid Shaw2004-04-237-6/+121
| | | | | | | | | | | | | | | | backsigs. * getkey.c (merge_selfsigs_subkey): Find 0x19 backsigs on subkey selfsigs and verify they are valid. If DO_BACKSIGS is not defined, fake this as always valid. * packet.h, parse-packet.c (parse_signature): Make parse_signature non-static so we can parse 0x19s in self-sigs. * main.h, sig-check.c (check_backsig): Check a 0x19 signature. (signature_check2): Give a backsig warning if there is no or a bad 0x19 with signatures from a subkey.
* * parse-packet.c (dump_sig_subpkt, parse_one_sig_subpkt,David Shaw2004-04-222-76/+93
| | | | | can_handle_critical): Parse and display 0x19 signatures.
* * keyserver.c (parse_keyserver_uri): Do not accept "http" as an alias forDavid Shaw2004-04-202-2/+6
| | | | | "hkp". They are not the same thing.
* * options.h, g10.c (main): Add keyserver-option honor-keyserver-url.David Shaw2004-04-194-94/+177
| | | | | | | | | | | | | | | | | | parse_keyserver_options now returns a success code. * keyserver.c (parse_keyserver_options): Return error on failure to parse. Currently there is no way to fail as any unrecognized options get saved to be sent to the keyserver plugins later. Check length of keyserver option tokens since with =arguments we must only match the prefix. (free_keyserver_spec): Moved code from parse_keyserver_url. (keyserver_work, keyserver_spawn): Pass in a struct keyserver_spec rather than using the global keyserver option. (calculate_keyid_fpr): New. Fills in a KEYDB_SEARCH_DESC for a key. (keyidlist): New implementation using get_pubkey_bynames rather than searching the keydb directly. If honor-keyserver-url is set, make up a keyserver_spec and try and fetch that key directly. Do not include it in the returned keyidlist in that case.
* 2004-04-02 Thomas Schwinge <[email protected]>Marcus Brinkmann2004-04-192-2/+6
| | | | | * autogen.sh: Added ACLOCAL_FLAGS.
* * plaintext.c (handle_plaintext): Accept 'u' as a plaintext mode thatDavid Shaw2004-04-165-27/+46
| | | | | | | | | | | | | | | | | | requires end of line conversion. This is being considered for a UTF8 text packet. If this doesn't take place, no major harm done. If it does take place, we'll get a jump on starting the changeover. * g10.c (main): --no-use-embedded-filename. * build-packet.c (calc_plaintext, do_plaintext): Do not create illegal (packet header indicates a size larger than the actual packet) encrypted data packets when not compressing and using a filename longer than 255 characters. * keyedit.c (no_primary_warning): Cleanup. (menu_expire): Don't give primary warning for subkey expiration changes. These cannot reorder primaries.
* * keygen.c (gen_elg, gen_dsa, gen_rsa, do_create, do_generate_keypair,David Shaw2004-04-165-81/+220
| | | | | | | | | | | | | | | | | | | | | generate_subkeypair): New is_subkey argument to set whether a generated key is a subkey. Do not overload the ret_sk. This is some early cleanup to do backsigs for signing subkeys. * keygen.c (write_keybinding, do_generate_keypair, generate_subkeypair): Keep track of the unprotected subkey secret key so we can make a backsig with it. * keygen.c (make_backsig): New function to add a backsig to a binding sig of signing subkeys. Currently disabled. (write_keybinding): Call it here, for signing subkeys only. * sign.c (make_keysig_packet): Allow generating 0x19 signatures (same as 0x18 or 0x28, but used for backsigs). * packet.h, build-packet.c (build_sig_subpkt): Add new SIGSUBPKT_SIGNATURE type for embedded signatures.
* * main.h, misc.c (optsep, argsplit, optlen, parse_options): Simplify codeDavid Shaw2004-04-165-37/+62
| | | | | | | | and properly handle a partial match against an option with an argument. * keyserver-internal.h, keyserver.c (parse_keyserver_options): Use new optsep and argsplit functions.
* * main.h, misc.c (argsplit): Refactor argsep into argsplit and argsep soDavid Shaw2004-04-163-32/+59
| | | | | they can be called separately.
* * options.h, keyserver.c (parse_keyserver_options): Remove duplicate codeDavid Shaw2004-04-157-95/+90
| | | | | | | | | from parse_keyserver_options by calling the generic parse_options. * keyserver.c (keyserver_spawn, keyserver_refresh), g10.c (main), gpgv.c (main), mainproc.c (check_sig_and_print), import.c (revocation_present): Change all callers.
* * packet.h, getkey.c (fixup_uidnode, merge_selfsigs_subkey): Keep track ofDavid Shaw2004-04-154-4/+20
| | | | | | | | | which self-sig we actually chose. * keyedit.c (menu_expire, menu_set_primary_uid, menu_set_preferences): Use it here to avoid updating non-used self-sigs and possibly promoting an old self-sig into consideration again.