aboutsummaryrefslogtreecommitdiffstats
path: root/g10/ChangeLog (unfollow)
Commit message (Collapse)AuthorFilesLines
2002-10-17* pkclist.c (do_edit_ownertrust): Show all user IDs. This shouldWerner Koch1-0/+6
be enhanced to also show the current trust level. Suggested by Florian Weimer.
2002-10-17* g10.c (main): Handle --strict and --no-strict from the command lineDavid Shaw1-0/+5
before the options file is loaded.
2002-10-15* g10.c (main): Disable --textmode when encrypting (symmetric or pk) inDavid Shaw1-0/+6
--pgp2 mode as PGP 2 can't handle the unknown length literal packet. Reported by Michael Richardson.
2002-10-14* keyserver-internal.h, keyserver.c (print_keyrec, parse_keyrec,David Shaw1-0/+11
show_prompt, keyserver_search_prompt, keyserver_spawn): Go to version 1 of the keyserver protocol. This is a better design, similar to --with-colons, that allows for keys with multiple user IDs rather than using multiple keys. It also matches the machine readable pksd format. Also use a prettier --search-keys listing format that can fill different size windows (currently set at 24 lines).
2002-10-12* keygen.c (print_status_key_created): New.Werner Koch1-0/+6
(do_generate_keypair): Use it to print the fingerprint. (generate_subkeypair): Likewise.
2002-10-11* keyedit.c (menu_addrevoker): Properly back out if the signature fails.David Shaw1-0/+6
Also, do not allow appointing the same revoker twice, and report ALREADY_SIGNED if the user tries it.
2002-10-07And changelog :)David Shaw1-0/+10
2002-10-04* getkey.c (get_pubkey_direct): Don't cache keys retrieved via thisDavid Shaw1-0/+9
function as they may not have all their fields filled in. * sig-check.c (signature_check2): Use new is_primary flag to check rather than comparing main_keyid with keyid as this still works in the case of a not fully filled in pk.
2002-10-04* import.c (import_keys_internal): s/inp/inp2/ to avoid shadowingWerner Koch1-0/+8
warning. * passphrase.c (agent_get_passphrase): Fixed signed/unsigned char problem in %-escaping. Noted by Ingo Kl�cker.
2002-10-03* options.h, g10.c (main): Add --strict and --no-strict to switch theDavid Shaw1-0/+3
log_warning severity level from info to error.
2002-10-03* keylist.c (print_capabilities): Secret-parts-missing keys should showDavid Shaw1-0/+9
that fact in the capabilities, and only primary signing keys can certify other keys. * packet.h, parse_packet.c (parse_key): Add is_primary flag for public keys (it already exists for secret keys).
2002-10-02* import.c (import_secret_one): Check for an illegal (>110) protectionDavid Shaw1-0/+18
cipher when importing a secret key. * keylist.c (list_keyblock_print): Show a '#' for a secret-parts-missing key. * parse_packet.c (parse_key): Some comments. * revoke.c (gen_revoke): Remove some debugging code. * trustdb.c (verify_own_keys): Make trusted-key a non-deprecated option again. * seckey-cert.c (do_check): Don't give the IDEA warning unless the cipher in question is in fact IDEA.
2002-10-01* import.c (import_one): Make sure that a newly imported key starts with aDavid Shaw1-0/+5
clean ownertrust.
2002-10-01* getkey.c (get_pubkey_direct): New.Werner Koch1-0/+7
(merge_selfsigs_main): Use it here to look for an ultimately trusted key. Using the full get_pubkey might lead to an infinitive recursion.
2002-09-30* keyserver.c (parse_keyserver_uri): Force the keyserver URI scheme toDavid Shaw1-0/+5
lowercase to be case-insensitive.
2002-09-282002-09-28 David Shaw <[email protected]>David Shaw1-0/+13
* export.c (do_export_stream): Comment. * sig-check.c (check_key_signature2): Properly handle a non-designated revocation import. 2002-09-26 Werner Koch <[email protected]> * g10.c (set_homedir): New. Changed all direct assignments to use this. * gpgv.c (set_homedir): Ditto.
2002-09-25* Makefile.am: Link gpg with EGDLIBS (i.e. NETLIBS) as EGD uses sockets.David Shaw1-0/+6
Remove the old NETLIBS variable since the keyserver stuff is no longer internal.
2002-09-24* import.c (import_keys_stream): Fix compiler type warning.David Shaw1-0/+8
* keyring.c (keyring_rebuild_cache), sig-check.c (check_key_signature2), import.c (import, chk_self_sigs): Minor language cleanups.
