aboutsummaryrefslogtreecommitdiffstats
path: root/doc (unfollow)
Commit message (Collapse)AuthorFilesLines
2015-08-11doc: Improve documentation of VALIDSIGDaniel Kahn Gillmor1-1/+1
--
2015-08-07gpg: Allow gpgv to work with a trustedkeys.kbx file.Werner Koch1-1/+2
* g10/keydb.h (KEYDB_RESOURCE_FLAG_GPGVDEF): New. * g10/keydb.c (keydb_add_resource): Take care of new flag. * g10/gpgv.c (main): Use new flag. -- GnuPG-bug-id: 2025 Signed-off-by: Werner Koch <[email protected]>
2015-08-03doc: Two typo fixes.Hugo Roy1-2/+2
--
2015-07-29doc: Document that gpg --edit-key's toggle is a nop.Werner Koch1-1/+1
--
2015-07-28w32: Try more places to find an installed Pinentry.Werner Koch1-0/+11
* common/homedir.c (get_default_pinentry_name): Re-implement to support several choices for Windows. Signed-off-by: Werner Koch <[email protected]>
2015-07-23doc: Document scissor line for commit logsWerner Koch1-0/+11
--
2015-07-22doc: Add a comment to --set-filename.Werner Koch1-1/+2
--
2015-07-22doc: Improve documentation about VALIDSIGDaniel Kahn Gillmor1-7/+10
-- The claim that VALIDSIG is the same as GOODSIG is simply wrong. Attempt to clarify it. Also, the paragraph about primary-key-fpr and sig-version was weirdly re-ordered during the org-mode conversion in 65eb98966a569a91c97d0c23ba5582a9a7558de0; repair it. Signed-off-by: Daniel Kahn Gillmor <[email protected]>
2015-07-22doc: Clarify constraints on who modifies files in ~/.gnupgDaniel Kahn Gillmor1-1/+1
--
2015-07-03drop long-deprecated gpgsm-gencert.shDaniel Kahn Gillmor3-133/+83
* tools/gpgsm-gencert.sh: remove deprecated script entirely. It is fully replaced by gpgsm --gen-key * doc/tools.texi: remove gpgsm-gencert.sh documentation * .gitignore: no longer ignore gpgsm-gencert.sh manpage * doc/Makefile.am: quit making the manpage * tools/Makefile.am: quit distributing the script * doc/howto-create-a-server-cert.texi: overhaul documentation to use gpgsm --gen-key and tweak explanations -- The commit deprecating gpgsm-gencert.sh (81972ca7d53ff1996e0086702a09d4405bdc2a7e) dates back exactly 6 years. https://codesearch.debian.net/results/gpgsm-gencert.sh suggests that in all of debian it is only referenced in documentation (for poldi and scute) and example files (libept), and isn't actually used directly anywhere. Furthermore, trying to use gpgsm-gencert.sh to make a simple webserver certificate-signing request failed for me, following the examples in doc/howto-create-a-server-cert.texi exactly. It's time we ripped off this band-aid :) Signed-off-by: Daniel Kahn Gillmor <[email protected]>
2015-06-30doc: Updated HACKING.Werner Koch1-39/+48
-- Added used commit keywords. Add some comments to the list of files.
2015-06-29Improve documentation for default-cache-ttl and default-cache-ttl-ssh.Neal H. Walfield1-3/+7
* doc/gpg-agent.texi (Agent Options): Improve documentation for default-cache-ttl and default-cache-ttl-ssh. -- Signed-off-by: Neal H. Walfield <[email protected]>
2015-06-29agent,w32: Do not create a useless socket with --enable-putty-support.Werner Koch1-0/+8
* agent/agent.h (opt): Remove field ssh_support. * agent/gpg-agent.c (ssh_support): New. Replace all opt.ssh_support by this. (main): Do not set ssh_support along with setting putty_support. Signed-off-by: Werner Koch <[email protected]>
2015-06-29gpgsm: Add command option "offline".Werner Koch1-2/+128
* sm/server.c (option_handler): Add "offline". (cmd_getinfo): Ditto. * sm/certchain.c (is_cert_still_valid): (do_validate_chain): * sm/gpgsm.c (gpgsm_init_default_ctrl): Default "offline" to the value of --disable-dirmngr. * sm/call-dirmngr.c (start_dirmngr_ext): Better also check for ctrl->offline. -- Adding this option makes it easier to implement the corresponding feature in gpgme. Signed-off-by: Werner Koch <[email protected]>
2015-06-22gpg: Allow debug flag names for --debug.Werner Koch1-4/+4
* g10/gpg.c (opts): Change arg for oDebug to a string. (debug_flags): New; factored out from set_debug. (set_debug): Remove "--debug-level help". Use parse_debug_flag to print the used flags. (main): Use parse_debug_flag for oDebug. Signed-off-by: Werner Koch <[email protected]>
2015-06-19gpg: Print available debug flags using "--debug-level help".Werner Koch1-0/+2
* g10/gpg.c (set_debug): Add "help" option and use a table for the flags. Signed-off-by: Werner Koch <[email protected]>
2015-06-15doc: Add defs.inc to BUILT_SOURCESWerner Koch1-1/+1
2015-06-15doc: Update the record description of the trustdb.Werner Koch1-206/+125
-- This now reflects the used version of the trustdb. However, it still missed a detailed description on how it works.
