aboutsummaryrefslogtreecommitdiffstats
path: root/doc (unfollow)
Commit message (Collapse)AuthorFilesLines
2012-06-25gpg: Disallow the use of v3 keys.disallow-v3-keysWerner Koch2-1/+15
* g10/gpg.c: Add options --allow-v3-keys and --no-allow-v3-keys. (main): Enable --allow-v3-keys in --pgp2 mode. * g10/options.h (opt): Add field allow_v3_keys. * g10/import.c (delete_v3_subkeys): New. (import_one): Skip v3 keys and delete v3 subkeys. (import_print_stats): Print stats on v3 keys and subkeys. * g10/getkey.c (finish_lookup): Skip v3 keys. -- This is a first take on disabling v3 keys. We may need to add some tweaks to make decryption using an existing v3 key easier. There is no need to disallow decryption. Thanks to Georgi Guninski to put some pressure on us to finally do what PGP 2 folks will probably don’t like. See the discussion on gnupg-devel starting 2012-06-22.
2012-06-05Change all quotes in strings and comments to the new GNU standard.Werner Koch1-9/+9
The asymmetric quotes used by GNU in the past (`...') don't render nicely on modern systems. We now use two \x27 characters ('...'). The proper solution would be to use the correct Unicode symmetric quotes here. However this has the disadvantage that the system requires Unicode support. We don't want that today. If Unicode is available a generated po file can be used to output proper quotes. A simple sed script like the one used for en@quote is sufficient to change them. The changes have been done by applying sed -i "s/\`\([^'\`]*\)'/'\1'/g" to most files and fixing obvious problems by hand. The msgid strings in the po files were fixed with a similar command.
2012-05-24Print the hash algorithm in colon mode key listing.Werner Koch1-2/+6
* g10/keylist.c (list_keyblock_colon): Print digest_algo.
2012-05-08Add tweaks for the not anymore patented IDEA algorithm.Werner Koch1-5/+3
* g10/keygen.c (keygen_set_std_prefs): Include IDEA only in PGP2 compatibility mode. * g10/misc.c (idea_cipher_warn): Remove. Also remove all callers. * common/status.h (STATUS_RSA_OR_IDEA): Remove. Do not emit this status anymore. -- To keep the number of actually used algorithms low, we want to support IDEA only in a basically read-only way (unless --pgp2 is used during key generation). It does not make sense to suggest the use of this old 64 bit blocksize algorithm. However, there is old data available where it might be helpful to have IDEA available.
2012-04-17faq: Replace --list-ownerturst by --export-ownertrust.Werner Koch1-1/+1
--
2012-04-04Mention status messages in the documentation.Ben Kibbey1-0/+8
Note INQUIRE_MAXLEN.
2012-04-04Document PASSWD --preset.Ben Kibbey1-0/+10
2012-04-04Document GENKEY options.Ben Kibbey1-0/+12
2012-04-04Document PRESET_PASSPHRASE.Ben Kibbey1-0/+27
2012-04-04Document CLEAR_PASSPHRASE.Ben Kibbey1-0/+23
And describe the --mode=normal option.
2012-03-26Typo fixes in de.po.Werner Koch1-1/+1
-- This is bug#1276 and http://bugs.debian.org/594343
2012-03-26Add mksamplekeys script.Werner Koch2-1/+12
* doc/mksamplekeys: New. -- Note that we have the same script in the 1.4 branch. That should be removed and only this one shall be used.
2012-01-27gpg-connect-tool: Take the string "true" as a true condition.Werner Koch1-5/+12
* tools/gpg-connect-agent.c (main): Handle strings "true" and "yes" in conditions as expected.
2012-01-16yat2m: don't dereference pointer to freed memoryJim Meyering1-4/+4
* doc/yat2m.c (top_parse_file): Correct macrolist-freeing loop.
2012-01-11Refresh sample keysDavid Shaw1-432/+411
2012-01-06gpg: Allow use of a standard space separated fingerprint.Werner Koch1-4/+5
* common/userids.c (classify_user_id): Check for space separated GPG fingerprint.
2011-12-20Prepare for the beta3 release.Werner Koch1-5/+8
2011-12-20Add the STEED Self-Signing Nonthority certificate.Werner Koch1-0/+18
* doc/com-certs.pem: Install it when creating a keybox.
2011-12-20faq: Add section on US export restrictions.Werner Koch1-7/+37
2011-12-14scd: Add the "undefined" stub application.Werner Koch1-0/+11
* scd/app.c (select_application): Implement the "undefined" application.
2011-12-13scd: New option --debug-assuan-log-cats.Werner Koch1-19/+28
* scd/scdaemon.c (oDebugAssuanLogCats): New. (opts): Add option --debug-assuan-log-cats. (main): Implement option. * common/asshelp.c (set_libassuan_log_cats): New. -- The old way of setting the logging categories with an environment variable is awkward if sdaemon is spawned from a running gpg-agent.
2011-12-07gpgsm: Add new validation model "steed".Werner Koch2-4/+10
* sm/gpgsm.h (VALIDATE_FLAG_STEED): New. * sm/gpgsm.c (gpgsm_parse_validation_model): Add model "steed". * sm/server.c (option_handler): Allow validation model "steed". * sm/certlist.c (gpgsm_cert_has_well_known_private_key): New. * sm/certchain.c (do_validate_chain): Handle the well-known-private-key attribute. Support the "steed" model. (gpgsm_validate_chain): Ditto. * sm/verify.c (gpgsm_verify): Return "steed" in the trust status line. * sm/keylist.c (list_cert_colon): Print the new 'w' flag. -- This is the first part of changes to implement the STEED proposal as described at http://g10code.com/steed.html . The idea for X.509 is not to use plain self-signed certificates but certificates signed by a dummy CA (i.e. one for which the private key is known). Having a single CA as an indication for the use of STEED might help other X.509 implementations to implement STEED.
