aboutsummaryrefslogtreecommitdiffstats
path: root/g10/ChangeLog (unfollow)
Commit message (Collapse)AuthorFilesLines
2006-02-14about to release 1.4.3rc1gnupg-1.4.3rc1Werner Koch1-1/+1
2006-02-14Fixed a wrong return code with gpg --verifyWerner Koch1-0/+8
2006-02-09Lock random seed fileWerner Koch1-0/+4
2006-02-06Add support fro CardMan 4040Werner Koch1-0/+14
2006-01-24* keyserver.c (parse_keyserver_uri): If there is a path present, set theDavid Shaw1-0/+5
direct_uri flag so the right keyserver helper is run.
2006-01-22* keyserver.c (keyserver_spawn): Include the EXEEXT so we can findDavid Shaw1-0/+8
keyserver helpers on systems that use extensions. * misc.c (path_access) [HAVE_DRIVE_LETTERS]: Do the right thing with drive letter systems.
2006-01-17* keydb.h, passphrase.c (next_to_last_passphrase): New. "Touch" aDavid Shaw1-0/+14
passphrase as if it was used (move from next_pw to last_pw). * pubkey-enc.c (get_session_key): Use it here to handle the case where a passphrase happens to be correct for a secret key, but yet that key isn't the anonymous recipient (i.e. the secret key could be decrypted, but not the session key). This also handles the case where a secret key is located on a card and a secret key with no passphrase. Note this does not fix bug 594 (anonymous recipients on smartcard do not work) - it just prevents the anonymous search from stopping when the card is encountered.
2006-01-07* keyserver.c (keyserver_refresh): Fix problem when more than one keyDavid Shaw1-0/+6
in a refresh batch has a preferred keyserver set. Noted by Nicolas Rachinsky.
2006-01-01* mainproc.c (check_sig_and_print), keyserver.cDavid Shaw1-0/+5
(keyserver_import_pka), card-util.c (fetch_url): Always require a scheme:// for keyserver URLs except when used as part of the --keyserver command for backwards compatibility.
2006-01-01* sign.c (write_signature_packets): Lost a digest_algo line.David Shaw1-0/+2
2006-01-01* sign.c (hash_for): Add code to detect if the sk lives on a smartDavid Shaw1-0/+12
card. If it does, only allow 160-bit hashes, a la DSA. This involves passing the *sk in, so change all callers. This is correct for today, given the current 160-bit q in DSA, and the current SHA-1/RIPEMD160 support in the openpgp card. It will almost certainly need changing down the road. * app-openpgp.c (do_sign): Give user error if hash algorithm is not supported by the card.
2005-12-23* keyserver.c (keyserver_import_pka): New. Moved fromDavid Shaw1-1/+13
getkey.c:get_pubkey_byname which was getting crowded. * keyserver.c (keyserver_import_cert): Import a key found in DNS via CERT records. Can handle both the PGP (actual key) and IPGP (URL) CERT types. * getkey.c (get_pubkey_byname): Call them both here. * options.h, keyserver.c (parse_keyserver_options): Add "auto-cert-retrieve" option with optional max size argument.
2005-12-23* gpgv.c: Stub.David Shaw1-0/+12
* keyserver-internal.h, keyserver.c (keyserver_spawn, keyserver_work, keygerver_getname): New keyserver_getname function to fetch keys by name. * getkey.c (get_pubkey_byname): Call it here to enable locating keys by full mailbox from a keyserver a la PKA. Try PKA first, though, as it is likely to be faster.
2005-12-20Finished PKA featureWerner Koch1-0/+20
2005-12-19* getkey.c (merge_selfsigs_main): All primary keys can certify.David Shaw1-0/+4
2005-12-19* gpg.c (main): Restore convert-sk-to-pk as programs rely on it.David Shaw1-0/+7
* keyid.c (usagestr_from_pk): Remove special PUBKEY_USAGE_CERT flag. It's no longer needed.