2015-06-11w32: Adjust mkdefsinc.c for WindowsWerner Koch1-0/+10
-- Under Windows the file names are determined at runtime. To have somewhat useful names in the manuals, we provide replacements using the strings "INSTDIR" and "APPDATA" for the installation directory and the user specific application data.
2015-06-10agent: Add option --allow-emacs-pinentryDaiki Ueno1-1/+7
* agent/agent.h (opt): Add field allow_emacs_pinentry. * agent/call-pinentry.c (start_pinentry): Act upon new var. * agent/gpg-agent.c (oAllowEmacsPinentry): New. (opts): Add option --allow-emacs-pinentry. (parse_rereadable_options): Set this option. * tools/gpgconf-comp.c (gc_options_gpg_agent): Add new option. -- gpgconf-comp and manual entry added by wk. Signed-off-by: Werner Koch <[email protected]>
2015-06-09doc: Do not used fixed file names in the manuals.Werner Koch14-45/+374
* doc/mkdefsinc.c: New. * doc/Makefile.am: Include cmacros.am. (EXTRA_DIST): Add mkdefsinc.c defsincdate. (BUILT_SOURCES): Add defsincdate (CLEANFILES): Add mkdefsinc and defs.inc. (mkdefsinc): New rule. (yat2m-stamp): Depend on defs.inc. ($(myman_pages) gnupg.7): Ditto. (gnupg.texi): Remove rule to touch itself. (dist-hook): New. (defsincdate): New. (defs.inc): New. * doc/gnupg.texi: Remove inclusion of version.texi. Include defs.inc. Also include defs.inc in all files used to build man files. Change fixed directory names to those from defs.inc. -- GnuPG-bug-id: 1661 Signed-off-by: Werner Koch <[email protected]>
2015-06-08doc: Change the manual source to be only for GnuPG 2.1Werner Koch7-432/+27
Signed-off-by: Werner Koch <[email protected]>
2015-06-02doc: Replace "conventional encryption" by "symmetric encryption".Werner Koch3-6/+7
-- Suggested-by: Daniel Kahn Gillmor <[email protected]> Ported from 2.0.
