aboutsummaryrefslogtreecommitdiffstats
path: root/g10/gpg.c (unfollow)
Commit message (Collapse)AuthorFilesLines
2006-02-09Lock random seed fileWerner Koch1-1/+4
2005-12-20Finished PKA featureWerner Koch1-6/+49
2005-12-19* gpg.c (main): Restore convert-sk-to-pk as programs rely on it.David Shaw1-0/+1
* keyid.c (usagestr_from_pk): Remove special PUBKEY_USAGE_CERT flag. It's no longer needed.
2005-12-14* gpg.c (main): Don't default to import-options convert-sk-to-pk. ItDavid Shaw1-1/+0
causes confusing warning messages when importing a PGP-exported key that contains a secret key without selfsigs followed by the public key.
2005-12-07* keyserver.c (keyserver_spawn): Don't print "searching for key 00000000"David Shaw1-1/+14
when fetching a URI. * keyserver-internal.h, keyserver.c (keyserver_fetch): New. Fetch an arbitrary URI using the keyserver helpers. * gpg.c (main): Call it from here for --fetch-keys.
2005-11-19* free-packet.c (copy_secret_key): Copy secret key into secure memoryDavid Shaw1-1/+1
since we may unprotect it. * main.h, g10.c (main), revoke.c (gen_desig_revoke): Add local user support so users can use -u with --desig-revoke. This bypasses the interactive walk over the revocation keys.
2005-11-06* Makefile.am: Include @LIBUSB_CPPFLAGS@ in our CPPFLAGS. StrictlyDavid Shaw1-1/+3
speaking this should be only in gpg_CPPFLAGS, but then we have to compile everything twice for gpg and gpgv. * apdu.c (open_pcsc_reader): Fix double free. * gpg.c (main) [__APPLE__]: Default the PCSC driver to the OS X location. Suggested by Patty A. Hardy.
2005-10-27cygwin fixesWerner Koch1-1/+1
2005-10-12* options.h, getkey.c (merge_selfsigs_subkey), gpg.c (main), sig-check.cDavid Shaw1-1/+8
(signature_check2): Add --require-backsigs and --no-require-backsigs. Currently defaults to --no-require-backsigs.
2005-10-05Renamed g10.c to gpg.cWerner Koch1-1/+1
Filelength fixes for W32.
2005-09-14* main.h, misc.c (parse_options): Add the ability to have helpDavid Shaw1-24/+46
strings in xxx-options commands. * keyserver.c (keyserver_opts), import.c (parse_import_options), export.c (parse_export_options), g10.c (parse_list_options, main): Add help strings to xxx-options.
2005-08-20* g10.c (main): Add aliases sign-with->local-user and user->recipientDavid Shaw1-4/+9
to make switching from PGP command line to GPG easier.
2005-08-05* g10.c (main), passphrase.c (set_passphrase_from_string): NewDavid Shaw1-0/+5
--passphrase command line option. Only useful in very special circumstances.
2005-07-27Converted all m_free to xfree etc.Werner Koch1-59/+59
2005-07-22* gpg.sgml (http):Werner Koch1-0/+7
* g10.c, options.h: New option --exit-on-status-write-error. * status.c (write_status_text): Make use of this option.
2005-07-22* options.h, g10.c (main), keyedit.c (keyedit_menu): Use --interactiveDavid Shaw1-6/+0
to enable the uid walking when signing a key with no uids specified to sign. * keylist.c (list_keyblock_print): Fix silly typo. Noted by Greg Sabino Mullane.
2005-07-19* g10.c, options.h: New option --limit-card-insert-tries.Werner Koch1-1/+8
* cardglue.c (open_card): Use it.
2005-06-20* gpg.sgml: Document smartcard related options.Werner Koch1-2/+7
* g10.c, options.h: New option --no-interactive-selection. * keyedit.c (keyedit_menu): Use it.
2005-06-08* options.h, g10.c (main), export.c (parse_export_options,David Shaw1-2/+2
do_export_stream): Add export-options export-clean-sigs, export-clean-uids, export-clean-subkeys, and export-clean which is all of the above. Export-minimal is the same except it also removes all non-selfsigs. export-unusable-sigs is now a noop.
2005-05-31Updated FSF street address and preparations for a release candidate.Werner Koch1-1/+2
2005-05-27* g10.c (main): Default {export|import}-unusable-sigs to off until theDavid Shaw1-2/+2
"clean" UI can be finished.
