aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* * keyedit.c (keyedit_menu): Request a trustdb update when adding a newDavid Shaw2004-03-282-2/+10
| | | | | user ID so the new ID gets validity set. Reported by Owen Taylor.
* * options.h, g10.c (main), compress-bz2.c (init_uncompress): RenameDavid Shaw2004-03-254-8/+14
| | | | | | --bzip2-compress-lowmem to --bzip2-decompress-lowmem since it applies to decompression, not compression.
* * keyedit.c (sign_uids, show_key_and_fingerprint, ask_revoke_sig,David Shaw2004-03-242-64/+61
| | | | | | menu_revsig, menu_showphoto): --keyid-format conversion. (menu_addrevoker): Use print_pubkey_info() rather than duplicating code.
* * trustdb.c (update_min_ownertrust, validate_keys): Do not use keystrDavid Shaw2004-03-195-7/+29
| | | | | | | | | | | | | | | functions in log_debug. * import.c (import_one): Try and collapse user IDs when importing a key for the first time. * keyedit.c (menu_addrevoker): Allow appointing a subkey as a designated revoker if the user forces it via keyid!, so long as the subkey can certify. Also use the proper date string when prompting for confirmation. * g10.c (main): Maintain ordering of multiple Comment lines. Requested by Peter Hyman.
* * mainproc.c (proc_pubkey_enc, print_pkenc_list, list_node):David Shaw2004-03-182-49/+51
| | | | | --keyid-format conversion.
* * getkey.c (skip_unusable, merge_selfsigs_main,David Shaw2004-03-162-36/+46
| | | | | | premerge_public_with_secret, lookup, get_user_id_string): --keyid-format conversion.
* * trustdb.c (add_utk, verify_own_keys, update_min_ownertrust,David Shaw2004-03-152-31/+34
| | | | | get_validity, ask_ownertrust, validate_keys): --keyid-format conversion.
* * import.c (check_prefs_warning, check_prefs): --keyid-format conversionDavid Shaw2004-03-152-228/+273
| | | | | | | and a little better text. (import_one, import_secret_one, import_revoke_cert, chk_self_sigs, delete_inv_parts, merge_blocks): Still more --keyid-format conversions.
* * keylist.c (print_seckey_info, print_pubkey_info): --keyid-formatDavid Shaw2004-03-062-35/+28
| | | | | | | conversion. (list_keyblock_print): 0xshort should not push us into the new list format since it is not much longer than regular 8-character short keyids.
* * keydb.h, keyid.c (keystr_from_pk, keystr_from_sk): New functions to pullDavid Shaw2004-03-064-65/+95
| | | | | | | | | a key string from a key in one step. This isn't faster than before, but makes for neater code. * keylist.c (list_keyblock_print): Use keystr_from_xx here. (print_key_data): No need to pass a keyid in.
* * keyid.c (keyid_from_sk): Minor performance boost by caching secret keyDavid Shaw2004-03-062-25/+41
| | | | | keyids so we don't have to calculate them each time.
* * getkey.c (merge_selfsigs_subkey): Do not mark subkeys valid if we do notDavid Shaw2004-03-053-5/+19
| | | | | | | | | support their pk algorithm. This allows for early (during get_*) rejection of a subkey, and selection of another. * passphrase.c (passphrase_to_dek): Give a little more information when we have room to do so.
* * revoke.c (export_minimal_pk), export.c (do_export_stream), passphrase.cDavid Shaw2004-03-057-60/+68
| | | | | | | | | | | (passphrase_to_dek), keyserver.c (print_keyrec): A few more places to use --keyid-format. * options.h, g10.c (main), export.c (parse_export_options, do_export_stream): Remove --export-all and the "include-non-rfc" export-option as they are no longer meaningful with the removal of v3 Elgamal keys.
* * iobuf.c (block_filter): Remove the old gpg indeterminate length mode.David Shaw2004-03-042-84/+13
| | | | | (iobuf_set_block_mode, iobuf_in_block_mode): Removed as superfluous.
* * iobuf.h: Remove iobuf_set_block_mode() and iobuf_in_block_mode().David Shaw2004-03-042-4/+6
|
* * armor.c (fake_packet, armor_filter): Use the 2440 partial lengthDavid Shaw2004-03-042-25/+53
| | | | | encoding for the faked plaintext packet.
* * options.h, g10.c (main), mainproc.c (check_sig_and_print): RemoveDavid Shaw2004-03-034-12/+13
| | | | | | verify-option show-long-keyids and replace with the more general keyid-format.
