aboutsummaryrefslogtreecommitdiffstats
path: root/README (unfollow)
Commit message (Collapse)AuthorFilesLines
2014-06-05gpg: Auto-migrate existing secring.gpg.Werner Koch1-20/+9
* g10/migrate.c: New. * g10/import.c (import_old_secring): New. (import_one): Add arg silent. (transfer_secret_keys): Add arg batch. (import_secret_one): Add args batch and for_migration. * g10/gpg.c (main): Call migration function.
2013-05-22Implement unattended OpenPGP secret key import.Werner Koch1-23/+34
* agent/command.c (cmd_import_key): Add option --unattended. * agent/cvt-openpgp.c (convert_transfer_key): New. (do_unprotect): Factor some code out to ... (prepare_unprotect): new function. (convert_from_openpgp): Factor all code out to ... (convert_from_openpgp_main): this. Add arg 'passphrase'. Implement openpgp-native protection modes. (convert_from_openpgp_native): New. * agent/t-protect.c (convert_from_openpgp_native): New dummy fucntion * agent/protect-tool.c (convert_from_openpgp_native): Ditto. * agent/protect.c (agent_unprotect): Add arg CTRL. Adjust all callers. Support openpgp-native protection. * g10/call-agent.c (agent_import_key): Add arg 'unattended'. * g10/import.c (transfer_secret_keys): Use unattended in batch mode. -- With the gpg-agent taking care of the secret keys, the user needs to migrate existing keys from secring.gpg to the agent. This and also the standard import of secret keys required the user to unprotect the secret keys first, so that gpg-agent was able to re-protected them using its own scheme. With many secret keys this is quite some usability hurdle. In particular if a passphrase is not instantly available. To make this migration smoother, this patch implements an unattended key import/migration which delays the conversion to the gpg-agent format until the key is actually used. For example: gpg2 --batch --import mysecretkey.gpg works without any user interaction due to the use of --batch. Now if a key is used (e.g. "gpg2 -su USERID_FROM_MYSECRETKEY foo"), gpg-agent has to ask for the passphrase anyway, converts the key from the openpgp format to the internal format, signs, re-encrypts the key and tries to store it in the gpg-agent format to the disk. The next time, the internal format of the key is used. This patch has only been tested with the old demo keys, more tests with other protection formats and no protection are needed. Signed-off-by: Werner Koch <[email protected]>
2011-03-08Require libgcrypt 1.5Werner Koch1-6/+7
Without Libgcrypt 1.5 is was not possible to use ECC keys. ECC is major new feature and thus it does not make sense to allow building with an older Libgcrypt without supporting ECC. Also fixed a few missing prototypes.
2011-02-03Update copyright yearWerner Koch1-5/+4
Nuked some trailing spaces.
2010-10-26Update scripts etc.gnupg-2.1.0beta1gnupg-2.1-baseWerner Koch1-7/+48
2010-08-20Reworked the posix and w32 exechelpers.Werner Koch1-1/+1
2009-09-21Start a new development branch.Werner Koch1-1/+5
Translations are for now disabled.
2009-01-12preparing a releaseWerner Koch1-1/+1
2008-12-09Preparing a release candidate.Werner Koch1-3/+2
2008-02-19Fixed release creation.Werner Koch1-3/+4
2007-07-04Changed to GPLv3.Werner Koch1-1/+1
Removed intl/.
2007-05-09Preparing 2.0.4gnupg-2.0.4Werner Koch1-6/+8
2007-03-08Preparing the 2.0.3 releaseWerner Koch1-1/+1
2006-11-11.Werner Koch1-5/+93
2006-11-06post release updatesWerner Koch1-14/+8
2006-10-04Preparing a new releaseWerner Koch1-6/+6
2006-09-14Take advantage of newer gpg-error features.Werner Koch1-3/+1
2006-09-08doc fixesWerner Koch1-449/+15
2006-08-18More man pages. Added include files for 2 common paragraphs.Werner Koch1-3/+4
2006-08-01Preparing 1.4.5Werner Koch1-5/+5
2006-07-292006-07-29 Marcus Brinkmann <[email protected]>Marcus Brinkmann1-15/+15
* README: Spelling fixes.
