aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
| * gpg: New export option "mode1003".Werner Koch2022-12-0211-35/+320
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * agent/command.c (cmd_export_key): Add option --mode1003. (command_has_option): Ditto. * g10/build-packet.c (do_key): Implement mode 1003. * g10/parse-packet.c (parse_key): Ditto. * g10/options.h (EXPORT_MODE1003): New.o * g10/call-agent.c (agent_export_key): Add arg mode1003. * g10/export.c (parse_export_options): Add "mode1003" (secret_key_to_mode1003): New. (receive_seckey_from_agent): Add arg mode1003. (do_export_one_keyblock): Pass option down. -- This option allows to export a secret key in GnuPG's native format. Thus no re-encryption is required and further the public key parameters are also authenticated if a protection passphrase has been used. Note that --import is not yet able to handle this new mode. Although old version of GnuPG will bail out with "invalid packet" if a mode1003 exported secret key is seen.
| * gpg: Remove a mostly duplicated function.Werner Koch2022-12-023-81/+36
| | | | | | | | | | | | | | | | * g10/export.c (receive_seckey_from_agent): Add arg r_key. (do_export_one_keyblock): Pass NULL for new arg. (receive_raw_seckey_from_agent): Remove. (export_secret_ssh_key): Use receive_seckey_from_agent. * g10/keygen.c (card_store_key_with_backup): Pass NULL for new arg.
| * tests: Simplify fake-pinentry to use the option only.NIIBE Yutaka2022-12-021-31/+41
| | | | | | | | | | | | | | | | | | | | | | * tests/openpgp/fake-pinentry.c (parse_pinentry_user_data): New. (main): Don't use PINENTRY_USER_DATA env var. -- Since environment variable is unreliable, use the option only. Signed-off-by: NIIBE Yutaka <[email protected]>
| * tests: Fix fake-pinentry for Windows.NIIBE Yutaka2022-12-021-8/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | * tests/openpgp/fake-pinentry.c (main): Override PINENTRY_USER_DATA, by the option. -- In the Assuan implementation for Windows, spawn function doesn't call the atfork callback. Thus, the environment variable is not updated by gpg-agent when it spawns pinentry. Reliable way is the interaction to override the option. Signed-off-by: NIIBE Yutaka <[email protected]>
| * tests: Fix make check-all.NIIBE Yutaka2022-12-021-0/+1
| | | | | | | | | | | | | | | | | | * Makefile.am (TESTS_ENVIRONMENT): Add GNUPG_IN_TEST_SUITE. -- Fixes-commit: 50d12860ef21e8480474fd94a0b4465d0339086d Signed-off-by: NIIBE Yutaka <[email protected]>
| * agent: Fix import of protected v5 keys.Werner Koch2022-12-011-3/+4
| | | | | | | | | | | | | | | | * agent/cvt-openpgp.c (convert_from_openpgp_main): Take care of version 5 keys. -- GnuPG-bug-id: 6294
| * gpgsm: Change default algo to AES-256.Werner Koch2022-12-011-1/+1
| | | | | | | | * sm/gpgsm.c (DEFAULT_CIPHER_ALGO): Change.
| * tests: Put a workaround for semihosted environment.NIIBE Yutaka2022-12-011-0/+3
| | | | | | | | | | | | | | | | | | | | | | | | * tests/openpgp/defs.scm [*win32*]: Use --build-prefix option. -- On the semihosted environment, output of simple gpgconf --list-components includes drive name (like Z:), which results failure of command invocation. This is a workaround. Signed-off-by: NIIBE Yutaka <[email protected]>
| * tests: More fix for semihosted environment.NIIBE Yutaka2022-12-013-22/+27
| | | | | | | | | | | | | | | | | | | | * common/all-tests.scm: Conditionalize by *win32*. * tests/cms/Makefile.am (GPGSM): Add missing GPGSM. * tests/pkits/Makefile.am (TESTS_ENVIRONMENT): Add EXEEXT. -- Signed-off-by: NIIBE Yutaka <[email protected]>
| * tests: Support semihosted environment.NIIBE Yutaka2022-12-015-13/+17
| | | | | | | | | | | | | | | | | | | | | | | | * Makefile.am (check-all): Add EXEEXT. * agent/all-tests.scm: Append EXEEXT. * common/all-tests.scm: Likewise. * g10/all-tests.scm: Likewise. * g13/all-tests.scm: Likewise. -- Signed-off-by: NIIBE Yutaka <[email protected]>
| * tests: Fix tests under cms.NIIBE Yutaka2022-12-011-2/+0
| | | | | | | | | | | | | | | | | | * tests/cms/all-tests.scm: Remove merge mistake. -- Fixes-commit: 1246e16432b4240ad81c0bd757d7458b609dfd96 Signed-off-by: NIIBE Yutaka <[email protected]>