2002-09-23added fast-import to import-optionsStefan Bellon1-0/+11
2002-09-22avoid function cloneStefan Bellon1-3/+4
2002-09-21added trustdb update/check for stream import as wellStefan Bellon1-3/+4
2002-09-21trustdb checks/updates after importStefan Bellon1-0/+5
2002-09-19From stable branchDavid Shaw1-0/+9
* keyserver.c (keyserver_spawn): Properly handle line truncation. Don't leak memory (~10-20 bytes) on searches. (keyserver_search_prompt): Cleanup. * keylist.c (list_keyblock_colon): Show 1F direct key signatures in --with-colons listing.
2002-09-17From stable branchDavid Shaw1-0/+15
* keyedit.c (menu_addrevoker): The direct key signature for revocation keys must be at least v4 to carry the revocation key subpacket. Add a PGP 2.x warning for revocation keys. * g10.c (check_permissions): Rearrange strings to make translating easier (don't incorporate string parts). * keyedit.c (sign_uids): Make strings translatable. * sig-check.c (check_key_signature2): Make string translatable.
2002-09-13Import from stable branch.David Shaw1-0/+17
2002-09-13 David Shaw <[email protected]> * getkey.c (check_revocation_keys): Move.... * main.h, sig-check.c (check_revocation_keys): to here. Also return the signature_check error code rather than 0/1 and cache the sig result. * sig-check.c (check_key_signature2): Divert to check_revocation_keys if a revocation sig is made by someone other than the pk owner. * getkey.c (merge_selfsigs_main): Tidy. 2002-09-13 Werner Koch <[email protected]> * g10.c (main) [__MINGW32__]: Activate oLoadExtension.
2002-09-12* Makefile.am, hkp.c, hkp.h, keyserver.c (keyserver_work): Remove internalDavid Shaw1-0/+3
HKP support.
2002-09-12* keyserver.c (keyserver_spawn): Remove whitespace after keyserverDavid Shaw1-0/+5
commands.
2002-09-11* g10.c, options.h: Removed option --emulate-checksum-bug.Werner Koch1-1/+21
* misc.c (checksum_u16_nobug): Removed. (checksum_u16): Removed the bug emulation. (checksum_mpi): Ditto. (checksum_mpi_counted_nbits): Removed and replaced all calls with checksum_mpi. * parse-packet.c (read_protected_v3_mpi): New. (parse_key): Use it here to store it as an opaque MPI. * seckey-cert.c (do_check): Changed the v3 unprotection to the new why to store these keys. (protect_secret_key): Likewise. * build-packet.c (do_secret_key): And changed the writing.
2002-09-10* exec.c (expand_args): Remove loop left over from earlier implementation.David Shaw1-0/+5
(exec_write): Missed one tick.
2002-09-10Cleanups and minor fixes.Werner Koch1-2/+46
2002-09-09* g10.c (add_group): Use '=' to separate group name from group members.David Shaw1-0/+7
Use a better error message for when no = is found. * hkp.c (hkp_export): Use CRLF in headers.
2002-09-04* mainproc.c (print_pkenc_list): Don't increment the error counter whenDavid Shaw1-0/+8
printing the list of keys a message was encrypted to. This would make gpg give a non-zero exit code even for completely valid messages if the message was encrypted to more than one key that the user owned.
2002-09-02* g10.c (main): Try to set a default character set. Print theWerner Koch1-1/+10
used one in verbosity level 3. * gpgv.c (main): Try to set a default character set. * status.c, status.h (STATUS_IMPORT_OK): New. * import.c (import_one,import_secret_one): Print new status.
2002-08-30* pkclist.c (build_pk_list): Add new status code to indicate an untrustedDavid Shaw1-0/+4
user. This (or a disabled key) fail with "unavailable pubkey" (G10ERR_UNU_PUBKEY).
2002-08-30* pkclist.c (build_pk_list): Fail if any recipient keys are unusable.David Shaw1-0/+13
* options.skel: The PGP LDAP keyserver is back. Use MIT keyserver as a sample rather than cryptnet as cryptnet does not support searching yet. * keyedit.c (show_key_with_all_names): Fix error message (preferences are userid/selfsig and not key specific).