2006-07-27Preparing a new releasegnupg-1.9.22Werner Koch1-1/+1
2006-06-25Ready for a releasegnupg-1.4.4Werner Koch1-4/+4
2006-05-16Fixed OSF5 warning suppression.Werner Koch1-5/+0
2006-03-30* README: Some more notes about building fat binaries.David Shaw1-1/+4
2006-03-25* README: Missing some instructions on building a fat binary.David Shaw1-1/+1
2006-03-20* configure.ac: Add --disable-endian-check for building fat binariesDavid Shaw1-11/+25
on OSX. * README: Add note on how to build a fat binary on OSX.
2006-02-14about to release 1.4.3rc1gnupg-1.4.3rc1Werner Koch1-1/+1
2005-09-07Updated card stuff to support T=0 cards.Werner Koch1-1/+1
2005-07-27First commit to Subversion.Werner Koch1-1/+1
2005-06-20Preparing 1.9.17V1-9-17Werner Koch1-30/+11
2005-05-31Updated FSF street address and preparations for a release candidate.Werner Koch1-5/+27
2005-04-21* configure.ac: Do not build gpg by default.Werner Koch1-2/+3
* gpgsm.c: New options --{enable,disable}-trusted-cert-crl-check. * certchain.c (gpgsm_validate_chain): Make use of it. * certchain.c (gpgsm_validate_chain): Check revocations even for expired certificates. This is required because on signature verification an expired key is fine whereas a revoked one is not. * gpgconf-comp.c: Add gpgsm option disable-trusted-cert-crl-check.
2005-04-18* configure.ac: Require libksba 0.9.11.Werner Koch1-4/+4
sm/ * call-dirmngr.c (inq_certificate): Add new inquire SENDCERT_SKI. * certlist.c (gpgsm_find_cert): Add new arg KEYID and implement this filter. Changed all callers. * certchain.c (find_up_search_by_keyid): New helper. (find_up): Also try using the AKI.keyIdentifier. (find_up_external): Ditto.
2005-04-05Changes to make use of code taken from libassuan. This replaces theWerner Koch1-6/+12
old ad-hoc connection code to gpg-agent. We do need this for the forthcoming diversion of card code to an already running gpg-agent with card-support.
2005-03-15Post release preparationsWerner Koch1-1/+1
2005-03-11* configure.ac: New option --enable-noexecstack.Werner Koch1-0/+4
* Makefile.am (ASFLAGS): Renamed to AM_CCASFLAGS and added the variable for non exectubale stack options. Adapted users.
2005-01-23* configure.ac: Define FTPS flag if we're using curl, and FTPS isDavid Shaw1-20/+21
available. * README: Fix some typos (noted by Norihiko Murase), update to 1.4.1, and tweak some descriptions. * NEWS: Note FTPS.
2005-01-20* g10.c (i18n_init) [W32]: Pass registry key to gettextWerner Koch1-4/+5
initialization. * gpgv.c (i18n_init) [W32]: Ditto. * simple-gettext.c (set_gettext_file): Use MO files depending on the installation directory. Add new arg REGKEY.
2004-12-14Prepared for last 1.4 release candidateWerner Koch1-2/+2
2004-11-17(open_info_file): New.Werner Koch1-1/+1
(main): Unconditionally implement --status-file, --logger-file, --attribute-file, --passphrase-file, --command-file. This is not generally useful but easy to support and might make scripting under Windows easier.
2004-11-05* README, configure.ac: Add --enable-backsigs to enable the experimentalDavid Shaw1-1/+9
backsigs code.
2004-10-28About to release 1.3.92Werner Koch1-1/+1
2004-10-26* configure.ac: New option --disable-gnupg-iconv, defineWerner Koch1-0/+11
USE_GNUPG_ICONV.
2004-10-20* sc-investigate: Removed.Werner Koch1-1/+1
* Makefile.am (sc_investigate): Removed. * pcsc-wrapper.c (load_pcsc_driver): Load get_status_change func. (handle_open): Succeed even without a present card. (handle_status, handle_reset): New. * apdu.c (apdu_open_reader): Load pcsc_get_status_change fucntion. (pcsc_get_status): Implemented. (reset_pcsc_reader): Implemented. (open_pcsc_reader): Succeed even with no card inserted. (open_ccid_reader): Set LAST_STATUS. * iso7816.c (iso7816_select_application): Always use 0 for P1.
