aboutsummaryrefslogtreecommitdiffstats
path: root/g10/ChangeLog (unfollow)
Commit message (Collapse)AuthorFilesLines
2005-09-01* photoid.h, photoid.c (generate_photo_id): Allow passing in aDavid Shaw1-0/+8
suggested filename. * keyedit.c (keyedit_menu, menu_adduid): Call it here so "addphoto filename" works.
2005-08-31* photoid.c (generate_photo_id): Enable readline completion and tildeDavid Shaw1-0/+5
expansion for the JPEG prompt.
2005-08-27* misc.c (openpgp_pk_algo_usage): Default to allowing CERT for signingDavid Shaw1-0/+17
algorithms. * keyedit.c (sign_uids): Don't request a signing key to make a certification. * keygen.c (do_add_key_flags): Force the certify flag on for all primary keys, as the spec requires primary keys must be able to certify (if nothing else, which key is going to issue the user ID signature?) (print_key_flags): Show certify flag. (ask_key_flags, ask_algo): Don't allow setting the C flag for subkeys. * keyid.c (usagestr_from_pk), getkey.c (parse_key_usage): Distinguish between a sign/certify key and a certify-only key.
2005-08-27* keyedit.c (ask_revoke_sig): Add a revsig --with-colons mode.David Shaw1-0/+5
Suggested by Michael Schierl.
2005-08-21* Makefile.am: No need to link with curl any longer.David Shaw1-0/+13
* main.h, misc.c (path_access): New. Same as access() but does a PATH search like execlp. * keyserver.c (curl_can_handle): Removed. Replaced by... (curl_cant_handle): We are now relying on curl as the handler of last resort. This is necessary because PGP LDAP and curl LDAP are apples and oranges. (keyserver_typemap): Only test for ldap and ldaps. (keyserver_spawn): If a given handler is unusable (as determined by path_access()) then try gpgkeys_curl.
2005-08-21* exec.h, exec.c (make_tempdir, expand_args, exec_write, exec_read):David Shaw1-0/+6
Minor cleanup to use bitfield flags instead of a bunch of integers.
2005-08-20* g10.c (main): Add aliases sign-with->local-user and user->recipientDavid Shaw1-0/+6
to make switching from PGP command line to GPG easier.
2005-08-19* options.skel: Remove the surfnet LDAP keyserver from the list ofDavid Shaw1-0/+8
samples since it is being shut down. * getkey.c (classify_user_id): Disable the '.' and '+' search modes since they aren't supported yet.
2005-08-05* g10.c (main), passphrase.c (set_passphrase_from_string): NewDavid Shaw1-0/+6
--passphrase command line option. Only useful in very special circumstances.
2005-08-05auto retrieve keys from PKA. Thsi allows to specify an email addressWerner Koch1-0/+18
so that gpg can get the key from DNS. This helps with opportunistic encryption. No integration with the trust modell yet.
2005-08-05* keygen.c (proc_parameter_file): Sanity check items in keygen batchDavid Shaw1-0/+3
file. Noted by Michael Schierl.
2005-08-05* pkclist.c (do_edit_ownertrust): Don't allow ownertrust level 0.David Shaw1-0/+3
Noted by Michael Schierl.
2005-08-04* keygen.c (write_keyblock): Don't try and build deleted kbnodes sinceDavid Shaw1-2/+2
we start our tree with one.
2005-08-04* keygen.c (start_tree): Need to use an actual packet type (which weDavid Shaw1-0/+5
can then delete) to start the tree.
2005-08-04Fixes pertaining to revocation creation with subkey-only exported card keysWerner Koch1-0/+14
2005-07-28Implemented PKA trust modelWerner Koch1-0/+20
2005-07-27Converted all m_free to xfree etc.Werner Koch1-0/+4
2005-07-27* keyserver.c (keyserver_typemap): Special-case LDAP since curl willDavid Shaw1-0/+5
report that it can handle it, and we don't want it to.
2005-07-26* passphrase.c (agent_get_passphrase): Make sure to release theWerner Koch1-0/+7
saved codeset. (agent_open): Add arg ORIG_CODESET and switch back to it in case of error. Changed all callers. * zh_TW.po, fr.po, cs.po: Updated.
2005-07-22* keyedit.c (sign_uids): Don't prompt for setting signature expiry toDavid Shaw1-0/+6
match key expiry unless --ask-cert-expire is set. Suggested by Peter Palfrader.
