aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* * rndunix.c (start_gatherer) [ENABLE_SELINUX_HACKS]: Don't allowWerner Koch2004-10-146-3/+21
| | | | | | | | logging. * gpgkeys_finger.c (get_key): s/unsigned char/byte/ due to a strange typedef for RISC OS. Noted by Stefan.
* (iobuf_get_fd): Removed double check on directfp andWerner Koch2004-10-142-1/+7
| | | | | | cats it to FILEP becuase directfp is actually a void *. Notes by Stefan.
* * misc.c (is_secured_filename): New.Werner Koch2004-10-1411-36/+159
| | | | | | | | | | | | | | | | * keydb.c (maybe_create_keyring) * tdbio.c (tdbio_set_dbname) * plaintext.c (handle_plaintext) * openfile.c (copy_options_file, open_outfile) * exec.c (exec_write) * keygen.c (do_generate_keypair, gen_card_key_with_backup) * sign.c (sign_file, clearsign_file) * keyring.c (create_tmp_file, do_copy): Check for secured files before creating them. * keygen.c (print_status_key_created): s/unsigned char/byte/ due to a strange typedef for RISC OS. Noted by Stefan.
* * armor.c (fake_packet): Allow arbitrary dash-escaped lines as perDavid Shaw2004-10-132-20/+22
| | | | | 2440bis-10. This is bug #158.
* * keyserver.c (keyserver_work): Handle keyserver timeouts.David Shaw2004-10-132-0/+6
|
* * keyserver.h: Add KEYSERVER_TIMEOUT.David Shaw2004-10-132-1/+6
|
* * gpgkeys_ldap.c (main), gpgkeys_hkp.c (main), gpgkeys_http.c (main),David Shaw2004-10-138-10/+194
| | | | | | | | gpgkeys_finger.c (main): Call timeout functions before performing an action that could block for a long time. * ksutil.h, ksutil.c: New. Right now just contains timeout functions.
* Added SELInux hacks and did some cleanups.Werner Koch2004-10-1322-62/+396
|
* Add dearmor.cWerner Koch2004-10-132-0/+5
|
* * configure.ac: Actually name the option --disable-finger and notWerner Koch2004-10-137-72/+45
| | | | | | | | | | | http. Add option --enable-selinux-support. * logger.c (g10_log_error_f, g10_log_fatal_f, g10_log_info_f) (g10_log_debug_f, print_prefix_f): Removed. * iobuf.c (iobuf_is_pipe_filename): New. (iobuf_get_fd): New.
* * pkclist.c (do_edit_ownertrust): Different prompt when we're using directDavid Shaw2004-10-136-32/+73
| | | | | | | | | | | | | | trust since the meaning is different. * keyedit.c (trustsig_prompt): Change the strings to match the ones in pkclist.c:do_edit_ownertrust to make translation easier. * trustdb.c (trust_model_string, get_validity): Add direct trust model which applies to the key as a whole and not per-uid. * options.h, g10.c (parse_trust_model): New. (main): Call it from here to do string-to-trust-model.
* * configure.ac: Actually name the option --disable-finger and notWerner Koch2004-10-1314-27/+52
| | | | | | | | | | | | | | | | | http. * openfile.c (overwrite_filep, make_outfile_name, open_outfile) (open_sigfile): Use iobuf_is_pipe_filename to check for pipes so that special filesnames are taken into account. This is bug 327. * tdbdump.c (import_ownertrust): Ditto. * sign.c (write_plaintext_packet): Ditto. * progress.c (handle_progress): Ditto. * plaintext.c (handle_plaintext): Ditto. * encode.c (encode_simple, encode_crypt): Ditto. * iobuf.c (iobuf_is_pipe_filename): New. * fileutil.c (is_file_compressed): Use it here.
