aboutsummaryrefslogtreecommitdiffstats
path: root/g10/keyserver.c (unfollow)
Commit message (Collapse)AuthorFilesLines
2002-06-12* keyserver.c (keyserver_spawn): Properly handle PROGRAM responses whenDavid Shaw1-2/+1
they have a CRLF ending. Noted by Keith Ray.
2002-06-12* keyserver.c (keyserver_spawn): Handle CRLF endings from keyserverDavid Shaw1-19/+28
helpers. Also don't leak the last line worth of memory from the keyserver response. * main.h, misc.c (deprecated_warning): New function to warn about deprecated options and commands. * g10.c (main), keyserver-internal.h, keyserver.c (parse_keyserver_uri): Use new deprecated function to warn about honor-http-proxy, auto-key-retrieve, and x-broken-hkp.
2002-06-10* options.h, keyserver.c (keyserver_opts), g10.c (main): New keyserverDavid Shaw1-52/+64
option "include-subkeys". This feature already existed, but now can be turned off. It defaults to on. * options.h, keyserver.c (parse_keyserver_options, keyserver_spawn): There are now enough options to justify making a structure for the keyserver options rather than a page of if-then-else-if-then-etc. * getkey.c (merge_keys_and_selfsig, merge_selfsigs_main): Fix bug in calculating key expiration dates.
2002-06-07* options.skel, options.h, main.h, keydb.h, pkclist.c (build_pk_list,David Shaw1-9/+25
expand_groups), g10.c (main, add_group): Add new "group" command to allow one name to expand into multiple keys. For simplicity, and to avoid potential loops, we only expand once - you can't make an alias that points to an alias. * main.h, g10.c (main), keygen.c (build_personal_digest_list): Simplify the default digest list - there is really no need for the other hashes since they will never be used after SHA-1 in the list. * options.skel, options.h, g10.c (main), hkp.c (hkp_ask_import, hkp_export, hkp_search), keyserver.c (parse_keyserver_options, parse_keyserver_uri, keyserver_work, keyserver_refresh): Make the "x-broken-hkp" keyserver scheme into keyserver-option "broken-http-proxy". Move honor_http_proxy into keyserver_options. Canonicalize the three variations of "hkp", "x-hkp", and "x-broken-hkp" into "hkp".
2002-05-11* keyserver.c (keyserver_export): Get confirmation before sendingWerner Koch1-0/+11
all keys.
2002-05-10fixes for M_DEBUG, strcasecmp and RISC OSStefan Bellon1-29/+29
2002-05-05* keyserver.c (keyserver_refresh): --refresh-keys implies --merge-only soDavid Shaw1-0/+5
as not to import keys with keyids that match the ones being refreshed. Noted by Florian Weimer.
2002-05-04* photoid.c: Provide default image viewer for Win32.David Shaw1-2/+2
* misc.c (pct_expando): %t means extension, not name ("jpg", not "jpeg"). * keyserver.c (keyserver_spawn), photoid.c (show_photos), exec.h, exec.c: Allow the caller to determine the temp file extension when starting an exec_write and change all callers.
2002-05-01* keyedit.c (menu_adduid): 2440bis04 says that multiple attribute packetsDavid Shaw1-3/+4
on a given key are legal. * keyserver.c (keyserver_refresh): the fake v3 keyid hack applies to "mailto" URLs as well since they are also served by pksd.
2002-04-29Added a copyright year for files changed this year.Werner Koch1-1/+1
2002-04-19* keyedit.c (menu_deluid): Only cause a trust update if we delete aDavid Shaw1-7/+2
non-revoked user id. * hkp.c (hkp_ask_import), keyserver.c (parse_keyserver_options, keyserver_spawn), options.h: Remove fast-import keyserver option (no longer meaningful). * g10.c (main), keyedit.c (sign_uids), options.h: Change --default-check-level to --default-cert-check-level as it makes clear what it operates on. * g10.c (main): --pgp6 also implies --no-ask-sig-expire. * delkey.c (do_delete_key): Comment.
2002-04-04Fix auto-key-retrieve to actually work as a keyserver-option (noted byDavid Shaw1-2/+2
Roger Sondermann). Do not reorder the primary attribute packet - the first user ID must be a genuine one.
2002-03-31Fix ownertrust display with --with-colons.David Shaw1-2/+10
Properly initialize the user ID refcount for user and photo IDs. Tweak a few prompts to change "y/n" to "y/N", which is how most other prompts are written. Warn the user if they are about to revoke an expired sig (not a problem, but they should know). Control-d escapes the keyserver search prompt. If a subkey is considered revoked solely because the parent key is revoked, print the revocation reason from the parent key. Allow revocation/expiration to apply to a uid/key with no entry in the trustdb.
2002-03-29Quote and unquote backslashes from keyserver search responses.David Shaw1-2/+7
2002-03-19Properly handle a "no keys found" case from the internal HKP codeDavid Shaw1-16/+16
(external HKP is ok). Also, make a COUNT -1 (i.e. streamed) keyserver response a little more efficient. Add --no-allow-non-selfsigned-uid
2002-03-07Some minor fixes for revocation keys: print a warning if a key is importedDavid Shaw1-10/+29
that has been revoked by designated revoker, but the designated revoker is not present to verify the revocation (whew!). This applies to all ways to get a key into the system: --import --recv-keys, and --search-keys. If auto-key-retrieve is set, try and retrieve the revocation key. Also, auto-key-retrieve is now a keyserver-option.