2005-12-14* gpg.c (main): Don't default to import-options convert-sk-to-pk. ItDavid Shaw1-0/+7
causes confusing warning messages when importing a PGP-exported key that contains a secret key without selfsigs followed by the public key.
2005-12-08* keyserver.c (keyserver_fetch): Switch on fast-import before weDavid Shaw1-0/+5
--fetch-keys so we don't rebuild the trustdb after each fetch.
2005-12-08Made strings translatable. Minor fixes.Werner Koch1-1/+8
2005-12-08* options.h, keyserver.c (curl_cant_handle, keyserver_spawn,David Shaw1-0/+7
keyserver_fetch): Set a flag to indicate that we're doing a direct URI fetch so we can differentiate between a keyserver operation and a URI fetch for protocols like LDAP that can do either.
2005-12-07* keyserver.c (keyserver_spawn): Don't print "searching for key 00000000"David Shaw1-0/+10
when fetching a URI. * keyserver-internal.h, keyserver.c (keyserver_fetch): New. Fetch an arbitrary URI using the keyserver helpers. * gpg.c (main): Call it from here for --fetch-keys.
2005-11-20* main.h, keylist.c (print_revokers): New. Print the "rvk" designatedDavid Shaw1-0/+10
revoker record. Moved from keyedit.c:show_key_with_all_names_colon. * keylist.c (list_keyblock_colon): Use it here ... * keyedit.c (show_key_with_all_names_colon): ... and here.
2005-11-19* free-packet.c (copy_secret_key): Copy secret key into secure memoryDavid Shaw1-1/+11
since we may unprotect it. * main.h, g10.c (main), revoke.c (gen_desig_revoke): Add local user support so users can use -u with --desig-revoke. This bypasses the interactive walk over the revocation keys.
2005-11-18* keyedit.c (keyedit_menu, menu_clean): Simplify clean options to justDavid Shaw1-0/+14
"clean", and add "minimize". * import.c (parse_import_options): Make help text match the export versions of the options. * options.h, export.c (parse_export_options, do_export_stream): Reduce clean options to two: clean and minimize. * trustdb.h, trustdb.c (clean_one_uid): New function that joins uid and sig cleaning into one for a simple API outside trustdb.
2005-11-13* armor.c (parse_header_line): A fussy bit of 2440: header lines areDavid Shaw1-0/+6
delimited with a colon-space pair. Therefore a line such as "Comment: " is actually legal, albeit not particularly useful.
2005-11-12* trustdb.h, trustdb.c (clean_key): New function to handle keyDavid Shaw1-0/+10
cleaning from one convenient place. * options.h, import.c (parse_import_options, clean_sigs_from_all_uids, import_one): Reduce clean options to two: clean and minimize. * parse-packet.c (setup_user_id): Remove. (parse_user_id, parse_attribute): Just use xmalloc_clear instead.
2005-11-12* trustdb.c (clean_uid_from_key, clean_uids_from_key): SignificantlyDavid Shaw1-0/+5
simpler implementation.
2005-11-10* keyedit.c (keyedit_menu, menu_clean_sigs_from_uids): Add "minimize"David Shaw1-2/+5
command.
2005-11-10* packet.h, keyedit.c (menu_clean_uids_from_key), trustdb.cDavid Shaw1-0/+4
(clean_uids_from_key): Fix display bug where sigs cleaned for other reasons caused a uid to appear as if it had been compacted.
2005-11-10* packet.h: Move some flags to a bitfield. Change all callers.David Shaw1-0/+2
2005-11-10* options.h, import.c (parse_import_options, clean_sigs_from_all_uids,David Shaw1-0/+4
import_one): Add import-minimal option. Similar to export-minimal, except it works on the way in.
2005-11-10* trustdb.h, trustdb.c (clean_sigs_from_uid): Add flag to remove allDavid Shaw1-0/+8
non-selfsigs from key during cleaning. Change all callers. * export.c (do_export_stream): Use it here so we don't need additional minimize code in the export path.
2005-11-06* options.skel: Add a section for --encrypt-to. This is Debian bugDavid Shaw1-0/+5
336211 by Javier Fernández-Sanguino Peña.