| * tests,w32: Fix for semihosted environment.NIIBE Yutaka2022-12-011-1/+1
| | | | | | | | | | | | | | | | * tests/cms/Makefile.am (OLD_TESTS_ENVIRONMENT): Add EXEEXT. -- Signed-off-by: NIIBE Yutaka <[email protected]>
| * w32: Fix for tests on semihosted environment.NIIBE Yutaka2022-11-301-9/+9
| | | | | | | | | | | | | | | | * Makefile.am (all-local): Make links with EXEEXT. -- Signed-off-by: NIIBE Yutaka <[email protected]>
| * w32: Fix gnupg_unsetenv.NIIBE Yutaka2022-11-301-2/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * common/sysutils.c (gnupg_unsetenv): Don't use nonstandard extension of "NAME", but "NAME=". -- Microsoft implementation of putenv works to remove an environment variable by "NAME=". POSIX doesn't say that putenv with "NAME=" has same effect. GNU implementation doesn't support this way for removal of environment variable. Signed-off-by: NIIBE Yutaka <[email protected]>
| * doc: Deprecate scd-event option of scdaemon.NIIBE Yutaka2022-11-301-1/+2
| | | | | | | | | | | | -- Signed-off-by: NIIBE Yutaka <[email protected]>
| * wkd: New option --add-revocs and some fixes.Werner Koch2022-11-294-33/+228
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * tools/gpg-wks.h (opt): Add add_revocs. * tools/wks-util.c (wks_get_key): Add arg 'binary'. (wks_armor_key): New. (wks_find_add_revocs): New. (wks_cmd_install_key): Get key in binary mode and add revocations if enabled. * tools/gpg-wks-client.c (oAddRevocs): New. (opts): Add --add-revocs. (parse_arguments): Set option, (command_send): Get key in binary mode, add revocations if enabled, and explictly armor key. Remove kludge to skip the Content-type line in no_encrypt mode. (mirror_one_keys_userid): Always filter the key to get rid of the armor as received from dirmngr. Add revocations from the local keyring. -- Note that this also fixes an oddity of the new mirror command which used to store the keys armored as received from dirmngr.
| * doc: Comment typo fixWerner Koch2022-11-291-2/+2
| | | | | | | | --
| * wkd: Make use of --debug extprog.Werner Koch2022-11-291-1/+20
| | | | | | | | | | | | | | | | * tools/wks-util.c (debug_gpg_invocation): New. (get_key_status_cb): Enable debug output. (wks_get_key): Show gpg invocation. (wks_list_key): Ditto. (wks_filter_uid): Ditto.
| * gpg: New export-filter export-revocsWerner Koch2022-11-283-6/+124
| | | | | | | | | | | | | | | | | | | | | | * g10/options.h (EXPORT_REVOCS): New. * g10/export.c (export_select_filter): New. (struct export_filter_attic_s): Add field. (cleanup_export_globals): Cleanup. (parse_export_options): Add option "export-revocs". (parse_and_set_export_filter): Parse the select type. (do_export_revocs): New. (do_export_stream): Add a way to select things for export.
| * gpg: Fix double-free in gpg --card-edit.NIIBE Yutaka2022-11-281-1/+0
| | | | | | | | | | | | | | | | * g10/card-util.c (change_name): Don't free ISONAME here. -- Signed-off-by: NIIBE Yutaka <[email protected]>
| * gpg: Make --require-compliance work with out --status-fdWerner Koch2022-11-281-1/+1
| | | | | | | | | | | | | | | | | | * g10/mainproc.c (proc_encrypted): Set complaince_de_vs also if require-compliance is set. -- Without this fix require-compliance would fail if no --status-fd was used.
| * gpg: New option --list-filterWerner Koch2022-11-257-14/+204
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * g10/gpg.c (oListFilter): New. (opts): Add --list-filter. (main): Parse oListFilter. * g10/keylist.c: Include init.h and recsel.h. (struct list_filter_s, list_filter): New. (release_list_filter): New. (cleanup_keylist_globals): New. (parse_and_set_list_filter): New. (list_keyblock): Implement --list-filter type "select". * g10/import.c (impex_filter_getval): Add scope support and new property names "key-size", "algostr", "origin", "lastupd", and "url". -- This option is pretty useful to select keys based on their properties. The scope thing can be sued to limit a selection to just the primary key or to subkeys. For example: gpg -k --list-filter 'select=revoked-f && sub/algostr=ed25519' Lists all non-revoked keys with an ed25519 (signing)-subkey.
