aboutsummaryrefslogtreecommitdiffstats
path: root/NEWS (unfollow)
Commit message (Collapse)AuthorFilesLines
2016-07-14Release 2.1.14gnupg-2.1.14Werner Koch1-3/+59
2016-06-16Post release updatesWerner Koch1-0/+4
--
2016-06-16Release 2.1.13gnupg-2.1.13Werner Koch1-1/+47
2016-05-04Post release updates.Werner Koch1-0/+4
--
2016-05-04Release 2.1.12gnupg-2.1.12Werner Koch1-1/+50
2016-01-26Post release updatesWerner Koch1-0/+4
--
2016-01-26Release 2.1.11gnupg-2.1.11Werner Koch1-1/+45
2016-01-26Update copyright years.Werner Koch1-2/+2
--
2015-12-22gpg: Don't check for ambiguous keys.Neal H. Walfield1-0/+3
* g10/gpg.c (struct result): Move from here... * g10/keydb.h (struct pubkey): ... to here. Update users. * g10/gpg.c (check_user_ids): Move from here... * g10/getkey.c (get_pubkeys): ... to here. Update users. Use get_pubkey_byname to look up the keys (this also prunes invalid keys). (pubkey_free): New function. (pubkeys_free): New function. * g10/gpg.c (main): Don't check for ambiguous key specifications. -- Signed-off-by: Neal H. Walfield <[email protected]> Regression-due-to: e8c53fc This change not only moves the checks for ambiguous key specifications from gpg.c to getkey.c, it also disables the checks. The old code was too divorced from the actual key lookups and, as such, it reproduced the logic. Unfortunately, the reproduction was a poor one: despite fixing some inconsistencies (e.g., 10cca02), it still didn't deal with group expansion or the auto key lookup functionality. Given the amount of instability introduced by this change, we (Neal & Werner) decided it is better to defer introducing this functionality until 2.3.
2015-12-04Post release updates.Werner Koch1-0/+4
--
2015-12-04Release 2.1.10gnupg-2.1.10Werner Koch1-3/+3
2015-12-04gpg: Do not pre-check keys given on the command line.Werner Koch1-2/+2
* g10/keydb.h (PK_LIST_ENCRYPT_TO, PK_LIST_HIDDEN, PK_LIST_CONFIG) (PK_LIST_SHIFT): New. * g10/pkclist.c (build_pk_list): Use them here. * g10/gpg.c (check_user_ids, main): Ditto. * g10/gpg.c (main): Set PK_LIST_CONFIG for REMUSR and LOCUSR. (check_user_ids): Skip check for command line specified options. -- If a key has been given on the command line and it has not been given by one of the encrypt-to options, we now skip the checks. The reason is that the actual key selection code does its own checks and provides proper status message to the caller to detect the wrong keys. Without this we would break most frontends because they expect for example STATUS_INV_RECP. Signed-off-by: Werner Koch <[email protected]>
2015-12-01Update NEWS fileWerner Koch1-0/+54
--
2015-10-10Post release updates.Werner Koch1-0/+4
--
2015-10-09Release 2.1.9gnupg-2.1.9Werner Koch1-1/+26
2015-09-10Post release updates.Werner Koch1-0/+4
--
2015-09-10Release 2.1.8.gnupg-2.1.8Werner Koch1-1/+24
2015-08-11Post release updates.Werner Koch1-0/+4
--
2015-08-11Release 2.1.7gnupg-2.1.7Werner Koch1-2/+22
2015-07-03drop long-deprecated gpgsm-gencert.shDaniel Kahn Gillmor1-0/+1
* tools/gpgsm-gencert.sh: remove deprecated script entirely. It is fully replaced by gpgsm --gen-key * doc/tools.texi: remove gpgsm-gencert.sh documentation * .gitignore: no longer ignore gpgsm-gencert.sh manpage * doc/Makefile.am: quit making the manpage * tools/Makefile.am: quit distributing the script * doc/howto-create-a-server-cert.texi: overhaul documentation to use gpgsm --gen-key and tweak explanations -- The commit deprecating gpgsm-gencert.sh (81972ca7d53ff1996e0086702a09d4405bdc2a7e) dates back exactly 6 years. https://codesearch.debian.net/results/gpgsm-gencert.sh suggests that in all of debian it is only referenced in documentation (for poldi and scute) and example files (libept), and isn't actually used directly anywhere. Furthermore, trying to use gpgsm-gencert.sh to make a simple webserver certificate-signing request failed for me, following the examples in doc/howto-create-a-server-cert.texi exactly. It's time we ripped off this band-aid :) Signed-off-by: Daniel Kahn Gillmor <[email protected]>
2015-07-01Post release updatesWerner Koch1-0/+4
--
2015-07-01Release 2.1.6gnupg-2.1.6Werner Koch1-1/+27
2015-06-15Added release date of older versions to NEWS.Werner Koch1-2/+1496
--
2015-06-11Post release updates.Werner Koch1-0/+4
--
2015-06-11Release 2.1.5gnupg-2.1.5Werner Koch1-1/+11
2015-05-15build: Make --disable-gpgsm work.Werner Koch1-2/+2
* Makefile.am: Always build kbx/ * g10/Makefile.am (AM_CFLAGS): Include KSBA_CFLAGS. -- Note that "make check" still prints a warning. Signed-off-by: Werner Koch <[email protected]>
2015-05-12Post release updates.Werner Koch1-0/+4
--
2015-05-12Release 2.1.4gnupg-2.1.4Werner Koch1-1/+22
2015-04-11Post release updates.Werner Koch1-0/+4
--
2015-04-11Release 2.1.3.gnupg-2.1.3Werner Koch1-1/+30
2015-02-12dirmngr: Initialize cache from sysconfig dirAndre Heinecke1-0/+3
* dirmngr/certcache.c (cert_cache_init): Load certificates from sysconfig dir instead of the homeidr. * dirmngr/dirmngr.c (main): Removed parsing of obsolete homedir_data option. * dirmngr/dirmngr.h (opt): Removed homedir_data. * doc/dirmngr.texi: Update and clarify certs directory doc. -- Using the homedir for extra-certs and trusted-certs makes little sense when dirmngr is used with a caller that manages it's own store of certificates and can provide those through the SENDCERT command. You can use trusted-certs and extra-certs to provide users with a base of locally available certificates that are not already in store of the applications.
