aboutsummaryrefslogtreecommitdiffstats
path: root/agent/trustlist.c (unfollow)
Commit message (Collapse)AuthorFilesLines
2014-03-07agent: Make --allow-mark-trusted the default.Werner Koch1-1/+2
* agent/gpg-agent.c (opts, main): Add option --no-allow-mark-trusted. Put this option into the gpgconf-list. (main): Enable opt.allow_mark_trusted by default. * tools/gpgconf-comp.c (gc_options_gpg_agent): Replace allow-mark-trusted by no-allow-mark-trusted. * agent/trustlist.c (agent_marktrusted): Always set the "relax" flag. -- These changes have been in effect for the Gpg4win Windows version since 2011-01-24 and thus first released with Gpg4win 2.1.0. Given the current state of PKIX it does not make any sense to lure the Unix user into false security by making it harder to trust self-signed or CAcert certificates. Signed-off-by: Werner Koch <[email protected]> (cherry picked from commit 90b419f3e9d05e509348d047e05fcc79e87be6cf) Resolved conflicts: NEWS agent/gpg-agent.c
2012-06-05Change all quotes in strings and comments to the new GNU standard.Werner Koch1-14/+14
The asymmetric quotes used by GNU in the past (`...') don't render nicely on modern systems. We now use two \x27 characters ('...'). The proper solution would be to use the correct Unicode symmetric quotes here. However this has the disadvantage that the system requires Unicode support. We don't want that today. If Unicode is available a generated po file can be used to output proper quotes. A simple sed script like the one used for en@quote is sufficient to change them. The changes have been done by applying sed -i "s/\`\([^'\`]*\)'/'\1'/g" to most files and fixing obvious problems by hand. The msgid strings in the po files were fixed with a similar command.
2012-04-30agent: Fix deadlock in trustlist due to the switch to npth.Werner Koch1-44/+78
* agent/trustlist.c (clear_trusttable): New. (agent_reload_trustlist): Use new function. (read_trustfiles): Require to be called with lock held. (agent_istrusted): Factor all code out to ... (istrusted_internal): new. Add ALREADY_LOCKED arg. Make sure the table islocked. Do not print TRUSTLISTFLAG stati if called internally. (agent_marktrusted): Replace calls to agent_reload_trustlist by explicit code. -- In contrast to pth, npth does not use recursive mutexes by default. However, the code in trustlist.c assumed recursive locks and thus we had to rework it.
2012-01-25Port to npth.Marcus Brinkmann1-8/+16
* configure.ac: Don't check for PTH but for NPTH. (AH_BOTTOM): Remove PTH_SYSCALL_SOFT. (have_pth): Rename to ... (have_npth): ... this. (USE_GNU_NPTH): Rename to ... (USE_GNU_PTH): ... this. * m4/npth.m4: New file. * agent/Makefile.am, agent/cache.c, agent/call-pinentry.c, agent/call-scd.c, agent/findkey.c, agent/gpg-agent.c, agent/trustlist.c, common/Makefile.am, common/estream.c, common/exechelp-posix.c, common/exechelp-w32.c, common/exechelp-w32ce.c, common/http.c, common/init.c, common/sysutils.c, dirmngr/Makefile.am, dirmngr/crlfetch.c, dirmngr/dirmngr.c, dirmngr/dirmngr_ldap.c, dirmngr/ldap-wrapper-ce.c, dirmngr/ldap-wrapper.c, dirmngr/ldap.c, g13/Makefile.am, g13/call-gpg.c, g13/g13.c, g13/runner.c, scd/Makefile.am, scd/apdu.c, scd/app.c, scd/ccid-driver.c, scd/command.c, scd/scdaemon.c, tools/Makefile.am: Port to npth.
2011-02-04Nuked almost all trailing white space.post-nuke-of-trailing-wsWerner Koch1-22/+22
We better do this once and for all instead of cluttering all future commits with diffs of trailing white spaces. In the majority of cases blank or single lines are affected and thus this change won't disturb a git blame too much. For future commits the pre-commit scripts checks that this won't happen again.
2011-01-19Fixed a CR/LF problem on WindowsWerner Koch1-3/+6
2010-08-26.Werner Koch1-2/+2
2010-04-14Whole lot of changes to support CE.Werner Koch1-7/+6
2010-03-10Merged jnlib into common.Werner Koch1-1/+0
2009-12-02Fix usage of realloc.Werner Koch1-1/+2
2009-06-17Use cancel button in confirmation only if requested.Werner Koch1-2/+2
2009-06-03Fixed an fopen problem on Windows Vista.Werner Koch1-11/+12
2009-03-26Fixed a trustlist update problem.Werner Koch1-31/+85
Pretty format the marktrusted pinentry prompt.
2009-03-19Changed order of the confirmation questions for root certificatesWerner Koch1-64/+104
and stores negative answers in trustlist.txt.