| * dirmngr: Silence ocsp debug output.Werner Koch2022-11-253-4/+11
| | | | | | | | | | | | | | * dirmngr/ocsp.c (check_signature_core): No debug output -- Also typo and doc fixes.
| * tests: Fix to support --enable-all-tests and variants.NIIBE Yutaka2022-11-248-16/+36
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * tests/gpgscm/tests.scm (test::scm): Add VARIANT argument. (tests::new): Likewise. (open-log-file, report): Support VARIANT. * tests/gpgme/all-tests.scm (setup-c, setup-py): Follow the change. * tests/cms/all-tests.scm: Likewise. * tests/cms/run-tests.scm: Likewise. * tests/migrations/all-tests.scm: Likewise. * tests/migrations/run-tests.scm: Likewise. * tests/openpgp/all-tests.scm: Likewise. * tests/openpgp/run-tests.scm: Likewise. -- Forward port from 2.2 branch of: 0fd7a902070ad9bdd835fa57dbadff25917bca42 Fixes-commit: 1c88104a3f00f7ca3790fbaab8f67b2b68cd6e18 Signed-off-by: NIIBE Yutaka <[email protected]>
| * tests:w32: Fix for non-dot file name for Windows.NIIBE Yutaka2022-11-241-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | * tests/migrations/from-classic.scm (assert-migrated): Handle the case on Windows. -- Forward port from 2.2 branch of: 754175a46d3bc34e9ef8098dbd05abdfd61ada64 Signed-off-by: NIIBE Yutaka <[email protected]>
| * tests:gpgscm:w32: Fix for GetTempPath.NIIBE Yutaka2022-11-241-0/+5
| | | | | | | | | | | | | | | | | | | | | | * tests/gpgscm/ffi.c (do_get_temp_path): Remove the last backslash. -- Forward port from 2.2 branch of: 9a75460652d6055983930e80e022396f613ed6f7 Signed-off-by: NIIBE Yutaka <[email protected]>
| * tests: Keep .log files in objdir.NIIBE Yutaka2022-11-241-1/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * tests/gpgscm/tests.scm (open-log-file): Keep the log file in objdir. -- Forward port from 2.2 branch of: 1c88104a3f00f7ca3790fbaab8f67b2b68cd6e18 Before the change, it is at ephemeral temp directory which is removed. This is not useful at all. Possibly, it was done before the introduce of ephemeral temp directory for each test and not changed. Signed-off-by: NIIBE Yutaka <[email protected]>
| * tests: Use 233 for invalid value of FD.NIIBE Yutaka2022-11-241-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | * tests/openpgp/issue2941.scm: Use 233. -- Forward port from 2.2 branch of: 43722438a826e1a162723a23452018ccf1b640ec On Windows machine (emulated by Wine), 23 may be valid value for handle. Signed-off-by: NIIBE Yutaka <[email protected]>
| * w32: Fix gnupg_tmpfile for possible failure.NIIBE Yutaka2022-11-181-6/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | * common/sysutils.c (gnupg_tmpfile): Use different value for next attempt. -- The resolution of system timer is typically in the range of 10 milliseconds to 16 milliseconds. Thus, before the change, it may fail. Actually, it failed with Wine emulation. Signed-off-by: NIIBE Yutaka <[email protected]>
| * scd: Redact --debug cardio output of a VERIFY APDU.Werner Koch2022-11-171-2/+16
| | | | | | | | | | | | | | | | | | | | * scd/apdu.c (pcsc_send_apdu) [DBG_CARD_IO]: Detect and redact a VERIFY. (send_apdu_ccid): Ditto. -- This should handle the most common case. GnuPG-bug-id: 5085
* | w32: Fix spawn functions for Windows for _fd use case.NIIBE Yutaka2022-11-303-15/+53
| | | | | | | | | | | | -- Signed-off-by: NIIBE Yutaka <[email protected]>
* | w32: Use call back when ASFW is needed.NIIBE Yutaka2022-11-302-11/+11
| | | | | | | | | | | | -- Signed-off-by: NIIBE Yutaka <[email protected]>
* | posix: factor out call_spawn_cb.NIIBE Yutaka2022-11-301-21/+31
| | | | | | | | | | | | -- Signed-off-by: NIIBE Yutaka <[email protected]>
