aboutsummaryrefslogtreecommitdiffstats
path: root/g10/gpgv.c (unfollow)
Commit message (Collapse)AuthorFilesLines
2016-07-09gpgv: Tweak default options for extra security.NIIBE Yutaka1-0/+2
* g10/gpgv.c (main): Set opt.no_sig _cache, so that it doesn't depend on cached status. Similarly, set opt.flags.require_cross_cert for backsig validation for subkey signature. -- (backport of master commit e32c575e0f3704e7563048eea6d26844bdfc494b) It is common that an organization distributes binary keyrings with signature cache (Tag 12, Trust Packet) and people use gpgv to validate signature with such keyrings. In such a use case, it is possible that the key validation itself is skipped. For the purpose of gpgv validation of signatures, we should not depend on signature cache in keyrings (if any), but we should validate the key by its self signature for primary key, and back signature for subkey. Signed-off-by: NIIBE Yutaka <[email protected]>
2013-08-19gpgv: Init Libgcrypt to avoid syslog warning.Werner Koch1-4/+13
* g10/gpgv.c (main): Check libgcrypt version and disable secure memory. -- GnuPG-bug-id: 1376 Signed-off-by: Werner Koch <[email protected]>
2012-01-20Changes to --min-cert-level should cause a trustdb rebuild (issue 1366)David Shaw1-3/+5
* g10/gpgv.c, g10/trustdb.c (read_trust_options): Add min_cert_level * g10/trustdb.c (check_trustdb_stale): Request a rebuild if pending_check_trustdb is true (set when we detect a trustdb parameter has changed). * g10/keylist.c (public_key_list): Use 'l' in the "tru" with-colons listing for min_cert_level not matching. * g10/tdbio.c (tdbio_update_version_record, create_version_record, tdbio_db_matches_options, tdbio_dump_record, tdbio_read_record, tdbio_write_record): Add a byte for min_cert_level in the tdbio version record.
2009-08-202009-08-20 Daiki Ueno <[email protected]>Werner Koch1-0/+8
* mainproc.c (proc_encrypted): Clear passphrase cached with S2K cache ID if decryption failed. * passphrase.c (passphrase_to_dek_ext): Set dek->s2k_cacheid. * gpgv.c (passphrase_clear_cache): New stub.
2009-07-21Make bug reporting address easier changeable.Werner Koch1-2/+2
2009-04-03Make gpgv error message about a missing keyring more useful. This fixesWerner Koch1-5/+6
Debian#494040. Also implement readonly semantic for extra safety.
2009-03-17Move password repetition from gpg to gpg-agent.Werner Koch1-3/+3
2009-03-15* gpg.c (my_strusage): gpg2 and gpgv2 (not gpg and gpgv).David Shaw1-3/+3
* gpgv.c (my_strusage): Same.
2009-03-15* gpgv.c (my_strusage): Fix name of program in "Syntax" line.David Shaw1-1/+1
2008-12-09Minor fixes.Werner Koch1-1/+1
2008-11-18Print library versions according to GNU standards.Werner Koch1-0/+21
2008-11-13Cleaned up unused gpgsm and gpg options.Werner Koch1-107/+111
2008-10-20Marked all unused args on non-W32 platforms.Werner Koch1-58/+174
2007-07-12Translate all file descriptors received from assuan.Werner Koch1-1/+1
2007-07-04Changed to GPLv3.Werner Koch1-4/+2
Removed intl/.
2007-06-26More W32 related changesWerner Koch1-0/+1
2007-06-25Fixed a problem in estream-printf.c.Werner Koch1-1/+1
Changes for Windows (gpgsm -k does now work). Minor cleanups.
2007-06-14A whole bunch of changes to allow building for Windows.Werner Koch1-2/+5
See the ChangeLogs for details.
2007-06-06First steps towards supporting W32.Werner Koch1-15/+0
This is mainly source code reorganization. Update gnulib. g10/ does currently not build.
2006-10-10Various changesWerner Koch1-16/+0
2006-10-02Fix for bug 537Werner Koch1-3/+3
2006-09-21Various updatesWerner Koch1-1/+1
2006-08-16With --enable-gpg the keyservers are now build and a first test using gpg2Werner Koch1-0/+1
shows no prblems. Needs more testing of course.
