aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* * card-util.c (card_edit): Require PIN only for generate.Werner Koch2004-04-283-33/+37
| | | | | * app-openpgp.c (do_setattr): Sync FORCE_CHV1.
* (keyserver_spawn) [EXEC_TEMPFILE_ONLY]: RemovedWerner Koch2004-04-272-4/+3
| | | | | setting use_temp_file because this option has been removed.
* Renamed prototype parameter name to avoid gcc warnings.Werner Koch2004-04-272-1/+5
|
* * DETAILS (NEWSIG): Documented.Werner Koch2004-04-272-0/+23
|
* A bunch of changes for the openpgp card.Werner Koch2004-04-2719-259/+1954
|
* * getkey.c (get_seckey_byname2): Significantly simplify this function byDavid Shaw2004-04-262-32/+18
| | | | | | | using key_byname to do the heavy lifting. Note that this also fixes an old problem when the first key on the secret keyring has an unusable stub primary, but is still chosen.
* * getkey.c (key_byname): If namelist is NULL, return the first key in theDavid Shaw2004-04-262-29/+46
| | | | | keyring.
* * keygen.c (make_backsig): If DO_BACKSIGS is not defined, do not createDavid Shaw2004-04-237-6/+121
| | | | | | | | | | | | | | | | backsigs. * getkey.c (merge_selfsigs_subkey): Find 0x19 backsigs on subkey selfsigs and verify they are valid. If DO_BACKSIGS is not defined, fake this as always valid. * packet.h, parse-packet.c (parse_signature): Make parse_signature non-static so we can parse 0x19s in self-sigs. * main.h, sig-check.c (check_backsig): Check a 0x19 signature. (signature_check2): Give a backsig warning if there is no or a bad 0x19 with signatures from a subkey.
* * parse-packet.c (dump_sig_subpkt, parse_one_sig_subpkt,David Shaw2004-04-222-76/+93
| | | | | can_handle_critical): Parse and display 0x19 signatures.
* * keyserver.c (parse_keyserver_uri): Do not accept "http" as an alias forDavid Shaw2004-04-202-2/+6
| | | | | "hkp". They are not the same thing.
* * options.h, g10.c (main): Add keyserver-option honor-keyserver-url.David Shaw2004-04-194-94/+177
| | | | | | | | | | | | | | | | | | parse_keyserver_options now returns a success code. * keyserver.c (parse_keyserver_options): Return error on failure to parse. Currently there is no way to fail as any unrecognized options get saved to be sent to the keyserver plugins later. Check length of keyserver option tokens since with =arguments we must only match the prefix. (free_keyserver_spec): Moved code from parse_keyserver_url. (keyserver_work, keyserver_spawn): Pass in a struct keyserver_spec rather than using the global keyserver option. (calculate_keyid_fpr): New. Fills in a KEYDB_SEARCH_DESC for a key. (keyidlist): New implementation using get_pubkey_bynames rather than searching the keydb directly. If honor-keyserver-url is set, make up a keyserver_spec and try and fetch that key directly. Do not include it in the returned keyidlist in that case.
* 2004-04-02 Thomas Schwinge <[email protected]>Marcus Brinkmann2004-04-192-2/+6
| | | | | * autogen.sh: Added ACLOCAL_FLAGS.
* * plaintext.c (handle_plaintext): Accept 'u' as a plaintext mode thatDavid Shaw2004-04-165-27/+46
| | | | | | | | | | | | | | | | | | requires end of line conversion. This is being considered for a UTF8 text packet. If this doesn't take place, no major harm done. If it does take place, we'll get a jump on starting the changeover. * g10.c (main): --no-use-embedded-filename. * build-packet.c (calc_plaintext, do_plaintext): Do not create illegal (packet header indicates a size larger than the actual packet) encrypted data packets when not compressing and using a filename longer than 255 characters. * keyedit.c (no_primary_warning): Cleanup. (menu_expire): Don't give primary warning for subkey expiration changes. These cannot reorder primaries.
* * keygen.c (gen_elg, gen_dsa, gen_rsa, do_create, do_generate_keypair,David Shaw2004-04-165-81/+220
| | | | | | | | | | | | | | | | | | | | | generate_subkeypair): New is_subkey argument to set whether a generated key is a subkey. Do not overload the ret_sk. This is some early cleanup to do backsigs for signing subkeys. * keygen.c (write_keybinding, do_generate_keypair, generate_subkeypair): Keep track of the unprotected subkey secret key so we can make a backsig with it. * keygen.c (make_backsig): New function to add a backsig to a binding sig of signing subkeys. Currently disabled. (write_keybinding): Call it here, for signing subkeys only. * sign.c (make_keysig_packet): Allow generating 0x19 signatures (same as 0x18 or 0x28, but used for backsigs). * packet.h, build-packet.c (build_sig_subpkt): Add new SIGSUBPKT_SIGNATURE type for embedded signatures.
