aboutsummaryrefslogtreecommitdiffstats
path: root/doc (unfollow)
Commit message (Collapse)AuthorFilesLines
2013-03-19gpg: Print indicator for unknown key capability.Werner Koch1-0/+1
* g10/keylist.c (print_capabilities): Print '?' for unknown usage.
2013-03-05Update RFC references to RFC 4880Daniel Kahn Gillmor1-2/+2
--
2013-02-12Japanese: update po and doc.NIIBE Yutaka1-175/+224
* doc/help.ja.txt, po/ja.po: Updated.
2013-02-08scd: Rename 'keypad' to 'pinpad'.NIIBE Yutaka1-4/+12
* NEWS: Mention scd changes. * agent/divert-scd.c (getpin_cb): Change message. * agent/call-scd.c (inq_needpin): Change the protocol to POPUPPINPADPROMPT and DISMISSPINPADPROMPT. * scd/command.c (pin_cb): Likewise. * scd/apdu.c (struct reader_table_s): Rename member functions. (check_pcsc_pinpad, pcsc_pinpad_verify, pcsc_pinpad_modify, check_ccid_pinpad, ccid_pinpad_operation, apdu_check_pinpad apdu_pinpad_verify, apdu_pinpad_modify): Rename. * scd/apdu.h (SW_HOST_NO_PINPAD, apdu_check_pinpad) (apdu_pinpad_verify, apdu_pinpad_modify): Rename. * scd/iso7816.h (iso7816_check_pinpad): Rename. * scd/iso7816.c (map_sw): Use SW_HOST_NO_PINPAD. (iso7816_check_pinpad): Rename. (iso7816_verify_kp, iso7816_change_reference_data_kp): Follow the change. * scd/ccid-driver.h (CCID_DRIVER_ERR_NO_PINPAD): Rename. * scd/ccid-driver.c (ccid_transceive_secure): Use it. * scd/app-dinsig.c (verify_pin): Follow the change. * scd/app-nks.c (verify_pin): Follow the change. * scd/app-openpgp.c (check_pinpad_request): Rename. (parse_login_data, verify_a_chv, verify_chv3, do_change_pin): Follow the change. * scd/scdaemon.c (oDisablePinpad, oEnablePinpadVarlen): Rename. * scd/scdaemon.h (opt): Rename to disable_pinpad, enable_pinpad_varlen. * tools/gpgconf-comp.c (gc_options_scdaemon): Rename to disable-pinpad.
2013-02-07gpg: Add pinentry-mode feature.Werner Koch1-0/+20
* g10/gpg.c: Include shareddefs.h. (main): Add option --pinentry-mode. * g10/options.h (struct opt): Add field pinentry_mode. * g10/passphrase.c: Include shareddefs.h. (have_static_passphrase): Take care of loopback pinentry_mode. (read_passphrase_from_fd): Ditto. (get_static_passphrase): New. (passphrase_to_dek_ext): Factor some code out to ... (emit_status_need_passphrase): new. * g10/call-agent.c (start_agent): Send the pinentry mode. (default_inq_cb): Take care of the PASSPHRASE inquiry. Return a proper error code. (agent_pksign): Add args keyid, mainkeyid and pubkey_algo. (agent_pkdecrypt): Ditto. * g10/pubkey-enc.c (get_it): Pass new args. * g10/sign.c (do_sign): Pass new args. * g10/call-agent.c (struct default_inq_parm_s): New. Change all similar structs to reference this one. Change all users and inquire callback to use this struct, instead of NULL or some undefined but not used structs. This change will help to eventually get rid of global variables. -- This new features allows to use gpg without a Pinentry. As a prerequisite the agent must be configured to allow the loopback pinentry mode (option --allow-loopback-pinentry). For example gpg2 --pinentry-mode=loopback FILE.gpg may be used to decrypt FILE.gpg while entering the passphrase on the tty. If batch is used, --passphrase et al. may be used, if --command-fd is used, the passphrase may be provided by another process. Note that there are no try-again prompts in case of a bad passphrase.
2013-02-07doc: Fix description for NEED_PASSPHRASE status.Werner Koch1-1/+1
--
2013-01-30Convert doc/DETAILS to org-modeWerner Koch1-869/+958
-- Also restructure the file and fix some obviously wrong things.
2013-01-30gpg: Add status line PINENTRY_LAUNCHED.Werner Koch1-0/+9
* common/status.h (STATUS_PINENTRY_LAUNCHED): New. * g10/server.c (server_local_s): Add field allow_pinentry_notify. (option_handler): Add option "allow-pinentry-notify". (gpg_proxy_pinentry_notify): New. * g10/call-agent.c (default_inq_cb): Factor code out to the new function.
