aboutsummaryrefslogtreecommitdiffstats
path: root/NEWS (unfollow)
Commit message (Collapse)AuthorFilesLines
2013-02-08scd: Rename 'keypad' to 'pinpad'.NIIBE Yutaka1-0/+7
* NEWS: Mention scd changes. * agent/divert-scd.c (getpin_cb): Change message. * agent/call-scd.c (inq_needpin): Change the protocol to POPUPPINPADPROMPT and DISMISSPINPADPROMPT. * scd/command.c (pin_cb): Likewise. * scd/apdu.c (struct reader_table_s): Rename member functions. (check_pcsc_pinpad, pcsc_pinpad_verify, pcsc_pinpad_modify, check_ccid_pinpad, ccid_pinpad_operation, apdu_check_pinpad apdu_pinpad_verify, apdu_pinpad_modify): Rename. * scd/apdu.h (SW_HOST_NO_PINPAD, apdu_check_pinpad) (apdu_pinpad_verify, apdu_pinpad_modify): Rename. * scd/iso7816.h (iso7816_check_pinpad): Rename. * scd/iso7816.c (map_sw): Use SW_HOST_NO_PINPAD. (iso7816_check_pinpad): Rename. (iso7816_verify_kp, iso7816_change_reference_data_kp): Follow the change. * scd/ccid-driver.h (CCID_DRIVER_ERR_NO_PINPAD): Rename. * scd/ccid-driver.c (ccid_transceive_secure): Use it. * scd/app-dinsig.c (verify_pin): Follow the change. * scd/app-nks.c (verify_pin): Follow the change. * scd/app-openpgp.c (check_pinpad_request): Rename. (parse_login_data, verify_a_chv, verify_chv3, do_change_pin): Follow the change. * scd/scdaemon.c (oDisablePinpad, oEnablePinpadVarlen): Rename. * scd/scdaemon.h (opt): Rename to disable_pinpad, enable_pinpad_varlen. * tools/gpgconf-comp.c (gc_options_scdaemon): Rename to disable-pinpad.
2013-02-07gpg: Add pinentry-mode feature.Werner Koch1-0/+2
* g10/gpg.c: Include shareddefs.h. (main): Add option --pinentry-mode. * g10/options.h (struct opt): Add field pinentry_mode. * g10/passphrase.c: Include shareddefs.h. (have_static_passphrase): Take care of loopback pinentry_mode. (read_passphrase_from_fd): Ditto. (get_static_passphrase): New. (passphrase_to_dek_ext): Factor some code out to ... (emit_status_need_passphrase): new. * g10/call-agent.c (start_agent): Send the pinentry mode. (default_inq_cb): Take care of the PASSPHRASE inquiry. Return a proper error code. (agent_pksign): Add args keyid, mainkeyid and pubkey_algo. (agent_pkdecrypt): Ditto. * g10/pubkey-enc.c (get_it): Pass new args. * g10/sign.c (do_sign): Pass new args. * g10/call-agent.c (struct default_inq_parm_s): New. Change all similar structs to reference this one. Change all users and inquire callback to use this struct, instead of NULL or some undefined but not used structs. This change will help to eventually get rid of global variables. -- This new features allows to use gpg without a Pinentry. As a prerequisite the agent must be configured to allow the loopback pinentry mode (option --allow-loopback-pinentry). For example gpg2 --pinentry-mode=loopback FILE.gpg may be used to decrypt FILE.gpg while entering the passphrase on the tty. If batch is used, --passphrase et al. may be used, if --command-fd is used, the passphrase may be provided by another process. Note that there are no try-again prompts in case of a bad passphrase.
2012-05-24Print the hash algorithm in colon mode key listing.Werner Koch1-0/+2
* g10/keylist.c (list_keyblock_colon): Print digest_algo.
2012-02-07Add an item to NEWS.Werner Koch1-0/+3
--
2012-01-25nPth is now a hard requirement for GnuPG.Werner Koch1-0/+2
* configure.ac: Remove cruft to allow building without npth. -- Previous versions of GnuPG allowed to build a subset of it without support of Pth. Meanwhile gpg-agent is a requirement even for gpg and thus it does not make any sense to allow such a restricted build.
2012-01-06gpg: Allow use of a standard space separated fingerprint.Werner Koch1-0/+3
* common/userids.c (classify_user_id): Check for space separated GPG fingerprint.
2011-12-20Post-release version number updateWerner Koch1-0/+4
2011-12-20Prepare for the beta3 release.Werner Koch1-2/+2
2011-12-14agent: Pass comment lines from scd verbatim thru gpg-agent.Werner Koch1-0/+13
* agent/call-scd.c (pass_status_thru): Pass comment lines verbatim. * tools/gpg-connect-agent.c (help_cmd_p): New. (main): Treat an "SCD HELP" the same as "HELP".
2011-08-10Made the KILLAGENT and KILLSCD commands working again.Werner Koch1-0/+2
This requires that GnuPG is build with a newer version of Libassuan (2.0.3).
2011-07-20Support a confirm flag for ssh.Werner Koch1-0/+2
This implements the suggestion from bug#1349. With this change the fingerprint of the ssh key is also displayed in the pinentry prompts.