* * Makefile.am (.S.o): Include MPI_SFLAGS. This is our bug 145.Werner Koch2004-10-132-1/+5
|
* * keygen.c (read_parameter_file): New keyword "Handle". This isWerner Koch2004-10-135-28/+84
| | | | | | | | | bug 287. (print_status_key_not_created): New. (print_status_key_created): Add new arg HANDLE. (do_generate_keypair): Print not created status. * status.c, tatus.h (STATUS_KEY_NOT_CREATED): New.
* * algorithms.h, cast5.c, cipher.c, idea-stub.c, twofish.c, blowfish.c,David Shaw2004-10-129-135/+112
| | | | | des.c, rijndael.c: Consistently use const for input buffers.
* (read_parameter_file): Changed to use iobuf based fileWerner Koch2004-10-122-18/+24
| | | | | reading to allow the special file name feature to work.
* * pkclist.c (do_edit_ownertrust): Use the same translated string forDavid Shaw2004-10-118-27/+51
| | | | | | | | | | | | | | showing the user ID as mainproc.c:print_pkenc_list. * mainproc.c (print_pkenc_list): Allow translating the quotes around the user ID. * card-util.c, g10.c, photoid.c, trustdb.c: The last of the \"%s\" -> `%s' quoting for things that aren't user IDs. * keyserver.c (keyserver_spawn): If there is no keyserver host, print the whole URI since it is self-contained.
* * gpgkeys_finger.c, gpgkeys_hkp.c, gpgkeys_http.c, gpgkeys_ldap.c: Fix aDavid Shaw2004-10-115-13/+18
| | | | | few occurances of "filename" to `filename'.
* Oops commited binary instead of source.Werner Koch2004-10-112-0/+550
|
* * configure.ac: New option --disable-finger.Werner Koch2004-10-1110-31/+398
| | | | | | | | * keyserver.c (keyserver_spawn): Print an empty string in log_info if the host is not set (e.g. finger). * gpgkeys_finger.c: New.
* * card-util.c, keyedit.c, openfile.c, pkclist.c, delkey.c, keygen.c,David Shaw2004-10-109-47/+69
| | | | | | photoid.c, revoke.c: Some yes-or-no prompts end in "(y/n)". Some don't. Consistently use y/n everywhere.
* * keygen.c (ask_key_flags): New. (ask_algo): Call it here in --expert modeDavid Shaw2004-10-102-30/+101
| | | | | so we don't need to specify each possible variation of RSA capabilities.
* * keygen.c (do_add_key_flags): The spec says that all primary keys MUST beDavid Shaw2004-10-102-6/+10
| | | | | | able to certify. Force the certify flag on for primaries (and off for subkeys).
* * keygen.c (generate_keypair): Fix generating keys with the auth flag.David Shaw2004-10-102-3/+9
|
* * encr-data.c (decrypt_data): Give a warning with a weak key, but stillDavid Shaw2004-10-082-5/+15
| | | | | allow to decrypt the message.
* * pkclist.c (build_pk_list): Keystrify.David Shaw2004-10-073-33/+56
| | | | | | * mainproc.c (check_sig_and_print), pkclist.c (do_edit_ownertrust): Improve translatability of user ID prompts.
* * helptext.c, pkclist.c (do_we_trust): It is not possible to get here withDavid Shaw2004-10-065-137/+87
| | | | | | | | | | | | | a revoked or expired key, so BUG() that case. Remove question about overriding revoked/expired. Also --keyid-format-ify. (do_we_trust_pre): Use print_pubkey_info() instead of printing the info ourselves. * passphrase.c (passphrase_to_dek): Improve translatability of user ID prompts. * keylist.c (print_pubkey_info): Use the user ID the pk was selected by, if any.
* * keyedit.c (sign_uids, ask_revoke_sig): Improve translatability of userDavid Shaw2004-10-062-23/+32
| | | | | | ID prompts. (ask_revoke_sig, menu_revsig): Try and use common strings for these two functions so they don't need to be translated twice.
* * keyedit.c, keylist.c, keyserver.c, mainproc.c: TheDavid Shaw2004-10-065-21/+74
| | | | | | revoked/expired/expires string change of 2004-09-29 was too simple. Use two styles for each tag.
