aboutsummaryrefslogtreecommitdiffstats
path: root/g10/g10.c (unfollow)
Commit message (Collapse)AuthorFilesLines
2003-04-09* main.h, g10.c (main), import.c (parse_import_options,David Shaw1-4/+5
fix_pks_corruption): It's really PKS corruption, not HKP corruption. Keep the old repair-hkp-subkey-bug command as an alias. * g10.c (main): Rename --no-version to --no-emit-version for consistency. Keep --no-version as an alias.
2003-03-24* keydb.h: Err on the side of making an unknown signature a SIG ratherDavid Shaw1-6/+11
than a CERT. * import.c (delete_inv_parts): Discard any key signatures that aren't key types (i.e. 0x00, 0x01, etc.) * g10.c (main): Add deprecated option warning for --list-ownertrust. Add --compression-algo alias for --compress-algo. Change --version output strings to match "showpref" strings, and make translatable. * status.c (do_get_from_fd): Accept 'y' as well as 'Y' for --command-fd boolean input. * trustdb.c: Fix typo (DISABLE_REGEXP -> DISABLE_REGEX) * keyedit.c (show_key_with_all_names_colon): Show no-ks-modify flag.
2003-03-11* options.h, g10.c (main), keyserver.c (kopts): Add "try-dns-srv"David Shaw1-0/+1
keyserver option. Defaults to on. * passphrase.c (agent_get_passphrase): Fix memory leak with symmetric messages. Fix segfault with symmetric messages. Fix incorrect prompt with symmetric messages.
2003-03-04* trustdb.c (validate_keys): Mask the ownertrust when building the list ofDavid Shaw1-1/+5
fully valid keys so that disabled keys are still counted in the web of trust. (get_ownertrust_with_min): Do the same for the minimum ownertrust calculation. * parse-packet.c (dump_sig_subpkt): Show the notation names for not-human-readable notations. Fix cosmetic off-by-one length counter. * options.skel: Add explantion and commented-out "no-mangle-dos-filenames". * mainproc.c (proc_encrypted): Make string translatable. * keyserver.c (keyserver_spawn): Quote ':', '%', and any 8-bit characters in the uid strings sent to the keyserver helper. * keyring.c (keyring_rebuild_cache): Lock the keyring while rebuilding the signature caches to prevent another gpg from tampering with the temporary copy. * keygen.c (keygen_set_std_prefs): Include AES192 and AES256 in default prefs. * keyedit.c (show_prefs): Make strings translatable. * keydb.c: Double the maximum number of keyrings to 40. * gpgv.c (main): Fix bug #113 - gpgv should accept the --ignore-time-conflict option. * g10.c (main): --openpgp disables --pgpX. Double the amount of secure memory to 32k (keys are getting bigger these days). * Makefile.am: Makefile.am: Use @CAPLIBS@ to link in -lcap if we are using capabilities.
2003-02-22* g10.c (main): Accept "s1" in addition to "idea" to match the otherDavid Shaw1-1/+2
ciphers. * main.h, misc.c (idea_cipher_warn): We don't need this if IDEA has been disabled.
2003-02-21* g10.c (main): Use 3DES instead of CAST5 if we don't have CAST5 support.David Shaw1-19/+32
Use 3DES for the s2k cipher in --openpgp mode. (print_mds): #ifdef all of the optional digest algorithms.
2003-02-12* exec.c (set_exec_path): Add debugging line.David Shaw1-61/+98
* g10.c (print_hex, print_mds): Print long hash strings a lot neater. This assumes at least an 80-character display, as there are a few other similar assumptions here and there. Users who need unformatted hashes can still use with-colons. Check that SHA384 and 512 are available before using them as they are no longer always available.
2003-02-04* armor.c (parse_hash_header, armor_filter): Accept the new SHAs in theDavid Shaw1-13/+25
armor Hash: header. * g10.c (print_hex): Print long hash strings a little neater. (print_mds): Add the new SHAs to the hash list.
2003-01-16* g10.c (add_group): Trim whitespace after a group name so it does notDavid Shaw1-0/+2
matter where the user puts the = sign. * options.skel: Comment out the first three lines in case someone manually copies the skel file to their homedir. * sign.c (clearsign_file): Only use pgp2mode with v3 keys and MD5. This matches what we do when decoding such messages and prevents creating a message (v3+RIPEMD/160) that we can't verify. * sig-check.c (signature_check2): Use G10ERR_GENERAL as the error for signature digest conflict. BAD_SIGN implies that a signature was checked and we may try and print out a user ID for a key that doesn't exist.