2005-07-22* gpg.sgml (http):Werner Koch1-3/+21
* g10.c, options.h: New option --exit-on-status-write-error. * status.c (write_status_text): Make use of this option.
2005-07-22* options.h, g10.c (main), keyedit.c (keyedit_menu): Use --interactiveDavid Shaw1-0/+9
to enable the uid walking when signing a key with no uids specified to sign. * keylist.c (list_keyblock_print): Fix silly typo. Noted by Greg Sabino Mullane.
2005-07-20* keyserver.c (curl_can_handle): New. Do a runtime check against libcurlDavid Shaw1-0/+8
to see if it can handle a particular protocol. (keyserver_typemap): Call it here. * Makefile.am: Pull in libcurl for curl_version_info() if used.
2005-07-19* g10.c, options.h: New option --limit-card-insert-tries.Werner Koch1-0/+3
* cardglue.c (open_card): Use it.
2005-07-19* configure.ac [W32]: Always set DISABLE_KEYSERVER_PATH.Werner Koch1-0/+9
* export.c (parse_export_options): New option export-reset-subkey-passwd. (do_export_stream): Implement it. * misc.c (get_libexecdir): New. * keyserver.c (keyserver_spawn): Use it
2005-07-18* tdbio.c (open_db): Check for EROFS. Suggested by Bryce Nichols.Werner Koch1-0/+4
* ttyio.c (do_get): Move printing of the prompt after disabling echo. Suggested by Scott Worley.
2005-07-09* trustdb.c (clean_uids_from_key): Don't keep a valid selfsig aroundDavid Shaw1-0/+13
when compacting a uid. There is no reason to make an attacker's job easier - this way they only have a revocation which is useless in bringing the uid back. * keydb.h, kbnode.c (undelete_kbnode): Removed. No longer needed. * import.c (chk_self_sigs): Allow a uid revocation to be enough to allow importing a particular uid (no self sig needed). This allows importing compacted uids.
2005-06-20* keygen.c (save_unprotected_key_to_card): Better fix for gcc4 warning.David Shaw1-0/+5
2005-06-20* gpg.sgml: Document smartcard related options.Werner Koch1-0/+5
* g10.c, options.h: New option --no-interactive-selection. * keyedit.c (keyedit_menu): Use it.
2005-06-18(parse_signature): Use log_info for messagesWerner Koch1-0/+18
about missing timestamp or keyid. In case we don't use that key there won't be no further error and thus gpg does not need to return with an error.
2005-06-16gcc-4 defaults forced me to edit many many files to get rid of theWerner Koch1-0/+5
char * vs. unsigned char * warnings. The GNU coding standards used to say that these mismatches are okay and better than a bunch of casts. Obviously this has changed now.
2005-06-14* keygen.c (save_unprotected_key_to_card): Fix gcc4 warning.David Shaw1-0/+12
* options.h, import.c (parse_import_options, import_one): Add import-clean-uids option to automatically compact unusable uids when importing. Like import-clean-sigs, this may nodify the local keyring. * trustdb.c (clean_uids_from_key): Only allow selfsigs to be a candidate for re-inclusion.
2005-06-12* options.h, import.c (parse_import_options, clean_sigs_from_all_uids,David Shaw1-0/+7
import_one): Add import-clean-sigs option to automatically clean a key when importing. Note that when importing a key that is already on the local keyring, the clean applies to the merged key - i.e. existing superceded or invalid signatures are removed.
2005-06-12* getkey.c (merge_selfsigs_main, merge_selfsigs_subkey): Make sureDavid Shaw1-0/+6
that even after keys may be merged together, we only have one chosen selfsig.
2005-06-10* options.h, import.c (parse_import_options, delete_inv_parts):David Shaw1-0/+3
import-unusable-sigs is now a noop.
2005-06-10* options.h, export.c (do_export_stream), keyedit.c (keyedit_menu,David Shaw1-0/+7
menu_clean_subkeys_from_key), trustdb.h, trustdb.c (clean_subkeys_from_key): Remove subkey cleaning function. It is of very limited usefulness since it cannot be used on any subkey that can sign, and can only affect multiple selfsigs on encryption-only subkeys.
2005-06-10* keydb.h, kbnode.c (undelete_kbnode): New function to undelete aDavid Shaw1-0/+9
kbnode. * trustdb.c (clean_uids_from_key): Further tweak the algorithm so that the last good selfsig is kept when the chosen selfsig is a revocation.
2005-06-09* trustdb.c (clean_uids_from_key), keyedit.cDavid Shaw1-0/+4
(menu_clean_uids_from_key): Tweak algorithm to preserve the last selfsig which helps prevent uid resurrections.
