aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* * main.h, keyedit.c, keygen.c: Back out previous (2002-12-01) change.David Shaw2002-12-047-78/+104
| | | | | | | | | | | | | | | | | | | | | | | | Minimal isn't always best. * sign.c (update_keysig_packet): Use the current time rather then a modification of the original signature time. Make sure that this doesn't cause a time warp. * keygen.c (keygen_add_key_expire): Properly handle a key expiration date in the past (use a duration of 0). * keyedit.c (menu_expire): Use update_keysig_packet so any sig subpackets are maintained during the update. * build-packet.c (build_sig_subpkt): Mark sig expired or unexpired when the sig expiration subpacket is added. (build_sig_subpkt_from_sig): Handle making an expiration subpacket from a sig that has already expired (use a duration of 0). * packet.h, sign.c (update_keysig_packet), keyedit.c (menu_set_primary_uid, menu_set_preferences): Add ability to issue 0x18 subkey binding sigs to update_keysig_packet and change all callers.
* * trustdb.c (validate_keys): Show trust parameters when building trustdb,David Shaw2002-12-043-27/+42
| | | | | | | | | and make sure that the version record update was successful. (init_trustdb): If the current parameters aren't what was used for building the trustdb, the trustdb is invalid. * tbio.c (tdbio_db_matches_options): Update to work with new trustdbs.
* * tdbio.h, tdbio.c (tdbio_read_record, tdbio_write_record): Store trustDavid Shaw2002-12-045-9/+51
| | | | | | | | | | | | model in the trustdb version record. (tdbio_update_version_record): New function to update version record values during a trustdb check or update. (tdbio_dump_record): Show trust model in dump. * trustdb.c (validate_keys): Call tdbio_update_version_record on success so that the correct options are stored in the trustdb. * options.h: rearrange trust models so that CLASSIC is 0 and OPENPGP is 1.
* * options.h, g10.c (main), encode.c (write_pubkey_enc_from_list),David Shaw2002-12-0310-37/+74
| | | | | | | | | | | | | | | pkclist.c (algo_available), revoke.c (gen_revoke): Add --pgp8 mode. This is basically identical to --pgp7 in all ways except that signing subkeys, v4 data sigs (including expiration), and SK comments are allowed. * getkey.c (finish_lookup): Comment. * main.h, keylist.c (reorder_keyblock), keyedit.c (keyedit_menu): Reorder user ID display in the --edit-key menu to match that of the --list-keys display. * g10.c (add_notation_data): Fix initialization.
* Marked unused slots in the trustdb.Werner Koch2002-12-031-4/+4
|
* * gpg.sgml: Point out that if the user absolutely must, it's better to useDavid Shaw2002-12-012-0/+15
| | | | | | | | | --pgpX than forcing an algorithm manually. Better still not to use anything, of course. CVS: ---------------------------------------------------------------------- gpg.sgml CVS: ----------------------------------------------------------------------
* * distfiles, gnupg.spec.in: Include convert-from-106.David Shaw2002-12-014-1/+68
| | | | | | | * convert-from-106: Script to automate the 1.0.6->later conversion. It marks all secret keys as ultimately trusted, adds the signature caches, and checks the trustdb.
* * keyedit.c (menu_expire): Don't lose key flags when changing theDavid Shaw2002-12-015-20/+71
| | | | | | | | | | | | | | expiration date of a subkey. This is not the most optimal solution, but it is minimal change on the stable branch. * main.h, keygen.c (do_copy_key_flags): New function to copy key flags, if any, from one sig to another. (do_add_key_expire): New function to add key expiration to a sig. (keygen_copy_flags_add_expire): New version of keygen_add_key_expire that also copies key flags. (keygen_add_key_flags_and_expire): Use do_add_key_expire. * import.c (fix_hkp_corruption): Comment.
* * NEWS: Add notes about notation names and '@', the --trust-model option,David Shaw2002-11-262-0/+36
| | | | | | | default algorithms from --personal-xxxx, --primary-keyring, changes with --s2k-digest-algo, the new anonymous recipient improvements, and non-optimized memory wiping.