2015-05-11agent: Add option --no-allow-external-cache.Werner Koch1-0/+14
* agent/agent.h (opt): Add field allow_external_cache. * agent/call-pinentry.c (start_pinentry): Act upon new var. * agent/gpg-agent.c (oNoAllowExternalCache): New. (opts): Add option --no-allow-external-cache. (parse_rereadable_options): Set this option. -- Pinentry 0.9.2 may be build with libsecret support and thus an extra checkbox is displayed to allow the user to get passwords out of an libsecret maintained cache. Security aware user may want to avoid this feature and may do this at runtime by enabling this option. Signed-off-by: Werner Koch <[email protected]>
2015-05-11agent: Add option --debug-pinentry.Werner Koch1-0/+7
* agent/gpg-agent.c (oDebugPinentry): New. (opts): Add --debug-pinentry. (parse_rereadable_options): Set that option. * agent/call-pinentry.c (start_pinentry): Pass option to assuan_set_flag. -- This option is quite useful to see the IPC between gpg-agent and Pinentry. Note that "debug 1024" is also required. Signed-off-by: Werner Koch <[email protected]>
2015-05-08gpg: New command --quick-adduid.Werner Koch1-1/+11
* g10/keygen.c (ask_user_id): Factor some code out to ... (uid_already_in_keyblock): new. (generate_user_id): Add arg UIDSTR. Fix leaked P. * g10/keyedit.c (menu_adduid): Add new arg uidstring. Adjust caller. (keyedit_quick_adduid): New. * g10/gpg.c (aQuickAddUid): New. (opts): Add command --quick-adduid. (main): Implement that. -- GnuPG-bug-id: 1956 Signed-off-by: Werner Koch <[email protected]>
2015-04-21gpg: Do not use honor-keyserver-url sub-option by default.Werner Koch1-2/+4
2015-04-21gpg: Update sub-options of --keyserver-optionsWerner Koch2-19/+39
* g10/options.h (KEYSERVER_HTTP_PROXY): New. (KEYSERVER_USE_TEMP_FILES, KEYSERVER_KEEP_TEMP_FILES): Remove. (KEYSERVER_TIMEOUT): New. * common/keyserver.h (KEYSERVER_TIMEOUT): Remove. * g10/keyserver.c (keyserver_opts): Remove obsolete "use-temp-files" and "keep-temp-files". Add "http-proxy" and "timeout". (parse_keyserver_options): Remove 1.2 compatibility option "honor-http_proxy". Remove "use-temp-files" and "keep-temp-files" code. -- Note that many of these options where implicitly used by passing any unknown option down to the former keyserver helpers. The don't exist anymore thus we need to make them explicit. Another patch will convey them to dirmngr. Temp files are not anymore used thus they can be removed and will be ignored when used. Signed-off-by: Werner Koch <[email protected]>
2015-04-06gpg: Add new option --debug-iolbf.Werner Koch1-0/+5
* g10/gpg.c (oDebugIOLBF): new. (opts): Add --debug-iolbf. (main): Set option. -- This option is convenient for debugging to make sure that debug output to stderr is synced with output to stdout. Signed-off-by: Werner Koch <[email protected]>
2015-03-25doc: Document the changed default algos for gpgsm.Werner Koch1-2/+2
--
2015-03-24doc: Mention that --use-standard-socket-p always returns true.Werner Koch1-2/+5
--
2015-03-23Improve spelling and grammar of some comments.Neal H. Walfield1-1/+1
-- Signed-off-by: Neal H. Walfield <[email protected]>
2015-03-19gpg: Emit status line NEWSIG before signature verification starts.Werner Koch1-3/+3
* g10/mainproc.c (check_sig_and_print): Emit STATUS_NEWSIG. -- gpgsm does this for a long time but somehow it never made it into gpg. Signed-off-by: Werner Koch <[email protected]>
2015-03-16gpg: Allow printing of MPI values in --list-mode.Werner Koch1-2/+3
* g10/parse-packet.c (set_packet_list_mode): Set mpi_print_mode. * g10/misc.c (mpi_print): Do not print an extra leading zero. -- This was in older versions possible using "--debug 4" but that was disabled in 2.1 due to a conflict using this values also for Libgcrypt. Now the values are dumped either with --debug 4 or using --list-packets along with --verbose. Because OpenPGP only uses unsigned integers an extra leading zero will not be printed anymore. Signed-off-by: Werner Koch <[email protected]>
2015-03-10gpg: Change --print-pka-records into an option.Werner Koch1-0/+7
* g10/gpg.c (aPrintPKARecords): Rename to oPrintPKARecords and do not use it as a command. * g10/keylist.c (list_keyblock): List PKA rceords also for secret keys. -- An option allows to use it more flexible. For example to select only secret keys. Signed-off-by: Werner Koch <[email protected]>
2015-03-10gpg: Add --list-gcrypt-config and "curve" item for --list-config.Werner Koch2-1/+14
* common/openpgp-oid.c (curve_supported_p): New. (openpgp_enum_curves): New. * common/t-openpgp-oid.c (test_openpgp_enum_curves): New. (main): Add option --verbose. * g10/gpg.c (opts): Add --list-gcrypt-config. (list_config): Add items "curve" and "curveoid". Remove unused code. -- GnuPG-bug-id: 1917 Signed-off-by: Werner Koch <[email protected]>
2015-03-06doc: Some typo fixes.Werner Koch1-2/+2
--
2015-03-04doc: Fix FAQ stub and remove faq build rules.Werner Koch2-25/+4
-- The FAQ is maintained in the gnupg-doc repo.
