aboutsummaryrefslogtreecommitdiffstats
path: root/doc/gpg-agent.texi (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* doc: Mention that --use-standard-socket-p always returns true.Werner Koch2015-03-241-2/+5
| | | | --
* gpg-agent: Use "pinentry-basic" as fallback.Werner Koch2015-02-041-2/+4
| | | | | | | | | | | | | | | | | | | | | | * common/homedir.c (get_default_pinentry_name): New. (gnupg_module_name): Use that for the default pinentry. (gnupg_module_name_flush_some): New. * agent/gpg-agent.c (agent_sighup_action): Flush some module names. * agent/call-pinentry.c (start_pinentry): Do not modify opt.pinentry_program. -- The idea with this change is that under Windows we can install a simple native Windows pinentry as "pinentry-basic" and a full GUI version may then later install pinentry-gtk etc which would then automatically be used. Unfortunately installing another pinentry from a different package would clobber the GnuPG core directory which is not nice. To fix that we would need to agree on standard installation directories for GUIs to also look there. Signed-off-by: Werner Koch <[email protected]>
* doc: Fix some typos and add missing options.Werner Koch2015-01-221-2/+2
| | | | | | | | | | | -- GnuPG-bug-id: 1602 I added options shown with --help but missing in the man page. However, --help won't show everything listed in the man age and frankly there are even more options not listed anywhere (to see them use --dump-options).
* gpg: Re-enable the "Passphrase" parameter for batch key generation.Werner Koch2015-01-211-0/+7
| | | | | | | | | | | | | * agent/command.c (cmd_genkey): Add option --inq-passwd. * agent/genkey.c (agent_genkey): Add new arg override_passphrase. * g10/call-agent.c (inq_genkey_parms): Handle NEWPASSWD keyword. (agent_genkey): Add arg optional arg "passphrase". * g10/keygen.c (common_gen, gen_elg, gen_dsa, gen_ecc) (gen_rsa, do_create): Add arg "passphrase" and pass it through. (do_generate_keypair): Make use of pPASSPHRASE. (release_parameter_list): Wipe out a passphrase parameter. Signed-off-by: Werner Koch <[email protected]>
* Document no-allow-mark-trusted optionAndre Heinecke2014-12-051-12/+11
| | | | | | | | | | | | | | doc: Document no-allow-mark-trusted for gpg-agent * doc/gpg-agent.texi: Change allow-mark-trusted doc to no-allow-mark-trusted. -- Since rev. 78a56b14 allow-mark-trusted is the default option and was replaced by no-allow-mark-trusted to disable the interactive prompt. Signed-off-by: Andre Heinecke <[email protected]>
* gpg-agent: Add restricted connection feature.Мирослав Николић2014-11-271-0/+13
| | | | | | | | | | | | | | | | | | | | | | | * agent/agent.h (opt): Add field extra_socket. (server_control_s): Add field restricted. * agent/command.c: Check restricted flag on many commands. * agent/gpg-agent.c (oExtraSocket): New. (opts): Add option --extra-socket. (socket_name_extra): New. (cleanup): Cleanup that socket name. (main): Implement oExtraSocket. (create_socket_name): Add arg homedir and change all callers. (create_server_socket): Rename arg is_ssh to primary and change callers. (start_connection_thread): Take ctrl as arg. (start_connection_thread_std): New. (start_connection_thread_extra): New. (handle_connections): Add arg listen_fd_extra and replace the connection starting code by parameterized loop. * common/asshelp.c (start_new_gpg_agent): Detect the use of the restricted mode and don't fail on sending the pinentry environment. * common/util.h (GPG_ERR_FORBIDDEN): New.