* * main.h, misc.c (optsep, argsplit, optlen, parse_options): Simplify codeDavid Shaw2004-04-165-37/+62
| | | | | | | | and properly handle a partial match against an option with an argument. * keyserver-internal.h, keyserver.c (parse_keyserver_options): Use new optsep and argsplit functions.
* * main.h, misc.c (argsplit): Refactor argsep into argsplit and argsep soDavid Shaw2004-04-163-32/+59
| | | | | they can be called separately.
* * options.h, keyserver.c (parse_keyserver_options): Remove duplicate codeDavid Shaw2004-04-157-95/+90
| | | | | | | | | from parse_keyserver_options by calling the generic parse_options. * keyserver.c (keyserver_spawn, keyserver_refresh), g10.c (main), gpgv.c (main), mainproc.c (check_sig_and_print), import.c (revocation_present): Change all callers.
* * packet.h, getkey.c (fixup_uidnode, merge_selfsigs_subkey): Keep track ofDavid Shaw2004-04-154-4/+20
| | | | | | | | | which self-sig we actually chose. * keyedit.c (menu_expire, menu_set_primary_uid, menu_set_preferences): Use it here to avoid updating non-used self-sigs and possibly promoting an old self-sig into consideration again.
* * options.h, import.c, keyserver-internal.h, g10.c, mainproc.c,David Shaw2004-04-147-53/+80
| | | | | | | keyserver.c (parse_keyserver_uri): Parse keyserver URI into a structure. Cleanup for new "guess my keyserver" functionality, as well as refreshing via a preferred keyserver subpacket.
* * options.h: Encapsulate keyserver details. Change all callers.David Shaw2004-04-146-48/+57
|
* * gpg.sgml: Document delsig. Clarify that --refresh-keys arguments areDavid Shaw2004-04-102-5/+17
| | | | | optional. Document --bzip2-decompress-lowmem.
* * keyedit.c (keyedit_menu): Request a trustdb update when adding a newDavid Shaw2004-03-282-2/+10
| | | | | user ID so the new ID gets validity set. Reported by Owen Taylor.
* * options.h, g10.c (main), compress-bz2.c (init_uncompress): RenameDavid Shaw2004-03-254-8/+14
| | | | | | --bzip2-compress-lowmem to --bzip2-decompress-lowmem since it applies to decompression, not compression.
* * keyedit.c (sign_uids, show_key_and_fingerprint, ask_revoke_sig,David Shaw2004-03-242-64/+61
| | | | | | menu_revsig, menu_showphoto): --keyid-format conversion. (menu_addrevoker): Use print_pubkey_info() rather than duplicating code.
* * trustdb.c (update_min_ownertrust, validate_keys): Do not use keystrDavid Shaw2004-03-195-7/+29
| | | | | | | | | | | | | | | functions in log_debug. * import.c (import_one): Try and collapse user IDs when importing a key for the first time. * keyedit.c (menu_addrevoker): Allow appointing a subkey as a designated revoker if the user forces it via keyid!, so long as the subkey can certify. Also use the proper date string when prompting for confirmation. * g10.c (main): Maintain ordering of multiple Comment lines. Requested by Peter Hyman.
* * mainproc.c (proc_pubkey_enc, print_pkenc_list, list_node):David Shaw2004-03-182-49/+51
| | | | | --keyid-format conversion.
* * getkey.c (skip_unusable, merge_selfsigs_main,David Shaw2004-03-162-36/+46
| | | | | | premerge_public_with_secret, lookup, get_user_id_string): --keyid-format conversion.
* * trustdb.c (add_utk, verify_own_keys, update_min_ownertrust,David Shaw2004-03-152-31/+34
| | | | | get_validity, ask_ownertrust, validate_keys): --keyid-format conversion.
* * import.c (check_prefs_warning, check_prefs): --keyid-format conversionDavid Shaw2004-03-152-228/+273
| | | | | | | and a little better text. (import_one, import_secret_one, import_revoke_cert, chk_self_sigs, delete_inv_parts, merge_blocks): Still more --keyid-format conversions.
* * keylist.c (print_seckey_info, print_pubkey_info): --keyid-formatDavid Shaw2004-03-062-35/+28
| | | | | | | conversion. (list_keyblock_print): 0xshort should not push us into the new list format since it is not much longer than regular 8-character short keyids.
* * keydb.h, keyid.c (keystr_from_pk, keystr_from_sk): New functions to pullDavid Shaw2004-03-064-65/+95
| | | | | | | | | a key string from a key in one step. This isn't faster than before, but makes for neater code. * keylist.c (list_keyblock_print): Use keystr_from_xx here. (print_key_data): No need to pass a keyid in.
