aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* gitlog-to-changelog: New option --tear-off.Werner Koch2011-12-122-7/+13
| | | | | * scripts/gitlog-to-changelog: Add option --tear-off. * Makefile.am (gen-ChangeLog): Use that option.
* gpgsm: Add new validation model "steed".Werner Koch2011-12-079-29/+104
| | | | | | | | | | | | | | | | | | | | * sm/gpgsm.h (VALIDATE_FLAG_STEED): New. * sm/gpgsm.c (gpgsm_parse_validation_model): Add model "steed". * sm/server.c (option_handler): Allow validation model "steed". * sm/certlist.c (gpgsm_cert_has_well_known_private_key): New. * sm/certchain.c (do_validate_chain): Handle the well-known-private-key attribute. Support the "steed" model. (gpgsm_validate_chain): Ditto. * sm/verify.c (gpgsm_verify): Return "steed" in the trust status line. * sm/keylist.c (list_cert_colon): Print the new 'w' flag. -- This is the first part of changes to implement the STEED proposal as described at http://g10code.com/steed.html . The idea for X.509 is not to use plain self-signed certificates but certificates signed by a dummy CA (i.e. one for which the private key is known). Having a single CA as an indication for the use of STEED might help other X.509 implementations to implement STEED.
* Correct punctuation in the ChangeLog summary line.Werner Koch2011-12-071-0/+1
| | | | * Makefile.am (gen-ChangeLog): Supply --append-dot.
* Allow comments which will not show up in the ChangeLogWerner Koch2011-12-071-0/+9
| | | | | | | | | | * scripts/gitlog-to-changelog: Ignore lines after a "--" line. -- The first line with two dashes at the start of a line (optionally followed by white space) stops copying the commit log lines to the ChangeLog entry in "make dist". This is useful to allow adding comments to the log which are not useful in a ChangeLog.
* gpgsm: Allow specification of an AuthorityKeyIdentifier.Werner Koch2011-12-061-0/+56
| | | | | | | * sm/certreqgen.c (pAUTHKEYID): New. (read_parameters): Add keyword Authority-Key-Id. (proc_parameters): Check its value. (create_request): Insert an Authority-Key-Id.
* gpgsm: Allow arbitrary extensions for cert creation.Werner Koch2011-12-064-5/+187
| | | | | | | | * sm/certreqgen.c (pSUBJKEYID, pEXTENSION): New. (read_parameters): Add new keywords. (proc_parameters): Check values of new keywords. (create_request): Add SubjectKeyId and extensions. (parse_parameter_usage): Support "cert" and the encrypt alias "encr".
* gpgsm: Fix storing of the serial numberWerner Koch2011-12-061-1/+1
| | | | * sm/certreqgen.c (create_request): Fix hex-bin conversion.
* Fix last change.Werner Koch2011-12-051-1/+0
| | | | * agent/command.c (start_command_handler): Remove use of removed var.
* Amend the agent code with more comments.Werner Koch2011-12-053-46/+161
| | | | * agent/command.c (server_local_s): Remove unused field MESSAGE_FD.
* Support the Cherry ST-2000 card reader.Werner Koch2011-12-022-10/+25
| | | | | | | | * scd/ccid-driver.c (SCM_SCR331, SCM_SCR331DI, SCM_SCR335) (SCM_SCR3320, SCM_SPR532, CHERRY_ST2000): New constants. (parse_ccid_descriptor): Use them. (scan_or_find_usb_device, ccid_transceive_secure): Handle Cherry ST-2000. Suggested by Matthias-Christian Ott.
* Avoid possible double free in export.c.Werner Koch2011-12-021-1/+1
| | | | | * g10/export.c (transfer_format_to_openpgp): Avoid possible double free of LIST. Reported by NIIBE Yutaka.
* Fix pinpad input support for passphrase modification.NIIBE Yutaka2011-12-024-194/+89
| | | | | | | | | | | | | | | | | | | | | * apdu.c (pcsc_keypad_verify): Have dummy Lc field with value 0. (pcsc_keypad_modify): Likewise. (pcsc_keypad_modify): It's only for ISO7816_CHANGE_REFERENCE_DATA. bConfirmPIN value is determined by the parameter p0. * app-openpgp.c (do_change_pin): The flag use_keypad should be 0 when reset_mode is on, or resetcode is on. use_keypad only makes sense for iso7816_change_reference_data_kp. * iso7816.h (iso7816_put_data_kp): Remove. (iso7816_reset_retry_counter_kp): Remove. (iso7816_reset_retry_counter_with_rc_kp): Remove. (iso7816_change_reference_data_kp): Add an argument: IS_EXCHANGE. * iso7816.c (iso7816_put_data_kp): Remove. (iso7816_reset_retry_counter_kp): Remove. (iso7816_reset_retry_counter_with_rc_kp): Remove. (iso7816_change_reference_data_kp): Add an argument: IS_EXCHANGE.