* * gpg.sgml: Document --primary-keyring. Clarify --s2k-cipher-algo,David Shaw2002-11-262-4/+21
| | | | | | --s2k-digest-algo, --personal-cipher-preferences, --personal-digest-preferences, and --personal-compress-preferences.
* * gpg.sgml: Document --sig-policy-url, --cert-policy-url, --sig-notation,David Shaw2002-11-252-16/+33
| | | | | | | --cert-notation. Clarify --show-notation and --show-policy-url that policy URLs and notations can be used in data signatures as well. Add note about '@' being a required character in notation names.
* no RISC OS filetype needed for nooutputStefan Bellon2002-11-252-15/+25
|
* * main.h, misc.c (default_cipher_algo, default_compress_algo): New.David Shaw2002-11-256-23/+50
| | | | | | | | | | | | Return the default algorithm by trying --cipher-algo/--compress-algo, then the first item in the pref list, then s2k-cipher-algo or ZIP. * sign.c (sign_file, sign_symencrypt_file), encode.c (encode_simple, encode_crypt): Call default_cipher_algo and default_compress_algo to get algorithms. * g10.c (main): Allow pref selection for compress algo with --openpgp.
* * mainproc.c (proc_encrypted): Use --s2k-digest-algo for passphraseDavid Shaw2002-11-252-1/+4
| | | | | mangling rather than --digest-algo.
* * sign.c (hash_for): If --digest-algo is not set, butDavid Shaw2002-11-252-8/+38
| | | | | | | | --personal-digest-preferences is, then use the first hash algorithm in the personal list. If the signing algorithm is DSA, then use the first 160-bit hash algorithm in the personal list. If --pgp2 is set and it's a v3 RSA key, use MD5.
* * g10.c (main), keydb.c (keydb_add_resource, keydb_locate_writable):David Shaw2002-11-253-10/+16
| | | | | | Rename --default-keyring as --primary-keyring. Stefan wins the naming contest.
* * g10.c (add_notation_data): Disallow notation names that do not contain aDavid Shaw2002-11-244-8/+37
| | | | | | | | | | | '@', unless --expert is set. This is to help prevent people from polluting the (as yet unused) IETF namespace. * main.h: Comments about default algorithms. * photoid.c (image_type_to_string): Comments about 3-letter file extensions.
* * encode.c (encode_simple), passphrase.c (passphrase_to_dek), sign.cDavid Shaw2002-11-244-8/+9
| | | | | | (sign_symencrypt_file): Use --s2k-digest-algo for passphrase mangling rather than --digest-algo.
* * gpg.sgml: Add an interoperability section.David Shaw2002-11-222-1/+28
|
* * keygen.c (keygen_set_std_prefs): Properly handle an empty preferenceDavid Shaw2002-11-213-30/+40
| | | | | | | | string. * misc.c (string_to_compress_algo): "none" is a bad choice since it conflicts with the "none" in setpref.
* * gpgkeys_ldap.c (main), gpgkeys_hkp.c (main): Use new keyserver protocolDavid Shaw2002-11-183-2/+7
| | | | | version.
* * gpg.sgml: Correct defaults for --s2k-mode and --s2k-digest-mode. NotedDavid Shaw2002-11-172-10/+13
| | | | | by Haakon Riiser.
* * config.links: Use OpenBSD/NetBSD powerpc assembler code for Darwin.David Shaw2002-11-162-2/+7
| | | | | Successfully tested by Gordon Worley.
* * gpg.sgml: --compress-algo now allows algorithm names.David Shaw2002-11-153-27/+65
| | | | | | | | * gpg.sgml: Document --trust-model. * README.W32: Add blurb on how to create a ZIP file, changed requirement for mingw32 to 0.3.2.
* * g10.c (main): Allow compression algorithm names as the argument toDavid Shaw2002-11-153-4/+43
| | | | | | | | | --compress-algo. The old algorithm names still work for backwards compatibility. * misc.c (string_to_compress_algo): Allow "none" as an alias for "uncompressed".
* * gpgkeys_ldap.c (get_key): The deduping code requires "pgpcertid", butDavid Shaw2002-11-142-2/+11
| | | | | that was not available when running without verbose on. Noted by Stefan.