2006-05-24Still making gpg2 work.Werner Koch1-1/+0
At least the keyids are now correctly computed again.
2006-05-23g10/ does build again.Werner Koch1-20/+0
2006-04-19Continued with merging.Werner Koch1-10/+8
Still does not build.
2006-04-19Merged with gpg 1.4.3 code. Werner Koch1-42/+101
The gpg part does not yet build.
2006-02-24* keydb.h, getkey.c (release_akl), gpg.c (main): AddDavid Shaw1-2/+6
--no-auto-key-locate. * options.h, gpg.c (main): Keep track of each keyserver registered so we can match on them later. * keyserver-internal.h, keyserver.c (cmp_keyserver_spec, keyserver_match), gpgv.c: New. Find a keyserver that matches ours and return its spec. * getkey.c (get_pubkey_byname): Use it here to get the per-keyserver options from an earlier keyserver.
2006-02-22* options.h, keyserver-internal.h, keyserver.c (keyserver_import_name),David Shaw1-1/+4
getkey.c (free_akl, parse_auto_key_locate, get_pubkey_byname): The obvious next step: allow arbitrary keyservers in the auto-key-locate list.
2006-02-21* getkey.c (get_pubkey_byname): Fix minor security problem with PKA whenDavid Shaw1-1/+1
importing at -r time. The URL in the PKA record may point to a key put in by an attacker. Fix is to use the fingerprint from the PKA record as the recipient. This ensures that the PKA record is followed. * keyserver-internal.h, keyserver.c (keyserver_import_pka): Return the fingerprint we requested.
2006-02-21* gpgv.c: Stub keyserver_import_ldap.David Shaw1-0/+3
* keyserver-internal.h, keyserver.c (keyserver_import_ldap): Import using the PGP Universal trick of asking ldap://keys.(maildomain) for the key.
2005-12-23* keyserver.c (keyserver_import_pka): New. Moved fromDavid Shaw1-11/+6
getkey.c:get_pubkey_byname which was getting crowded. * keyserver.c (keyserver_import_cert): Import a key found in DNS via CERT records. Can handle both the PGP (actual key) and IPGP (URL) CERT types. * getkey.c (get_pubkey_byname): Call them both here. * options.h, keyserver.c (parse_keyserver_options): Add "auto-cert-retrieve" option with optional max size argument.
2005-12-23* gpgv.c: Stub.David Shaw1-0/+2
* keyserver-internal.h, keyserver.c (keyserver_spawn, keyserver_work, keygerver_getname): New keyserver_getname function to fetch keys by name. * getkey.c (get_pubkey_byname): Call it here to enable locating keys by full mailbox from a keyserver a la PKA. Try PKA first, though, as it is likely to be faster.
2005-08-05auto retrieve keys from PKA. Thsi allows to specify an email addressWerner Koch1-0/+12
so that gpg can get the key from DNS. This helps with opportunistic encryption. No integration with the trust modell yet.
2005-07-28Implemented PKA trust modelWerner Koch1-0/+7
2005-05-31Updated FSF street address and preparations for a release candidate.Werner Koch1-1/+2
2005-03-21* gpgv.c: Stubs for tty_enable_completion() & tty_disable_completion().David Shaw1-0/+8
* openfile.c (ask_outfile_name): Enable readline completion when prompting for an output filename. * plaintext.c (ask_for_detached_datafile): Enable readline completion when prompting for a detached sig datafile.
2005-01-20* gpgv.c (tty_fprintf): New stub.Werner Koch1-0/+1
* card-util.c (card_status): Create asecret key stub on the fly and print more information about a card key. * import.c (pub_to_sec_keyblock, auto_create_card_key_stub): New. * getkey.c (get_seckeyblock_byfprint): New. * keylist.c (print_card_key_info): New.
2005-01-20* g10.c (i18n_init) [W32]: Pass registry key to gettextWerner Koch1-10/+5
initialization. * gpgv.c (i18n_init) [W32]: Ditto. * simple-gettext.c (set_gettext_file): Use MO files depending on the installation directory. Add new arg REGKEY.
