aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* agent: Show just one warning with all failed passphrase constraints.Werner Koch2014-07-231-38/+74
| | | | | * agent/genkey.c (check_passphrase_constraints): Build a final warning after all checks.
* agent: Only one confirmation prompt for an empty passphrase.Werner Koch2014-07-231-21/+19
| | | | | * agent/genkey.c (check_passphrase_constraints): Moev empty passphrase check to the front.
* gpg: Add command --quick-gen-keyWerner Koch2014-07-235-3/+171
| | | | | | | | | | | * g10/gpg.c (aQuickKeygen): New. * g10/misc.c (is_valid_user_id): New stub. * g10/keygen.c (quickgen_set_para): New. (quick_generate_keypair): New. -- Note that the validation of the specified user id has not yet been implemented.
* common: Add cpr_get_answer_is_yes_def()Werner Koch2014-07-232-2/+10
| | | | | * g10/cpr.c (cpr_get_answer_is_yes): Factor code out to .... (cpr_get_answer_is_yes_def): ...new.
* gpg: Make --quick-sign-key promote local key signatures.Werner Koch2014-07-232-4/+4
| | | | * g10/keyedit.c (sign_uids): Promote local sigs in quick mode.
* Register DCO for Andreas SchwierWerner Koch2014-07-231-1/+3
| | | | --
* scd: Do not use the pcsc-wrapper.Werner Koch2014-07-223-10/+5
| | | | | | | | * scd/apdu.c (NEED_PCSC_WRAPPER): Do not define. * scd/Makefile.am (libexec_PROGRAMS): Remove gnupg-pcsc-wrapper (gnupg_pcsc_wrapper_SOURCES): Remove. (gnupg_pcsc_wrapper_LDADD): Remove. (gnupg_pcsc_wrapper_CFLAGS): Remove.
* gpg: Improve --list-packets output for faulty packets.Werner Koch2014-07-211-0/+50
| | | | * g10/parse-packet.c: Add list_mode output for certain failures.
* gpg: Cap size of attribute packets at 16MB.Werner Koch2014-07-211-1/+13
| | | | | | | | | | | | | | | * g10/parse-packet.c (parse_attribute): Avoid xmalloc failure and cap size of packet. -- Tavis Ormandy reported a fatal error for attribute packets with a zero length payload. This is due to a check in Libgcrypt's xmalloc which rejects a malloc(0) instead of silently allocating 1 byte. The fix is obvious. In addition we cap the size of attribute packets similar to what we do with user id packets. OpenPGP keys are not the proper way to store movies.
* Post beta release updateWerner Koch2014-07-031-0/+4
| | | | --
* Release 2.1.0-beta751gnupg-2.1.0-beta751Werner Koch2014-07-031-2/+31
|
* po: Auto-updateWerner Koch2014-07-034-4/+84
| | | | --
* gpg: Make show-uid-validity the default.Werner Koch2014-07-031-1/+3
|
* tests: Fix end-of-all-ticks test for Western locales.Werner Koch2014-07-031-0/+16
| | | | | | | | | | * common/t-timestuff.c (test_timegm): Use timegm if available. (main): Set TX to UTC if timegm is not available. -- On OpenBSD 5.3 i386 that test failed due to the use of mktime. Reported-by: Claus Assmann
* gpg: Spelling errorKristian Fiskerstrand2014-07-031-1/+1
|
* speedo: Update w32 installerWerner Koch2014-07-031-16/+16
| | | | --
* doc: Add gnupg-logo.pdfWerner Koch2014-07-031-0/+0
| | | | --
* gpg: Auto-create revocation certificates.Werner Koch2014-06-3010-9/+143
| | | | | | | | | | | | | * configure.ac (GNUPG_OPENPGP_REVOC_DIR): New config define. * g10/revoke.c (create_revocation): Add arg "leadin". (gen_standard_revoke): New. * g10/openfile.c (get_openpgp_revocdir): New. (open_outfile): Add MODE value 3. * g10/keyid.c (hexfingerprint): New. * g10/keygen.c (do_generate_keypair): Call gen_standard_revoke. -- GnuPG-bug-id: 1042
* estream: Fix minor glitch in "%.*s" format.Werner Koch2014-06-301-1/+3
| | | | | * common/estream-printf.c (pr_string): Take care of non-nul terminated strings.
* gpg: Rearrange code in gen_revoke.Werner Koch2014-06-301-51/+73
| | | | | * g10/revoke.c (gen_revoke): Factor some code out to ... (create_revocation): new.
* gpg: Create exported secret files and revocs with mode 700.Werner Koch2014-06-3012-31/+43
| | | | | | | | | | | | | | | * common/iobuf.c (direct_open): Add arg MODE700. (iobuf_create): Ditto. * g10/openfile.c (open_outfile): Add arg RESTRICTEDPERM. Change call callers to pass 0 for it. * g10/revoke.c (gen_desig_revoke, gen_revoke): Here pass true for new arg. * g10/export.c (do_export): Pass true for new arg if SECRET is true. -- GnuPG-bug-id: 1653. Note that this works only if --output has been used.
* common: Minor code cleanup for a legacy OS.Werner Koch2014-06-301-8/+7
| | | | * common/iobuf.c (direct_open) [__riscos__]: Simply cpp conditionals.
* speedo: Fix the w32 installer nameWerner Koch2014-06-271-1/+1
|
* po: Auto-updateWerner Koch2014-06-272-7/+22
| | | | --
* po: Update some strings of the French (fr) translation.Werner Koch2014-06-271-73/+36
|
* po: Update the German (de) translationWerner Koch2014-06-272-104/+63
|
* agent: Adjust for changed npth_eselect under W32.Werner Koch2014-06-271-2/+1
| | | | | * agent/gpg-agent.c (handle_connections) [W32]: Make events_set an unsigned int to match the changed prototype.
