aboutsummaryrefslogtreecommitdiffstats
path: root/doc/gpgsm.texi (unfollow)
Commit message (Collapse)AuthorFilesLines
2014-11-28Add option --no-autostart.Werner Koch1-0/+8
* g10/gpg.c: Add option --no-autostart. * sm/gpgsm.c: Ditto. * g10/options.h (opt): Add field autostart. * sm/gpgsm.h (opt): Ditto. * g10/call-agent.c (start_agent): Print note if agent was not autostarted. * sm/call-agent.c (start_agent): Ditto. * g10/call-dirmngr.c (create_context): Likewise. * sm/call-dirmngr.c (start_dirmngr_ext): Ditto. Signed-off-by: Werner Koch <[email protected]>
2014-11-04Typo fixes.Werner Koch1-1/+1
--
2014-10-30tests: Speed up the genkey1024.test by using not so strong random.Werner Koch1-1/+3
* agent/gpg-agent.c (oDebugQuickRandom): New. (opts): New option --debug-quick-random. (main): Use new option. * common/asshelp.c (start_new_gpg_agent): Add hack to pass an additional argument for the agent name. * tests/openpgp/defs.inc: Pass --debug-quick-random to the gpg-agent starting parameters. * tests/openpgp/version.test: Ditto. Signed-off-by: Werner Koch <[email protected]>
2014-10-03Remove support for the GPG_AGENT_INFO envvar.Werner Koch1-3/+10
* agent/agent.h (opt): Remove field use_standard_socket. * agent/command.c (cmd_killagent): Always allow killing. * agent/gpg-agent.c (main): Turn --{no,}use-standard-socket and --write-env-file into dummy options. Always return true for --use-standard-socket-p. Do not print the GPG_AGENT_INFO envvar setting or set that envvar. (create_socket_name): Simplify by removing non standard socket support. (check_for_running_agent): Ditto. * common/asshelp.c (start_new_gpg_agent): Remove GPG_AGENT_INFO use. * common/simple-pwquery.c (agent_open): Ditto. * configure.ac (GPG_AGENT_INFO_NAME): Remove. * g10/server.c (gpg_server): Do not print the AgentInfo comment. * g13/server.c (g13_server): Ditto. * sm/server.c (gpgsm_server): Ditto. * tools/gpgconf.c (main): Simplify by removing non standard socket support. -- The indented fix to allow using a different socket than the one in the gnupg home directory is to change Libassuan to check whether the socket files exists as a regualr file with a special keyword to redirect to another socket file name.
2014-06-03Add new option --with-secret.Werner Koch1-0/+7
* g10/gpg.c: Add option --with-secret. * g10/options.h (struct opt): Add field with_secret. * g10/keylist.c (public_key_list): Pass opt.with_secret to list_all and list_one. (list_all, list_one): Add arg mark_secret. (list_keyblock_colon): Add arg has_secret. * sm/gpgsm.c: Add option --with-secret. * sm/server.c (option_handler): Add option "with-secret". * sm/gpgsm.h (server_control_s): Add field with_secret. * sm/keylist.c (list_cert_colon): Take care of with_secret. Also move the token string from the wrong field 14 to 15. -- This option is useful for key managers which need to know whether a key has a secret key. This change allows to collect this information in one pass.
2014-06-03gpgsm: New commands --export-secret-key-{p8,raw}Werner Koch1-2/+15
* sm/gpgsm.c: Add new commands. * sm/minip12.c (build_key_sequence): Add arg mode. (p12_raw_build): New. * sm/export.c (export_p12): Add arg rawmode. Call p12_raw_build. (gpgsm_p12_export): Ditto. (print_short_info): Print the keygrip.