2012-12-19faq: Add a section on copyright assignmentsWerner Koch1-2/+10
--
2012-11-30Refresh sample keysDavid Shaw1-400/+880
2012-11-30Adjust awk to not add trailing whitespace.David Shaw1-3/+2
* mksamplekeys: Tweak awk script to not add trailing whitespace to blank lines (makes git pre-commit hook unhappy)
2012-11-12Fix description of validity flag 'n'.Werner Koch1-1/+1
-- Thanks to Hauke Laging for spotting this.
2012-08-09Fix incorrect description of --delete-secret-keyWerner Koch1-1/+1
-- This is bug#1429.
2012-06-05Change all quotes in strings and comments to the new GNU standard.Werner Koch1-9/+9
The asymmetric quotes used by GNU in the past (`...') don't render nicely on modern systems. We now use two \x27 characters ('...'). The proper solution would be to use the correct Unicode symmetric quotes here. However this has the disadvantage that the system requires Unicode support. We don't want that today. If Unicode is available a generated po file can be used to output proper quotes. A simple sed script like the one used for en@quote is sufficient to change them. The changes have been done by applying sed -i "s/\`\([^'\`]*\)'/'\1'/g" to most files and fixing obvious problems by hand. The msgid strings in the po files were fixed with a similar command.
2012-05-24Print the hash algorithm in colon mode key listing.Werner Koch1-2/+6
* g10/keylist.c (list_keyblock_colon): Print digest_algo.
2012-05-08Add tweaks for the not anymore patented IDEA algorithm.Werner Koch1-5/+3
* g10/keygen.c (keygen_set_std_prefs): Include IDEA only in PGP2 compatibility mode. * g10/misc.c (idea_cipher_warn): Remove. Also remove all callers. * common/status.h (STATUS_RSA_OR_IDEA): Remove. Do not emit this status anymore. -- To keep the number of actually used algorithms low, we want to support IDEA only in a basically read-only way (unless --pgp2 is used during key generation). It does not make sense to suggest the use of this old 64 bit blocksize algorithm. However, there is old data available where it might be helpful to have IDEA available.
2012-04-17faq: Replace --list-ownerturst by --export-ownertrust.Werner Koch1-1/+1
--
2012-04-04Mention status messages in the documentation.Ben Kibbey1-0/+8
Note INQUIRE_MAXLEN.
2012-04-04Document PASSWD --preset.Ben Kibbey1-0/+10
2012-04-04Document GENKEY options.Ben Kibbey1-0/+12
2012-04-04Document PRESET_PASSPHRASE.Ben Kibbey1-0/+27
2012-04-04Document CLEAR_PASSPHRASE.Ben Kibbey1-0/+23
And describe the --mode=normal option.
2012-03-26Typo fixes in de.po.Werner Koch1-1/+1
-- This is bug#1276 and http://bugs.debian.org/594343
2012-03-26Add mksamplekeys script.Werner Koch2-1/+12
* doc/mksamplekeys: New. -- Note that we have the same script in the 1.4 branch. That should be removed and only this one shall be used.
2012-01-27gpg-connect-tool: Take the string "true" as a true condition.Werner Koch1-5/+12
* tools/gpg-connect-agent.c (main): Handle strings "true" and "yes" in conditions as expected.
2012-01-16yat2m: don't dereference pointer to freed memoryJim Meyering1-4/+4
* doc/yat2m.c (top_parse_file): Correct macrolist-freeing loop.
2012-01-11Refresh sample keysDavid Shaw1-432/+411
2012-01-06gpg: Allow use of a standard space separated fingerprint.Werner Koch1-4/+5
* common/userids.c (classify_user_id): Check for space separated GPG fingerprint.
2011-12-20Prepare for the beta3 release.Werner Koch1-5/+8
2011-12-20Add the STEED Self-Signing Nonthority certificate.Werner Koch1-0/+18
* doc/com-certs.pem: Install it when creating a keybox.
2011-12-20faq: Add section on US export restrictions.Werner Koch1-7/+37
2011-12-14scd: Add the "undefined" stub application.Werner Koch1-0/+11
* scd/app.c (select_application): Implement the "undefined" application.
