aboutsummaryrefslogtreecommitdiffstats
path: root/g10/ChangeLog (unfollow)
Commit message (Collapse)AuthorFilesLines
2004-05-22some late minor fixes.V1-3-6Werner Koch1-0/+11
2004-05-22* mainproc.c (check_sig_and_print): If we're honoring preferredDavid Shaw1-0/+15
keyservers, and auto-key-retrieve is set, try and get a missing key from the preferred keyserver subpacket when we verify the sig. * gpgv.c (parse_preferred_keyserver, free_keyserver_spec): Stubs. * keyserver.c (keyidlist): Use new parse_preferred_keyserver function. (keyserver_work): Use the passed-in keyserver spec rather than the options global one. * keyserver-internal.h, keyserver.c (parse_preferred_keyserver): New function to take a sig and return a split out keyserver_spec. (keyserver_import_keyid): Now takes a keyserver_spec.
2004-05-21* keyserver.c (keyidlist): Go back to the old fast keyid lister. OnlyDavid Shaw1-0/+8
merge selfsigs if we have to for honor-keyserver-url. (keyserver_refresh): Keyserver URL handler moved here. (calculate_keyid_fpr): Removed. * keydb.h, keyid.c (keystr_from_desc): Calculate a key string from a KEYDB_SEARCH_DESC.
2004-05-21* keyserver.c (keyserver_spawn): Fix keyserver options on tempfile onlyDavid Shaw1-0/+5
platforms. Noted by Roger Sondermann.
2004-05-20* keyserver.c (keyserver_work): Allow --refresh-keys with a preferredDavid Shaw1-0/+12
keyserver to happen even if there is no global keyserver set. * sig-check.c (do_check_messages): No need to check for Elgamal signatures any longer. (do_check_messages, do_check, check_key_signature2): --keyid-format conversion. * pkclist.c (show_paths, edit_ownertrust): Remove some unused code.
2004-05-20* options.h (ctrl): New for member IN_AUTO_KEY_RETRIEVE.David Shaw1-0/+8
* mainproc.c (check_sig_and_print): track whether we are retrieving a key. * status.c (status_currently_allowed): New. (write_status_text, write_status_text_and_buffer): Use it here. * g10.c: New command --gpgconf-list. (gpgconf_list): New. From Werner on stable branch.
2004-05-20* g10.c: New command --gpgconf-list. (gpgconf_list): New. From Werner onDavid Shaw1-0/+5
stable branch.
2004-05-20* pubkey-enc.c (get_session_key, get_it), keyedit.cDavid Shaw1-0/+6
(show_key_with_all_names, show_basic_key_info): --keyid-format conversion.
2004-05-19* sign.c (update_keysig_packet): Policies and notations should be strippedDavid Shaw1-0/+8
out when remaking a self-signature. Noted by Atom Smasher. * keyserver.c (parse_keyserver_uri): Fix compiler warnings.
2004-05-11* options.h, keyserver-internal.h, keyserver.c (parse_keyserver_uri):David Shaw1-0/+7
Improved URI parser that keeps track of the path information and doesn't modify the input string. (keyserver_spawn): Tell keyserver plugins about the path.
2004-05-11* keylist.c (show_policy_url, show_keyserver_url, show_notation)Werner Koch1-0/+10
(list_one): Use const char* for i18n string helpers. * keygen.c (do_generate_keypair, read_parameter_file): Really close the files. (do_generate_keypair): Create the secret key file using safe permissions. Noted by Atom Smasher.
2004-05-10* options.h, mainproc.c (symkey_decrypt_seskey), keyserver.c (structDavid Shaw1-0/+7
keyrec, parse_keyrec, keyserver_search_prompt), keyedit.c (keyedit_menu), g10.c (add_keyserver_url, add_policy_url): Fix some compiler warnings.