2015-02-26doc: Fix name of keep-ownertrust.Werner Koch1-1/+1
-- Reported-by: Guilhem Moulin <[email protected]> (cherry picked from commit 0d286a11c857a8f84b084b6f4e8a38737adca034)
2015-02-26doc: Update the description of the S2K extension.Werner Koch1-6/+20
--
2015-02-23gpg: Add option to print fingerprints in ICAO spelling.Werner Koch1-0/+5
* g10/gpg.c: Add option --with-icao-spelling. * g10/options.h (struct opt): Add with_icao_spelling. * g10/keylist.c (print_icao_hexdigit): New. (print_fingerprint): Print ICAO spelling. Signed-off-by: Werner Koch <[email protected]>
2015-02-12dirmngr: Initialize cache from sysconfig dirAndre Heinecke1-17/+16
* dirmngr/certcache.c (cert_cache_init): Load certificates from sysconfig dir instead of the homeidr. * dirmngr/dirmngr.c (main): Removed parsing of obsolete homedir_data option. * dirmngr/dirmngr.h (opt): Removed homedir_data. * doc/dirmngr.texi: Update and clarify certs directory doc. -- Using the homedir for extra-certs and trusted-certs makes little sense when dirmngr is used with a caller that manages it's own store of certificates and can provide those through the SENDCERT command. You can use trusted-certs and extra-certs to provide users with a base of locally available certificates that are not already in store of the applications.
2015-02-11doc: Add another use case for --show-session-key.Werner Koch1-2/+7
-- GnuPG-bug-id: 1835
2015-02-11doc: Change remaining http links to gnupg.org to httpsWerner Koch1-1/+1
-- GnuPG-bug-id: 1830
2015-02-04gpg-agent: Use "pinentry-basic" as fallback.Werner Koch1-2/+4
* common/homedir.c (get_default_pinentry_name): New. (gnupg_module_name): Use that for the default pinentry. (gnupg_module_name_flush_some): New. * agent/gpg-agent.c (agent_sighup_action): Flush some module names. * agent/call-pinentry.c (start_pinentry): Do not modify opt.pinentry_program. -- The idea with this change is that under Windows we can install a simple native Windows pinentry as "pinentry-basic" and a full GUI version may then later install pinentry-gtk etc which would then automatically be used. Unfortunately installing another pinentry from a different package would clobber the GnuPG core directory which is not nice. To fix that we would need to agree on standard installation directories for GUIs to also look there. Signed-off-by: Werner Koch <[email protected]>
2015-02-03Update copyright years.Werner Koch1-1/+1
* common/w32info-rc.h.in (W32INFO_COMPANYNAME): Change to "The GnuPG Project".
2015-01-28gpg: Allow predefined names as answer to the keygen.algo prompt.Werner Koch1-0/+30
* g10/keygen.c (ask_algo): Add list of strings. Signed-off-by: Werner Koch <[email protected]>
2015-01-22doc: Fix some typos and add missing options.Werner Koch3-14/+26
-- GnuPG-bug-id: 1602 I added options shown with --help but missing in the man page. However, --help won't show everything listed in the man age and frankly there are even more options not listed anywhere (to see them use --dump-options).
2015-01-21gpg: Support --passphrase with --quick-gen-key.Werner Koch1-0/+8
* g10/keygen.c: Include shareddefs.h. (quick_generate_keypair): Support static passphrase. (get_parameter_passphrase): New. (do_generate_keypair): Use it. Signed-off-by: Werner Koch <[email protected]>
2015-01-21gpg: Re-enable the "Passphrase" parameter for batch key generation.Werner Koch2-7/+10
* agent/command.c (cmd_genkey): Add option --inq-passwd. * agent/genkey.c (agent_genkey): Add new arg override_passphrase. * g10/call-agent.c (inq_genkey_parms): Handle NEWPASSWD keyword. (agent_genkey): Add arg optional arg "passphrase". * g10/keygen.c (common_gen, gen_elg, gen_dsa, gen_ecc) (gen_rsa, do_create): Add arg "passphrase" and pass it through. (do_generate_keypair): Make use of pPASSPHRASE. (release_parameter_list): Wipe out a passphrase parameter. Signed-off-by: Werner Koch <[email protected]>
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-25 09:20:00 +0000