2014-03-12gpg: Add option --dirmngr-program.Werner Koch1-1/+1
* g10/gpg.c: Add option --dirmngr-program. * g10/options.h (struct opt): Add field dirmngr_program. * g10/call-dirmngr.c (create_context): Use new var. * dirmngr/dirmngr.c: Include gc-opt-flags.h. (main): Remove GC_OPT_FLAG_*. * tools/gpgconf-comp.c (GC_OPT_FLAG_NO_CHANGE): Move macro to ... * common/gc-opt-flags.h: here.
2013-05-07doc: fix some Texinfo warnings.Ian Abbott1-4/+4
* doc/gpg.texi: Fix syntax and add missing menu entries. * doc/gpgsm.texi: Fix subsectioning. -- These five patches fix some warnings from Texinfo 5 by adding some missing nodes and changing some sections to subsections, and moving an '@end ifset' to the start of a line. I also noticed the 'Deprecated options' subsection didn't appear in the GPG options menu, so I added it. (Texinfo never warned about it because it was after the last node in the menu.) 1) doc/gpg.texi: move '@end ifset' to start of line 2) doc/gpg.texi: Add missing node for 'Compliance options' section. 3) doc/gpg.texi: add node for 'Deprecated options' subsection. 4) doc/gpg.texi: make 'Unattended key generation' a subsection 5) doc/gpgsm.texi: fix subsectioning for Unattended Usage (all 5 merged into one patch by wk) (cherry picked from commit 4d67f59a336bfa0ff19fc23209940724196fd886) Signed-off-by: Werner Koch <[email protected]>
2013-04-19doc: Formatting fixes.Werner Koch1-2/+3
* doc/Makefile.am (.fig.jpg): Correct to use -L jpeg. * doc/gpg.texi: Fix cross reference for --options. * doc/gpgsm.texi: Likewise. * doc/gpl.texi: Fix enumerate and re-indent examples. -- Reported-by: Ian Abbott Signed-off-by: Werner Koch <[email protected]>
2011-12-07gpgsm: Add new validation model "steed".Werner Koch1-4/+5
* sm/gpgsm.h (VALIDATE_FLAG_STEED): New. * sm/gpgsm.c (gpgsm_parse_validation_model): Add model "steed". * sm/server.c (option_handler): Allow validation model "steed". * sm/certlist.c (gpgsm_cert_has_well_known_private_key): New. * sm/certchain.c (do_validate_chain): Handle the well-known-private-key attribute. Support the "steed" model. (gpgsm_validate_chain): Ditto. * sm/verify.c (gpgsm_verify): Return "steed" in the trust status line. * sm/keylist.c (list_cert_colon): Print the new 'w' flag. -- This is the first part of changes to implement the STEED proposal as described at http://g10code.com/steed.html . The idea for X.509 is not to use plain self-signed certificates but certificates signed by a dummy CA (i.e. one for which the private key is known). Having a single CA as an indication for the use of STEED might help other X.509 implementations to implement STEED.
2011-12-06gpgsm: Allow arbitrary extensions for cert creation.Werner Koch1-3/+3
* sm/certreqgen.c (pSUBJKEYID, pEXTENSION): New. (read_parameters): Add new keywords. (proc_parameters): Check values of new keywords. (create_request): Add SubjectKeyId and extensions. (parse_parameter_usage): Support "cert" and the encrypt alias "encr".
2011-10-18Typo fix and remove of some colloquial termsWerner Koch1-15/+16
2011-10-12Put more options into the options indexWerner Koch1-2/+0
Also removed the single letter options from the index.
2011-08-08Minor doc updates v2.0 vs. v2.1)Werner Koch1-3/+17
2011-06-27doc/gpgsm.texi com-certs.pem mini-fixBernhard Reiter1-1/+1
[[PGP Signed Part:Undecided]] [1. text/plain] Example path for com-certs.pem corrected. [2. text/x-diff; doc.diff]
2011-03-01Move parameter file description to the manual.Werner Koch1-35/+179
2010-10-08Add new option --with-keygripWerner Koch1-0/+4
2010-10-01Exporting secret keys via gpg-agent is now basically supported.Werner Koch1-6/+5
A couple of forward ported changes. Doc updates.