2003-01-15* trustdb.c (init_trustdb, get_validity): Don't use a changed trust modelDavid Shaw1-1/+1
to indicate a dirty trustdb, and never auto-rebuild a dirty trustdb with the "always" trust model. * g10.c (add_group): Last commit missed the \t ;)
2003-01-14* g10.c (add_group): Fixed group parsing to allow more than oneWerner Koch1-2/+5
delimiter in a row and also allow tab as delimiter.
2002-12-11* tdbio.c (tdbio_read_record, tdbio_write_record): Compact theDavid Shaw1-1/+2
RECTYPE_TRUST records a bit. * g10.c (main): Comment out --list-trust-path until it can be implemented. * import.c (import_one): Warn when importing an Elgamal primary that this may take some time (to verify self-sigs). (chk_self_sigs): Try and cache all self-sigs so the keyblock is written to the keyring with a good rich cache. * keygen.c (ask_algo): Make the Elgamal sign+encrypt warning stronger, and remove the RSA sign+encrypt warning.
2002-12-05* g10.c: New options --[no-]mangle-dos-filenames.Werner Koch1-0/+10
* options.h (opt): Added mangle-dos-filenames. * openfile.c (open_outfile) [USE_ONLY_8DOT3]: Truncate the filename only when this option is set; this is the default.
2002-12-03* options.h, g10.c (main), encode.c (write_pubkey_enc_from_list),David Shaw1-11/+25
pkclist.c (algo_available), revoke.c (gen_revoke): Add --pgp8 mode. This is basically identical to --pgp7 in all ways except that signing subkeys, v4 data sigs (including expiration), and SK comments are allowed. * getkey.c (finish_lookup): Comment. * main.h, keylist.c (reorder_keyblock), keyedit.c (keyedit_menu): Reorder user ID display in the --edit-key menu to match that of the --list-keys display. * g10.c (add_notation_data): Fix initialization.
2002-11-25* main.h, misc.c (default_cipher_algo, default_compress_algo): New.David Shaw1-1/+1
Return the default algorithm by trying --cipher-algo/--compress-algo, then the first item in the pref list, then s2k-cipher-algo or ZIP. * sign.c (sign_file, sign_symencrypt_file), encode.c (encode_simple, encode_crypt): Call default_cipher_algo and default_compress_algo to get algorithms. * g10.c (main): Allow pref selection for compress algo with --openpgp.
2002-11-25* g10.c (main), keydb.c (keydb_add_resource, keydb_locate_writable):David Shaw1-3/+3
Rename --default-keyring as --primary-keyring. Stefan wins the naming contest.
2002-11-24* g10.c (add_notation_data): Disallow notation names that do not contain aDavid Shaw1-4/+21
'@', unless --expert is set. This is to help prevent people from polluting the (as yet unused) IETF namespace. * main.h: Comments about default algorithms. * photoid.c (image_type_to_string): Comments about 3-letter file extensions.
2002-11-15* g10.c (main): Allow compression algorithm names as the argument toDavid Shaw1-4/+32
--compress-algo. The old algorithm names still work for backwards compatibility. * misc.c (string_to_compress_algo): Allow "none" as an alias for "uncompressed".
2002-11-13* encode.c (encode_simple): Make sure that files larger than about 4G useDavid Shaw1-7/+0
partial length encoding. This is required because OpenPGP allows only for 32 bit length fields. From Werner on stable branch. * getkey.c (get_pubkey_direct): Renamed to... (get_pubkey_fast): this and made extern. (get_pubkey_byfprint_fast): New. From Werner on stable branch. * keydb.h, import.c (import_one): Use get_pubkey_fast instead of get_pubkey. We don't need a merged key and actually this might lead to recursions. (revocation_present): Likewise for search by fingerprint. From Werner on stable branch. * g10.c (main): Try to create the trustdb even for non-colon-mode list-key operations. This is required because getkey needs to know whether a a key is ultimately trusted. From Werner on stable branch.
2002-11-13* exec.c [__CYGWIN32__]: Keep cygwin separate from Mingw32; we don't needDavid Shaw1-1/+1
it here as it behaves more like a Posix system. From Werner on stable branch. * passphrase.c (agent_get_passphrase): Ditto. From Werner on stable branch. * tdbio.c (MY_O_BINARY): Need binary mode with Cygwin. From Werner on stable branch. * g10.c, gpgv.c (main) [__CYGWIN32__]: Don't get the homedir from the registry. From Werner on stable branch.
2002-11-08* keyring.h, keyring.c (keyring_register_filename): Return the pointer ifDavid Shaw1-1/+7
a given keyring is registered twice. * keydb.h, keydb.c (keydb_add_resource): Use flags to indicate a default keyring. (keydb_locate_writable): Prefer the default keyring if possible. * g10.c (main): Add --default-keyring option.
2002-11-07* options.h, g10.c (main), trustdb.c (ask_ownertrust): AddDavid Shaw1-0/+11
--force-ownertrust option for debugging purposes. This allows setting a whole keyring to a given trust during an --update-trustdb. Not for normal use - it's just easier than hitting "4" all the time to test a large trustdb.