* dirmngr: Use the homedir based socket also under W32.Werner Koch2014-06-271-4/+0
| | | | | * common/homedir.c (dirmngr_user_socket_name): Use same code for all platforms.
* po: Update and enable Ukrainian (uk) translation.Yuri Chornoivan2014-06-272-229/+388
|
* Fix typos in messagesYuri Chornoivan2014-06-272-2/+2
|
* build: Remove unused options.Werner Koch2014-06-272-48/+9
| | | | | | | | | | * configure.ac: Remove option --build-agent-only. (FAKE_CURL, GPGKEYS_CURL): Remove check for cURL (GPGKEYS_MAILTO): Remove ac_subst but keep the currently unused SENDMAIL check. (GPGKEYS_KDNS): Remove ac_subst. * autogen.rc (final_info): Remove suggestion to use the removed option --enable-mailto.
* scd: Add pinpad support for REINER SCT cyberJack goNIIBE Yutaka2014-06-272-0/+3
| | | | | | | | | | * scd/ccid-driver.h (VENDOR_REINER, CYBERJACK_GO): New. * scd/ccid-driver.c (ccid_transceive_secure): Handle the case for VENDOR_REINER. Original work was by Alina Friedrichsen (tiny change). -- This is revised version which adapts changes of ccid-driver and was later ported from branch-2.0 to master (2.1)
* scd: Support reader Gemalto IDBridge CT30Werner Koch2014-06-272-0/+6
| | | | | | | | | * scd/ccid-driver.h (GEMPC_CT30): New product id. * scd/ccid-driver.c (parse_ccid_descriptor): Add quirk for that reader. -- GnuPG-bug-id: 1638
* gpg: Limit keysize for unattended key generation to useful values.Werner Koch2014-06-261-2/+12
| | | | | | | | | | | | | * g10/keygen.c (gen_elg): Enforce keysize 1024 to 4096. (gen_rsa): Enforce keysize 1024 to 4096. (gen_dsa): Enforce keysize 768 to 3072. -- It was possible to create 16k RSA keys in batch mode. In addition to the silliness of such keys, they have the major drawback that under GnuPG and Libgcrypt, with their limited amount of specially secured memory areas, the use of such keys may lead to an "out of secure memory" condition.
* Enable DNS SRV records again.Werner Koch2014-06-261-15/+4
| | | | | * configure.ac (GPGKEYS_HKP, GPGKEYS_FINGER): Remove ac_subst. (use_dns_srv): Make test work.
* agent: Fix export of RSA keys to OpenPGP.Werner Koch2014-06-261-1/+1
| | | | | * agent/cvt-openpgp.c (convert_transfer_key): Fix sexp build format string.
* gpg,gpgsm: Simplify wrong_args function.Werner Koch2014-06-262-7/+3
|
* speedo: "make clean-gnupg" may not remove the source.Werner Koch2014-06-261-5/+9
| | | | | | | * build-aux/speedo.mk (clean-$(1)): Take care of gnupg. -- I learned it the hard way and lost a bunch of stashed changes.
* gpgsm: Fix default config name.Werner Koch2014-06-261-1/+2
|
* doc: Improve the rendering of the manualWerner Koch2014-06-257-30/+53
|
* doc: Update for modern makeinfo.Werner Koch2014-06-252-13/+18
| | | | | * doc/texi.css: Remove. * doc/Makefile.am (AM_MAKEINFOFLAGS): Use --css-ref.
* gpg: Allow key-to-card upload for cert-only keysWerner Koch2014-06-251-1/+1
| | | | | | | * g10/card-util.c (card_store_subkey): Allo CERT usage for key 0. -- Suggested-by: Dominik Heidler <[email protected]>
* doc: Add note regarding gpg-preset-passphrase and --max-cache-ttl.Werner Koch2014-06-242-8/+12
| | | | | -- GnuPG-bug-id: 1615
* doc: Improve the description of gpg's --export commands.Werner Koch2014-06-241-9/+25
| | | | | -- GnuPG-bug-id: 1655
* Register DCO for Stefan Tomanek.Werner Koch2014-06-241-0/+3
| | | | --
* doc: Add conditionals for GnuPG-1Werner Koch2014-06-241-4/+7
|
* gpg: Make export of ECC keys work again.Werner Koch2014-06-202-64/+124
| | | | | | | | * agent/cvt-openpgp.c (convert_to_openpgp): Use the curve name instead of the curve parameters. * g10/export.c (canon_pubkey_algo): Rename to ... (canon_pk_algo): this. Support ECC. (transfer_format_to_openpgp): Expect curve name.
* gpg: Avoid infinite loop in uncompressing garbled packets.Werner Koch2014-06-201-8/+11
| | | | | | | | | | | | | | | * g10/compress.c (do_uncompress): Limit the number of extra FF bytes. -- A packet like (a3 01 5b ff) leads to an infinite loop. Using --max-output won't help if it is a partial packet. This patch actually fixes a regression introduced on 1999-05-31 (c34c6769). Actually it would be sufficient to stuff just one extra 0xff byte. Given that this problem popped up only after 15 years, I feel safer to allow for a very few FF bytes. Thanks to Olivier Levillain and Florian Maury for their detailed report.
* gpg: Fix a couple of spelling errorsKristian Fiskerstrand2014-06-171-2/+2
|
* speedo: Support building from dist-source generated tarball.Werner Koch2014-06-174-9/+64
|
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-21 00:22:38 +0000