* Add hook to check the commit log syntax.Werner Koch2011-12-012-0/+134
| | | | * autogen.sh: Install commit-msg hook for git.
* Generate the ChangeLog from commit logs.Werner Koch2011-12-0144-1440/+2102
| | | | | | | | | | | | | * scripts/gitlog-to-changelog: New script. Taken from gnulib. * scripts/git-log-fix: New file. * scripts/git-log-footer: New file. * doc/HACKING: Describe the ChangeLog policy * ChangeLog: New file. * Makefile.am (EXTRA_DIST): Add new files. (gen-ChangeLog): New. (dist-hook): Run gen-ChangeLog. Rename all ChangeLog files to ChangeLog-2011.
* Fix pinpad input supportNIIBE Yutaka2011-12-012-17/+56
|
* Rewrite dns-cert.c to not use the gpg-only iobuf stuff.Werner Koch2011-11-307-109/+186
| | | | | | | | | | | | | * common/dns-cert.c: Remove iobuf.h. (get_dns_cert): Rename to _get_dns_cert. Remove MAX_SIZE arg. Change iobuf arg to a estream-t. Rewrite function to make use of estream instead of iobuf. Require all parameters. Return an gpg_error_t error instead of the type. Add arg ERRSOURCE. * common/dns-cert.h (get_dns_cert): New macro to pass the error source to _gpg_dns_cert. * common/t-dns-cert.c (main): Adjust for changes in get_dns_cert. * g10/keyserver.c (keyserver_import_cert): Ditto. * doc/gpg.texi (GPG Configuration Options): Remove max-cert-size.
* * common/estream.c (es_fopenmem_init): New.Werner Koch2011-11-302-3/+39
| | | | * common/estream.h (es_fopenmem_init): New.
* Add parameter checks and extend documentation of estream.Werner Koch2011-11-302-10/+35
| | | | | * estream.c (func_mem_create): Don't set FUNC_REALLOC if GROW is not set. Require FUNC_REALLOC if DATA is NULL and FUNC_FREE is given.
* dns-cert.c: Use constants for better readability.Werner Koch2011-11-302-8/+25
|
* Actually increase buffer size of t-dns-cert.c.Werner Koch2011-11-301-1/+1
|
* Re-indented dns-cert.cWerner Koch2011-11-301-121/+122
|
* Increase the default buffer size for DNS certificates.Werner Koch2011-11-303-2/+9
| | | | | * common/t-dns-cert.c (main): Increase MAX_SIZE to 64k. * g10/keyserver.c (DEFAULT_MAX_CERT_SIZE): Increase from 16k to 64k.
* Use separate test module for dns-cert.c.Werner Koch2011-11-305-62/+103
| | | | | * dns-cert.c (get_dns_cert): Factor test code out to ... * t-dns-cert.c: new file.
* Merge branch 'master' of git+ssh://playfair.gnupg.org/git/gnupgNIIBE Yutaka2011-11-294-1/+45
|\
| * Make sure HOME et al have no unsafe characters.Werner Koch2011-11-294-1/+45
| |
* | PC/SC pinpad support (pinpad input for modify pass phrase with resetcode, by ↵NIIBE Yutaka2011-11-296-73/+139
| | | | | | | | admin).
* | PC/SC pinpad support (pinpad input for modify pass phrase).NIIBE Yutaka2011-11-296-51/+196
|/
* Add build script to build all components in one run.Werner Koch2011-11-282-0/+54
| | | | | | | | Run this script in the parent directory of the working copies. It does a VPATH build in ~/tmp/gpg-tmp/b in the right order and installs everything below ~/tmp/gpg-tmp/. Based on a script by Jim Meyering.
* accept --with-libgpg-error-prefix as well as --with-gpg-error-prefixJim Meyering2011-11-282-2/+17
| | | | * m4/gpg-error.m4: Update from git master.
