aboutsummaryrefslogtreecommitdiffstats
path: root/g10/ChangeLog (unfollow)
Commit message (Collapse)AuthorFilesLines
2003-10-14* keyedit.c (show_key_with_all_names): Ownertrust is only meaningful forDavid Shaw1-0/+6
the PGP or classic trust models. Both validity and ownertrust are not meaningful for the always trust model.
2003-10-11Always enable the gen_card_key prototype.Werner Koch1-0/+4
2003-10-10(card_close): New.V1-3-3Werner Koch1-0/+2
(agent_scd_change_pin): Implemented.
2003-10-10* cardglue.c (card_close): New.Werner Koch1-0/+9
* ccid-driver.c (ccid_close_reader): New. * apdu.c (close_ccid_reader, close_ct_reader, close_csc_reader) (close_osc_reader, apdu_close_reader): New. Not all are properly implemented yet. * g10.c (g10_exit): Use close_card.
2003-10-10* g10.c (main): Give a deprecated option warning for --show-keyring,David Shaw1-0/+12
--show-photos, --show-policy-url, --show-notation, and their respective no- forms. * options.skel: Remove show-photos and replace with list/verify-options show-photos. Remove no-mangle-dos-filenames. * misc.c (parse_options): Allow for incomplete (but unambiguous) options.
2003-10-09* ccid-driver.c (ccid_transceive): Add T=1 chaining for sending.Werner Koch1-0/+11
* sign.c (do_sign) [!ENABLE_CARD_SUPPORT]: Return an error for card keys. * cardglue.c (agent_scd_pkdecrypt): Implemented. * pubkey-enc.c (get_it) [ENABLE_CARD_SUPPORT]: Divert decryption to card
2003-10-08* cardglue.c (pin_cb): Detect whether an admin or regular PIN isWerner Koch1-0/+20
requested. (genkey_status_cb): New. (agent_scd_genkey): Implemented. * keygen.c (generate_keypair): New arg CARD_SERIALNO and prepare parameters for on card key generation. Changed all callers. (do_generate_keypair): Add new arg card and merged casrd specific changes from 1.9. (proc_parameter_file): New arg card, apss it down to do_generate_keypair and changed all callers. (gen_card_key): New. * g10.c: Include cardclue.h. (main): s/app_set_default_reader_port/card_set_reader_port/. * cardglue.c (card_set_reader_port): New to address include file issues.
2003-10-08* call-agent.c (agent_scd_getattr): Don't clear the passed infoWerner Koch1-0/+13
structure, so that it can indeed be updated. * card-util.c (fpr_is_zero): New. (generate_card_keys): New. (card_edit): New command "generate". * keygen.c (generate_keypair): New arg CARD_SERIALNO, removed call to check_smartcard. (check_smartcard,show_smartcard): Removed. (show_sha1_fpr,fpr_is_zero): Removed. * app-openpgp.c (do_getattr): Support SERIALNO and AID.
2003-10-02Fixes to make inclusion of card raleted source files into 1.3 easier.Werner Koch1-1/+5
2003-10-02* cardglue.c (learn_status_cb): Release values before assignmentWerner Koch1-0/+42
so that it can be used by getattr to update the structure. (agent_scd_getattr): New. * keylist.c (print_pubkey_info): Add FP arg for optional printing to a stream. Changed all callers.
2003-10-01* g10.c (main): Add --no-groups to zero --group list.David Shaw1-0/+15
* encode.c (encode_simple): Allow for 32 bytes (256 bits) of symmetrically encrypted session key. Use --s2k-cipher-algo to choose cipher, rather than the default cipher. * parse-packet.c (parse_subkeyenc): Give a warning if an symmetrically encrypted session key is seen without salt. Show in --list-packets if a symetrically encrypted session key is present. * pubkey-enc.c (get_it): Always show cipher-not-in-prefs warning unless --quiet is set. Use text name of cipher in warning.
2003-09-30* options.h, g10.c (main), mainproc.c (check_sig_and_print): AddDavid Shaw1-0/+3
--verify-option show-unusable-uids.