2002-11-03* options.h, g10.c (main): Add --trust-model option. Current models areDavid Shaw1-1/+17
"openpgp" which is classic+trustsigs, "classic" which is classic only, and "always" which is the same as the current option --always-trust (which still works). Default is "openpgp". * trustdb.c (validate_one_keyblock): Use "openpgp" trust model to enable trust sigs. * gpgv.c (main), mainproc.c (check_sig_and_print), pkclist.c (do_we_trust, do_we_trust_pre, check_signatures_trust): Use new --trust-model option in place of --always-trust.
2002-11-01* g10.c (main): Add --no-throw-keyid.David Shaw1-0/+16
* keydb.h, encode.c (write_pubkey_enc_from_list), g10.c (main), pkclist.c (build_pk_list): Add --hidden-recipient (-R) and --hidden-encrypt-to, which do a single-user variation on --throw-keyid. The "hide this key" flag is carried in bit 0 of the pk_list flags field. * keyserver.c (parse_keyrec): Fix shadowing warning.
2002-10-31added RISC OS module loading supportStefan Bellon1-9/+9
2002-10-23* main.h, import.c (sec_to_pub_keyblock, import_secret_one,David Shaw1-1/+1
parse_import_options), g10.c (main): New import-option "convert-sk-to-pk" to convert a secret key into a public key during import. It is on by default.
2002-10-19This commit was manufactured by cvs2svn to create branchRepo Admin1-2816/+0
'GNUPG-1-9-BRANCH'.
2002-10-17* g10.c (main): Handle --strict and --no-strict from the command lineDavid Shaw1-0/+10
before the options file is loaded.
2002-10-15* g10.c (main): Disable --textmode when encrypting (symmetric or pk) inDavid Shaw1-0/+11
--pgp2 mode as PGP 2 can't handle the unknown length literal packet. Reported by Michael Richardson.
2002-10-03* options.h, g10.c (main): Add --strict and --no-strict to switch theDavid Shaw1-0/+6
log_warning severity level from info to error.
2002-09-282002-09-28 David Shaw <[email protected]>David Shaw1-8/+18
* export.c (do_export_stream): Comment. * sig-check.c (check_key_signature2): Properly handle a non-designated revocation import. 2002-09-26 Werner Koch <[email protected]> * g10.c (set_homedir): New. Changed all direct assignments to use this. * gpgv.c (set_homedir): Ditto.
2002-09-23added fast-import to import-optionsStefan Bellon1-2/+2
2002-09-17From stable branchDavid Shaw1-18/+48
* keyedit.c (menu_addrevoker): The direct key signature for revocation keys must be at least v4 to carry the revocation key subpacket. Add a PGP 2.x warning for revocation keys. * g10.c (check_permissions): Rearrange strings to make translating easier (don't incorporate string parts). * keyedit.c (sign_uids): Make strings translatable. * sig-check.c (check_key_signature2): Make string translatable.
2002-09-13Import from stable branch.David Shaw1-1/+1
2002-09-13 David Shaw <[email protected]> * getkey.c (check_revocation_keys): Move.... * main.h, sig-check.c (check_revocation_keys): to here. Also return the signature_check error code rather than 0/1 and cache the sig result. * sig-check.c (check_key_signature2): Divert to check_revocation_keys if a revocation sig is made by someone other than the pk owner. * getkey.c (merge_selfsigs_main): Tidy. 2002-09-13 Werner Koch <[email protected]> * g10.c (main) [__MINGW32__]: Activate oLoadExtension.
2002-09-11* g10.c, options.h: Removed option --emulate-checksum-bug.Werner Koch1-1/+0
* misc.c (checksum_u16_nobug): Removed. (checksum_u16): Removed the bug emulation. (checksum_mpi): Ditto. (checksum_mpi_counted_nbits): Removed and replaced all calls with checksum_mpi. * parse-packet.c (read_protected_v3_mpi): New. (parse_key): Use it here to store it as an opaque MPI. * seckey-cert.c (do_check): Changed the v3 unprotection to the new why to store these keys. (protect_secret_key): Likewise. * build-packet.c (do_secret_key): And changed the writing.
2002-09-10Cleanups and minor fixes.Werner Koch1-7/+4
2002-09-09* g10.c (add_group): Use '=' to separate group name from group members.David Shaw1-2/+2
Use a better error message for when no = is found. * hkp.c (hkp_export): Use CRLF in headers.
2002-09-02* g10.c (main): Try to set a default character set. Print theWerner Koch1-1/+6
used one in verbosity level 3. * gpgv.c (main): Try to set a default character set. * status.c, status.h (STATUS_IMPORT_OK): New. * import.c (import_one,import_secret_one): Print new status.