* | common: Support new spawn functions for Windows.NIIBE Yutaka2022-11-294-11/+29
| | | | | | | | | | | | -- Signed-off-by: NIIBE Yutaka <[email protected]>
* | Replace gnupg_spawn_process_detached for POSIX.NIIBE Yutaka2022-11-282-6/+20
| | | | | | | | Signed-off-by: NIIBE Yutaka <[email protected]>
* | tests: Replace spawn-process by process-spawn.NIIBE Yutaka2022-11-282-109/+16
| | | | | | | | | | | | -- Signed-off-by: NIIBE Yutaka <[email protected]>
* | tests: Replace spawn_process_fd functions by the new spawn_process.NIIBE Yutaka2022-11-285-69/+155
| | | | | | | | | | | | -- Signed-off-by: NIIBE Yutaka <[email protected]>
* | Tweak the spawn API, again for POSIX.NIIBE Yutaka2022-11-283-14/+14
| | | | | | | | | | | | -- Signed-off-by: NIIBE Yutaka <[email protected]>
* | posix: Fix for spawn_cb.NIIBE Yutaka2022-11-283-8/+11
| | | | | | | | | | | | | | -- Fixes: 7571fd4cd02571ddd0ba84700c0a52704f0a9b5c Signed-off-by: NIIBE Yutaka <[email protected]>
* | Change spawn_cb semantics.NIIBE Yutaka2022-11-252-12/+20
| | | | | | | | | | | | | | | | -- So that the callback can replace fds for stdin/out/err. Signed-off-by: NIIBE Yutaka <[email protected]>
* | Replace other use cases of gnupg_spawn_process_fd.NIIBE Yutaka2022-11-253-35/+58
| | | | | | | | | | | | | | | | -- by gnupg_process_spawn Signed-off-by: NIIBE Yutaka <[email protected]>
* | Support gnupg_process_spawn with R_PROC=NULL.NIIBE Yutaka2022-11-252-3/+18
| | | | | | | | | | | | | | | | -- The use case of system(3) call. Signed-off-by: NIIBE Yutaka <[email protected]>
* | Fix gnupg_process_release.NIIBE Yutaka2022-11-252-2/+14
| | | | | | | | Signed-off-by: NIIBE Yutaka <[email protected]>
* | Replace pipe+gnupg_spawn_process_fd by gnupg_process_spawn.NIIBE Yutaka2022-11-255-56/+45
| | | | | | | | | | | | | | | | -- For g13. Signed-off-by: NIIBE Yutaka <[email protected]>
* | Replace pipe+gnupg_spawn_process_fd by gnupg_process_spawn.NIIBE Yutaka2022-11-251-18/+21
| | | | | | | | | | | | -- Signed-off-by: NIIBE Yutaka <[email protected]>
* | try to control inherited HANDLE for new Windows.NIIBE Yutaka2022-11-182-36/+100
| | | | | | | | Signed-off-by: NIIBE Yutaka <[email protected]>
* | change the semantics of spawn_cb routine.NIIBE Yutaka2022-11-174-75/+19
| | | | | | | | | | | | -- Signed-off-by: NIIBE Yutaka <[email protected]>
* | common,tools,dirmngr: Introduce gnupg_process_spawn.NIIBE Yutaka2022-11-1712-140/+1629
|/ | | | | | -- Signed-off-by: NIIBE Yutaka <[email protected]>
* common: Remove Windows CE support in common.NIIBE Yutaka2022-11-169-921/+5
| | | | | | | | | | | | | | | | | * common/Makefile.am (HAVE_W32CE_SYSTEM): Remove conditional build. (common_sources): Remove exechelp-w32ce.c. * common/asshelp.c [HAVE_W32CE_SYSTEM]: Remove the support. * common/common-defs.h [HAVE_W32CE_SYSTEM]: Likewise. * common/dotlock.c [HAVE_W32CE_SYSTEM]: Likewise. * common/exechelp-posix.c [HAVE_W32CE_SYSTEM]: Likewise. * common/exechelp-w32.c [HAVE_W32CE_SYSTEM]: Likewise. * common/gettime.c [HAVE_W32CE_SYSTEM]: Likewise. * common/exechelp-w32ce.c: Remove. * po/POTFILES.in: Update to remove common/exechelp-w32ce.c. -- Signed-off-by: NIIBE Yutaka <[email protected]>
* gpgsm: Fix colon outout of ECC encryption certificatesWerner Koch2022-11-151-3/+3
| | | | | | | | | | * sm/keylist.c (print_capabilities): Add arg algo and use it to check for ECC capabilities. (list_cert_colon): Call with algo. -- This will mark certificates with only keyAgreement usage correctly in the --with-colons listing.
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-21 09:06:38 +0000