2015-02-11Post release updates.Werner Koch1-0/+4
--
2015-02-11Release 2.1.2gnupg-2.1.2Werner Koch1-4/+25
2015-01-21gpg: Support --passphrase with --quick-gen-key.Werner Koch1-0/+3
* g10/keygen.c: Include shareddefs.h. (quick_generate_keypair): Support static passphrase. (get_parameter_passphrase): New. (do_generate_keypair): Use it. Signed-off-by: Werner Koch <[email protected]>
2015-01-21gpg: Re-enable the "Passphrase" parameter for batch key generation.Werner Koch1-0/+3
* agent/command.c (cmd_genkey): Add option --inq-passwd. * agent/genkey.c (agent_genkey): Add new arg override_passphrase. * g10/call-agent.c (inq_genkey_parms): Handle NEWPASSWD keyword. (agent_genkey): Add arg optional arg "passphrase". * g10/keygen.c (common_gen, gen_elg, gen_dsa, gen_ecc) (gen_rsa, do_create): Add arg "passphrase" and pass it through. (do_generate_keypair): Make use of pPASSPHRASE. (release_parameter_list): Wipe out a passphrase parameter. Signed-off-by: Werner Koch <[email protected]>
2014-12-19agent: Make sure --max-cache-ttl is >= --default-cache-ttl.Werner Koch1-0/+4
* agent/gpg-agent.c (finalize_rereadable_options): New. (main, reread_configuration): Call it. -- This change should help to avoid surprising behaviour. Signed-off-by: Werner Koch <[email protected]>
2014-12-16Post release updatesWerner Koch1-0/+3
--
2014-12-16Release 2.1.1gnupg-2.1.1Werner Koch1-4/+25
2014-12-04gpg: Allow import of large keys.Werner Koch1-0/+2
* g10/import.c (import): Skip too large keys. * kbx/keybox-file.c (IMAGELEN_LIMIT): Change limit from 2MB to 5MB. -- The key which triggered the problem was 0x57930DAB0B86B067. With this patch it can be imported. Keys larger than the now increased limit of 5MB will are skipped and the already existing not_imported counter is bumped up. Signed-off-by: Werner Koch <[email protected]>
2014-12-03gpg: Remove option aliases --[no-]throw-keyid and --notation-data.Werner Koch1-0/+3
* g10/gpg.c (opts): Remove them. * g10/options.h (opt): s/throw_keyid/throw_keyids/ and change users. -- See mails starting http://lists.gnupg.org/pipermail/gnupg-devel/2014-November/029128.html
2014-11-21Update NEWSWerner Koch1-0/+22
--
2014-11-05Post release updates.Werner Koch1-0/+4
--
2014-11-04Change a couple of files to use abbreviated copyright notes.Werner Koch1-6/+8
-- Also fixed some of my own copyright notices due to the termination of my assignment. The one displayed by --version is kept at FSF because we had contributors in 2014 with FSF assignments and it gives the FSF some visibility.
2014-10-31gpg: Fix --rebuild-keydb-caches.Werner Koch1-1/+2
* g10/parse-packet.c (parse_key): Store even unsupported packet versions. * g10/keyring.c (keyring_rebuild_cache): Do not copy keys with versions less than 4. -- That function, which is implicitly called while checking the keydb, led to corruption of v3 key packets in the keyring which would later spit out "packet(6)too short" messages. Signed-off-by: Werner Koch <[email protected]>
2014-10-26doc: Re-formated some NEWS entries and added update notes to some.Werner Koch1-91/+95
--
2014-10-26Update NEWS.gnupg-2.1.0-beta895Werner Koch1-0/+8
--
2014-10-17dirmngr: Allow building without LDAP support.Werner Koch1-0/+2
* configure.ac: Add option --disable-ldap. (USE_LDAP): New ac_define and am_conditional. * dirmngr/Makefile.am: Take care of USE_LDAP. * dirmngr/dirmngr.c (!USE_LDAP): Make all ldap options dummy options and do not call any ldap function. * dirmngr/server.c (!USE_LDAP): Do not call any ldap function. * dirmngr/crlfetch.c (!USE_LDAP): Ditto. Signed-off-by: Werner Koch <[email protected]>
2014-10-03doc: Minor fix.Werner Koch1-1/+8
-- Due to todays reminder: On Tue 2014-04-22 18:46:15 -0400, Daniel Kahn Gillmor wrote: > With --trust-model=always, all keys and user IDs are considered > automatically valid; they are not automatically trusted (setting > universal ownertrust to anything other than "ultimate" would be > insufficient to acheive the effect of --trust-model=always, due to > --max-cert-depth and certificate path reachability). > > Thanks to Nicolai Josuttis for pointing out this documentation error.
2014-10-03Release 2.1.0-beta864.gnupg-2.1.0-beta864Werner Koch1-1/+18
2014-09-18Post beta release update.Werner Koch1-0/+4
--
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-25 03:00:27 +0000