2004-10-15* README: Mentioned --enable-selinux-support.Werner Koch1-1/+5
* status.h (STATUS_NEED_PASSPHRASE_PIN): New. * status.c (get_status_string): Added. * passphrase.c (ask_passphrase): Moved status printing to .. * cardglue.c (pin_cb): .. here and issue new status message. * keyedit.c (sign_uids): Don't include the leading LF in the translatable string but print them separately. * apdu.c (apdu_open_remote_reader) [_WIN32]: We don't have ENOSYS.
2004-10-01* mk-w32-dist: Updated from stable branch.Werner Koch1-1/+1
* mk-gpg-texi: Changed to use the newer docbook2x-texi utility. * config.guess, config.sub, mkinstalldirs, missing * depcomp, install-sh: Upgraded.
2004-09-30Preparing a new release. Updated gettextWerner Koch1-4/+4
2004-09-09* README: Doc --disable-card-support and --without-readline.Werner Koch1-2/+13
* configure.ac: Check for readline. Make enable-card-support the default. New option --without-readline. Allow the use of either the development or the stable libusb. * cardglue.h: Add members for CA fingerprints. * cardglue.c (agent_release_card_info): Invalid them. (learn_status_cb): Store them. * app-common.h, app-openpgp.c, iso7816.c, iso7816.h * apdu.c, apdu.h, ccid-driver.c, ccid-driver.h * card-util.c: Updated from current gnupg-1.9. * ccid-driver.h (CCID_DRIVER_ERR_ABORTED): New. * ccid-driver.c (ccid_open_reader): Support the stable 0.1 version of libusb. (ccid_get_atr): Handle short messages. * apdu.c (my_rapdu_get_status): Implemented. * apdu.c: Include <signal.h>. * apdu.c (reader_table_s): Add function pointers for the backends. (apdu_close_reader, apdu_get_status, apdu_activate) (send_apdu): Make use of them. (new_reader_slot): Intialize them to NULL. (dump_ccid_reader_status, ct_dump_reader_status): New. (dump_pcsc_reader_status): New. (open_ct_reader, open_pcsc_reader, open_ccid_reader) (open_osc_reader, open_rapdu_reader): Intialize function pointers. (ct_activate_card, ct_send_apdu, pcsc_send_apdu, osc_send_apdu) (error_string): Removed. Replaced by apdu_strerror. (get_ccid_error_string): Removed. (ct_activate_card): Remove the unused loop. (reset_ct_reader): Implemented. (ct_send_apdu): Activate the card if not yet done. (pcsc_send_apdu): Ditto. * ccid-driver.h: Add error codes. * ccid-driver.c: Implement more or less proper error codes all over the place. * apdu.c (apdu_send_direct): New. (get_ccid_error_string): Add some error code mappings. (send_apdu): Pass error codes along for drivers already supporting them. (host_sw_string): New. (get_ccid_error_string): Use above. (send_apdu_ccid): Reset the reader if it has not yet been done. (open_ccid_reader): Don't care if the ATR can't be read. (apdu_activate_card): New. (apdu_strerror): New. (dump_reader_status): Only enable it with opt.VERBOSE. * iso7816.c (map_sw): Add mappings for the new error codes. * apdu.c (open_ct_reader, open_pcsc_reader, open_ccid_reader) (reset_ccid_reader, open_osc_reader): Call dump_reader_status only in verbose mode. * app-openpgp.c (do_getattr): Fix for sending CA-FPR. * app-openpgp.c (app_openpgp_readkey): Fixed check for valid exponent. * app-openpgp.c (do_setattr): Sync FORCE_CHV1. * card-util.c (change_login): Kludge to allow reading data from a file. (card_edit): Pass ARG_STRING to change_login. (card_status): Print CA fingerprints. (change_cafpr): New. (card_edit): New command CAFPR. * errors.h (G10ERR_NO_CARD, G10ERR_CANCELED): New error codes. * errors.c (g10_errstr): New error codes G10ERR_NO_CARD, G10ERR_CANCELED.
2004-07-22* trustlist.c (read_list): Allow colons in the fingerprint.Werner Koch1-13/+21
(headerblurb): Rephrased. * gpg-agent.c (handle_connections): Increase the stack size ot 256k. * de.po: Updated. * scdaemon.c (main): Bumbed thread stack size up to 512k. * keylist.c (list_cert_raw): Print the keygrip.
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-23 18:50:49 +0000