aboutsummaryrefslogtreecommitdiffstats
path: root/doc/gpgsm.texi (follow)
Commit message (Collapse)AuthorAgeFilesLines
* gpgsm: Add new validation model "steed".Werner Koch2011-12-071-4/+5
| | | | | | | | | | | | | | | | | | | | * sm/gpgsm.h (VALIDATE_FLAG_STEED): New. * sm/gpgsm.c (gpgsm_parse_validation_model): Add model "steed". * sm/server.c (option_handler): Allow validation model "steed". * sm/certlist.c (gpgsm_cert_has_well_known_private_key): New. * sm/certchain.c (do_validate_chain): Handle the well-known-private-key attribute. Support the "steed" model. (gpgsm_validate_chain): Ditto. * sm/verify.c (gpgsm_verify): Return "steed" in the trust status line. * sm/keylist.c (list_cert_colon): Print the new 'w' flag. -- This is the first part of changes to implement the STEED proposal as described at http://g10code.com/steed.html . The idea for X.509 is not to use plain self-signed certificates but certificates signed by a dummy CA (i.e. one for which the private key is known). Having a single CA as an indication for the use of STEED might help other X.509 implementations to implement STEED.
* gpgsm: Allow arbitrary extensions for cert creation.Werner Koch2011-12-061-3/+3
| | | | | | | | * sm/certreqgen.c (pSUBJKEYID, pEXTENSION): New. (read_parameters): Add new keywords. (proc_parameters): Check values of new keywords. (create_request): Add SubjectKeyId and extensions. (parse_parameter_usage): Support "cert" and the encrypt alias "encr".
* Typo fix and remove of some colloquial termsWerner Koch2011-10-181-15/+16
|
* Put more options into the options indexWerner Koch2011-10-121-2/+0
| | | | Also removed the single letter options from the index.
* Minor doc updates v2.0 vs. v2.1)Werner Koch2011-08-081-3/+17
|
* doc/gpgsm.texi com-certs.pem mini-fixBernhard Reiter2011-06-271-1/+1
| | | | | | | | [[PGP Signed Part:Undecided]] [1. text/plain] Example path for com-certs.pem corrected. [2. text/x-diff; doc.diff]
* Move parameter file description to the manual.Werner Koch2011-03-011-35/+179
|
* Add new option --with-keygripWerner Koch2010-10-081-0/+4
|
* Exporting secret keys via gpg-agent is now basically supported.Werner Koch2010-10-011-6/+5
| | | | | | A couple of forward ported changes. Doc updates.
* Implement --faked-systrem-time for gpg.Werner Koch2009-12-171-1/+1
| | | | | Typo and comment fixes.
* Add option --cert-extension.Werner Koch2009-12-101-1/+10
|
* support numeric debug levels.Werner Koch2009-12-031-6/+12
|
* [g13] Add RECIPEINT and CREATE command.Werner Koch2009-10-191-1/+1
| | | | | [sm] Chnage --include-certs default
* Typo fixes. Fixes bug#1093Werner Koch2009-07-221-24/+24
|
* Give hints on files to backup.Werner Koch2009-07-221-3/+6
|
* Impleemned gpgsm's IMPORT --re-import feature.Werner Koch2009-07-071-2/+12
| | | | | Typo fix.
* Reworked passing of envars to Pinentry.Werner Koch2009-07-071-2/+2
|
* Alow batch ode for gpgsm --gen-key.Werner Koch2009-07-011-3/+4
| | | | | Allow CSR generation using an existing key with gpgsm.
* Signing using Netkey 3 cards does now work.Werner Koch2009-03-261-0/+6
|
* New gpg-agent command to list key information.Werner Koch2009-03-061-5/+9
| | | | | | Gpgsm does now print the S/N of cards. Consider ephemeral keys during listing an export.
* Small doc fixes.Werner Koch2008-12-121-5/+6
|
* SCD changes for PC/SC under W32.Werner Koch2008-10-141-1/+1
|
* Explain how to delete a secret X.509 key.Werner Koch2008-10-131-1/+7
|
* Fix !EROFS bug.Werner Koch2008-08-011-2/+10
| | | | | Doc updates
* Improve certificate chain construction.Werner Koch2008-02-191-0/+7
| | | | | Extend PKITS framework
* Always search missing certifcates using a running Dirmngr's cache.Werner Koch2008-02-131-1/+18
|
* Typo and grammer fixes by Justin Pryzby.Werner Koch2008-01-281-3/+3
|
* Allow verification of some broken S-TRUST generated signatures.Werner Koch2007-12-131-0/+13
|
* Add support for help stuff to audit.cWerner Koch2007-12-061-1/+15
|
* Document --auto-issuer-key-retrieve.Werner Koch2007-11-191-1/+12
|
* Documentaion updates.Werner Koch2007-08-141-1/+2
| | | | | | Support doe Dirmngr under W32. Fixed a yat2m bug.
* Implemented the chain model for X.509 validation.Werner Koch2007-08-101-1/+13
|
* Typo fixes.Werner Koch2007-07-171-0/+8
| | | | | | Made --default-key work for gpgsm Add --default-key and --encrypt-to to gpgconf.
* Implemented the --gen-key command as we can't use the gpgsm-gencert.sh under ↵Werner Koch2007-06-211-2/+3
| | | | Windows.
* A whole bunch of changes to allow building for Windows.Werner Koch2007-06-141-0/+9
| | | | | See the ChangeLogs for details.
* Use estream_asprintf instead of the GNU asprintf.Werner Koch2007-05-151-2/+8
|
* Allow setting of the passphrase encoding of pkcs#12 files.Werner Koch2007-03-201-5/+18
| | | | New option --p12-charset.
* Included LIBICONV in all Makefiles.Werner Koch2007-01-311-1/+2
| | | | | | | | | | g10/ * passphrase.c (passphrase_get): Set the cancel flag on all error from the agent. Fixes a bug reported by Tom Duerbusch. sm/ * gpgsm.c (main): Let --gen-key print a more informative error message.
* sm/Werner Koch2006-11-141-4/+10
| | | | | | | | | | | | | | * server.c (skip_options): Skip leading spaces. (has_option): Honor "--". (cmd_export): Add option --data to do an inline export. Skip all options. * certdump.c (gpgsm_fpr_and_name_for_status): New. * verify.c (gpgsm_verify): Use it to print correct status messages. doc/ * gpgsm.texi (GPGSM EXPORT): Document changes.
* .Werner Koch2006-10-231-0/+9
|
* Made buliding w/o curl workWerner Koch2006-09-261-1/+4
|
* Various updatesWerner Koch2006-09-211-1/+3
|
* Ready for another releasegnupg-1.9.23Werner Koch2006-09-181-5/+8
|
* Various fixes and new features.Werner Koch2006-09-131-0/+9
| | | | | Enhanced gpg-connect-agent.
* doc fixesWerner Koch2006-09-081-33/+51
|
* Some fixes as needed by dirmngr man pagesWerner Koch2006-09-041-1/+8
|
* See ChangeLogsWerner Koch2006-08-291-0/+6
|
* More man pages. Added include files for 2 common paragraphs.Werner Koch2006-08-181-8/+1
|
* include support and texi fixesWerner Koch2006-08-171-1/+1
|
* More man pages.Werner Koch2006-08-171-27/+95
|