* Improve ssh card key diagnostic message.Werner Koch2011-11-282-2/+10
| | | | | | | * command-ssh.c (card_key_available): Change wording of no key diagnostic. (ssh_handler_request_identities): Do not call card_key_available if the scdaemon is disabled.
* PC/SC pinpad support.NIIBE Yutaka2011-11-289-25/+460
| | | | | | | | | | | | | | | | | | | | | | | | Before this change, it is layered like following: iso7816_verify iso7816_verify_kp apdu_send_simple, apdu_send_simple_kp ... After this change, it will be layered like: iso7816_verify iso7816_verify_kp apdu_send_simple apdu_keypad_verify ... and apdu_send_simple_kp will be deprecated. For PC/SC API, we use: SCardControl API to compose CCID PC_to_RDR_Secure message SCardTransmit API to compose CCID PC_to_RDR_XfrBlock message Considering the support of PC/SC, we have nothing to share between _kp version of iso7816_* and no _kp version.
* Merge branch 'master' of git+ssh://playfair.gnupg.org/git/gnupgWerner Koch2011-11-240-0/+0
|\
| * Make HKP kyeserver engine work again.Werner Koch2011-11-246-11/+20
| | | | | | | | | | | | | | | | | | | | | | | | | | We had some debug code here which prevented it from working. The host selection code still needs a review! * ks-engine-http.c (ks_http_help): Do not print help for hkp. * ks-engine-hkp.c (ks_hkp_help): Print help only for hkp. (send_request): Remove test code. (map_host): Use xtrymalloc. * certcache.c (classify_pattern): Remove unused variable and make explicit substring search work.
* | Make HKP keyserver engine work again.Werner Koch2011-11-246-11/+20
|/ | | | | | | | | | | | | We had some debug code here which prevented it from working. The host selection code still needs a review! * ks-engine-http.c (ks_http_help): Do not print help for hkp. * ks-engine-hkp.c (ks_hkp_help): Print help only for hkp. (send_request): Remove test code. (map_host): Use xtrymalloc. * certcache.c (classify_pattern): Remove unused variable and make explicit substring search work.
* Updated the German translation.Werner Koch2011-11-241-27/+29
| | | | * po/de.po: Update.
* Don't print anonymous recipient messages in quiet mode.Werner Koch2011-11-222-3/+10
| | | | This is bug#1378.
* Allow creating subkeys using an existing keyWerner Koch2011-11-068-63/+246
| | | | | | This works by specifying the keygrip instead of an algorithm (section number 13) and requires that the option -expert has been used. It will be easy to extend this to the primary key.
* typo fixesWerner Koch2011-11-021-2/+2
|
* Allow distribution of dotlock.* also under a modified BSD licenseWerner Koch2011-10-243-0/+77
|
* Typo fix and remove of some colloquial termsWerner Koch2011-10-181-15/+16
|
* Put more options into the options indexWerner Koch2011-10-125-676/+833
| | | | Also removed the single letter options from the index.
* Extend yat2m to allow indented tables.Werner Koch2011-10-122-35/+72
| | | | | | Current makeinfo versions allow to indent the texinfo source. However yat2m had no support for this. With this patch it is now possible to use a simple indentation style while keeping man pages readable.
* Change JNLIB license to LGPLv3+ or GPLv2+.Werner Koch2011-09-3030-205/+527
| | | | This is to allow the use of this code with code under GPLv2(only).
* Add prefix macro for dotlock functions.Werner Koch2011-09-303-8/+45
| | | | Also fixed a type in the GLIB version.
* Add dotlock_get_fd and dotlock_set_fd.Werner Koch2011-09-293-2/+37
|
* Make dotlock.c thread-safe on pthread systems.Werner Koch2011-09-292-25/+81
| | | | This is achieved by passing the define DOTLOCK_USE_PTHREAD.
* Add a flag parameter to dotlock_create.Werner Koch2011-09-2815-24/+37
| | | | This allows us to extend this function in the future.
* Allow arbitrary timeouts with dotlock.Werner Koch2011-09-282-37/+87
|
* Improved the dotlock module.Werner Koch2011-09-274-43/+529
| | | | | | | - It is now more portable and may be used outside of GnuPG - vfat file systems are now supported. - The use of link(2) is more robust. - Wrote extensive documentation.
* Remove check for gcry_kdf_deriveWerner Koch2011-09-272-24/+13
| | | | | This is not anymore required because we require Libgcrypt 1.5.0 which features this function.
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-10 15:54:14 +0000