2003-09-30* keylist.c (print_card_serialno): New.Werner Koch1-0/+18
(list_keyblock_print): Use it here. * card-util.c (toggle_forcesig): New. (card_edit): New command "forcesig". * card-util.c (print_name, print_isoname): Use 0 and not LF fro the max_n arg of tty_print_utf8_string2. * call-agent.c (agent_scd_getattr): New. (learn_status_cb): Release values before assignment so that it can be used by getattr to update the structure. * card-util.c (change_pin): Simplified. We now have only a PIN and an Admin PIN.
2003-09-30* gpgv.c (check_trustdb_stale): Stub.David Shaw1-0/+16
* trustdb.c (get_validity): Move the up-to-date check to check_trustdb_stale (new), so that it can be called before validity is checked. * keylist.c (list_keyblock_print): Disable the overall key validity display until it can be thought about more. Use check_trustdb_stale here to avoid putting the check warning in the middle of a listed key. * trustdb.c (init_trustdb): Only verify_own_keys() for those trust models that it applies to (i.e. classic and OpenPGP).
2003-09-30Minor fixesWerner Koch1-0/+4
2003-09-30* keygen.c (do_add_key_flags, parse_parameter_usage): Add supportWerner Koch1-0/+17
the proposed AUTH key flag. * getkey.c (fixup_uidnode, merge_selfsigs_main) (merge_selfsigs_subkey, premerge_public_with_secret): Ditto. * keylist.c (print_capabilities): Ditto. * parse-packet.c (parse_key): Allow to parse the divert-to-card S2K mode. * build-packet.c (do_secret_key): Handle divert-to-card S2K * seckey-cert.c (is_secret_key_protected): Ditto. (check_secret_key): Ditto. * keygen.c (do_ask_passphrase): Renamed from ask_passphrase. * passphrase.c (ask_passphrase): New.
2003-09-28* g10.c (main): New commands --card-edit, --card-status andWerner Koch1-1/+13
--change-pin. New options --ctapi-driver, --pcsc-driver and --disable-ccid * options.h (DBG_CARD_IO): New. * cardglue.c, cardclue.h: Enhanced. * card-util.c: New. Taken from current the gnupg 1.9 branch. * app-common.h, app-openpgp.c, iso7816.c, iso7816.h, apdu.c * apdu.h, ccid-driver.c, ccid-driver.h: New. Takem from the current gnupg 1.9 branch withy minor changes to include directives. * Makefile.am: Added these files.
2003-09-27First bits of a card support backport from 1.9. It is not enabled byWerner Koch1-0/+8
default and tehre is not yet much more than a new configure option. * configure.ac (LIBUSB_LIBS,HAVE_LIBUSB): Check for Libusb. (--enable-card-support): New. * sign.c (do_sign) [ENABLE_CARD_SUPPORT]: Divert to card. * cardglue.c, cardglue.h: New. * Makefile.am (gpg_LDADD): Added. (card_support_sources): New. * memory.h (xmalloc): Define xmalloc macros in terms of m_alloc.
2003-09-262003-09-26 Timo Schulz <[email protected]>Timo Schulz1-0/+5
* card_status (card_status): Do not use fputs since the fp parameter can be NULL. This fixes a segv.
2003-09-25* options.h, g10.c (main), keylist.c (list_keyblock_print): AddDavid Shaw1-0/+6
"show-unusable-uids" list-option to show revoked and/or expired user IDs.
2003-09-24* keyedit.c (show_key_with_all_names): Show names a little neater byDavid Shaw1-0/+7
putting the [revoked] or [expired] in the space used for the [validity]. There is also no point in showing "[unknown] [revoked]".
2003-09-24(print_isoname,card_status): Handle opt.with_colons.Werner Koch1-0/+5
(print_sha1_fpr_colon): New.
2003-09-24* sign.c (mk_notation_policy_etc): Capitalize "URL".David Shaw1-0/+9
* trustdb.c (validate_keys): Give a little more information while rebuilding trustdb. * pkclist.c (do_edit_ownertrust): Clarify "don't know". * g10.c (main): Default to --no-mangle-dos-filenames.
2003-09-23* keydb.h, keyring.c (keyring_search), trustdb.c (search_skipfnc): ExpandDavid Shaw1-0/+9
the skipfnc to include a pointer to the user ID that matched. * getkey.c (skip_disabled): Rename to skip_unusable, and add checks for expired or revoked user IDs.