2004-12-21* gpg-agent.c (main): Use default_homedir().Werner Koch1-9/+2
* protect-tool.c (main): Ditto. * signal.c (got_fatal_signal, got_usr_signal) (got_fatal_signal) [DOSISH]: Don't build. * simple-gettext.c: Include sysutils.h * homedir.c: New. * Makefile.am (libcommon_a_SOURCES): Add it. (EXTRA_DIST): Removed mkerror and mkerrtok. * gpgv.c, g10.c (main): Use default_hoemdir (). * scdaemon.c (main): Use default_homedir(). * gpgsm.c (main): Use default_homedir().
2004-11-24* trustdb.h, trustdb.c (uid_trust_string_fixed): New. Return a fixed-sizeDavid Shaw1-1/+6
translatable string similar to trust_value_to_string. This allows for easier lining up of displays. * keyedit.c (show_key_with_all_names), keylist.c (list_keyblock_print): Use it here to print validity strings. * gpgv.c: Stub.
2004-10-01* gpgv.c (i18n_init): Always use LC_ALL.V1-3-90Werner Koch1-6/+1
* bftest.c (i18n_init): Always use LC_ALL. * shmtest.c (i18n_init): Ditto. * mpicalc.c (i18n_init): Ditto.
2004-09-30* gpgv.c (i18n_init): Always use LC_ALL.Werner Koch1-6/+1
* kbxutil.c (i18n_init): Always use LC_ALL. * gpgsm.c (i18n_init): Always use LC_ALL. * certdump.c (gpgsm_format_name): Factored code out to .. (gpgsm_format_name2): .. new. (gpgsm_print_name): Factored code out to .. (gpgsm_print_name2): .. new. (print_dn_part): New arg TRANSLATE. Changed all callers. (print_dn_parts): Ditto. (gpgsm_format_keydesc): Do not translate the SUBJECT; we require it to stay UTF-8 but we still want to filter out bad control characters. * gpgconf.c (i18n_init): Always use LC_ALL.
2004-09-30* gpgv.c, keydb.c (keydb_add_resource): Factored keyring creation out toDavid Shaw1-0/+1
.. (maybe_create_keyring): .. new. Make sure that we do the checks in a locked state. Problem reported by Stefan Haller. Try to create the home directory before acquiring a lock for the keyring. From Werner on stable branch. * g10.c (main): Blow up if we didn't lose setuid. From Werner on stable branch.
2004-09-24* keyedit.c (keyedit_menu), gpgv.c (agent_scd_getattr (stub)), keygen.cDavid Shaw1-0/+2
(copy_mpi, generate_raw_key): Fix a compile problem and a few warnings when building without card support.
2004-09-15* gpgv.c (agent_scd_getattr): Stub.David Shaw1-0/+3
* misc.c (get_signature_count): New. Get the signature count from a smartcard. (pct_expando): Call it here so the %c expando becomes the number of signatures issued. This allows for notations or the like with an automatic signature count. * ccid-driver.c (usb_get_string_simple): Replacement function to work with older libusb.
2004-05-22* mainproc.c (check_sig_and_print): If we're honoring preferredDavid Shaw1-0/+3
keyservers, and auto-key-retrieve is set, try and get a missing key from the preferred keyserver subpacket when we verify the sig. * gpgv.c (parse_preferred_keyserver, free_keyserver_spec): Stubs. * keyserver.c (keyidlist): Use new parse_preferred_keyserver function. (keyserver_work): Use the passed-in keyserver spec rather than the options global one. * keyserver-internal.h, keyserver.c (parse_preferred_keyserver): New function to take a sig and return a split out keyserver_spec. (keyserver_import_keyid): Now takes a keyserver_spec.
2004-04-15* options.h, keyserver.c (parse_keyserver_options): Remove duplicate codeDavid Shaw1-1/+1
from parse_keyserver_options by calling the generic parse_options. * keyserver.c (keyserver_spawn, keyserver_refresh), g10.c (main), gpgv.c (main), mainproc.c (check_sig_and_print), import.c (revocation_present): Change all callers.
2004-04-06* configure.ac: Require libgcrypt 1.1.94.Werner Koch1-3/+3
Introduce PACKAGE_GT and set it to gnupg2. * gpg-agent.c (main): Use new libgcrypt thread library register scheme. * Makevars (DOMAIN): Init from PACKAGE_GT
2004-02-12* gpgv.c: Removed g10defs.h.Werner Koch1-2/+1
* Makefile.am: Include cmacros.am for common flags.
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-23 12:29:18 +0000