2002-08-30* pkclist.c (do_we_trust_pre): Changed the wording of a warning.Werner Koch1-0/+17
* encode.c (encode_simple,encode_crypt): Use new style CTB for compressssed packets when using MDC. We need to do this so that concatenated messages are properly decrypted. Old style compression assumes that it is the last packet; given that we can't determine the length in advance, the uncompressor does not know where to start. Actually we should use the new CTB always but this would break PGP 2 compatibility. * parse-packet.c (parse): Special treatment for new style CTB compressed packets. * build-packet.c (do_mdc): Removed. Was not used. (do_encrypted_mdc): Count the version number and the MDC packet.
2002-08-28* sig-check.c (do_check_messages, do_check): Show keyid in error messages.David Shaw1-0/+8
* keyserver.c (print_keyinfo): More readable key listings for --search-keys responses.
2002-08-26* hkp.c (parse_hkp_index, dehtmlize): Move HTML functionality into newDavid Shaw1-0/+7
"dehtmlize" function. Remove HTML before trying to parse each line from the keyserver. If the keyserver provides key type information in the listing, use it.
2002-08-23* sig-check.c (do_check, do_check_messages): Emit the usual sig warningsDavid Shaw1-0/+8
even for cached sigs. This also serves to protect against missing a sig expiring while cached. * getkey.c (merge_selfsigs_main): Don't check UID self-sigs twice.
2002-08-22* import.c (clean_subkeys, chk_self_sigs): Merge clean_subkeys intoDavid Shaw1-0/+15
chk_self_sigs. This improves efficiency as the same signatures are not checked multiple times. Clarify when a subkey is revoked (any revocation signature, even if it is dated before the binding signature). * getkey.c (merge_selfsigs_subkey): Subkey revocation comments. * keylist.c (list_one): Stats are only for public key listings. * g10.c (main), options.skel: Default should be include-revoked for keyserver operations.
2002-08-21* import.c (import_print_stats): Print new non_imported counterWerner Koch1-0/+5
which is currently not used becuase we terminate on errors.
2002-08-20* options.skel: Document no-include-attributes for keyserver-options.David Shaw1-0/+3
2002-08-20* keylist.c, keyedit.c, keyserver.c, sign.c: Some TODOs and comments.David Shaw1-0/+11
* export.c (do_export_stream): Fix noop bug in exporting sensitive revocation keys. * pkclist.c (do_edit_ownertrust): Comment out the option for showing trust paths until it can be implemented.
2002-08-19* getkey.c (get_user_id_native): Renamed to ..Werner Koch1-1/+13
(get_user_id_printable): this. Filter out all dangerous characters. Checked all usages. (get_user_id_string_native): Renamed to.. (get_user_id_string_printable): this. Filter out all dangerous characters. Checked all usages. * keyedit.c (show_basic_key_info): New. * keylist.c (print_fingerprint): New mode 3. * import.c (import_one): Use new function to display the user ID.
2002-08-182002-08-16 Timo Schulz <[email protected]>Timo Schulz1-0/+8
* g10.c (main): enable opt.interactive. * import.c (import_one): Ask the user if the key shall be imported when the interactive mode is used. Useful to extract selected keys from a file.
2002-08-16Removed a leftover conflict indicator.Werner Koch1-1/+0
2002-08-16* seckey-cert.c: Workaround to allow decryption of v3 keys createdWerner Koch1-0/+5
with a bug in the mpi_get_secure_buffer.
2002-08-14* hkp.c (parse_hkp_index): Properly handle really large keys (5 digit keyDavid Shaw1-0/+5
length) in HKP searches.
2002-08-13* encode.c (encode_simple): Fix problem with using compression algo 2 andDavid Shaw1-0/+19
symmetric compressed files. * encode.c (encode_simple, encode_crypt): If we are not using a MDC, compress even if a file is already compressed. This is to help against the chosen ciphertext attack. * pkclist.c (select_algo_from_prefs): Fix requested algorithm bug so the request succeeds even if the requested algorithm is not the first found. * cipher.c (write_header), encode.c (use_mdc, encode_simple, encode_crypt, encrypt_filter), g10.c (main): Be more eager to use a MDC. We use a MDC if the keys directly support it, if the keys list AES (any) or TWOFISH anywhere in the prefs, or if the cipher chosen does not have a 64 bit blocksize.
2002-08-09* options.skel: Some language tweaks, and remove the load-extensionDavid Shaw1-0/+13
section for random gatherers. * keyring.c (create_tmp_file, rename_tmp_file): Create tmp files with user-only permissions, but restore the original permissions if the user has something special set. * openfile.c (copy_options_file): Create new options file (gpg.conf) with user-only permissions. * keydb.c (keydb_add_resource): Create new keyrings with user-only permissions.