2009-12-17Implement --faked-systrem-time for gpg.Werner Koch1-1/+1
Typo and comment fixes.
2009-12-10Add option --cert-extension.Werner Koch1-1/+10
2009-12-03support numeric debug levels.Werner Koch1-6/+12
2009-10-19[g13] Add RECIPEINT and CREATE command.Werner Koch1-1/+1
[sm] Chnage --include-certs default
2009-07-22Typo fixes. Fixes bug#1093Werner Koch1-24/+24
2009-07-22Give hints on files to backup.Werner Koch1-3/+6
2009-07-07Impleemned gpgsm's IMPORT --re-import feature.Werner Koch1-2/+12
Typo fix.
2009-07-07Reworked passing of envars to Pinentry.Werner Koch1-2/+2
2009-07-01Alow batch ode for gpgsm --gen-key.Werner Koch1-3/+4
Allow CSR generation using an existing key with gpgsm.
2009-03-26Signing using Netkey 3 cards does now work.Werner Koch1-0/+6
2009-03-06New gpg-agent command to list key information.Werner Koch1-5/+9
Gpgsm does now print the S/N of cards. Consider ephemeral keys during listing an export.
2008-12-12Small doc fixes.Werner Koch1-5/+6
2008-10-14SCD changes for PC/SC under W32.Werner Koch1-1/+1
2008-10-13Explain how to delete a secret X.509 key.Werner Koch1-1/+7
2008-08-01Fix !EROFS bug.Werner Koch1-2/+10
Doc updates
2008-02-19Improve certificate chain construction.Werner Koch1-0/+7
Extend PKITS framework
2008-02-13Always search missing certifcates using a running Dirmngr's cache.Werner Koch1-1/+18
2008-01-28Typo and grammer fixes by Justin Pryzby.Werner Koch1-3/+3
2007-12-13Allow verification of some broken S-TRUST generated signatures.Werner Koch1-0/+13
2007-12-06Add support for help stuff to audit.cWerner Koch1-1/+15
2007-11-19Document --auto-issuer-key-retrieve.Werner Koch1-1/+12
2007-08-14Documentaion updates.Werner Koch1-1/+2
Support doe Dirmngr under W32. Fixed a yat2m bug.
2007-08-10Implemented the chain model for X.509 validation.Werner Koch1-1/+13
2007-07-17Typo fixes.Werner Koch1-0/+8
Made --default-key work for gpgsm Add --default-key and --encrypt-to to gpgconf.
2007-06-21Implemented the --gen-key command as we can't use the gpgsm-gencert.sh under ↵Werner Koch1-2/+3
Windows.
2007-06-14A whole bunch of changes to allow building for Windows.Werner Koch1-0/+9
See the ChangeLogs for details.
2007-05-15Use estream_asprintf instead of the GNU asprintf.Werner Koch1-2/+8
2007-03-20Allow setting of the passphrase encoding of pkcs#12 files.Werner Koch1-5/+18
New option --p12-charset.
2007-01-31Included LIBICONV in all Makefiles.Werner Koch1-1/+2
g10/ * passphrase.c (passphrase_get): Set the cancel flag on all error from the agent. Fixes a bug reported by Tom Duerbusch. sm/ * gpgsm.c (main): Let --gen-key print a more informative error message.
2006-11-14sm/Werner Koch1-4/+10
* server.c (skip_options): Skip leading spaces. (has_option): Honor "--". (cmd_export): Add option --data to do an inline export. Skip all options. * certdump.c (gpgsm_fpr_and_name_for_status): New. * verify.c (gpgsm_verify): Use it to print correct status messages. doc/ * gpgsm.texi (GPGSM EXPORT): Document changes.
2006-10-23.Werner Koch1-0/+9
2006-09-26Made buliding w/o curl workWerner Koch1-1/+4