aboutsummaryrefslogtreecommitdiffstats
path: root/doc (unfollow)
Commit message (Collapse)AuthorFilesLines
2011-12-20Prepare for the beta3 release.Werner Koch1-5/+8
2011-12-20Add the STEED Self-Signing Nonthority certificate.Werner Koch1-0/+18
* doc/com-certs.pem: Install it when creating a keybox.
2011-12-20faq: Add section on US export restrictions.Werner Koch1-7/+37
2011-12-14scd: Add the "undefined" stub application.Werner Koch1-0/+11
* scd/app.c (select_application): Implement the "undefined" application.
2011-12-13scd: New option --debug-assuan-log-cats.Werner Koch1-19/+28
* scd/scdaemon.c (oDebugAssuanLogCats): New. (opts): Add option --debug-assuan-log-cats. (main): Implement option. * common/asshelp.c (set_libassuan_log_cats): New. -- The old way of setting the logging categories with an environment variable is awkward if sdaemon is spawned from a running gpg-agent.
2011-12-07gpgsm: Add new validation model "steed".Werner Koch2-4/+10
* sm/gpgsm.h (VALIDATE_FLAG_STEED): New. * sm/gpgsm.c (gpgsm_parse_validation_model): Add model "steed". * sm/server.c (option_handler): Allow validation model "steed". * sm/certlist.c (gpgsm_cert_has_well_known_private_key): New. * sm/certchain.c (do_validate_chain): Handle the well-known-private-key attribute. Support the "steed" model. (gpgsm_validate_chain): Ditto. * sm/verify.c (gpgsm_verify): Return "steed" in the trust status line. * sm/keylist.c (list_cert_colon): Print the new 'w' flag. -- This is the first part of changes to implement the STEED proposal as described at http://g10code.com/steed.html . The idea for X.509 is not to use plain self-signed certificates but certificates signed by a dummy CA (i.e. one for which the private key is known). Having a single CA as an indication for the use of STEED might help other X.509 implementations to implement STEED.
2011-12-06gpgsm: Allow arbitrary extensions for cert creation.Werner Koch2-3/+4
* sm/certreqgen.c (pSUBJKEYID, pEXTENSION): New. (read_parameters): Add new keywords. (proc_parameters): Check values of new keywords. (create_request): Add SubjectKeyId and extensions. (parse_parameter_usage): Support "cert" and the encrypt alias "encr".
2011-12-02Generate the ChangeLog from commit logs.Werner Koch3-5/+39
* scripts/gitlog-to-changelog: New script. Taken from gnulib. * scripts/git-log-fix: New file. * scripts/git-log-footer: New file. * doc/HACKING: Describe the ChangeLog policy * ChangeLog: New file. * Makefile.am (EXTRA_DIST): Add new files. (gen-ChangeLog): New. (dist-hook): Run gen-ChangeLog. Rename all ChangeLog files to ChangeLog-2011.
2011-12-02Rewrite dns-cert.c to not use the gpg-only iobuf stuff.Werner Koch1-0/+3
* common/dns-cert.c: Remove iobuf.h. (get_dns_cert): Rename to _get_dns_cert. Remove MAX_SIZE arg. Change iobuf arg to a estream-t. Rewrite function to make use of estream instead of iobuf. Require all parameters. Return an gpg_error_t error instead of the type. Add arg ERRSOURCE. * common/dns-cert.h (get_dns_cert): New macro to pass the error source to _gpg_dns_cert. * common/t-dns-cert.c (main): Adjust for changes in get_dns_cert. * g10/keyserver.c (keyserver_import_cert): Ditto. * doc/gpg.texi (GPG Configuration Options): Remove max-cert-size.
2011-12-02typo fixesWerner Koch1-2/+2
2011-12-01Generate the ChangeLog from commit logs.Werner Koch3-5/+39
* scripts/gitlog-to-changelog: New script. Taken from gnulib. * scripts/git-log-fix: New file. * scripts/git-log-footer: New file. * doc/HACKING: Describe the ChangeLog policy * ChangeLog: New file. * Makefile.am (EXTRA_DIST): Add new files. (gen-ChangeLog): New. (dist-hook): Run gen-ChangeLog. Rename all ChangeLog files to ChangeLog-2011.
2011-11-30Rewrite dns-cert.c to not use the gpg-only iobuf stuff.Werner Koch1-0/+3
* common/dns-cert.c: Remove iobuf.h. (get_dns_cert): Rename to _get_dns_cert. Remove MAX_SIZE arg. Change iobuf arg to a estream-t. Rewrite function to make use of estream instead of iobuf. Require all parameters. Return an gpg_error_t error instead of the type. Add arg ERRSOURCE. * common/dns-cert.h (get_dns_cert): New macro to pass the error source to _gpg_dns_cert. * common/t-dns-cert.c (main): Adjust for changes in get_dns_cert. * g10/keyserver.c (keyserver_import_cert): Ditto. * doc/gpg.texi (GPG Configuration Options): Remove max-cert-size.
2011-11-02typo fixesWerner Koch1-2/+2
2011-10-18Typo fix and remove of some colloquial termsWerner Koch1-15/+16
2011-10-12Put more options into the options indexWerner Koch5-676/+833
Also removed the single letter options from the index.