2002-08-22* import.c (clean_subkeys, chk_self_sigs): Merge clean_subkeys intoDavid Shaw1-0/+1
chk_self_sigs. This improves efficiency as the same signatures are not checked multiple times. Clarify when a subkey is revoked (any revocation signature, even if it is dated before the binding signature). * getkey.c (merge_selfsigs_subkey): Subkey revocation comments. * keylist.c (list_one): Stats are only for public key listings. * g10.c (main), options.skel: Default should be include-revoked for keyserver operations.
2002-08-182002-08-16 Timo Schulz <[email protected]>Timo Schulz1-1/+1
* g10.c (main): enable opt.interactive. * import.c (import_one): Ask the user if the key shall be imported when the interactive mode is used. Useful to extract selected keys from a file.
2002-08-13* encode.c (encode_simple): Fix problem with using compression algo 2 andDavid Shaw1-1/+4
symmetric compressed files. * encode.c (encode_simple, encode_crypt): If we are not using a MDC, compress even if a file is already compressed. This is to help against the chosen ciphertext attack. * pkclist.c (select_algo_from_prefs): Fix requested algorithm bug so the request succeeds even if the requested algorithm is not the first found. * cipher.c (write_header), encode.c (use_mdc, encode_simple, encode_crypt, encrypt_filter), g10.c (main): Be more eager to use a MDC. We use a MDC if the keys directly support it, if the keys list AES (any) or TWOFISH anywhere in the prefs, or if the cipher chosen does not have a 64 bit blocksize.
2002-08-07* keyedit.c (menu_revsig): Properly show a uid is revoked withoutDavid Shaw1-32/+192
restarting gpg. This is Debian bug 124219, though their supplied patch will not do the right thing. * main.h, tdbio.c (tdbio_set_dbname), misc.c (removed check_permissions), keydb.c (keydb_add_resource), g10.c (main, check_permissions): Significant reworking of the permission check mechanism. The new behavior is to check everything in the homedir by checking the homedir itself. If the user wants to put (possibly shared) keyrings outside the homedir, they are not checked. The options file and any extension files are checked wherever they are, as well as their enclosing directories. This is Debian bug 147760.
2002-08-06use of EXTSEP_SStefan Bellon1-1/+1
2002-08-06* options.h, g10.c (main), mainproc.c (proc_encrypted): --ignore-mdc-errorDavid Shaw1-0/+3
option to turn a MDC check error into a warning.
2002-08-06* encode.c (encode_crypt), g10.c (main), sign.c (sign_file,David Shaw1-3/+4
clearsign_file): Use the same --pgpX warning string everywhere to ease translations. * encode.c (write_pubkey_enc_from_list): Warn when using --throw-keyid with --pgpX. Noted by Vedaal Nistar.
2002-08-06* g10.c (main): Try to use "gpg.conf" as default option file.Werner Koch1-2/+15
* openfile.c (copy_options_file): Changed name of created file.
2002-07-30* options.h, g10.c (main), mainproc.c (proc_encrypted): Return aDavid Shaw1-2/+3
decryption failed error if a MDC does not verify. Warn if a MDC is not present (can disable via --no-mdc-warning). * exec.c (exec_write), g10.c (main), keyserver.c (keyserver_spawn): Use new DISABLE_KEYSERVER_PATH rather than FIXED_EXEC_PATH.
2002-07-24* main.h, import.c (parse_import_options, fix_hkp_corruption, import_one,David Shaw1-5/+8
delete_inv_parts), g10.c (main): New import-option "repair-hkp-subkey-bug", which repairs as much as possible the HKP mangling multiple subkeys bug. It is on by default for keyserver receives, and off by default for regular --import. * main.h, import.c (import, import_one, delete_inv_parts), hkp.c (hkp_ask_import), keyserver.c (keyserver_spawn): Use keyserver import options when doing keyserver receives.
2002-07-24* options.h, exec.h, exec.c (set_exec_path, exec_write), g10.c (main),David Shaw1-1/+3
keyserver.c (keyserver_spawn): If the user does not use "exec-path", completely replace $PATH with GNUPG_LIBEXECDIR before calling the keyserver helper. If the user does use "exec-path", append GNUPG_LIBEXECDIR after the specified path.
2002-07-22* options.h, main.h, g10.c (main), import.c (parse_import_options,David Shaw1-3/+20
delete_inv_parts), keyserver.c (parse_keyserver_options): add new --import-options option. The only current flag is "allow-local-sigs". * g10.c (main): Don't disable MDC in pgp7 mode. * options.h, g10.c (main), keyserver.c (parse_keyserver_options): Remove old keyserver-option include-attributes now that there is an export-option for the same thing.
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-20 00:16:12 +0000