* * build-packet.c (write_header2): Remove call to start old gpg partialDavid Shaw2004-03-033-77/+89
| | | | | | | | | | | length mode and change all callers. (do_plaintext): Turn off partial length encoding now that we're done writing the packet. (do_comment, do_user_id): Try for a headerlen of 2 since that's the smallest and most likely encoding for these packets. * parse-packet.c (parse): Remove call to start old gpg partial length mode.
* * options.h, g10.c (main): Add a more flexible --keyid-format option toDavid Shaw2004-03-037-81/+133
| | | | | | | | | | | | replace the list-option (and eventually verify-option) show-long-keyids. The format can be short, long, 0xshort, and 0xlong. * keydb.h, keyid.c (keystr, keystrlen): New functions to generate a printable keyid. * keyedit.c (print_and_check_one_sig, show_key_with_all_names), keylist.c (list_keyblock_print): Use new keystr() function here to print keyids.
* * packet.h, free-packet.c (free_encrypted, free_plaintext), parse-packet.cDavid Shaw2004-03-034-52/+66
| | | | | | | | (copy_packet, skip_packet, skip_rest, read_rest, parse_plaintext, parse_encrypted, parse_gpg_control): Use a flag to indicate partial or indeterminate encoding. This is the first step in some minor surgery to remove the old gpg partial length encoding.
* * parse-packet.c (parse): Only data-type packets are allowed to useDavid Shaw2004-03-012-28/+51
| | | | | OpenPGP partial length encoding.
* * iobuf.c (block_filter): Properly handle a partial body stream that endsDavid Shaw2004-03-012-1/+13
| | | | | with a 5-byte length that happens to be zero.
* * unsetenv.c: Fixed debugging typo.David Shaw2004-02-282-1/+5
|
* * Makefile.am: Don't split LDADD across two lines since some make programsDavid Shaw2004-02-282-4/+8
| | | | | | can't handle blank lines after a \ continuation. Noted by Christoph Moench-Tegeder.
* Post release version number changeWerner Koch2004-02-262-1/+5
|
* Preparing for 1.3.5V1-3-5Werner Koch2004-02-267-32/+39
|
* * gpg.sgml: Document --ask-cert-level, --max-output, andDavid Shaw2004-02-262-12/+39
| | | | | --default-cert-level.
* * gpg.sgml: Document keyserver-option http-proxy, import-optionDavid Shaw2004-02-262-20/+29
| | | | | | merge-only, remove old honor-http-proxy, --merge-only, and --emulate-md-encode-bug. Document COLUMNS and LINES.
* * README: Update copyright.David Shaw2004-02-263-7/+41
| | | | | | | * NEWS: Note --max-output, --list-config, --min-cert-level, AIX fix, new http-proxy keyserver-option, new LDAP server code, TLS, LDAPS, and --show-session-key with --symmetric.
* * delkey.c (do_delete_key): Allow deleting a public key with a secretDavid Shaw2004-02-268-33/+35
| | | | | | | | | | | | | present if --expert is set. * plaintext.c (handle_plaintext): Make bytecount static so it works with multiple literal packets inside a message. * encode.c, helptext.c (keygen.algo, keygen.algo.elg_se), keygen.c (ask_algo), sig-check.c (do_check_messages), skclist.c (build_sk_list): Rename "ElGamal" to "Elgamal" as that is the proper spelling nowadays. Suggested by Jon Callas.
* * gpgkeys_ldap.c (send_key): List pgpCertID as one of the deletedDavid Shaw2004-02-262-8/+18
| | | | | | | attributes. This guarantees that if something goes wrong, we won't be able to complete the transaction, thus leaving any key already existing on the server intact.
* * plaintext.c: Copyright.David Shaw2004-02-247-172/+201
| | | | | | | | | | | | | | * encode.c (encode_simple): Show cipher with --verbose. * options.h, g10.c (main), keyedit.c (sign_keys): Add --ask-cert-level option to enable cert level prompts during sigs. Defaults to on. Simplify --default-cert-check-level to --default-cert-level. If ask-cert-level is off, or batch is on, use the default-cert-level as the cert level. * options.h, g10.c (main), trustdb.c (mark_usable_uid_certs): Simplify --min-cert-check-level to --min-cert-level.
* (lock_pool) [_AIX]: Also set errno.Werner Koch2004-02-242-1/+6
|
* * gpgkeys_ldap.c (delete_one_attr): Removed. (make_one_attr): DeleteDavid Shaw2004-02-242-79/+83
| | | | | | | | functionality added. Optional deduping functionality added (currently only used for pgpSignerID). (build_attrs): Translate sig entries into pgpSignerID. Properly build the timestamp for pgpKeyCreateTime and pgpKeyExpireTime.