2005-05-24(add_notation_data): Check number of at-signs.Werner Koch1-1/+1
2005-05-24(add_notation_data): Check number of at-signs.Werner Koch1-1/+7
2005-05-23* cardglue.c (open_card): Check USE_AGENT.Werner Koch1-1/+1
* g10.c (main): Option --debug-ccid-driver may now be given several times increase the debug level. * ccid-driver.c (parse_ccid_descriptor): Mark SCR335 FW version 5.14 as good. (do_close_reader): Never do a reset. The caller should instead make sure that the reader has been closed properly. The new retry code in ccid_slot_status will make sure that the readersatrts up fine even if the last process didn't closed the USB connection properly. (ccid_get_atr): For certain readers try switching to ISO mode. Thanks to Ludovic Rousseau for this hint and the magic numbers. (print_command_failed): New. (bulk_in): Use it here. Add new arg NO_DEBUG. (ccid_slot_status): Disabled debugging.
2005-05-14* build-packet.c (do_comment): Removed. (build_packet): IgnoreDavid Shaw1-9/+4
comment packets. * export.c (do_export_stream): Don't export comment packets any longer. * options.h, g10.c (main): Remove --sk-comments and --no-sk-comments options, and replace with no-op.
2005-05-06* main.h, keygen.c (parse_expire_string, ask_expire_interval), sign.cDavid Shaw1-2/+2
(sign_file, clearsign_file, sign_symencrypt_file), g10.c (main), keyedit.c (sign_uids): Use seconds rather than days internally to calculate expiration. We no longer need the day-based code as we don't generate v3 keys.
2005-05-05* options.h, g10.c (main): Add new --default-sig-expire andDavid Shaw1-8/+34
--default-cert-expire options. Suggested by Florian Weimer. * main.h, keygen.c (parse_expire_string, ask_expire_interval): Use defaults passed in, or "0" to control what default expiration is. * keyedit.c (sign_uids), sign.c (sign_file, clearsign_file, sign_symencrypt_file): Call them here, so that default expiration is used when --ask-xxxxx-expire is off.
2005-04-11* g10.c (main, add_notation_data, add_policy_url)Werner Koch1-6/+10
(add_keyserver_url): Use isascii() to protect the isfoo macros and to replace direct tests. Possible problems noted by Christian Biere. * keyserver.c (parse_keyserver_uri): Ditto. * g10.c (main): Declare --pipemode deprecated. * misc.c (deprecated_command): New.
2005-04-05Changes to make use of code taken from libassuan. This replaces theWerner Koch1-0/+8
old ad-hoc connection code to gpg-agent. We do need this for the forthcoming diversion of card code to an already running gpg-agent with card-support.
2005-03-31* exec.h, exec.c (set_exec_path): Remove some dead code and change allDavid Shaw1-1/+1
callers. We no longer need to append to $PATH.
2005-03-31* keydb.c (keydb_add_resource): Clarify meaning of flags. Add newWerner Koch1-3/+3
flag 4. Use log_info for errors registering the default secret key. * g10.c (main): Flag the default keyrings.
2005-01-20* g10.c (i18n_init) [W32]: Pass registry key to gettextWerner Koch1-10/+3
initialization. * gpgv.c (i18n_init) [W32]: Ditto. * simple-gettext.c (set_gettext_file): Use MO files depending on the installation directory. Add new arg REGKEY.
2005-01-06* g10.c (main): Typo.David Shaw1-2/+2
* armor.c (is_armor_header): Allow CR and LF (not just actual spaces) in an armor header line (-----BEGIN etc). This is needed due to CRLF issues on win32. As before, --openpgp makes it strict.
2004-12-20* keyedit.c (keyedit_menu): Invisible alias "passwd" as "password".David Shaw1-4/+12
* passphrase.c: Don't check for __CYGWIN__, so it is treated as a unix-like system. * options.h, g10.c (main), textfilter.c (standard): Use new option --rfc2440-text to determine whether to filter "<space>\t\r\n" or just "\r\n" before canonicalizing text line endings. Default to "<space>\t\r\n".
2004-12-16* g10.c (main): Add --require-secmem/--no-require-secmem to cause gpg toDavid Shaw1-18/+15
exit if it cannot lock memory. Also remove --nrsign-key and --nrlsign-key since this can better be done via --edit-key. * secmem.c (secmem_init): Return a flag to indicate whether we got the lock. * memory.h: Return a flag to indicate whether we got the lock.
2004-12-15* apdu.c (apdu_send_le, apdu_send_direct), keylist.cDavid Shaw1-1/+1
(status_one_subpacket, print_one_subpacket): Fix some compiler warnings. * g10.c (main): Fix --compression-algo to take a string argument like --compress-algo. * trustdb.c (uid_trust_string_fixed): For safety, check for a pk.
2004-12-11* options.h, g10.c (main), textfilter.c (standard): Use --rfc2440 orDavid Shaw1-2/+0
--openpgp directly to determine the end of line hashing rule. * trustdb.c (uid_trust_string_fixed): Show uids as expired if the key is expired.