* fixed type incompatibilityStefan Bellon2002-11-132-1/+6
|
* * encode.c (encode_simple): Make sure that files larger than about 4G useDavid Shaw2002-11-136-27/+102
| | | | | | | | | | | | | | | | | | | partial length encoding. This is required because OpenPGP allows only for 32 bit length fields. From Werner on stable branch. * getkey.c (get_pubkey_direct): Renamed to... (get_pubkey_fast): this and made extern. (get_pubkey_byfprint_fast): New. From Werner on stable branch. * keydb.h, import.c (import_one): Use get_pubkey_fast instead of get_pubkey. We don't need a merged key and actually this might lead to recursions. (revocation_present): Likewise for search by fingerprint. From Werner on stable branch. * g10.c (main): Try to create the trustdb even for non-colon-mode list-key operations. This is required because getkey needs to know whether a a key is ultimately trusted. From Werner on stable branch.
* * exec.c [__CYGWIN32__]: Keep cygwin separate from Mingw32; we don't needDavid Shaw2002-11-136-15/+28
| | | | | | | | | | | | | | | it here as it behaves more like a Posix system. From Werner on stable branch. * passphrase.c (agent_get_passphrase): Ditto. From Werner on stable branch. * tdbio.c (MY_O_BINARY): Need binary mode with Cygwin. From Werner on stable branch. * g10.c, gpgv.c (main) [__CYGWIN32__]: Don't get the homedir from the registry. From Werner on stable branch.
* * mk-w32-dist: Don't use iconv for pl.po. From Werner on stable branch.David Shaw2002-11-132-2/+14
| | | | | * mk-w32-dist: Include gpgkeys_ldap and gpgkeys_hkp.
* * util.h [__CYGWIN32__]: Don't need the registry prototypes. From WernerDavid Shaw2002-11-132-1/+6
| | | | | on stable branch.
* * THANKS: Changes from stable branch.David Shaw2002-11-135-17/+48
| | | | | | | | | | | | | | | | | | | | | | | | | * configure.ac: Check for ctermid(). From Werner on stable branch. * configure.ac (GPGKEYS_LDAP,GPGKEYS_HKP): Add $EXEEXT. From Werner on stable branch. * configure.ac (try_gettext): Remove special case for cygwin. This removes all the DOS specific macros and let Cygwin work like a real OS. Needs a couple of changes elsewhere but after all, GnuPG presents itself much more like a Posix program and can be used in a full Cygwin environment; e.g. used along with mutt. Changes suggested by Volker Quetschke. From Werner on stable branch. * acinclude.m4 (GNUPG_SYS_NM_PARSE): Allow for underscore in test symbols. Useful for Cygwin builds. (GNUPG_SYS_SYMBOL_UNDERSCORE): Don't hardwire to yes for Cygwin. From Werner on stable branch. * README: Add an installation note for Darwin 6.1. From Werner on stable branch.
* * secmem.c (lock_pool) [__CYGWIN__]: Don't print secmem warning. FromDavid Shaw2002-11-132-1/+6
| | | | | Werner on stable branch.
* * keyedit.c (show_key_with_all_names_colon): Make --with-colons --editDavid Shaw2002-11-135-41/+90
| | | | | | | | | | | | | | | | display match the validity and trust of --with-colons --list-keys. * passphrase.c (agent_send_all_options): Fix compile warning. * keylist.c (list_keyblock_colon): Validity for subkeys should match that of the primary key, and not that of the last user ID. * getkey.c (merge_selfsigs): Revoked/expired/invalid primary keys carry these facts onto all their subkeys, but only after the subkey has a chance to be marked valid. This is to fix an incorrect "invalid public key" error verifying a signature made by a revoked signing subkey, with a valid unrevoked primary key.
* * config.sub, config.guess: Updated from ftp.gnu.org/gnu/configWerner Koch2002-11-123-249/+363
| | | | | to version 2002-11-08.
