aboutsummaryrefslogtreecommitdiffstats
path: root/doc (follow)
Commit message (Collapse)AuthorAgeFilesLines
* yat2m: don't dereference pointer to freed memoryJim Meyering2012-01-161-4/+4
| | | | * doc/yat2m.c (top_parse_file): Correct macrolist-freeing loop.
* Refresh sample keysDavid Shaw2012-01-111-432/+411
|
* gpg: Allow use of a standard space separated fingerprint.Werner Koch2012-01-061-4/+5
| | | | | * common/userids.c (classify_user_id): Check for space separated GPG fingerprint.
* Prepare for the beta3 release.Werner Koch2011-12-201-5/+8
|
* Add the STEED Self-Signing Nonthority certificate.Werner Koch2011-12-201-0/+18
| | | | * doc/com-certs.pem: Install it when creating a keybox.
* faq: Add section on US export restrictions.Werner Koch2011-12-201-7/+37
|
* scd: Add the "undefined" stub application.Werner Koch2011-12-141-0/+11
| | | | | * scd/app.c (select_application): Implement the "undefined" application.
* scd: New option --debug-assuan-log-cats.Werner Koch2011-12-131-19/+28
| | | | | | | | | | | | * scd/scdaemon.c (oDebugAssuanLogCats): New. (opts): Add option --debug-assuan-log-cats. (main): Implement option. * common/asshelp.c (set_libassuan_log_cats): New. -- The old way of setting the logging categories with an environment variable is awkward if sdaemon is spawned from a running gpg-agent.
* gpgsm: Add new validation model "steed".Werner Koch2011-12-072-4/+10
| | | | | | | | | | | | | | | | | | | | * sm/gpgsm.h (VALIDATE_FLAG_STEED): New. * sm/gpgsm.c (gpgsm_parse_validation_model): Add model "steed". * sm/server.c (option_handler): Allow validation model "steed". * sm/certlist.c (gpgsm_cert_has_well_known_private_key): New. * sm/certchain.c (do_validate_chain): Handle the well-known-private-key attribute. Support the "steed" model. (gpgsm_validate_chain): Ditto. * sm/verify.c (gpgsm_verify): Return "steed" in the trust status line. * sm/keylist.c (list_cert_colon): Print the new 'w' flag. -- This is the first part of changes to implement the STEED proposal as described at http://g10code.com/steed.html . The idea for X.509 is not to use plain self-signed certificates but certificates signed by a dummy CA (i.e. one for which the private key is known). Having a single CA as an indication for the use of STEED might help other X.509 implementations to implement STEED.
* gpgsm: Allow arbitrary extensions for cert creation.Werner Koch2011-12-062-3/+4
| | | | | | | | * sm/certreqgen.c (pSUBJKEYID, pEXTENSION): New. (read_parameters): Add new keywords. (proc_parameters): Check values of new keywords. (create_request): Add SubjectKeyId and extensions. (parse_parameter_usage): Support "cert" and the encrypt alias "encr".
* Generate the ChangeLog from commit logs.Werner Koch2011-12-013-5/+39
| | | | | | | | | | | | | * scripts/gitlog-to-changelog: New script. Taken from gnulib. * scripts/git-log-fix: New file. * scripts/git-log-footer: New file. * doc/HACKING: Describe the ChangeLog policy * ChangeLog: New file. * Makefile.am (EXTRA_DIST): Add new files. (gen-ChangeLog): New. (dist-hook): Run gen-ChangeLog. Rename all ChangeLog files to ChangeLog-2011.
* Rewrite dns-cert.c to not use the gpg-only iobuf stuff.Werner Koch2011-11-301-0/+3
| | | | | | | | | | | | | * common/dns-cert.c: Remove iobuf.h. (get_dns_cert): Rename to _get_dns_cert. Remove MAX_SIZE arg. Change iobuf arg to a estream-t. Rewrite function to make use of estream instead of iobuf. Require all parameters. Return an gpg_error_t error instead of the type. Add arg ERRSOURCE. * common/dns-cert.h (get_dns_cert): New macro to pass the error source to _gpg_dns_cert. * common/t-dns-cert.c (main): Adjust for changes in get_dns_cert. * g10/keyserver.c (keyserver_import_cert): Ditto. * doc/gpg.texi (GPG Configuration Options): Remove max-cert-size.
* typo fixesWerner Koch2011-11-021-2/+2
|
* Typo fix and remove of some colloquial termsWerner Koch2011-10-181-15/+16
|
* Put more options into the options indexWerner Koch2011-10-125-676/+833
| | | | Also removed the single letter options from the index.
* Extend yat2m to allow indented tables.Werner Koch2011-10-122-35/+72
| | | | | | Current makeinfo versions allow to indent the texinfo source. However yat2m had no support for this. With this patch it is now possible to use a simple indentation style while keeping man pages readable.