2004-05-08* keyedit.c (keyedit_menu, menu_set_keyserver_url): Allow passingDavid Shaw1-0/+11
preferred keyserver on "keyserver" command line. Sanity check keyserver URL before accepting it. * keyserver-internal.h, g10.c (main), keyserver.c (parse_keyserver_uri): Add an option to require the scheme:// and change all callers. (free_keyserver_spec): Make public.
2004-05-07(write_plaintext_packet): Fixed the detection of tooWerner Koch1-0/+5
large files in the same way as in encode.c.
2004-05-05* keylist.c (show_notation): Use bits to select which sort of notation toDavid Shaw1-0/+10
show. Don't allow a not-shown notation to prevent us from issuing the proper --status-fd message. * options.h, g10.c (main): Add show-std/standard-notations and show-user-notations. show-notations is both. Default is to show standard notations only during verify. Change all callers.
2004-04-29* main.h, keylist.c (show_notation): Add argument to show only userDavid Shaw1-0/+8
notations, only standard notations, or both. Change all callers. * keyserver.c (keyserver_spawn): We still need EXEC_TEMPFILE_ONLY.
2004-04-28* card-util.c (card_edit): Require PIN only for generate.Werner Koch1-0/+6
* app-openpgp.c (do_setattr): Sync FORCE_CHV1.
2004-04-27(keyserver_spawn) [EXEC_TEMPFILE_ONLY]: RemovedWerner Koch1-0/+3
setting use_temp_file because this option has been removed.
2004-04-27A bunch of changes for the openpgp card.Werner Koch1-0/+65
2004-04-26* getkey.c (get_seckey_byname2): Significantly simplify this function byDavid Shaw1-0/+5
using key_byname to do the heavy lifting. Note that this also fixes an old problem when the first key on the secret keyring has an unusable stub primary, but is still chosen.
2004-04-26* getkey.c (key_byname): If namelist is NULL, return the first key in theDavid Shaw1-0/+5
keyring.
2004-04-23* keygen.c (make_backsig): If DO_BACKSIGS is not defined, do not createDavid Shaw1-0/+16
backsigs. * getkey.c (merge_selfsigs_subkey): Find 0x19 backsigs on subkey selfsigs and verify they are valid. If DO_BACKSIGS is not defined, fake this as always valid. * packet.h, parse-packet.c (parse_signature): Make parse_signature non-static so we can parse 0x19s in self-sigs. * main.h, sig-check.c (check_backsig): Check a 0x19 signature. (signature_check2): Give a backsig warning if there is no or a bad 0x19 with signatures from a subkey.
2004-04-22* parse-packet.c (dump_sig_subpkt, parse_one_sig_subpkt,David Shaw1-0/+5
can_handle_critical): Parse and display 0x19 signatures.
2004-04-20* keyserver.c (parse_keyserver_uri): Do not accept "http" as an alias forDavid Shaw1-0/+5
"hkp". They are not the same thing.
2004-04-19* options.h, g10.c (main): Add keyserver-option honor-keyserver-url.David Shaw1-0/+21
parse_keyserver_options now returns a success code. * keyserver.c (parse_keyserver_options): Return error on failure to parse. Currently there is no way to fail as any unrecognized options get saved to be sent to the keyserver plugins later. Check length of keyserver option tokens since with =arguments we must only match the prefix. (free_keyserver_spec): Moved code from parse_keyserver_url. (keyserver_work, keyserver_spawn): Pass in a struct keyserver_spec rather than using the global keyserver option. (calculate_keyid_fpr): New. Fills in a KEYDB_SEARCH_DESC for a key. (keyidlist): New implementation using get_pubkey_bynames rather than searching the keydb directly. If honor-keyserver-url is set, make up a keyserver_spec and try and fetch that key directly. Do not include it in the returned keyidlist in that case.
