| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
| |
| |
| |
| |
| | |
using sprintf which is harder to read and modify.
|
| |
| |
| |
| |
| |
| |
| |
| | |
and KS_SEARCH_KEYID_LONG to search for a key ID.
* gpgkeys_ldap.c (search_key): Use it here to flip from pgpUserID
searches to pgpKeyID or pgpCertID.
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
* keyedit.c (menu_backsign): Allow backsigning even if the secret
subkey doesn't have a binding signature.
* armor.c (radix64_read): Don't report EOF when reading only a pad (=)
character. The EOF actually starts after the pad.
* gpg.c (main): Make --export, --send-keys, --recv-keys,
--refresh-keys, and --fetch-keys follow their arguments from left to
right. Suggested by Peter Palfrader.
|
| | |
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| |
| | |
stderr and allow spaces in a fingerprint. Also warn when a key is
over 16k (as that is the default max-cert-size) and fail when a key is
over 64k as that is the DNS limit in many places.
|
| |
| |
| |
| |
| | |
so people don't have to do it manually.
|
| | |
|
| | |
|
| |
| |
| |
| |
| | |
Fix strings to not start with a capital letter as per convention.
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
than 160 bits as per DSA2. This will allow us to verify and issue DSA2
signatures for some backwards compatibility once we start generating DSA2
keys.
* sign.c (do_sign), sig-check.c (do_check): Change all callers.
* sign.c (do_sign): Enforce the 160-bit check for new signatures here
since encode_md_value can handle non-160-bit digests now. This will need
to come out once the standard for DSA2 is firmed up.
|
| | |
|
| | |
|
| |
| |
| |
| |
| | |
the regular old API that is compatible with other LDAP libraries.
|
| | |
|
| |
| |
| |
| |
| | |
than causing an error.
|
| | |
|
| |
| |
| |
| |
| | |
sig_to_notation conversion. Noted by Peter Palfradrer.
|
| | |
|
| |
| |
| |
| |
| | |
change. It's now all done in configure.
|
| |
| |
| |
| |
| | |
changing #ifdefs in the rest of the code.
|
| |
| |
| |
| |
| |
| |
| | |
on OSX.
* README: Add note on how to build a fat binary on OSX.
|
| |
| |
| |
| |
| |
| |
| | |
rather than '#ifdef' BIG_ENDIAN_HOST. Harmless as we explicitly
define BIG_ENDIAN_HOST to 1 when we need it, but needed for OSX fat
builds when we define BIG_ENDIAN_HOST to another macro.
|
| |
| |
| |
| |
| | |
Apple-specific BIND_8_COMPAT.
|
| |
| |
| |
| |
| |
| |
| | |
both the fingerprint alone, and fingerprint+URL cases.
* getkey.c (get_pubkey_byname): Minor cleanup.
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
same API as the other auto-key-locate fetchers.
* getkey.c (get_pubkey_byname): Use the fingerprint of the key that we
actually fetched. This helps prevent problems where the key that we
fetched doesn't have the same name that we used to fetch it. In the
case of CERT and PKA, this is an actual security requirement as the
URL might point to a key put in by an attacker. By forcing the use of
the fingerprint, we won't use the attacker's key here.
|
| |
| |
| |
| |
| |
| | |
keyserver_import_cert, keyserver_import_name, keyserver_import_ldap):
Pass fingerprint info through.
|
| |
| |
| |
| |
| |
| | |
the key being imported. (import_keys_internal, import_keys_stream,
import): Change all callers.
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
is no backsig present. Give a URL for more information.
* keyedit.c (menu_backsign): Small tweak to work properly with keys
originally generated with older GnuPGs that included comments in the
secret keys.
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| | |
to be deleted with a '-' prefix.
* keyedit.c (menu_set_notation): Use it here to allow deleting a notation
marked with '-'. This works with either "-notation" or "-notation=value".
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| |
| | |
self-signatures. (keyedit_menu): Call it here.
(tty_print_notations): Helper. (show_prefs): Show notations in
"showpref".
|
| |
| |
| |
| |
| | |
duplicate code by using notation functions.
|
| | |
|
| |
| |
| |
| |
| |
| | |
(keygen_add_notations): Provide printable text for non-human-readable
notation values.
|
| |
| |
| |
| |
| |
| | |
(keygen_add_notations): Tweak to handle non-human-readable notation
values.
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Use it here for the various notation commands.
* packet.h, main.h, keygen.c (keygen_add_notations), build-packet.c
(string_to_notation, sig_to_notation) (free_notation): New "one stop
shopping" functions to handle notations and start removing some code
duplication.
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
pka-lookups, not pka-lookup.
* options.h, gpg.c (main), keyedit.c [cmds], sig-check.c
(signature_check2): Rename "backsign" to "cross-certify" as a more
accurate name.
|
| |
| |
| |
| |
| | |
current code.
|
| |
| |
| |
| |
| | |
shorthand). Document max-cert-size.
|
| |
| |
| |
| |
| | |
other cleanups.
|