* tests: Speed up the genkey1024.test by using not so strong random.Werner Koch2014-10-301-0/+8
| | | | | | | | | | | | | * agent/gpg-agent.c (oDebugQuickRandom): New. (opts): New option --debug-quick-random. (main): Use new option. * common/asshelp.c (start_new_gpg_agent): Add hack to pass an additional argument for the agent name. * tests/openpgp/defs.inc: Pass --debug-quick-random to the gpg-agent starting parameters. * tests/openpgp/version.test: Ditto. Signed-off-by: Werner Koch <[email protected]>
* doc: Fix a man page rendering problem.Werner Koch2014-10-101-7/+7
| | | | | * doc/gpg-agent.texi (Agent Configuration): Fix rendering of the sshcontrol example.
* doc: Add missing entry for allow-preset-passphaseKristian Fiskerstrand2014-10-091-0/+6
| | | | --
* Remove support for the GPG_AGENT_INFO envvar.Werner Koch2014-10-031-15/+53
| | | | | | | | | | | | | | | | | | | | | | | | | | * agent/agent.h (opt): Remove field use_standard_socket. * agent/command.c (cmd_killagent): Always allow killing. * agent/gpg-agent.c (main): Turn --{no,}use-standard-socket and --write-env-file into dummy options. Always return true for --use-standard-socket-p. Do not print the GPG_AGENT_INFO envvar setting or set that envvar. (create_socket_name): Simplify by removing non standard socket support. (check_for_running_agent): Ditto. * common/asshelp.c (start_new_gpg_agent): Remove GPG_AGENT_INFO use. * common/simple-pwquery.c (agent_open): Ditto. * configure.ac (GPG_AGENT_INFO_NAME): Remove. * g10/server.c (gpg_server): Do not print the AgentInfo comment. * g13/server.c (g13_server): Ditto. * sm/server.c (gpgsm_server): Ditto. * tools/gpgconf.c (main): Simplify by removing non standard socket support. -- The indented fix to allow using a different socket than the one in the gnupg home directory is to change Libassuan to check whether the socket files exists as a regualr file with a special keyword to redirect to another socket file name.
* doc: Improve the rendering of the manualWerner Koch2014-06-251-15/+28
|
* doc: Add note regarding gpg-preset-passphrase and --max-cache-ttl.Werner Koch2014-06-241-4/+7
| | | | | -- GnuPG-bug-id: 1615
* gpg: Make decryption with the OpenPGP card work.Werner Koch2013-08-281-0/+5
| | | | | | | | | | | | | | | | | | | | | | | | * scd/app-common.h (APP_DECIPHER_INFO_NOPAD): New. * scd/app-openpgp.c (do_decipher): Add arg R_INFO. * scd/app-nks.c (do_decipher): Add arg R_INFO as a dummy. * scd/app.c (app_decipher): Add arg R_INFO. * scd/command.c (cmd_pkdecrypt): Print status line "PADDING". * agent/call-scd.c (padding_info_cb): New. (agent_card_pkdecrypt): Add arg R_PADDING. * agent/divert-scd.c (divert_pkdecrypt): Ditto. * agent/pkdecrypt.c (agent_pkdecrypt): Ditto. * agent/command.c (cmd_pkdecrypt): Print status line "PADDING". * g10/call-agent.c (padding_info_cb): New. (agent_pkdecrypt): Add arg R_PADDING. * g10/pubkey-enc.c (get_it): Use padding info. -- Decryption using a card never worked in gpg 2.1 because the information whether the pkcs#1 padding needs to be removed was not available. Gpg < 2.1 too this info from the secret sub key but that has gone in 2.1. Signed-off-by: Werner Koch <[email protected]>
* agent: New option --disable-check-own-socket.Werner Koch2013-05-221-8/+20
| | | | | | | | | * agent/gpg-agent.c (oDisableCheckOwnSocket): New. (disable_check_own_socket): New. (parse_rereadable_options): Set new option. (check_own_socket): Implement new option. Signed-off-by: Werner Koch <[email protected]>
* Mention status messages in the documentation.Ben Kibbey2012-04-041-0/+8
| | | | Note INQUIRE_MAXLEN.
