aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* * revoke.c (export_minimal_pk), export.c (do_export_stream), passphrase.cDavid Shaw2004-03-057-60/+68
| | | | | | | | | | | (passphrase_to_dek), keyserver.c (print_keyrec): A few more places to use --keyid-format. * options.h, g10.c (main), export.c (parse_export_options, do_export_stream): Remove --export-all and the "include-non-rfc" export-option as they are no longer meaningful with the removal of v3 Elgamal keys.
* * iobuf.c (block_filter): Remove the old gpg indeterminate length mode.David Shaw2004-03-042-84/+13
| | | | | (iobuf_set_block_mode, iobuf_in_block_mode): Removed as superfluous.
* * iobuf.h: Remove iobuf_set_block_mode() and iobuf_in_block_mode().David Shaw2004-03-042-4/+6
|
* * armor.c (fake_packet, armor_filter): Use the 2440 partial lengthDavid Shaw2004-03-042-25/+53
| | | | | encoding for the faked plaintext packet.
* * options.h, g10.c (main), mainproc.c (check_sig_and_print): RemoveDavid Shaw2004-03-034-12/+13
| | | | | | verify-option show-long-keyids and replace with the more general keyid-format.
* * build-packet.c (write_header2): Remove call to start old gpg partialDavid Shaw2004-03-033-77/+89
| | | | | | | | | | | length mode and change all callers. (do_plaintext): Turn off partial length encoding now that we're done writing the packet. (do_comment, do_user_id): Try for a headerlen of 2 since that's the smallest and most likely encoding for these packets. * parse-packet.c (parse): Remove call to start old gpg partial length mode.
* * options.h, g10.c (main): Add a more flexible --keyid-format option toDavid Shaw2004-03-037-81/+133
| | | | | | | | | | | | replace the list-option (and eventually verify-option) show-long-keyids. The format can be short, long, 0xshort, and 0xlong. * keydb.h, keyid.c (keystr, keystrlen): New functions to generate a printable keyid. * keyedit.c (print_and_check_one_sig, show_key_with_all_names), keylist.c (list_keyblock_print): Use new keystr() function here to print keyids.
* * packet.h, free-packet.c (free_encrypted, free_plaintext), parse-packet.cDavid Shaw2004-03-034-52/+66
| | | | | | | | (copy_packet, skip_packet, skip_rest, read_rest, parse_plaintext, parse_encrypted, parse_gpg_control): Use a flag to indicate partial or indeterminate encoding. This is the first step in some minor surgery to remove the old gpg partial length encoding.
* * parse-packet.c (parse): Only data-type packets are allowed to useDavid Shaw2004-03-012-28/+51
| | | | | OpenPGP partial length encoding.
* * iobuf.c (block_filter): Properly handle a partial body stream that endsDavid Shaw2004-03-012-1/+13
| | | | | with a 5-byte length that happens to be zero.
* * unsetenv.c: Fixed debugging typo.David Shaw2004-02-282-1/+5
|
* * Makefile.am: Don't split LDADD across two lines since some make programsDavid Shaw2004-02-282-4/+8
| | | | | | can't handle blank lines after a \ continuation. Noted by Christoph Moench-Tegeder.
* Post release version number changeWerner Koch2004-02-262-1/+5
|
* Preparing for 1.3.5V1-3-5Werner Koch2004-02-267-32/+39
|
* * gpg.sgml: Document --ask-cert-level, --max-output, andDavid Shaw2004-02-262-12/+39
| | | | | --default-cert-level.
* * gpg.sgml: Document keyserver-option http-proxy, import-optionDavid Shaw2004-02-262-20/+29
| | | | | | merge-only, remove old honor-http-proxy, --merge-only, and --emulate-md-encode-bug. Document COLUMNS and LINES.
* * README: Update copyright.David Shaw2004-02-263-7/+41
| | | | | | | * NEWS: Note --max-output, --list-config, --min-cert-level, AIX fix, new http-proxy keyserver-option, new LDAP server code, TLS, LDAPS, and --show-session-key with --symmetric.
* * delkey.c (do_delete_key): Allow deleting a public key with a secretDavid Shaw2004-02-268-33/+35
| | | | | | | | | | | | | present if --expert is set. * plaintext.c (handle_plaintext): Make bytecount static so it works with multiple literal packets inside a message. * encode.c, helptext.c (keygen.algo, keygen.algo.elg_se), keygen.c (ask_algo), sig-check.c (do_check_messages), skclist.c (build_sk_list): Rename "ElGamal" to "Elgamal" as that is the proper spelling nowadays. Suggested by Jon Callas.
