aboutsummaryrefslogtreecommitdiffstats
path: root/NEWS (unfollow)
Commit message (Collapse)AuthorFilesLines
2012-06-25gpg: Disallow the use of v3 keys.disallow-v3-keysWerner Koch1-0/+4
* g10/gpg.c: Add options --allow-v3-keys and --no-allow-v3-keys. (main): Enable --allow-v3-keys in --pgp2 mode. * g10/options.h (opt): Add field allow_v3_keys. * g10/import.c (delete_v3_subkeys): New. (import_one): Skip v3 keys and delete v3 subkeys. (import_print_stats): Print stats on v3 keys and subkeys. * g10/getkey.c (finish_lookup): Skip v3 keys. -- This is a first take on disabling v3 keys. We may need to add some tweaks to make decryption using an existing v3 key easier. There is no need to disallow decryption. Thanks to Georgi Guninski to put some pressure on us to finally do what PGP 2 folks will probably don’t like. See the discussion on gnupg-devel starting 2012-06-22.
2012-05-24Print the hash algorithm in colon mode key listing.Werner Koch1-0/+2
* g10/keylist.c (list_keyblock_colon): Print digest_algo.
2012-02-07Add an item to NEWS.Werner Koch1-0/+3
--
2012-01-25nPth is now a hard requirement for GnuPG.Werner Koch1-0/+2
* configure.ac: Remove cruft to allow building without npth. -- Previous versions of GnuPG allowed to build a subset of it without support of Pth. Meanwhile gpg-agent is a requirement even for gpg and thus it does not make any sense to allow such a restricted build.
2012-01-06gpg: Allow use of a standard space separated fingerprint.Werner Koch1-0/+3
* common/userids.c (classify_user_id): Check for space separated GPG fingerprint.
2011-12-20Post-release version number updateWerner Koch1-0/+4
2011-12-20Prepare for the beta3 release.Werner Koch1-2/+2
2011-12-14agent: Pass comment lines from scd verbatim thru gpg-agent.Werner Koch1-0/+13
* agent/call-scd.c (pass_status_thru): Pass comment lines verbatim. * tools/gpg-connect-agent.c (help_cmd_p): New. (main): Treat an "SCD HELP" the same as "HELP".
2011-08-10Made the KILLAGENT and KILLSCD commands working again.Werner Koch1-0/+2
This requires that GnuPG is build with a newer version of Libassuan (2.0.3).
2011-07-20Support a confirm flag for ssh.Werner Koch1-0/+2
This implements the suggestion from bug#1349. With this change the fingerprint of the ssh key is also displayed in the pinentry prompts.
2011-06-16Allow generation of card keys up to 4096 bit.Werner Koch1-1/+3
This patch implementes a chunk mode to pass the key parameters from scdaemon to gpg. This allows to pass arbitrary long key paremeters; it is used for keys larger than 3072 bit. Note: the card key generation in gpg is currently broken. The keys are generated but it is not possible to create the self-signature because at that time the gpg-agent does not yet know about the new keys and thus can't divert the sign request to the card. We either need to run the learn command right after calling agent_scd_genkey or implement a way to sign using the currently inserted card. Another option would be to get rid of agent_scd_genkey and implement the feature directly in agent_genkey.
2011-04-26Fixed regression in OpenPGP secret key export.Werner Koch1-0/+2
The protection used in the exported key used a different iteration count than given in the S2K field. Thus all OpenPGP keys exported from GnuPG 2.1-beta can't be imported again. Given that the actual secret key material is kept in private-keys-v1.d/ the can be re-exported with this fixed version.
2011-03-08Post beta release updatesWerner Koch1-0/+4
2011-03-08Prepare for 1.5.0beta2gnupg-2.1.0beta2Werner Koch1-1/+1
2011-03-01Support X.509 certificate creation.Werner Koch1-0/+4
Using "gpgsm --genkey" allows the creation of a self-signed certificate via a new prompt. Using "gpgsm --genkey --batch" should allow the creation of arbitrary certificates controlled by a parameter file. An example parameter file is Key-Type: RSA Key-Length: 1024 Key-Grip: 2C50DC6101C10C9C643E315FE3EADCCBC24F4BEA Key-Usage: sign, encrypt Serial: random Name-DN: CN=some test key Name-Email: [email protected] Name-Email: [email protected] Hash-Algo: SHA384 not-after: 2038-01-16 12:44 This creates a self-signed X.509 certificate using the key given by the keygrip and using SHA-384 as hash algorithm. The keyword signing-key can be used to sign the certificate with a different key. See sm/certreggen.c for details.