2005-11-06* Makefile.am: Include @LIBUSB_CPPFLAGS@ in our CPPFLAGS. StrictlyDavid Shaw1-0/+11
speaking this should be only in gpg_CPPFLAGS, but then we have to compile everything twice for gpg and gpgv. * apdu.c (open_pcsc_reader): Fix double free. * gpg.c (main) [__APPLE__]: Default the PCSC driver to the OS X location. Suggested by Patty A. Hardy.
2005-11-02* trustdb.c (clean_sigs_from_uid): Include sigs from unavailable keys inDavid Shaw1-0/+6
the sigs that are cleaned. Suggested by Dirk Traulsen and many others.
2005-11-02* import.c (import_one): Do collapse_uids() before we do any cleaningDavid Shaw1-0/+15
so keyserver mangled keys with doubled user IDs can be properly cleaned - possibly sigs on the different user IDs cancel each other out. * import.c (parse_import_options), export.c (parse_export_options): List "xxx-clean" before the longer options so we don't end up with a partial match on the longer options. * trustdb.c (clean_uids_from_key): Return proper number of cleaned user IDs. Don't count user IDs as cleaned unless we actually delete something.
2005-10-27* keyedit.c (menu_addrevoker), getkey.c (finish_lookup): Fix problem withDavid Shaw1-0/+7
adding a cert-only designated revoker. Code was looking for a key with sign ability, and not cert ability. Noted by Timo Schulz.
2005-10-27cygwin fixesWerner Koch1-0/+23
2005-10-26* keygen.c (proc_parameter_file): Default key and subkey usage flags toDavid Shaw1-0/+6
algo capabilities if parameter file doesn't specify them. Noted by Timo Schulz.
2005-10-18Fixed minor card related bugs and enhanced status messagesWerner Koch1-0/+16
2005-10-17exported subkeys are now merged into one output keyblockWerner Koch1-0/+9
2005-10-14* keyedit.c (keyedit_menu, menu_backsign): New "backsign" command toDavid Shaw1-0/+9
add 0x19 backsigs to old keys that don't have them. * misc.c (parse_options): Fix build warning. * main.h, keygen.c (make_backsig): Make public.
2005-10-12* options.h, getkey.c (merge_selfsigs_subkey), gpg.c (main), sig-check.cDavid Shaw1-0/+7
(signature_check2): Add --require-backsigs and --no-require-backsigs. Currently defaults to --no-require-backsigs.
2005-10-11* getkey.c (merge_selfsigs_subkey), sig-check.c (signature_check2),David Shaw1-0/+8
keygen.c (make_backsig): Did some backsig interop testing with the PGP folks. All is well, so I'm turning generation of backsigs on for new keys. Checking for backsigs on verification is still off.
2005-10-05Renamed g10.c to gpg.cWerner Koch1-0/+15
Filelength fixes for W32.
2005-09-20* mainproc.c (proc_symkey_enc): Take care of a canceled passphraseWerner Koch1-0/+5
prompt.
2005-09-20* keylist.c (reorder_keyblock, do_reorder_keyblock): Reorder attributeDavid Shaw1-0/+8
IDs as well as regular text IDs. * plaintext.c (ask_for_detached_datafile): Use make_filename() on filename so tilde expansion works.
2005-09-14* main.h, misc.c (parse_options): Add the ability to have helpDavid Shaw1-0/+9
strings in xxx-options commands. * keyserver.c (keyserver_opts), import.c (parse_import_options), export.c (parse_export_options), g10.c (parse_list_options, main): Add help strings to xxx-options.
2005-09-10* keyedit.c (show_names): Moved name display code out fromDavid Shaw1-0/+7
show_key_with_all_names. (keyedit_menu): Call it here for pref and showpref so they can show only the selected user ID. Suggested by Timo Schulz.
2005-09-07Updated card stuff to support T=0 cards.Werner Koch1-0/+15
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-27 10:33:24 +0000