2008-05-27Fixed segv in gpg-agent (command marktrusted).Werner Koch1-7/+11
Replaced almost all free by xfree. Translation fixes.
2007-08-27Implemented more gpg-agen options to support certain passphrase policies.Werner Koch1-12/+60
New tool gpg-check-pattern.
2007-08-10Implemented the chain model for X.509 validation.Werner Koch1-1/+12
2007-07-04Changed to GPLv3.Werner Koch1-4/+2
Removed intl/.
2007-06-14A whole bunch of changes to allow building for Windows.Werner Koch1-3/+21
See the ChangeLogs for details.
2007-04-03 * trustlist.c (read_trustfiles): Take a missing trustlist as anWerner Koch1-1/+11
empty one.
2006-11-14New command GETEVENTCOUNTER.Werner Koch1-0/+1
* command.c (bump_key_eventcounter): New. (bump_card_eventcounter): New. (cmd_geteventcounter): New command. * gpg-agent.c (handle_signal): Call bump_card_eventcounter. * findkey.c (agent_write_private_key): Call bump_key_eventcounter. * trustlist.c (agent_reload_trustlist): Ditto.
2006-11-09gpg-agent.c (main): In detached mode connect standard descriptors to /dev/null.Werner Koch1-2/+1
Other minor fixes
2006-10-16Allow to cancel marktrusted.Werner Koch1-1/+7
2006-09-25New "relax" option for trustlist.txtWerner Koch1-14/+61
2006-09-15Allow for a global trustlist.Werner Koch1-238/+345
2006-09-06The big Assuan error code removal.Werner Koch1-2/+2
2006-06-20Updated FSF's address.Werner Koch1-1/+2
2005-07-27Removed directories which are only used by the 1.9 branchWerner Koch1-306/+0
2005-01-13* acinclude.m4 (GNUPG_PTH_VERSION_CHECK): Link a simple testV1-9-15Werner Koch1-10/+32
program to see whether the installation is sane. * certreqgen.c (proc_parameters): Cast printf arg.
2004-07-22* trustlist.c (read_list): Allow colons in the fingerprint.Werner Koch1-13/+15
(headerblurb): Rephrased. * gpg-agent.c (handle_connections): Increase the stack size ot 256k. * de.po: Updated. * scdaemon.c (main): Bumbed thread stack size up to 512k. * keylist.c (list_cert_raw): Print the keygrip.
2004-05-11* gpg-agent.c (handle_signal): Reload the trustlist on SIGHUP.Werner Koch1-22/+89
(start_connection_thread): Hack to simulate a ticker. * trustlist.c (agent_trustlist_housekeeping) (agent_reload_trustlist): New. Protected all global functions here with a simple counter which is sufficient for Pth. * fingerprint.c (gpgsm_get_key_algo_info): New. * sign.c (gpgsm_sign): Don't assume RSA in the status line. * keylist.c (list_cert_colon): Really print the algorithm and key length. (list_cert_raw, list_cert_std): Ditto. (list_cert_colon): Reorganized to be able to tell whether a root certificate is trusted.
2004-05-03* gpg-agent.c: Remove help texts for options lile --lc-ctype.Werner Koch1-1/+5
(main): New option --allow-mark-trusted. * trustlist.c (agent_marktrusted): Use it here. * gpg-agent.texi (Agent Options): Add --allow-mark-trusted. * gpgconf-comp.c: Add --allow-mark-trusted for the gpg-agent.
2004-01-28(agent_marktrusted): Check whether the trustlist isWerner Koch1-0/+16
writable.
2003-06-05This commit was manufactured by cvs2svn to create branchRepo Admin1-0/+306
'GNUPG-1-9-BRANCH'.
2003-06-03Make use of libgpg-errorWerner Koch1-13/+15
2003-01-09Updated from latest NewPG projectWerner Koch1-3/+3
2002-10-19This commit was manufactured by cvs2svn to create branchRepo Admin1-304/+0
'GNUPG-1-9-BRANCH'.
2002-04-242002-04-25 Marcus Brinkmann <[email protected]>Marcus Brinkmann1-2/+2
* agent.h (agent_get_confirmation): Replace paramter prompt with two parameters ok and cancel. * query.c (agent_get_confirmation): Likewise. Implement this. * trustlist.c (agent_marktrusted): Fix invocation of agent_get_confirmation. * divert-scd.c (ask_for_card): Likewise.
2002-03-18Doc fixes, moved some fizmes to TODO, fixed minor bugs.Werner Koch1-1/+1
2002-02-18* command.c (cmd_marktrusted): Implemented.Werner Koch1-6/+83
* trustlist.c (agent_marktrusted): New. (open_list): Add APPEND arg. * query.c (agent_get_confirmation): New.
2002-01-15* trustlist.c: New.Werner Koch1-0/+227
* command.c (cmd_istrusted, cmd_listtrusted, cmd_marktrusted): New.