* Beautified the online html manualWerner Koch2011-08-125-9/+32
|
* Typo fixWerner Koch2011-08-101-1/+1
|
* Minor doc updates v2.0 vs. v2.1)Werner Koch2011-08-082-3/+25
|
* Support a confirm flag for ssh.Werner Koch2011-07-201-2/+9
| | | | | This implements the suggestion from bug#1349. With this change the fingerprint of the ssh key is also displayed in the pinentry prompts.
* Clarify documentation of --keyid-format.Werner Koch2011-07-181-1/+2
| | | | Fixes bug#1354.
* Document OPTION s2k-countWerner Koch2011-06-291-0/+8
|
* Fixed an URL typo in the FAQ.Werner Koch2011-06-281-2/+2
|
* doc/gpgsm.texi com-certs.pem mini-fixBernhard Reiter2011-06-271-1/+1
| | | | | | | | [[PGP Signed Part:Undecided]] [1. text/plain] Example path for com-certs.pem corrected. [2. text/x-diff; doc.diff]
* Add question "What are DH/DSS keys?"Werner Koch2011-06-271-10/+25
| | | | ... and the answer of course.
* Require libgpg-error 1.10Werner Koch2011-05-201-1/+1
| | | | | This allows to remove some error code substitutes. Fixed a typo in gpg.text.
* Add OPTION:cache-ttl-opt-preset to gpg-agent.Werner Koch2011-04-211-0/+6
| | | | | This option may be used to change the default ttl values use with the --preset option of GENKEY and PASSWD.
* New agent option pinentry-mode.Werner Koch2011-03-031-43/+114
| | | | | This provides the framework and implements the ask, cancel and error. loopback will be implemented later.
* Fix doc/Makefile target onlineWerner Koch2011-03-021-8/+7
|
* Move parameter file description to the manual.Werner Koch2011-03-014-245/+460
|
* Support X.509 certificate creation.Werner Koch2011-03-011-1/+4
| | | | | | | | | | | | | | | | | | | | | | | | | Using "gpgsm --genkey" allows the creation of a self-signed certificate via a new prompt. Using "gpgsm --genkey --batch" should allow the creation of arbitrary certificates controlled by a parameter file. An example parameter file is Key-Type: RSA Key-Length: 1024 Key-Grip: 2C50DC6101C10C9C643E315FE3EADCCBC24F4BEA Key-Usage: sign, encrypt Serial: random Name-DN: CN=some test key Name-Email: [email protected] Name-Email: [email protected] Hash-Algo: SHA384 not-after: 2038-01-16 12:44 This creates a self-signed X.509 certificate using the key given by the keygrip and using SHA-384 as hash algorithm. The keyword signing-key can be used to sign the certificate with a different key. See sm/certreggen.c for details.
* Lock scdaemon to CCID if once found.Werner Koch2011-02-231-46/+52
| | | | | | | | This solves a problem where ccid was used, the card unplugged and then scdaemon tries to find a new (plugged in) reader and thus will eventually try PC/SC over and over again. Also added an explicit --kill command to gpgconf.
* Removed deprecated SIGEXPIRED status line.Werner Koch2011-02-041-5/+10
|
* Add a DECRYPTION_INFO status.Werner Koch2011-02-031-33/+37
| | | | | | | DECRYPTION_INFO <mdc_method> <sym_algo> Print information about the symmetric encryption algorithm and the MDC method. This will be emitted even if the decryption fails.
* ifset parts which are not in GnuPG 2.0Werner Koch2011-01-133-4/+13
|
* Describe new log facilities.Werner Koch2010-12-023-1/+14
|
* Smartcard related updatesWerner Koch2010-11-171-1/+2
|
* Update FAQWerner Koch2010-11-161-11/+35
|
* * gpg.texi (GPG Configuration Options): Clarify that show-photosDavid Shaw2010-10-292-5/+12
| | | | | | doesn't work with --with-colons. --personal-digest-preferences does not have a default any longer.
* Update scripts etc.gnupg-2.1.0beta1gnupg-2.1-baseWerner Koch2010-10-261-1/+13
|
* doc fixWerner Koch2010-10-182-1/+6
|
* All tests work are again workingWerner Koch2010-10-143-2/+36
|
* More agent support for gpg.Werner Koch2010-10-131-2/+16
|
* Describe %v and %V.Werner Koch2010-10-112-0/+8
|
* Add new option --with-keygripWerner Koch2010-10-082-0/+9
|
* Import fixes.Werner Koch2010-10-061-2/+15
| | | | | new otion for watchgnupg
* Don't set SSH_AGENTPID_INFO.Werner Koch2010-10-051-6/+7
| | | | | | Doc fixes. Allow TCP and local sockets in watchgnupg.
* Add a static FAQ.Werner Koch2010-10-054-424/+383
| | | | | Add rules to build and upload the faqs.
* [w32ce] Do not print the faulty timezone infoWerner Koch2010-10-043-219/+413
| | | | | Switch FAQ sources to org-mode
* Exporting secret keys via gpg-agent is now basically supported.Werner Koch2010-10-017-23/+49
| | | | | | A couple of forward ported changes. Doc updates.