2004-04-16* plaintext.c (handle_plaintext): Accept 'u' as a plaintext mode thatDavid Shaw1-0/+17
requires end of line conversion. This is being considered for a UTF8 text packet. If this doesn't take place, no major harm done. If it does take place, we'll get a jump on starting the changeover. * g10.c (main): --no-use-embedded-filename. * build-packet.c (calc_plaintext, do_plaintext): Do not create illegal (packet header indicates a size larger than the actual packet) encrypted data packets when not compressing and using a filename longer than 255 characters. * keyedit.c (no_primary_warning): Cleanup. (menu_expire): Don't give primary warning for subkey expiration changes. These cannot reorder primaries.
2004-04-16* keygen.c (gen_elg, gen_dsa, gen_rsa, do_create, do_generate_keypair,David Shaw1-0/+20
generate_subkeypair): New is_subkey argument to set whether a generated key is a subkey. Do not overload the ret_sk. This is some early cleanup to do backsigs for signing subkeys. * keygen.c (write_keybinding, do_generate_keypair, generate_subkeypair): Keep track of the unprotected subkey secret key so we can make a backsig with it. * keygen.c (make_backsig): New function to add a backsig to a binding sig of signing subkeys. Currently disabled. (write_keybinding): Call it here, for signing subkeys only. * sign.c (make_keysig_packet): Allow generating 0x19 signatures (same as 0x18 or 0x28, but used for backsigs). * packet.h, build-packet.c (build_sig_subpkt): Add new SIGSUBPKT_SIGNATURE type for embedded signatures.
2004-04-16* main.h, misc.c (optsep, argsplit, optlen, parse_options): Simplify codeDavid Shaw1-0/+9
and properly handle a partial match against an option with an argument. * keyserver-internal.h, keyserver.c (parse_keyserver_options): Use new optsep and argsplit functions.
2004-04-16* main.h, misc.c (argsplit): Refactor argsep into argsplit and argsep soDavid Shaw1-0/+3
they can be called separately.
2004-04-15* options.h, keyserver.c (parse_keyserver_options): Remove duplicate codeDavid Shaw1-0/+10
from parse_keyserver_options by calling the generic parse_options. * keyserver.c (keyserver_spawn, keyserver_refresh), g10.c (main), gpgv.c (main), mainproc.c (check_sig_and_print), import.c (revocation_present): Change all callers.
2004-04-15* packet.h, getkey.c (fixup_uidnode, merge_selfsigs_subkey): Keep track ofDavid Shaw1-0/+8
which self-sig we actually chose. * keyedit.c (menu_expire, menu_set_primary_uid, menu_set_preferences): Use it here to avoid updating non-used self-sigs and possibly promoting an old self-sig into consideration again.
2004-04-14* options.h, import.c, keyserver-internal.h, g10.c, mainproc.c,David Shaw1-0/+5
keyserver.c (parse_keyserver_uri): Parse keyserver URI into a structure. Cleanup for new "guess my keyserver" functionality, as well as refreshing via a preferred keyserver subpacket.
2004-04-14* options.h: Encapsulate keyserver details. Change all callers.David Shaw1-0/+4
2004-03-28* keyedit.c (keyedit_menu): Request a trustdb update when adding a newDavid Shaw1-0/+6
user ID so the new ID gets validity set. Reported by Owen Taylor.
2004-03-25* options.h, g10.c (main), compress-bz2.c (init_uncompress): RenameDavid Shaw1-0/+6
--bzip2-compress-lowmem to --bzip2-decompress-lowmem since it applies to decompression, not compression.
2004-03-24* keyedit.c (sign_uids, show_key_and_fingerprint, ask_revoke_sig,David Shaw1-0/+7
menu_revsig, menu_showphoto): --keyid-format conversion. (menu_addrevoker): Use print_pubkey_info() rather than duplicating code.