* * gpgkeys_ldap.c (send_key): List pgpCertID as one of the deletedDavid Shaw2004-02-262-8/+18
| | | | | | | attributes. This guarantees that if something goes wrong, we won't be able to complete the transaction, thus leaving any key already existing on the server intact.
* * plaintext.c: Copyright.David Shaw2004-02-247-172/+201
| | | | | | | | | | | | | | * encode.c (encode_simple): Show cipher with --verbose. * options.h, g10.c (main), keyedit.c (sign_keys): Add --ask-cert-level option to enable cert level prompts during sigs. Defaults to on. Simplify --default-cert-check-level to --default-cert-level. If ask-cert-level is off, or batch is on, use the default-cert-level as the cert level. * options.h, g10.c (main), trustdb.c (mark_usable_uid_certs): Simplify --min-cert-check-level to --min-cert-level.
* (lock_pool) [_AIX]: Also set errno.Werner Koch2004-02-242-1/+6
|
* * gpgkeys_ldap.c (delete_one_attr): Removed. (make_one_attr): DeleteDavid Shaw2004-02-242-79/+83
| | | | | | | | functionality added. Optional deduping functionality added (currently only used for pgpSignerID). (build_attrs): Translate sig entries into pgpSignerID. Properly build the timestamp for pgpKeyCreateTime and pgpKeyExpireTime.
* * options.h, g10.c (main), trustdb.c (mark_usable_uid_certs): AddDavid Shaw2004-02-234-6/+23
| | | | | | --min-cert-check-level option to specify minimum cert check level. Defaults to 2 (so 0x11 sigs are ignored). 0x10 sigs cannot be ignored.
* * gpgkeys_ldap.c (delete_one_attr): New function to replace attributesDavid Shaw2004-02-232-9/+65
| | | | | | | | | with NULL (a "delete" that works even for nonexistant attributes). (send_key): Use it here to remove attributes so a modify operation starts with a clean playing field. Bias sends to modify before add, since (I suspect) people update their existing keys more often than they make and send new keys to the server.
* * plaintext.c (handle_plaintext): Properly handle a --max-output of zeroDavid Shaw2004-02-222-5/+8
| | | | | (do not limit output at all).
* * keyserver.c (keyserver_spawn): Use the full 64-bit keyid in the INFODavid Shaw2004-02-222-8/+35
| | | | | | | header lines, and include "sig:" records for the benefit of people who store their keys in LDAP servers. It makes it easy to do queries for things like "all keys signed by Isabella".
* * gpgkeys_ldap.c (epoch2ldaptime): New. Converse of ldap2epochtime.David Shaw2004-02-222-57/+534
| | | | | | | | | | (make_one_attr): New. Build a modification list in memory to send to the LDAP server. (build_attrs): New. Parse INFO lines sent over by gpg. (free_mod_values): New. Unwinds a modification list. (send_key_keyserver): Renamed from old send_key(). (send_key): New function to send a key to a LDAP server. (main): Use send_key() for real LDAP servers, send_key_keyserver() otherwise.
* * util.h: Prototype for hextobyte().David Shaw2004-02-212-2/+6
|
* * miscutil.c (hextobyte): Moved here from g10/misc.c so I can use it inDavid Shaw2004-02-212-0/+30
| | | | | the keyserver helpers.
* * main.h, misc.c (hextobyte): Removed. It's in libutil.a now.David Shaw2004-02-213-26/+4
|
* * keyserver.c (keyserver_export): Disallow user strings that aren't keyDavid Shaw2004-02-202-13/+35
| | | | | | | IDs. (keyserver_import): Clarify error message. (keyserver_spawn): Properly handle 8 bit characters in user IDs in the info lines during SEND.
* * configure.ac: Check for timegm(). Replacement functions for setenv()David Shaw2004-02-202-5/+9
| | | | | and unsetenv().
* * mkdtemp.c: New (moved from g10/), setenv.c: New, unsetenv.c: New.David Shaw2004-02-205-2/+217
| | | | | * Makefile.am: Include @LIBOBJS@ for replacement functions.
* * mkdtemp.c: Removed.David Shaw2004-02-204-101/+13
| | | | | | | | * Makefile.am: We get mkdtemp.c from libutil.a now, so don't link with @LIBOBJS@. * keyserver.c (keyserver_spawn): Pass the scheme to the keyserver helper.
* * gpgkeys_ldap.c: Replacement prototypes for setenv and unsetenv.David Shaw2004-02-203-37/+64
| | | | | | | | | | (search_key): Catch a SIZELIMIT_EXCEEDED error and show the user whatever the server did give us. (find_basekeyspacedn): There is no guarantee that namingContexts will be readable. * Makefile.am: Link gpgkeys_ldap with libutil.a to get the replacement functions (and eventually translations, etc).