2003-09-23Merged most of David Shaw's changes in 1.3 since 2003-06-03.Werner Koch1-0/+264
2003-09-23* g10.c (main): Deprecate --default-comment in favor of --no-comments.David Shaw1-0/+9
* options.h, g10.c (main), armor.c (armor_filter): Allow using --comment multiple times to get multiple Comment: header lines. --no-comments resets list.
2003-09-222003-09-22 Timo Schulz <[email protected]>Timo Schulz1-0/+5
* card-util.c (card_status): Free pk in case of an error and return if the card is no OpenPGP card.
2003-09-18* g10.c: New command --card-edit.Werner Koch1-0/+12
* card-util.c (card_status): Use tty_fprintf for all output. (print_sha1_fpr, print_isoname): Ditto. (get_one_name,change_name, change_url, change_login,change_lang) (change_sex): New; taken from keygen.c. * keygen.c (smartcard_get_one_name, smartcard_change_name) (smartcard_change_url, smartcard_change_login_data) (smartcard_change_lang, smartcard_change_sex): Removed. (check_smartcard): Removed most menu items.
2003-09-12* g10.c (main): Trim --help to commonly used options. Remove -f.David Shaw1-0/+4
2003-09-09* g10.c (main): Error out if --multifile is used with the commands thatDavid Shaw1-0/+13
don't support it yet (--sign, --clearsign, --detach-sign, --symmetric, and --store). * g10.c (main): Add --multifile as an alias to turn --encrypt into --encrypt-files (plus --verify-files, --decrypt-files). * encode.c (use_mdc), g10.c (main): Use RFC1991 and RFC2440 directly to check for MDC usability. Do not set the force_mdc or disable_mdc flags since there is no point any longer.
2003-09-06* configure.ac: Required newer versions of some libraries.V1-9-1Werner Koch1-0/+7
* misc.c (openpgp_pk_algo_usage): Allow AUTH where SIGN is allowed. * keygen.c (ask_passphrase): No need to allocated S2K in secure memory. * scdaemon.c (main): --pcsc-driver again defaults to pcsclite. David Corcoran was so kind to remove the GPL incompatible advertisng clause from pcsclite. * apdu.c (apdu_open_reader): Actually make pcsc-driver option work.
2003-09-05* keygen.c (do_add_key_flags, parse_parameter_usage)Werner Koch1-0/+8
(do_generate_keypair): Add support the proposed AUTH key flag. * getkey.c (fixup_uidnode, merge_selfsigs_main) (merge_selfsigs_subkey, premerge_public_with_secret): Ditto. * keylist.c (print_capabilities): Ditto.
2003-09-04* armor.c (parse_hash_header, armor_filter), g10.c (print_hex, print_mds),David Shaw1-0/+5
pkclist.c (algo_available): Drop TIGER/192 support.
2003-09-03* keyedit.c (show_key_with_all_names): Fix assertion failure when usingDavid Shaw1-0/+5
toggle to see a secret key. Reported by Maxim Britov.
2003-09-02* configure.ac (HAVE_LIBUSB): Added a simple test for libusb.Werner Koch1-0/+4
* scdaemon.c, scdaemon.h: New option --pcsc-ccid. * ccid-driver.c, ccid-driver.h: New but far from being useful. * Makefile.am: Add above. * apdu.c: Add support for that ccid driver.
2003-08-31* g10.c (add_keyserver_url), keyedit.c (keyedit_menu), sign.cDavid Shaw1-1/+11
(mk_notation_policy_etc): Clarify a few strings. It's a "preferred keyserver URL". * g10.c (main): Use "keyserver-url" instead of "preferred-keyserver" for the sake of short and simple commands.
2003-08-31* main.h, keygen.c (keygen_add_keyserver_url): Signature callback forDavid Shaw1-0/+15
adding a keyserver URL. * keyedit.c (keyedit_menu, menu_set_keyserver_url): New command to set preferred keyserver to specified (or all) user IDs. * build-packet.c (build_sig_subpkt): Set preferred keyserver flag while building a preferred keyserver subpacket. * keylist.c (show_policy_url): Policy URLs might be UTF8. * keyedit.c (menu_addrevoker): Fix leaking a few bytes.