* * passphrase.c (agent_get_passphrase): Use keystrs for agent strings, andDavid Shaw2004-10-054-29/+37
| | | | | | | | | | fix sprintf warnings. * keyserver.c (keyserver_spawn): Fix BUG() with certain sets of mixed regular and preferred keyserver refreshes. Noted by Sebastian Wiesinger. * keyedit.c (show_key_with_all_names): Show uid validity in menu.
* 2004-10-03 Timo Schulz <[email protected]>Timo Schulz2004-10-042-0/+6
| | | | | * apdu.c (apdu_open_remote_reader) [_WIN32]: Do not set ENOSYS.
* * keyedit.c (print_and_check_one_sig_colon): Fix bad keyids in colonDavid Shaw2004-10-042-10/+21
| | | | | | delsig output. Noted by Peter Palfrader. (show_prefs): Do not reference missing selfsig. Noted by Alex Moroz.
* post release preparationsWerner Koch2004-10-012-1/+5
|
* * gpgv.c (i18n_init): Always use LC_ALL.V1-3-90Werner Koch2004-10-016-19/+12
| | | | | | | * bftest.c (i18n_init): Always use LC_ALL. * shmtest.c (i18n_init): Ditto. * mpicalc.c (i18n_init): Ditto.
* * mk-w32-dist: Updated from stable branch.Werner Koch2004-10-0148-20746/+24946
| | | | | | | | * mk-gpg-texi: Changed to use the newer docbook2x-texi utility. * config.guess, config.sub, mkinstalldirs, missing * depcomp, install-sh: Upgraded.
* * gpgv.c, keydb.c (keydb_add_resource): Factored keyring creation out toDavid Shaw2004-09-304-52/+136
| | | | | | | | | | | .. (maybe_create_keyring): .. new. Make sure that we do the checks in a locked state. Problem reported by Stefan Haller. Try to create the home directory before acquiring a lock for the keyring. From Werner on stable branch. * g10.c (main): Blow up if we didn't lose setuid. From Werner on stable branch.
* * util.h: Prototype destroy_dotlock(). From Werner on stable branch.David Shaw2004-09-302-0/+6
|
* * iobuf.c (pop_filter): Make static.David Shaw2004-09-303-12/+59
| | | | | | | * dotlock.c (destroy_dotlock): New. Remove the handle from the list of locks. (release_dotlock): Don't act if we don't have any locks at all. From Werner on stable branch.
* * mpicoder.c (mpi_read): If we must fail due to a oversize (generallyDavid Shaw2004-09-302-1/+9
| | | | | | corrupt) MPI, make sure the number of bytes we read is valid so we can skip the rest of the bad packet (in hopes the whole stream isn't invalid).
* * keyedit.c, keylist.c, keyserver.c, mainproc.c: Reduce the manyDavid Shaw2004-09-295-24/+33
| | | | | | variations of "revoked" ("revoked", "[revoked]", " [revoked]", "[revoked] ") "and" expired down to two to simplify translation.
* * keyedit.c (print_and_check_one_sig): Account for the extra space thatDavid Shaw2004-09-292-16/+9
| | | | | | | show-sig-expire takes up so we do not wrap lines. (show_key_with_all_names): No need to show subkey revocations as a seperate line since we now show revocation date in the main subkey line.
* * signal.c (got_fatal_signal): HAVE_DECL_SYS_SIGLIST is defined, but zeroDavid Shaw2004-09-283-4/+12
| | | | | | | | if not found. Noted by John Clizbe. * keyserver.c (parse_keyrec): Fix problem with non-expiring keys appearing expired in --search-keys results.