2004-03-19* trustdb.c (update_min_ownertrust, validate_keys): Do not use keystrDavid Shaw1-0/+16
functions in log_debug. * import.c (import_one): Try and collapse user IDs when importing a key for the first time. * keyedit.c (menu_addrevoker): Allow appointing a subkey as a designated revoker if the user forces it via keyid!, so long as the subkey can certify. Also use the proper date string when prompting for confirmation. * g10.c (main): Maintain ordering of multiple Comment lines. Requested by Peter Hyman.
2004-03-18* mainproc.c (proc_pubkey_enc, print_pkenc_list, list_node):David Shaw1-0/+5
--keyid-format conversion.
2004-03-16* getkey.c (skip_unusable, merge_selfsigs_main,David Shaw1-0/+6
premerge_public_with_secret, lookup, get_user_id_string): --keyid-format conversion.
2004-03-15* trustdb.c (add_utk, verify_own_keys, update_min_ownertrust,David Shaw1-0/+4
get_validity, ask_ownertrust, validate_keys): --keyid-format conversion.
2004-03-15* import.c (check_prefs_warning, check_prefs): --keyid-format conversionDavid Shaw1-0/+8
and a little better text. (import_one, import_secret_one, import_revoke_cert, chk_self_sigs, delete_inv_parts, merge_blocks): Still more --keyid-format conversions.
2004-03-06* keylist.c (print_seckey_info, print_pubkey_info): --keyid-formatDavid Shaw1-0/+6
conversion. (list_keyblock_print): 0xshort should not push us into the new list format since it is not much longer than regular 8-character short keyids.
2004-03-06* keydb.h, keyid.c (keystr_from_pk, keystr_from_sk): New functions to pullDavid Shaw1-1/+10
a key string from a key in one step. This isn't faster than before, but makes for neater code. * keylist.c (list_keyblock_print): Use keystr_from_xx here. (print_key_data): No need to pass a keyid in.
2004-03-06* keyid.c (keyid_from_sk): Minor performance boost by caching secret keyDavid Shaw1-0/+3
keyids so we don't have to calculate them each time.
2004-03-05* getkey.c (merge_selfsigs_subkey): Do not mark subkeys valid if we do notDavid Shaw1-0/+9
support their pk algorithm. This allows for early (during get_*) rejection of a subkey, and selection of another. * passphrase.c (passphrase_to_dek): Give a little more information when we have room to do so.
2004-03-05* revoke.c (export_minimal_pk), export.c (do_export_stream), passphrase.cDavid Shaw1-0/+9
(passphrase_to_dek), keyserver.c (print_keyrec): A few more places to use --keyid-format. * options.h, g10.c (main), export.c (parse_export_options, do_export_stream): Remove --export-all and the "include-non-rfc" export-option as they are no longer meaningful with the removal of v3 Elgamal keys.
2004-03-04* armor.c (fake_packet, armor_filter): Use the 2440 partial lengthDavid Shaw1-0/+5
encoding for the faked plaintext packet.
2004-03-03* options.h, g10.c (main), mainproc.c (check_sig_and_print): RemoveDavid Shaw1-0/+4
verify-option show-long-keyids and replace with the more general keyid-format.
2004-03-03* build-packet.c (write_header2): Remove call to start old gpg partialDavid Shaw1-0/+12
length mode and change all callers. (do_plaintext): Turn off partial length encoding now that we're done writing the packet. (do_comment, do_user_id): Try for a headerlen of 2 since that's the smallest and most likely encoding for these packets. * parse-packet.c (parse): Remove call to start old gpg partial length mode.
2004-03-03* options.h, g10.c (main): Add a more flexible --keyid-format option toDavid Shaw1-0/+12
replace the list-option (and eventually verify-option) show-long-keyids. The format can be short, long, 0xshort, and 0xlong. * keydb.h, keyid.c (keystr, keystrlen): New functions to generate a printable keyid. * keyedit.c (print_and_check_one_sig, show_key_with_all_names), keylist.c (list_keyblock_print): Use new keystr() function here to print keyids.