* Document PASSWD --preset.Ben Kibbey2012-04-041-0/+10
|
* Document GENKEY options.Ben Kibbey2012-04-041-0/+12
|
* Document PRESET_PASSPHRASE.Ben Kibbey2012-04-041-0/+27
|
* Document CLEAR_PASSPHRASE.Ben Kibbey2012-04-041-0/+23
| | | | And describe the --mode=normal option.
* Put more options into the options indexWerner Koch2011-10-121-4/+0
| | | | Also removed the single letter options from the index.
* Typo fixWerner Koch2011-08-101-1/+1
|
* Minor doc updates v2.0 vs. v2.1)Werner Koch2011-08-081-0/+8
|
* Support a confirm flag for ssh.Werner Koch2011-07-201-2/+9
| | | | | This implements the suggestion from bug#1349. With this change the fingerprint of the ssh key is also displayed in the pinentry prompts.
* Document OPTION s2k-countWerner Koch2011-06-291-0/+8
|
* Add OPTION:cache-ttl-opt-preset to gpg-agent.Werner Koch2011-04-211-0/+6
| | | | | This option may be used to change the default ttl values use with the --preset option of GENKEY and PASSWD.
* New agent option pinentry-mode.Werner Koch2011-03-031-43/+114
| | | | | This provides the framework and implements the ask, cancel and error. loopback will be implemented later.
* Describe new log facilities.Werner Koch2010-12-021-1/+2
|
* Update scripts etc.gnupg-2.1.0beta1gnupg-2.1-baseWerner Koch2010-10-261-1/+13
|
* All tests work are again workingWerner Koch2010-10-141-2/+12
|
* Import fixes.Werner Koch2010-10-061-2/+15
| | | | | new otion for watchgnupg
* Don't set SSH_AGENTPID_INFO.Werner Koch2010-10-051-6/+7
| | | | | | Doc fixes. Allow TCP and local sockets in watchgnupg.
* Exporting secret keys via gpg-agent is now basically supported.Werner Koch2010-10-011-5/+11
| | | | | | A couple of forward ported changes. Doc updates.
* Add component pinentry as an easy way to figure out the defaultWerner Koch2010-08-191-2/+2
| | | | | pinentry. Also allows to test whether pinentry is installed.
* Include dirmngr manualWerner Koch2010-06-101-3/+3
|
* Update tests.Werner Koch2010-05-111-7/+8
|
* auto start the agent if --use-standard-socket is in use.Werner Koch2010-05-031-2/+5
|
* support numeric debug levels.Werner Koch2009-12-031-14/+20
|
* Typo fixes. Fixes bug#1093Werner Koch2009-07-221-8/+8
|
* Give hints on files to backup.Werner Koch2009-07-221-18/+23
|
* Fix for bug#1066.Werner Koch2009-06-021-7/+9
| | | | | A couple of minor changes.
* Made card key generate with backup key work for 2048 bit.Werner Koch2009-05-151-3/+8
| | | | | Improved card key generation prompts.
* Changed order of the confirmation questions for root certificatesWerner Koch2009-03-191-2/+7
| | | | | and stores negative answers in trustlist.txt.
* Add missing option strings.Werner Koch2009-03-021-2/+2
|
* Modernized gpg-agent startup instructionsWerner Koch2009-03-021-10/+23
|
* Add option --no-ask for GET_PASSPHRASE.Werner Koch2008-12-101-1/+6
|
* use $() instead of backticks.Werner Koch2008-11-121-9/+9
|
* Always search missing certifcates using a running Dirmngr's cache.Werner Koch2008-02-131-0/+2
|
* W32 fix for trustdb creation.Werner Koch2008-01-301-5/+5
|
* Typo and grammer fixes by Justin Pryzby.Werner Koch2008-01-281-31/+31
|
* Started to implement the audit log feature.Werner Koch2007-11-191-5/+7
| | | | | | | | Pass PINENTRY_USER_DATA and XAUTHORITY to Pinentry. Improved support for the quality bar. Minor internal restructuring. Translation fixes.