2011-12-06gpgsm: Allow arbitrary extensions for cert creation.Werner Koch2-3/+4
* sm/certreqgen.c (pSUBJKEYID, pEXTENSION): New. (read_parameters): Add new keywords. (proc_parameters): Check values of new keywords. (create_request): Add SubjectKeyId and extensions. (parse_parameter_usage): Support "cert" and the encrypt alias "encr".
2011-12-01Generate the ChangeLog from commit logs.Werner Koch3-5/+39
* scripts/gitlog-to-changelog: New script. Taken from gnulib. * scripts/git-log-fix: New file. * scripts/git-log-footer: New file. * doc/HACKING: Describe the ChangeLog policy * ChangeLog: New file. * Makefile.am (EXTRA_DIST): Add new files. (gen-ChangeLog): New. (dist-hook): Run gen-ChangeLog. Rename all ChangeLog files to ChangeLog-2011.
2011-11-30Rewrite dns-cert.c to not use the gpg-only iobuf stuff.Werner Koch1-0/+3
* common/dns-cert.c: Remove iobuf.h. (get_dns_cert): Rename to _get_dns_cert. Remove MAX_SIZE arg. Change iobuf arg to a estream-t. Rewrite function to make use of estream instead of iobuf. Require all parameters. Return an gpg_error_t error instead of the type. Add arg ERRSOURCE. * common/dns-cert.h (get_dns_cert): New macro to pass the error source to _gpg_dns_cert. * common/t-dns-cert.c (main): Adjust for changes in get_dns_cert. * g10/keyserver.c (keyserver_import_cert): Ditto. * doc/gpg.texi (GPG Configuration Options): Remove max-cert-size.
2011-11-02typo fixesWerner Koch1-2/+2
2011-10-18Typo fix and remove of some colloquial termsWerner Koch1-15/+16
2011-10-12Put more options into the options indexWerner Koch5-676/+833
Also removed the single letter options from the index.
2011-10-12Extend yat2m to allow indented tables.Werner Koch2-35/+72
Current makeinfo versions allow to indent the texinfo source. However yat2m had no support for this. With this patch it is now possible to use a simple indentation style while keeping man pages readable.
2011-08-12Beautified the online html manualWerner Koch5-9/+32
2011-08-10Typo fixWerner Koch1-1/+1
2011-08-08Minor doc updates v2.0 vs. v2.1)Werner Koch2-3/+25
2011-07-20Support a confirm flag for ssh.Werner Koch1-2/+9
This implements the suggestion from bug#1349. With this change the fingerprint of the ssh key is also displayed in the pinentry prompts.
2011-07-18Clarify documentation of --keyid-format.Werner Koch1-1/+2
Fixes bug#1354.
2011-06-29Document OPTION s2k-countWerner Koch1-0/+8
2011-06-28Fixed an URL typo in the FAQ.Werner Koch1-2/+2
2011-06-27doc/gpgsm.texi com-certs.pem mini-fixBernhard Reiter1-1/+1
[[PGP Signed Part:Undecided]] [1. text/plain] Example path for com-certs.pem corrected. [2. text/x-diff; doc.diff]
2011-06-27Add question "What are DH/DSS keys?"Werner Koch1-10/+25
... and the answer of course.
2011-05-20Require libgpg-error 1.10Werner Koch1-1/+1
This allows to remove some error code substitutes. Fixed a typo in gpg.text.
2011-04-21Add OPTION:cache-ttl-opt-preset to gpg-agent.Werner Koch1-0/+6
This option may be used to change the default ttl values use with the --preset option of GENKEY and PASSWD.
2011-03-03New agent option pinentry-mode.Werner Koch1-43/+114
This provides the framework and implements the ask, cancel and error. loopback will be implemented later.
2011-03-02Fix doc/Makefile target onlineWerner Koch1-8/+7
2011-03-01Move parameter file description to the manual.Werner Koch4-245/+460
2011-03-01Support X.509 certificate creation.Werner Koch1-1/+4
Using "gpgsm --genkey" allows the creation of a self-signed certificate via a new prompt. Using "gpgsm --genkey --batch" should allow the creation of arbitrary certificates controlled by a parameter file. An example parameter file is Key-Type: RSA Key-Length: 1024 Key-Grip: 2C50DC6101C10C9C643E315FE3EADCCBC24F4BEA Key-Usage: sign, encrypt Serial: random Name-DN: CN=some test key Name-Email: [email protected] Name-Email: [email protected] Hash-Algo: SHA384 not-after: 2038-01-16 12:44 This creates a self-signed X.509 certificate using the key given by the keygrip and using SHA-384 as hash algorithm. The keyword signing-key can be used to sign the certificate with a different key. See sm/certreggen.c for details.
2011-02-23Lock scdaemon to CCID if once found.Werner Koch1-46/+52
This solves a problem where ccid was used, the card unplugged and then scdaemon tries to find a new (plugged in) reader and thus will eventually try PC/SC over and over again. Also added an explicit --kill command to gpgconf.
2011-02-04Removed deprecated SIGEXPIRED status line.Werner Koch1-5/+10
2011-02-03Add a DECRYPTION_INFO status.Werner Koch1-33/+37
DECRYPTION_INFO <mdc_method> <sym_algo> Print information about the symmetric encryption algorithm and the MDC method. This will be emitted even if the decryption fails.
2011-01-13ifset parts which are not in GnuPG 2.0Werner Koch3-4/+13
2010-12-02Describe new log facilities.Werner Koch3-1/+14
2010-11-17Smartcard related updatesWerner Koch1-1/+2
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-15 04:07:36 +0000