2011-10-12Extend yat2m to allow indented tables.Werner Koch2-35/+72
Current makeinfo versions allow to indent the texinfo source. However yat2m had no support for this. With this patch it is now possible to use a simple indentation style while keeping man pages readable.
2011-08-12Beautified the online html manualWerner Koch5-9/+32
2011-08-10Typo fixWerner Koch1-1/+1
2011-08-08Minor doc updates v2.0 vs. v2.1)Werner Koch2-3/+25
2011-07-20Support a confirm flag for ssh.Werner Koch1-2/+9
This implements the suggestion from bug#1349. With this change the fingerprint of the ssh key is also displayed in the pinentry prompts.
2011-07-18Clarify documentation of --keyid-format.Werner Koch1-1/+2
Fixes bug#1354.
2011-06-29Document OPTION s2k-countWerner Koch1-0/+8
2011-06-28Fixed an URL typo in the FAQ.Werner Koch1-2/+2
2011-06-27doc/gpgsm.texi com-certs.pem mini-fixBernhard Reiter1-1/+1
[[PGP Signed Part:Undecided]] [1. text/plain] Example path for com-certs.pem corrected. [2. text/x-diff; doc.diff]
2011-06-27Add question "What are DH/DSS keys?"Werner Koch1-10/+25
... and the answer of course.
2011-05-20Require libgpg-error 1.10Werner Koch1-1/+1
This allows to remove some error code substitutes. Fixed a typo in gpg.text.
2011-04-21Add OPTION:cache-ttl-opt-preset to gpg-agent.Werner Koch1-0/+6
This option may be used to change the default ttl values use with the --preset option of GENKEY and PASSWD.
2011-03-03New agent option pinentry-mode.Werner Koch1-43/+114
This provides the framework and implements the ask, cancel and error. loopback will be implemented later.
2011-03-02Fix doc/Makefile target onlineWerner Koch1-8/+7
2011-03-01Move parameter file description to the manual.Werner Koch4-245/+460
2011-03-01Support X.509 certificate creation.Werner Koch1-1/+4
Using "gpgsm --genkey" allows the creation of a self-signed certificate via a new prompt. Using "gpgsm --genkey --batch" should allow the creation of arbitrary certificates controlled by a parameter file. An example parameter file is Key-Type: RSA Key-Length: 1024 Key-Grip: 2C50DC6101C10C9C643E315FE3EADCCBC24F4BEA Key-Usage: sign, encrypt Serial: random Name-DN: CN=some test key Name-Email: [email protected] Name-Email: [email protected] Hash-Algo: SHA384 not-after: 2038-01-16 12:44 This creates a self-signed X.509 certificate using the key given by the keygrip and using SHA-384 as hash algorithm. The keyword signing-key can be used to sign the certificate with a different key. See sm/certreggen.c for details.
2011-02-23Lock scdaemon to CCID if once found.Werner Koch1-46/+52
This solves a problem where ccid was used, the card unplugged and then scdaemon tries to find a new (plugged in) reader and thus will eventually try PC/SC over and over again. Also added an explicit --kill command to gpgconf.
2011-02-04Removed deprecated SIGEXPIRED status line.Werner Koch1-5/+10
2011-02-03Add a DECRYPTION_INFO status.Werner Koch1-33/+37
DECRYPTION_INFO <mdc_method> <sym_algo> Print information about the symmetric encryption algorithm and the MDC method. This will be emitted even if the decryption fails.
2011-01-13ifset parts which are not in GnuPG 2.0Werner Koch3-4/+13
2010-12-02Describe new log facilities.Werner Koch3-1/+14
2010-11-17Smartcard related updatesWerner Koch1-1/+2
2010-11-16Update FAQWerner Koch1-11/+35
2010-10-29* gpg.texi (GPG Configuration Options): Clarify that show-photosDavid Shaw2-5/+12
doesn't work with --with-colons. --personal-digest-preferences does not have a default any longer.
2010-10-26Update scripts etc.gnupg-2.1.0beta1gnupg-2.1-baseWerner Koch1-1/+13
2010-10-18doc fixWerner Koch2-1/+6
2010-10-14All tests work are again workingWerner Koch3-2/+36
2010-10-13More agent support for gpg.Werner Koch1-2/+16
2010-10-11Describe %v and %V.Werner Koch2-0/+8
2010-10-08Add new option --with-keygripWerner Koch2-0/+9
2010-10-06Import fixes.Werner Koch1-2/+15
new otion for watchgnupg
2010-10-05Don't set SSH_AGENTPID_INFO.Werner Koch1-6/+7
Doc fixes. Allow TCP and local sockets in watchgnupg.
2010-10-05Add a static FAQ.Werner Koch4-424/+383
Add rules to build and upload the faqs.
2010-10-04[w32ce] Do not print the faulty timezone infoWerner Koch3-219/+413
Switch FAQ sources to org-mode
2010-10-01Exporting secret keys via gpg-agent is now basically supported.Werner Koch7-23/+49
A couple of forward ported changes. Doc updates.
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-15 08:32:11 +0000