* * options.h, g10.c (main), trustdb.c (mark_usable_uid_certs): AddDavid Shaw2004-02-234-6/+23
| | | | | | --min-cert-check-level option to specify minimum cert check level. Defaults to 2 (so 0x11 sigs are ignored). 0x10 sigs cannot be ignored.
* * gpgkeys_ldap.c (delete_one_attr): New function to replace attributesDavid Shaw2004-02-232-9/+65
| | | | | | | | | with NULL (a "delete" that works even for nonexistant attributes). (send_key): Use it here to remove attributes so a modify operation starts with a clean playing field. Bias sends to modify before add, since (I suspect) people update their existing keys more often than they make and send new keys to the server.
* * plaintext.c (handle_plaintext): Properly handle a --max-output of zeroDavid Shaw2004-02-222-5/+8
| | | | | (do not limit output at all).
* * keyserver.c (keyserver_spawn): Use the full 64-bit keyid in the INFODavid Shaw2004-02-222-8/+35
| | | | | | | header lines, and include "sig:" records for the benefit of people who store their keys in LDAP servers. It makes it easy to do queries for things like "all keys signed by Isabella".
* * gpgkeys_ldap.c (epoch2ldaptime): New. Converse of ldap2epochtime.David Shaw2004-02-222-57/+534
| | | | | | | | | | (make_one_attr): New. Build a modification list in memory to send to the LDAP server. (build_attrs): New. Parse INFO lines sent over by gpg. (free_mod_values): New. Unwinds a modification list. (send_key_keyserver): Renamed from old send_key(). (send_key): New function to send a key to a LDAP server. (main): Use send_key() for real LDAP servers, send_key_keyserver() otherwise.
* * util.h: Prototype for hextobyte().David Shaw2004-02-212-2/+6
|
* * miscutil.c (hextobyte): Moved here from g10/misc.c so I can use it inDavid Shaw2004-02-212-0/+30
| | | | | the keyserver helpers.
* * main.h, misc.c (hextobyte): Removed. It's in libutil.a now.David Shaw2004-02-213-26/+4
|
* * keyserver.c (keyserver_export): Disallow user strings that aren't keyDavid Shaw2004-02-202-13/+35
| | | | | | | IDs. (keyserver_import): Clarify error message. (keyserver_spawn): Properly handle 8 bit characters in user IDs in the info lines during SEND.
* * configure.ac: Check for timegm(). Replacement functions for setenv()David Shaw2004-02-202-5/+9
| | | | | and unsetenv().
* * mkdtemp.c: New (moved from g10/), setenv.c: New, unsetenv.c: New.David Shaw2004-02-205-2/+217
| | | | | * Makefile.am: Include @LIBOBJS@ for replacement functions.
* * mkdtemp.c: Removed.David Shaw2004-02-204-101/+13
| | | | | | | | * Makefile.am: We get mkdtemp.c from libutil.a now, so don't link with @LIBOBJS@. * keyserver.c (keyserver_spawn): Pass the scheme to the keyserver helper.
* * gpgkeys_ldap.c: Replacement prototypes for setenv and unsetenv.David Shaw2004-02-203-37/+64
| | | | | | | | | | (search_key): Catch a SIZELIMIT_EXCEEDED error and show the user whatever the server did give us. (find_basekeyspacedn): There is no guarantee that namingContexts will be readable. * Makefile.am: Link gpgkeys_ldap with libutil.a to get the replacement functions (and eventually translations, etc).
* * gpgkeys_ldap.c (ldap2epochtime): LDAP timestamps are UTC, so do notDavid Shaw2004-02-192-10/+40
| | | | | | | correct for timezones. (main): Find the basekeyspacedn before we try to start TLS, so we can give a better error message when a user tries to use TLS with a LDAP keyserver.
* * configure.ac: Check for ln -s and add GPGKEYS_LDAP conditional, both forDavid Shaw2004-02-192-0/+5
| | | | | making gpgkeys_ldaps symlink to gpgkeys_ldap.
* * Makefile.am: Add automake conditionals to symlink gpgkeys_ldaps toDavid Shaw2004-02-193-12/+144
| | | | | | | | | | gpgkeys_ldap when needed. * gpgkeys_ldap.c (main): Add support for LDAPS and TLS connections. These are only useful and usable when talking to real LDAP keyservers. Add new "tls" option to tune TLS use from off, to try quietly, to try loudly, or to require TLS.