2003-08-30* keyedit.c (show_key_with_all_names): Use list-option show-long-keyid inDavid Shaw1-0/+3
main --edit-key display.
2003-08-30* keyedit.c (print_and_check_one_sig): Use list-option show-long-keyid inDavid Shaw1-0/+5
--edit-key "check" function.
2003-08-29* passphrase.c (agent_send_all_options): Make use of $GPG_TTY.David Shaw1-0/+12
* g10.c (main): Disable use-agent if passphrase-fd is given later. Suggested by Kurt Garloff. * exec.c, g10.c, gpgv.c, passphrase.c, photoid.c: s/__MINGW32__/_WIN32/ to help building on native Windows compilers. Requested by Brian Gladman. From Werner on stable branch.
2003-08-26* options.h, g10.c (main): Add list-option list-preferred-keyserver.David Shaw1-0/+7
* keyedit.c (change_passphrase): When responding 'no' to the blank passphrase question, re-prompt for a new passphrase. This is bug #202.
2003-08-26* mainproc.c (check_sig_and_print): Use two different preferred keyserverDavid Shaw1-0/+13
displays - one if the key is not present (to tell the user where to get the key), the other if it is present (to tell the user where the key can be refreshed). * packet.h, parse-packet.c (parse_signature): Set flag if a preferred keyserver is present. * keylist.c (list_keyblock_print): Show keyserver url in listings with list-option show-keyserver-url.
2003-08-252003-08-25 Timo Schulz <[email protected]>Timo Schulz1-0/+5
* pkglue.c (mpi_from_sexp): New. Used to factor out some common code.
2003-08-25* Makefile.am: Use NETLIBS instead of EGDLIBS.David Shaw1-0/+2
2003-08-24* mainproc.c (check_sig_and_print): Get the uid validity before printingDavid Shaw1-0/+9
any sig results to avoid munging the output with trustdb warnings. * g10.c (main): Don't include --show-keyring in --help as it is deprecated.
2003-08-21* gpgv.c: Remove extra semicolon (typo).David Shaw1-0/+21
* options.skel: Note that keyserver.pgp.com isn't synchronized, and explain the roundrobin a bit better. * sig-check.c (check_key_signature2), import.c (import_one, import_revoke_cert, chk_self_sigs, delete_inv_parts, collapse_uids, merge_blocks): Make much quieter during import of slightly munged, but recoverable, keys. Use log_error for unrecoverable import failures. * keyring.c (keyring_rebuild_cache): Comment. * sign.c (mk_notation_and_policy): Making a v3 signature with notations or policy urls is an error, not an info (i.e. increment the errorcount). Don't print the notation or policy url to stdout since it can be mixed into the output stream when piping and munge the stream.
2003-08-18 * mdc.c (use_mdc): Simplified.Timo Schulz1-0/+1
2003-08-182003-08-18 Timo Schulz <[email protected]>Timo Schulz1-0/+7
* encode.c (encode_sesskey): Checked the code and removed the warning since all compatibility checks with PGP succeeded. * mainproc.c (symkey_decrypt_sesskey): Better check for the algorithm and check the return values of some functions.
2003-08-13* packet.h, sig-check.c (signature_check2, do_check, do_check_messages):David Shaw1-0/+22
Provide a signing-key-is-revoked flag. Change all callers. * status.h, status.c (get_status_string): New REVKEYSIG status tag for a good signature from a revoked key. * mainproc.c (do_check_sig, check_sig_and_print): Use it here. * import.c (import_revoke_cert, merge_blocks, merge_sigs): Compare actual signatures on import rather than using keyid or class matching. This does not change actual behavior with a key, but does mean that all sigs are imported whether they will be used or not. * parse-packet.c (parse_signature): Don't give "signature packet without xxxx" warnings for experimental pk algorithms. An experimental algorithm may not have a notion of (for example) a keyid (i.e. PGP's x.509 stuff).
2003-08-07(pk_sign): Fix last change.Werner Koch1-0/+11
(pk_verify): Check for valid DATA array so that we don't segv in Libgcrypt. (pk_verify): Ditto.