2011-06-16Allow generation of card keys up to 4096 bit.Werner Koch1-1/+3
This patch implementes a chunk mode to pass the key parameters from scdaemon to gpg. This allows to pass arbitrary long key paremeters; it is used for keys larger than 3072 bit. Note: the card key generation in gpg is currently broken. The keys are generated but it is not possible to create the self-signature because at that time the gpg-agent does not yet know about the new keys and thus can't divert the sign request to the card. We either need to run the learn command right after calling agent_scd_genkey or implement a way to sign using the currently inserted card. Another option would be to get rid of agent_scd_genkey and implement the feature directly in agent_genkey.
2011-04-26Fixed regression in OpenPGP secret key export.Werner Koch1-0/+2
The protection used in the exported key used a different iteration count than given in the S2K field. Thus all OpenPGP keys exported from GnuPG 2.1-beta can't be imported again. Given that the actual secret key material is kept in private-keys-v1.d/ the can be re-exported with this fixed version.
2011-03-08Post beta release updatesWerner Koch1-0/+4
2011-03-08Prepare for 1.5.0beta2gnupg-2.1.0beta2Werner Koch1-1/+1
2011-03-01Support X.509 certificate creation.Werner Koch1-0/+4
Using "gpgsm --genkey" allows the creation of a self-signed certificate via a new prompt. Using "gpgsm --genkey --batch" should allow the creation of arbitrary certificates controlled by a parameter file. An example parameter file is Key-Type: RSA Key-Length: 1024 Key-Grip: 2C50DC6101C10C9C643E315FE3EADCCBC24F4BEA Key-Usage: sign, encrypt Serial: random Name-DN: CN=some test key Name-Email: [email protected] Name-Email: [email protected] Hash-Algo: SHA384 not-after: 2038-01-16 12:44 This creates a self-signed X.509 certificate using the key given by the keygrip and using SHA-384 as hash algorithm. The keyword signing-key can be used to sign the certificate with a different key. See sm/certreggen.c for details.
2011-02-03Finished ECC integration.ECC-INTEGRATION-2-1Werner Koch1-8/+10
Wrote the ChangeLog 2011-01-13 entry for Andrey's orginal work modulo the cleanups I did in the last week. Adjusted my own ChangeLog entries to be consistent with that entry. Nuked quite some trailing spaces; again sorry for that, I will better take care of not saving them in the future. "git diff -b" is useful to read the actual changes ;-). The ECC-INTEGRATION-2-1 branch can be closed now.
2011-01-20Fix for bug#1313. de.po update.Werner Koch1-0/+3
2011-01-10Fix bug #1311.Werner Koch1-0/+3
2011-01-10Fix bug #1311.Werner Koch1-0/+3
2010-12-14Tweaks for gpgconf.Werner Koch1-0/+2
Fixed dirmngr bug 1010.
2010-12-02s/AES/AES128/ in diagnostics and --list-configWerner Koch1-0/+5
2010-11-23Change stack size for Wince.Werner Koch1-1/+1
Allow for a longer agent atartup under wince. Print gpg output via estream.
2010-11-11Fix bug where scdaemon kills a non-daemon gpg-agent.Werner Koch1-0/+3
2010-10-27Honor TMPDIR.Werner Koch1-0/+7
2010-10-26Update scripts etc.gnupg-2.1.0beta1gnupg-2.1-baseWerner Koch1-2/+2
2010-10-13More agent support for gpg.Werner Koch1-1/+4
2010-10-06Import fixes.Werner Koch1-2/+2
new otion for watchgnupg
2010-10-01Exporting secret keys via gpg-agent is now basically supported.Werner Koch1-2/+6
A couple of forward ported changes. Doc updates.
2010-09-02Merge secret keys during importWerner Koch1-0/+2
2010-08-31Import OpenPGP keys into the agent.Werner Koch1-0/+4
2010-08-20Reworked the posix and w32 exechelpers.Werner Koch1-0/+2
2010-08-16Auto-start dirmngr.Werner Koch1-1/+5
2010-07-23Some work on the dirmngrWerner Koch1-2/+2
2010-06-09Merged Dirmngr with GnuPG.Werner Koch1-0/+2
A few code changes to support dirmngr.
2010-05-04Auto starting the agent does now work on CE.Werner Koch1-0/+6
2010-04-14./autogen.sh --build-w32ce does now succeed.Werner Koch1-1/+1
2010-02-26First batch of changes to support W32CE.Werner Koch1-0/+2
Note that jnlib/w32-reg.c is not yet ready.
2009-12-14Implement dynamic S2K count computation.Werner Koch1-0/+3
2009-12-10Add option --cert-extension.Werner Koch1-0/+2
2009-12-08Unification of the search descriptor usage.Werner Koch1-1/+1
2009-12-07Use ADNS for PKA and SRV records if no other resolver is available.Werner Koch1-0/+2
2009-12-04allow for default algorithms in a gpg parameter fileWerner Koch1-0/+3
2009-12-03support numeric debug levels.Werner Koch1-2/+4
2009-12-02More stuff for the audit-log.Werner Koch1-0/+5
2009-10-13Keep on hacking on g13. A simple --create and --mount does now work.Werner Koch1-0/+3
A hacked up encfs is required.
2009-09-21Start a new development branch.Werner Koch1-1/+1
Translations are for now disabled.
2009-09-04Post release version bumbWerner Koch1-0/+4
2009-09-04preparae releaseWerner Koch1-1/+1
2009-08-11Ask to insert the right OpenPGP card.Werner Koch1-0/+3
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-25 22:58:49 +0000