* Post release version number bump.Werner Koch2002-11-122-1/+5
|
* Preparing 1.3.1 release.V1-3-1Werner Koch2002-11-124-665/+765
|
* * gpgkeys_ldap.c (get_key): Fix typo in deduping code.David Shaw2002-11-102-1/+5
|
* * ttyio.c (TERMDEVICE): Removed.Werner Koch2002-11-093-14/+47
| | | | | | (tty_get_ttyname): New. (init_ttyfp): Use it here instead of the TERMDEVICE macro.
* * passphrase.c (agent_send_all_options): Use tty_get_ttyname toWerner Koch2002-11-092-2/+7
| | | | | get the default ttyname.
* Fixed copyright yearWerner Koch2002-11-091-1/+1
|
* * keyring.h, keyring.c (keyring_register_filename): Return the pointer ifDavid Shaw2002-11-086-29/+89
| | | | | | | | | | a given keyring is registered twice. * keydb.h, keydb.c (keydb_add_resource): Use flags to indicate a default keyring. (keydb_locate_writable): Prefer the default keyring if possible. * g10.c (main): Add --default-keyring option.
* * options.h, g10.c (main), trustdb.c (ask_ownertrust): AddDavid Shaw2002-11-074-6/+35
| | | | | | | | --force-ownertrust option for debugging purposes. This allows setting a whole keyring to a given trust during an --update-trustdb. Not for normal use - it's just easier than hitting "4" all the time to test a large trustdb.
* * w32reg.c (read_w32_registry_string): Fixed expanding of the environmentDavid Shaw2002-11-065-12/+31
| | | | | | | | | | | | | | buffer; didn't worked at all. Reported by Thijmen Klok. From Werner on stable branch. * secmem.c (secmem_free, secmem_term): Use wipememory2() instead of memset() to overwrite secure memory * iobuf.c (direct_open): Handle mode 'b' if O_BINARY is available. From Werner on stable branch. * fileutil.c: Comment from stable branch.
* * util.h: Add wipememory2() macro (same as wipememory, but can specify theDavid Shaw2002-11-062-1/+7
| | | | | byte to wipe with).
* * rndw32.c [__CYGWIN32__]: Don't include winioctl.h - it is not requiredDavid Shaw2002-11-0614-25/+41
| | | | | | | | | | | | | | | anymore. (From Werner) * random.c (read_seed_file,update_random_seed_file): Use binary mode for __CYGWIN__. (From Werner) * blowfish.c (burn_stack), cast5.c (burn_stack), des.c (burn_stack), md5.c (burn_stack), random.c (burn_stack, read_pool, fast_random_poll), rijndael.c (burn_stack), rmd160.c (burn_stack), rndegd.c (rndegd_gather_random), rndlinux.c (rndlinux_gather_random), sha1.c (burn_stack), tiger.c (burn_stack), twofish.c (burn_stack): Replace various calls to memset() with the more secure wipememory().
* * pubkey-enc.c (get_session_key): With hidden recipients or try a givenDavid Shaw2002-11-066-13/+57
| | | | | | | | | | | | | | | passphrase against all secret keys rather than trying all secret keys in turn. Don't if --try-all-secrets or --status-fd is enabled. * passphrase.c (passphrase_to_dek): Mode 1 means do a regular passphrase query, but don't prompt with the key info. * seckey-cert.c (do_check, check_secret_key): A negative ask count means to enable passphrase mode 1. * keydb.h, getkey.c (enum_secret_keys): Add flag to include secret-parts-missing keys (or not) in the list.
* * gpgkeys_ldap.c (key_in_keylist, add_key_to_keylist, free_keylist,David Shaw2002-11-052-198/+292
| | | | | | | get_key, search_key): The LDAP keyserver doesn't remove duplicates, so remove them locally. Do not include the key modification time in the search response.
* * keyserver.c (keyserver_search_prompt): When --with-colons is enabled,David Shaw2002-11-052-8/+16
| | | | | | don't try and fit the search output to the screen size - just dump the whole list.
* * keyserver.c (keyserver_search_prompt): When --with-colons is enabled,David Shaw2002-11-052-3/+27
| | | | | just dump the raw keyserver protocol to stdout and don't print the menu.
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-28 05:52:44 +0000