2005-06-08* getkey.c (fixup_uidnode, merge_selfsigs_main): Handle both expiredDavid Shaw1-0/+7
and revoked uids in fixup_uidnode(). No need to special case in merge_selfsigs_main(). This also means that an expired uid will have its selfsig tagged with chosen_selfsig.
2005-06-08* options.h, g10.c (main), export.c (parse_export_options,David Shaw1-0/+8
do_export_stream): Add export-options export-clean-sigs, export-clean-uids, export-clean-subkeys, and export-clean which is all of the above. Export-minimal is the same except it also removes all non-selfsigs. export-unusable-sigs is now a noop.
2005-06-01* signal.c [HAVE_DOSISH_SYSTEM]: Fix unused function warnings on mingw32.David Shaw1-0/+7
Noted by Joe Vender. * passphrase.c [_WIN32]: Remove unused variables.
2005-06-01* configure.ac (gl_INIT): Add gnulib stuff.Werner Koch1-0/+5
(fseeko, ftello, ttyname, isascii): Replaced the AC_REPLACE_FUNCS by a simple check. (putc_unlocked): Removed check. Not used. (strsep, mkdtemp, asprintf): Replaced checks by gnulib checks. (xsize): Added will probably come handy soon. (CFLAGS): Use -Wformat-security instead of -Wformat-nonliteral. Add --Wno-format-y2k. * gl/, gl/m4/: New. * gpg-agent.c: Include setenv.h. * Makefile.am (AM_CPPFLAGS): Added. * util.h: Add some includes for gnulib. (ttyname, isascii): Define them inline. * fseeko.c, ftello.c: Removed. * strsep.c, mkdtemp.c: Removed. * ttyname.c, isascii.c: Removed. * mkdtemp.c: Removed. * exec.c: Include mkdtemp.h * keybox-file.c (ftello) [!HAVE_FSEEKO]: New replacement function. Copied from ../common/ftello.c. * keybox-update.c (fseeko) [!HAVE_FSEEKO]: New replacement function. Copied from ../common/iobuf.c. * scdaemon.c: Include mkdtemp.h. * misc.c: Include setenv.h. * symcryptrun.c: Include mkdtemp.h.
2005-05-31* keyedit.c (menu_clean_uids_from_key, menu_clean_subkeys_from_key),David Shaw1-0/+7
trustdb.c (clean_uids_from_key, clean_subkeys_from_key): Fix mingw32 build warnings. Noted by Joe Vender.
2005-05-31 * keydb.h [!ENABLE_AGENT_SUPPORT]: Define dummy types.Werner Koch1-0/+5
* cardglue.c (assuan_strerror, assuan_transact): Dummy functions if not build with agent support. * zh_TW.po, zh_CN.po, es.po, ro.po: Updated. * tr.po: Updated from TP. Note: this is an exception in general translations from the Robot are not anymore accepted. * regcomp.c (MB_CUR_MAX) [_WIN32]: Define it only if not defined.
2005-05-31Updated FSF street address and preparations for a release candidate.Werner Koch1-0/+9
2005-05-31* trustdb.h, trustdb.c (clean_subkeys_from_key): New. Walk throughDavid Shaw1-0/+13
the subkeys on a key, and mark any that aren't usable for deletion. Note that a signing subkey is never marked for deletion since these keys are still useful after expiration or revocation. * keyedit.c (menu_clean_subkeys_from_key): New function to call clean_subkeys_from_key() on a key. Note that the strings here are not marked for translation yet. The UI is still in flux, and there is no point in annoying the translators twice. (keyedit_menu): Call it here as part of the "clean" command.
2005-05-30* trustdb.h, trustdb.c (clean_uids_from_key): New. Walk through theDavid Shaw1-0/+10
user IDs on a key, and mark any that aren't valid for deletion. * keyedit.c (menu_clean_uids_from_key): New function to call clean_uids_from_key() on a key. (keyedit_menu): Call it from here as part of the "clean" command.
2005-05-27* g10.c (main): Default {export|import}-unusable-sigs to off until theDavid Shaw1-0/+5
"clean" UI can be finished.
2005-05-24* passphrase.c (ask_passphrase): Unescape the description string.Werner Koch1-0/+5
* cardglue.c (unescape_status_string): Removed. Changed all caller to use ... * misc.c (unescape_percent_string): New.
2005-05-24(add_notation_data): Check number of at-signs.Werner Koch1-0/+4