* * card-util.c (card_edit): Take admin only status from the table.Werner Koch2004-09-273-53/+93
| | | | | | | | | | | | * app-openpgp.c: Made all strings translatable. (verify_chv3) [GNUPG_MAJOR_VERSION]: Make opt.allow_admin available for use in gnupg 2. (verify_chv3): Reimplemented countdown showing to use only functions from this module. Flush the CVH status cache on a successful read. (get_one_do): Hack to bypass the cache for cards versions > 1.0. (store_fpr): Store the creation date for card version > 1.0.
* We need to take care that several files are also used in gnupg 1.9 andWerner Koch2004-09-272-42/+68
| | | | | | | | | | | | | | there by the scdaemon which is a bit different to the direct integration in gpg 1.3. In general they should all be maintained in 1.9 but while preparing 1.4 its okay to do it in 1.3. We just need to take some care not to break 1.9 to heavily. app-openpgp.c: Made all strings translatable. (verify_chv3) [GNUPG_MAJOR_VERSION]: Make opt.allow_admin available for use in gnupg 2. (verify_chv3): Reimplemented countdown showing to use only functions from this module.
* * main.h, g10.c (main), card-util.c (change_pin): If "admin" has not beenDavid Shaw2004-09-256-94/+143
| | | | | | | | | | | | | | issued, skip right to the CHV1/CHV2 PIN change. No need to show the unblock or admin PIN change option. (card_edit): Add "admin" command to add admin commands to the menu. Do not allow admin commands until "admin" is given. * app-openpgp.c (verify_chv3): Show a countdown of how many wrong admin PINs can be entered before the card is locked. * options.h, g10.c (main), app-openpgp.c (verify_chv3): Remove --allow-admin.
* * main.h: Create S2K_DIGEST_ALGO macro so we do not need to always setDavid Shaw2004-09-2412-34/+45
| | | | | | | | | | | opt.s2k_digest_algo. This helps fix a problem with PGP 2.x encrypted symmetric messages. Change all callers (encode.c, g10.c, keyedit.c, keygen.c, passphrase.c, sign.c). * armor.c, cardglue.c, getkey.c, import.c, keygen.c: Be consistent in some more quoted strings. Always use 'user ID', not 'user id', "quotes" for user IDs, etc.
* * keyedit.c (keyedit_menu), gpgv.c (agent_scd_getattr (stub)), keygen.cDavid Shaw2004-09-244-34/+45
| | | | | | (copy_mpi, generate_raw_key): Fix a compile problem and a few warnings when building without card support.
* Note: I have not fully tested the new key creation due to a pc/scWerner Koch2004-09-238-315/+652
| | | | | | | | | | | | | | | | | | | error. However the backupfile has been created successfully. * rsa.c (rsa_generate): Return the dummy list of factors only if the caller asked for it. * card_util.c (generate_card_keys): ask whether backup should be created. (card_store_subkey): Factored some code out to .. * keygen.c (save_unprotected_key_to_card): .. new function. (gen_card_key_with_backup): New. (generate_raw_key): New. (generate_keypair): New arg BACKUP_ENCRYPTION_DIR. Changed all callers. (do_generate_keypair): Divert to gen_card_key_with_backup when desired.
* * gpg.sgml: Document "addcardkey" and "keytocard".Werner Koch2004-09-2315-116/+580
| | | | | | | | | | | | | | | | | | | | * apdu.c (open_pcsc_reader): Do not print empty reader string. * keygen.c (ask_algo): Allow creation of AUTH keys. * keyid.c (usagestr_from_pk): New. * app-openpgp.c (app_openpgp_storekey): Call flush_cache. * keyedit.c (keyedit_menu): New command "keytocard" (keyedit_menu): Bad hack for the not_with_sk element. (show_key_with_all_names): Print the usage. (find_pk_from_sknode): New. * card-util.c (card_store_subkey): New. (copy_mpi): New. * cardglue.c (agent_openpgp_storekey): New.
* * mainproc.c (check_sig_and_print), keyedit.c (show_prefs,David Shaw2004-09-223-6/+15
| | | | | | menu_set_keyserver_url): Make sure that keyserver URLs with control characters inside are printed properly. In fact, handle them as UTF8.