2011-12-13scd: New option --debug-assuan-log-cats.Werner Koch1-19/+28
* scd/scdaemon.c (oDebugAssuanLogCats): New. (opts): Add option --debug-assuan-log-cats. (main): Implement option. * common/asshelp.c (set_libassuan_log_cats): New. -- The old way of setting the logging categories with an environment variable is awkward if sdaemon is spawned from a running gpg-agent.
2011-12-07gpgsm: Add new validation model "steed".Werner Koch2-4/+10
* sm/gpgsm.h (VALIDATE_FLAG_STEED): New. * sm/gpgsm.c (gpgsm_parse_validation_model): Add model "steed". * sm/server.c (option_handler): Allow validation model "steed". * sm/certlist.c (gpgsm_cert_has_well_known_private_key): New. * sm/certchain.c (do_validate_chain): Handle the well-known-private-key attribute. Support the "steed" model. (gpgsm_validate_chain): Ditto. * sm/verify.c (gpgsm_verify): Return "steed" in the trust status line. * sm/keylist.c (list_cert_colon): Print the new 'w' flag. -- This is the first part of changes to implement the STEED proposal as described at http://g10code.com/steed.html . The idea for X.509 is not to use plain self-signed certificates but certificates signed by a dummy CA (i.e. one for which the private key is known). Having a single CA as an indication for the use of STEED might help other X.509 implementations to implement STEED.
2011-12-06gpgsm: Allow arbitrary extensions for cert creation.Werner Koch2-3/+4
* sm/certreqgen.c (pSUBJKEYID, pEXTENSION): New. (read_parameters): Add new keywords. (proc_parameters): Check values of new keywords. (create_request): Add SubjectKeyId and extensions. (parse_parameter_usage): Support "cert" and the encrypt alias "encr".
2011-12-01Generate the ChangeLog from commit logs.Werner Koch3-5/+39
* scripts/gitlog-to-changelog: New script. Taken from gnulib. * scripts/git-log-fix: New file. * scripts/git-log-footer: New file. * doc/HACKING: Describe the ChangeLog policy * ChangeLog: New file. * Makefile.am (EXTRA_DIST): Add new files. (gen-ChangeLog): New. (dist-hook): Run gen-ChangeLog. Rename all ChangeLog files to ChangeLog-2011.
2011-11-30Rewrite dns-cert.c to not use the gpg-only iobuf stuff.Werner Koch1-0/+3
* common/dns-cert.c: Remove iobuf.h. (get_dns_cert): Rename to _get_dns_cert. Remove MAX_SIZE arg. Change iobuf arg to a estream-t. Rewrite function to make use of estream instead of iobuf. Require all parameters. Return an gpg_error_t error instead of the type. Add arg ERRSOURCE. * common/dns-cert.h (get_dns_cert): New macro to pass the error source to _gpg_dns_cert. * common/t-dns-cert.c (main): Adjust for changes in get_dns_cert. * g10/keyserver.c (keyserver_import_cert): Ditto. * doc/gpg.texi (GPG Configuration Options): Remove max-cert-size.
2011-11-02typo fixesWerner Koch1-2/+2
2011-10-18Typo fix and remove of some colloquial termsWerner Koch1-15/+16
2011-10-12Put more options into the options indexWerner Koch5-676/+833
Also removed the single letter options from the index.
2011-10-12Extend yat2m to allow indented tables.Werner Koch2-35/+72
Current makeinfo versions allow to indent the texinfo source. However yat2m had no support for this. With this patch it is now possible to use a simple indentation style while keeping man pages readable.
2011-08-12Beautified the online html manualWerner Koch5-9/+32
2011-08-10Typo fixWerner Koch1-1/+1
2011-08-08Minor doc updates v2.0 vs. v2.1)Werner Koch2-3/+25
2011-07-20Support a confirm flag for ssh.Werner Koch1-2/+9
This implements the suggestion from bug#1349. With this change the fingerprint of the ssh key is also displayed in the pinentry prompts.
2011-07-18Clarify documentation of --keyid-format.Werner Koch1-1/+2
Fixes bug#1354.
2011-06-29Document OPTION s2k-countWerner Koch1-0/+8
2011-06-28Fixed an URL typo in the FAQ.Werner Koch1-2/+2
2011-06-27doc/gpgsm.texi com-certs.pem mini-fixBernhard Reiter1-1/+1
[[PGP Signed Part:Undecided]] [1. text/plain] Example path for com-certs.pem corrected. [2. text/x-diff; doc.diff]
2011-06-27Add question "What are DH/DSS keys?"Werner Koch1-10/+25
... and the answer of course.