2004-12-10* options.h, g10.c (main), textfilter.c (len_without_trailing_ws): RemovedDavid Shaw1-0/+2
(not used). (standard): 2440 says that textmode hashes should canonicalize line endings to CRLF and remove spaces and tabs. 2440bis-12 says to just canonicalize to CRLF. So, we default to the 2440bis-12 behavior, but revert to the strict 2440 behavior if the user specifies --rfc2440. In practical terms this makes no difference to any signatures in the real world except for a textmode detached signature.
2004-11-26* options.h, export.c (parse_export_options, do_export_stream), import.cDavid Shaw1-3/+3
(parse_import_options, import_keys_internal): Make the import-options and export-options distinct since they can be mixed together as part of keyserver-options.
2004-11-18(S_IRGRP) [HAVE_DOSISH_SYSTEM]: Define to 0.Werner Koch1-1/+4
2004-11-17(open_info_file): New.Werner Koch1-41/+69
(main): Unconditionally implement --status-file, --logger-file, --attribute-file, --passphrase-file, --command-file. This is not generally useful but easy to support and might make scripting under Windows easier.
2004-10-21* options.h, g10.c (main), mainproc.c (check_sig_and_print): RenameDavid Shaw1-3/+4
verify-option show-validity to show-uid-validity to match the similar list-option. * app-openpgp.c (verify_chv3): Fix typo.
2004-10-21* g10.c (parse_list_options): Fix non-constant initializer so we can buildDavid Shaw1-1/+6
with C89.
2004-10-13Added SELInux hacks and did some cleanups.Werner Koch1-10/+45
2004-10-13* pkclist.c (do_edit_ownertrust): Different prompt when we're using directDavid Shaw1-10/+17
trust since the meaning is different. * keyedit.c (trustsig_prompt): Change the strings to match the ones in pkclist.c:do_edit_ownertrust to make translation easier. * trustdb.c (trust_model_string, get_validity): Add direct trust model which applies to the key as a whole and not per-uid. * options.h, g10.c (parse_trust_model): New. (main): Call it from here to do string-to-trust-model.
2004-10-11* pkclist.c (do_edit_ownertrust): Use the same translated string forDavid Shaw1-4/+4
showing the user ID as mainproc.c:print_pkenc_list. * mainproc.c (print_pkenc_list): Allow translating the quotes around the user ID. * card-util.c, g10.c, photoid.c, trustdb.c: The last of the \"%s\" -> `%s' quoting for things that aren't user IDs. * keyserver.c (keyserver_spawn): If there is no keyserver host, print the whole URI since it is self-contained.
2004-09-30* gpgv.c, keydb.c (keydb_add_resource): Factored keyring creation out toDavid Shaw1-0/+7
.. (maybe_create_keyring): .. new. Make sure that we do the checks in a locked state. Problem reported by Stefan Haller. Try to create the home directory before acquiring a lock for the keyring. From Werner on stable branch. * g10.c (main): Blow up if we didn't lose setuid. From Werner on stable branch.
2004-09-25* main.h, g10.c (main), card-util.c (change_pin): If "admin" has not beenDavid Shaw1-10/+2
issued, skip right to the CHV1/CHV2 PIN change. No need to show the unblock or admin PIN change option. (card_edit): Add "admin" command to add admin commands to the menu. Do not allow admin commands until "admin" is given. * app-openpgp.c (verify_chv3): Show a countdown of how many wrong admin PINs can be entered before the card is locked. * options.h, g10.c (main), app-openpgp.c (verify_chv3): Remove --allow-admin.
2004-09-24* main.h: Create S2K_DIGEST_ALGO macro so we do not need to always setDavid Shaw1-6/+3
opt.s2k_digest_algo. This helps fix a problem with PGP 2.x encrypted symmetric messages. Change all callers (encode.c, g10.c, keyedit.c, keygen.c, passphrase.c, sign.c). * armor.c, cardglue.c, getkey.c, import.c, keygen.c: Be consistent in some more quoted strings. Always use 'user ID', not 'user id', "quotes" for user IDs, etc.
2004-09-23Note: I have not fully tested the new key creation due to a pc/scWerner Koch1-2/+2
error. However the backupfile has been created successfully. * rsa.c (rsa_generate): Return the dummy list of factors only if the caller asked for it. * card_util.c (generate_card_keys): ask whether backup should be created. (card_store_subkey): Factored some code out to .. * keygen.c (save_unprotected_key_to_card): .. new function. (gen_card_key_with_backup): New. (generate_raw_key): New. (generate_keypair): New arg BACKUP_ENCRYPTION_DIR. Changed all callers. (do_generate_keypair): Divert to gen_card_key_with_backup when desired.