* * keyid.c (keyid_from_sk): Minor performance boost by caching secret keyDavid Shaw2004-03-062-25/+41
| | | | | keyids so we don't have to calculate them each time.
* * getkey.c (merge_selfsigs_subkey): Do not mark subkeys valid if we do notDavid Shaw2004-03-053-5/+19
| | | | | | | | | support their pk algorithm. This allows for early (during get_*) rejection of a subkey, and selection of another. * passphrase.c (passphrase_to_dek): Give a little more information when we have room to do so.
* * revoke.c (export_minimal_pk), export.c (do_export_stream), passphrase.cDavid Shaw2004-03-057-60/+68
| | | | | | | | | | | (passphrase_to_dek), keyserver.c (print_keyrec): A few more places to use --keyid-format. * options.h, g10.c (main), export.c (parse_export_options, do_export_stream): Remove --export-all and the "include-non-rfc" export-option as they are no longer meaningful with the removal of v3 Elgamal keys.
* * iobuf.c (block_filter): Remove the old gpg indeterminate length mode.David Shaw2004-03-042-84/+13
| | | | | (iobuf_set_block_mode, iobuf_in_block_mode): Removed as superfluous.
* * iobuf.h: Remove iobuf_set_block_mode() and iobuf_in_block_mode().David Shaw2004-03-042-4/+6
|
* * armor.c (fake_packet, armor_filter): Use the 2440 partial lengthDavid Shaw2004-03-042-25/+53
| | | | | encoding for the faked plaintext packet.
* * options.h, g10.c (main), mainproc.c (check_sig_and_print): RemoveDavid Shaw2004-03-034-12/+13
| | | | | | verify-option show-long-keyids and replace with the more general keyid-format.
* * build-packet.c (write_header2): Remove call to start old gpg partialDavid Shaw2004-03-033-77/+89
| | | | | | | | | | | length mode and change all callers. (do_plaintext): Turn off partial length encoding now that we're done writing the packet. (do_comment, do_user_id): Try for a headerlen of 2 since that's the smallest and most likely encoding for these packets. * parse-packet.c (parse): Remove call to start old gpg partial length mode.
* * options.h, g10.c (main): Add a more flexible --keyid-format option toDavid Shaw2004-03-037-81/+133
| | | | | | | | | | | | replace the list-option (and eventually verify-option) show-long-keyids. The format can be short, long, 0xshort, and 0xlong. * keydb.h, keyid.c (keystr, keystrlen): New functions to generate a printable keyid. * keyedit.c (print_and_check_one_sig, show_key_with_all_names), keylist.c (list_keyblock_print): Use new keystr() function here to print keyids.
* * packet.h, free-packet.c (free_encrypted, free_plaintext), parse-packet.cDavid Shaw2004-03-034-52/+66
| | | | | | | | (copy_packet, skip_packet, skip_rest, read_rest, parse_plaintext, parse_encrypted, parse_gpg_control): Use a flag to indicate partial or indeterminate encoding. This is the first step in some minor surgery to remove the old gpg partial length encoding.
* * parse-packet.c (parse): Only data-type packets are allowed to useDavid Shaw2004-03-012-28/+51
| | | | | OpenPGP partial length encoding.
* * iobuf.c (block_filter): Properly handle a partial body stream that endsDavid Shaw2004-03-012-1/+13
| | | | | with a 5-byte length that happens to be zero.
* * unsetenv.c: Fixed debugging typo.David Shaw2004-02-282-1/+5
|
* * Makefile.am: Don't split LDADD across two lines since some make programsDavid Shaw2004-02-282-4/+8
| | | | | | can't handle blank lines after a \ continuation. Noted by Christoph Moench-Tegeder.
* Post release version number changeWerner Koch2004-02-262-1/+5
|
* Preparing for 1.3.5V1-3-5Werner Koch2004-02-267-32/+39
|
* * gpg.sgml: Document --ask-cert-level, --max-output, andDavid Shaw2004-02-262-12/+39
| | | | | --default-cert-level.
* * gpg.sgml: Document keyserver-option http-proxy, import-optionDavid Shaw2004-02-262-20/+29
| | | | | | merge-only, remove old honor-http-proxy, --merge-only, and --emulate-md-encode-bug. Document COLUMNS and LINES.
* * README: Update copyright.David Shaw2004-02-263-7/+41
| | | | | | | * NEWS: Note --max-output, --list-config, --min-cert-level, AIX fix, new http-proxy keyserver-option, new LDAP server code, TLS, LDAPS, and --show-session-key with --symmetric.