2002-02-26Treat key lists internally as fingerprints when possible. All this is viaDavid Shaw1-60/+102
KEYDB_SEARCH_DESC - no point in reinventing the wheel. This allows the helper program to search the keyserver by fingerprint if desired (and the keyserver supports it). Note that automatic fingerprint promotion during refresh only applies to v4 keys as a v4 fingerprint can be easily changed into a long or short key id, and a v3 cannot. Take two copies of hextobyte() from pubkey-enc.c and getkey.c and make them into one copy in misc.c.
2002-02-22Detect a "no keys found" case even if the keyserver helper program doesDavid Shaw1-10/+22
not explicitly say how many keys were found. Bug fix - don't report non-revoked keys as revoked in HKP key searches.
2002-02-19Catch corruption in HKP index lines (can be caused by broken or maliciousDavid Shaw1-0/+9
keyservers). Add KEYSERVER_NOT_SUPPORTED for unsupported actions (say, a keyserver that has no way to search, or a readonly keyserver that has no way to add). Also add a USE_EXTERNAL_HKP define to disable the internal HKP keyserver code.
2002-02-04Workaround for the pksd and OKS keyserver bug that calculates v4 RSADavid Shaw1-4/+37
keyids as if they were v3. The workaround/hack is to fetch both the v4 (e.g. 99242560) and v3 (e.g. 68FDDBC7) keyids. This only happens for key refresh while using the HKP scheme and the refresh-add-fake-v3-keyids keyserver option must be set. This should stay off by default.
2002-02-04Bug fix - do not append keys to each other when --sending more than one.David Shaw1-1/+1
2002-01-03Minor tweaks: remove --no-default-check-level, don't cache child tempfilesDavid Shaw1-1/+1
and simpler code in keyserver
2002-01-02moved util.h include downwardsStefan Bellon1-1/+1
2001-12-29Bugfix in photoid.c and keyserver.cDavid Shaw1-1/+1
Properly handle permission/ownership checks on files that are shared (for example /usr/local/lib/gnupg/idea)
2001-12-28Add an outofband indicator to the keyserver protocol.David Shaw1-42/+47
Use signature flags for exportability check rather than re-parsing the subpacket.
2001-12-27Some exec cleanups and tweaks for photo ID and keyserver executionDavid Shaw1-11/+8
2001-12-25Some tweaks - copyleft info for mkdtemp.c, and header pruning in photoid.cDavid Shaw1-16/+11
and keyserver.c
2001-12-23Fixed a typo and W32 support for the latest CVS changes.Timo Schulz1-0/+2
2001-12-22* keyserver.c (keyserver_spawn): Removed some variablesWerner Koch1-10/+7
declaration due to shadowing warnings. * build-packet.c (build_attribute_subpkt): s/index/idx/ to avoid compiler warnig due to index(3). * getkey.c (get_ctx_handle): Use KEYDB_HANDLE as return value. * keylist.c (list_one): Made resname const. * keyedit.c (keyedit_menu): Allow "addphoto" only when --openpgp is not used. * options.skel: Changed one example photo viewer to qiv.
2001-12-21Photo ID support (actually generic "attribute packet" support, but thereDavid Shaw1-243/+67
is only one attribute packet defined thus far, and it's a picture)
2001-12-21* options.in: Remove load-extension tigerWerner Koch1-0/+1
* Makefile.am (./options): append it if there is such a module.
2001-12-20Use mkdtemp() to make temp directories. If there is no mkdtemp(), provideDavid Shaw1-26/+11
one.
2001-12-20New function to check the permissions of GNUPGHOME and the various filesDavid Shaw1-15/+37
that live there for safe permission/ownership (--no-permission-warning to disable) The newer glibcs print scary warnings about using mktemp(). The use here was actually safe, but the warning was bound to confuse people, so here is an arguably better tempname creator that pulls random bits from the pool.
2001-12-18Much stricter checking of the keyserver URIDavid Shaw1-3/+18
IDEA warning for pk messages encrypted with IDEA (symmetric is already done) Print IDEA warning for each occurance except for secret key protection and unknown cipher from an encrypted message.
2001-12-17Remove warning - no need to check for control/illegal characters, asDavid Shaw1-1/+2
utf8_to_native does this for us
2001-12-17Fix capitalization issuesDavid Shaw1-18/+15
2001-12-15* keyserver.c (keyserver_spawn): Assert that we have dropped privs.Werner Koch1-13/+41
* pubkey-enc.c (get_session_key): Check that the public key algorithm is indeed usable for en/decryption. This avoid a strange error message from pubkey_decrypt if for some reasons a bad algorithm indentifier is passed. * hkp.c (hkp_export): Do not print possible control characters from a keyserver response. (parse_hkp_index): Made uid an unsigned char* because it is passed to isspace(). (hkp_search): Ditto for the char* vars. * g10.c (main): Print the IDEA warning also for -c and -se. * g10.c (get_temp_dir): Assert that we have dropped privs * encode.c (encode_crypt): Include the first key into the --pgp2 check.
2001-12-06The new keyserver code itselfDavid Shaw1-0/+988
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-22 12:04:39 +0000