2011-02-03Finished ECC integration.ECC-INTEGRATION-2-1Werner Koch1-8/+10
Wrote the ChangeLog 2011-01-13 entry for Andrey's orginal work modulo the cleanups I did in the last week. Adjusted my own ChangeLog entries to be consistent with that entry. Nuked quite some trailing spaces; again sorry for that, I will better take care of not saving them in the future. "git diff -b" is useful to read the actual changes ;-). The ECC-INTEGRATION-2-1 branch can be closed now.
2011-01-20Fix for bug#1313. de.po update.Werner Koch1-0/+3
2011-01-10Fix bug #1311.Werner Koch1-0/+3
2011-01-10Fix bug #1311.Werner Koch1-0/+3
2010-12-14Tweaks for gpgconf.Werner Koch1-0/+2
Fixed dirmngr bug 1010.
2010-12-02s/AES/AES128/ in diagnostics and --list-configWerner Koch1-0/+5
2010-11-23Change stack size for Wince.Werner Koch1-1/+1
Allow for a longer agent atartup under wince. Print gpg output via estream.
2010-11-11Fix bug where scdaemon kills a non-daemon gpg-agent.Werner Koch1-0/+3
2010-10-27Honor TMPDIR.Werner Koch1-0/+7
2010-10-26Update scripts etc.gnupg-2.1.0beta1gnupg-2.1-baseWerner Koch1-2/+2
2010-10-13More agent support for gpg.Werner Koch1-1/+4
2010-10-06Import fixes.Werner Koch1-2/+2
new otion for watchgnupg
2010-10-01Exporting secret keys via gpg-agent is now basically supported.Werner Koch1-2/+6
A couple of forward ported changes. Doc updates.
2010-09-02Merge secret keys during importWerner Koch1-0/+2
2010-08-31Import OpenPGP keys into the agent.Werner Koch1-0/+4
2010-08-20Reworked the posix and w32 exechelpers.Werner Koch1-0/+2
2010-08-16Auto-start dirmngr.Werner Koch1-1/+5
2010-07-23Some work on the dirmngrWerner Koch1-2/+2
2010-06-09Merged Dirmngr with GnuPG.Werner Koch1-0/+2
A few code changes to support dirmngr.
2010-05-04Auto starting the agent does now work on CE.Werner Koch1-0/+6
2010-04-14./autogen.sh --build-w32ce does now succeed.Werner Koch1-1/+1
2010-02-26First batch of changes to support W32CE.Werner Koch1-0/+2
Note that jnlib/w32-reg.c is not yet ready.
2009-12-14Implement dynamic S2K count computation.Werner Koch1-0/+3
2009-12-10Add option --cert-extension.Werner Koch1-0/+2
2009-12-08Unification of the search descriptor usage.Werner Koch1-1/+1
2009-12-07Use ADNS for PKA and SRV records if no other resolver is available.Werner Koch1-0/+2
2009-12-04allow for default algorithms in a gpg parameter fileWerner Koch1-0/+3
2009-12-03support numeric debug levels.Werner Koch1-2/+4
2009-12-02More stuff for the audit-log.Werner Koch1-0/+5
2009-10-13Keep on hacking on g13. A simple --create and --mount does now work.Werner Koch1-0/+3
A hacked up encfs is required.
2009-09-21Start a new development branch.Werner Koch1-1/+1
Translations are for now disabled.
2009-09-04Post release version bumbWerner Koch1-0/+4
2009-09-04preparae releaseWerner Koch1-1/+1
2009-08-11Ask to insert the right OpenPGP card.Werner Koch1-0/+3
2009-07-09Support writing of existing keys with non-matching key sizes.Werner Koch1-0/+5
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-18 04:45:07 +0000