* * gpgkeys_ldap.c (ldap2epochtime): LDAP timestamps are UTC, so do notDavid Shaw2004-02-192-10/+40
| | | | | | | correct for timezones. (main): Find the basekeyspacedn before we try to start TLS, so we can give a better error message when a user tries to use TLS with a LDAP keyserver.
* * configure.ac: Check for ln -s and add GPGKEYS_LDAP conditional, both forDavid Shaw2004-02-192-0/+5
| | | | | making gpgkeys_ldaps symlink to gpgkeys_ldap.
* * Makefile.am: Add automake conditionals to symlink gpgkeys_ldaps toDavid Shaw2004-02-193-12/+144
| | | | | | | | | | gpgkeys_ldap when needed. * gpgkeys_ldap.c (main): Add support for LDAPS and TLS connections. These are only useful and usable when talking to real LDAP keyservers. Add new "tls" option to tune TLS use from off, to try quietly, to try loudly, or to require TLS.
* * configure.ac: Simplify the LDAP checking code since OpenLDAP is far moreDavid Shaw2004-02-192-49/+18
| | | | | | mature these days and dependencies are cleaner. Add checks for ldap_set_option and ldap_start_tls_s.
* * gpgkeys_ldap.c (find_basekeyspacedn): New function to figure out whatDavid Shaw2004-02-192-63/+132
| | | | | | | | kind of LDAP server we're talking to (either real LDAP or the LDAP keyserver), and return the baseKeySpaceDN to find keys under. (main): Call it from here, and remove the old code that only handled the LDAP keyserver.
* * options.h, g10.c (main), plaintext.c (handle_plaintext): AddDavid Shaw2004-02-184-23/+81
| | | | | --max-output option to help people deal with decompression bombs.
* * gpgkeys_ldap.c (ldap_to_gpg_err): Make sure that LDAP_OPT_ERROR_NUMBERDavid Shaw2004-02-183-6/+14
| | | | | | | is defined before we use it. * gpgkeys_mailto.in: Fix VERSION number.
* * build-packet.c (do_user_id): Do not force a header for attribute packetsDavid Shaw2004-02-152-3/+7
| | | | | | as they require a new CTB, and we don't support forced headers for new CTBs yet.
* * build-packet.c (write_header2): If a suggested header length is providedDavid Shaw2004-02-154-36/+58
| | | | | | | | | | | | | along with a zero length, interpret this as an actual zero length packet and not as an indeterminate length packet. (do_comment, do_user_id): Use it here as these packets might be naturally zero length. * parse-packet.c (parse): Show packet type when failing due to an indeterminate length packet. * misc.c (parse_options): Only provide args for the true (i.e. not "no-xxx") form of options.
* * keyserver.c (argsep): Move to misc.c.David Shaw2004-02-147-93/+103
| | | | | | | * main.h, misc.c (parse_options), export.c (parse_export_options), import.c (parse_import_options), g10.c (main): Use it here to allow for options with optional arguments. Change all callers.
* * import.c (check_prefs): Some language fixes. (sec_to_pub_keyblock,David Shaw2004-02-142-7/+21
| | | | | | import_secret_one): Without knowing the number of MPIs there are, we cannot try and sk-to-pk-ize a key.
* * gnupg.7: Clarify that 'gpgv' doesn't encrypt, and that's not a bug.David Shaw2004-02-124-89/+128
| | | | | | | | | * samplekeys.asc: Update 99242560. * gpg.sgml: Clarify -u/--local-user and --default-key. Note what happens if you run 'gpg' without any commands. Document --multifile. Document list-option show-unusable-subkeys.
* * import.c (check_prefs): New function to check preferences on a publicDavid Shaw2004-02-122-10/+152
| | | | | | | | | key to ensure that it does not advertise any that we cannot fulfill. Use the keyedit command list function to optionally rewrite the prefs. (import_one, import_secret_one): Use it here when importing a public key that we have the secret half of, or when importing a secret key that we have the public half of.
* * main.h, keyedit.c (keyedit_menu): Remove sign_mode and enhance the moreDavid Shaw2004-02-124-110/+107
| | | | | | | | general command list functionality to replace it. * g10.c (main): Use the general command functionality to implement --sign-key, --lsign-key, --nrsign-key, and --nrlsign-key.
* * import.c (import_one): Do the revocation check even in the case when aDavid Shaw2004-02-122-7/+17
| | | | | | | key, a revocation key set in a direct key signature, and a revocation from that revocation key, all arrive piecemeal. Needless to say, this is pretty obscure.