aboutsummaryrefslogtreecommitdiffstats
path: root/g10/keyserver.c (unfollow)
Commit message (Collapse)AuthorFilesLines
2012-06-05Change all quotes in strings and comments to the new GNU standard.Werner Koch1-5/+5
The asymmetric quotes used by GNU in the past (`...') don't render nicely on modern systems. We now use two \x27 characters ('...'). The proper solution would be to use the correct Unicode symmetric quotes here. However this has the disadvantage that the system requires Unicode support. We don't want that today. If Unicode is available a generated po file can be used to output proper quotes. A simple sed script like the one used for en@quote is sufficient to change them. The changes have been done by applying sed -i "s/\`\([^'\`]*\)'/'\1'/g" to most files and fixing obvious problems by hand. The msgid strings in the po files were fixed with a similar command.
2011-11-30Rewrite dns-cert.c to not use the gpg-only iobuf stuff.Werner Koch1-20/+16
* common/dns-cert.c: Remove iobuf.h. (get_dns_cert): Rename to _get_dns_cert. Remove MAX_SIZE arg. Change iobuf arg to a estream-t. Rewrite function to make use of estream instead of iobuf. Require all parameters. Return an gpg_error_t error instead of the type. Add arg ERRSOURCE. * common/dns-cert.h (get_dns_cert): New macro to pass the error source to _gpg_dns_cert. * common/t-dns-cert.c (main): Adjust for changes in get_dns_cert. * g10/keyserver.c (keyserver_import_cert): Ditto. * doc/gpg.texi (GPG Configuration Options): Remove max-cert-size.
2011-11-30Increase the default buffer size for DNS certificates.Werner Koch1-2/+3
* common/t-dns-cert.c (main): Increase MAX_SIZE to 64k. * g10/keyserver.c (DEFAULT_MAX_CERT_SIZE): Increase from 16k to 64k.
2011-04-29Re-indentation of keydb.c and error code changes.Werner Koch1-2/+2
Returning -1 as an error code is not very clean given that gpg error has more descriptive error codes. Thus we now return GPG_ERR_NOT_FOUND for all search operations and adjusted all callers.
2011-04-25Fix regression in gpg's mail address parsing.Werner Koch1-4/+4
Since 2009-12-08 gpg was not able to find email addresses indicated by a leading '<'. This happened when I merged the user id classification code of gpgsm and gpg.
2011-02-09Replace printf by es_printf in keyserver.cWerner Koch1-27/+24
This is similar to the change in keylist.c and elsewhere.
2011-02-08Add finger support to dirmngr.Werner Koch1-25/+24
The basic network code from http.c is used for finger. This keeps the network related code at one place and we are able to use the somewhat matured code form http.c. Unfortunately I had to enhance the http code for more robustness and probably introduced new bugs. Test this code using gpg --fetch-key finger:[email protected] (I might be the last user of finger ;-)
2011-01-20All standard keyserver commands are now using dirmngr.Werner Koch1-687/+61
2011-01-18Keyserver search and get basically works again.Werner Koch1-260/+481
2011-01-10Initial code checking for backup - not yet working.Werner Koch1-22/+101
2010-10-20Make public key data structure easier to read.Werner Koch1-1/+1
Check vor v1 card while signing.
2010-10-01Exporting secret keys via gpg-agent is now basically supported.Werner Koch1-49/+63
A couple of forward ported changes. Doc updates.
2010-08-31Import OpenPGP keys into the agent.Werner Koch1-5/+7
2010-04-21More changes on the way to remove secring.gpg.Werner Koch1-1/+1
2009-12-08Unification of the search descriptor usage.Werner Koch1-18/+23
2009-07-23Try a DNS-SD lookup to find a domain-specific LDAP server beforeDavid Shaw1-13/+50
resorting to keys.{domain}.
2009-06-17Add readcert command.Werner Koch1-0/+3
fix reading large certificates.
2009-05-11* keyserver.c (keyserver_typemap): gpgkeys_hkp handles hkps as well.David Shaw1-2/+4
From 1.4.
2008-12-09Flush keyserver search output.Werner Koch1-0/+2
Add trustdb chnages from 1.4. Check algo usage for batch key generation.
2008-09-04* keyserver.c (keyserver_import_cert): Allow keyserver URLs inDavid Shaw1-7/+1
addition to full URLs in CERT records.
2008-04-08Enhanced --auto-key-locate.Werner Koch1-9/+20
2008-04-07Minor cleanups.Werner Koch1-1/+9
Implemented key helper kdns
2008-03-25Changed the way i18n files are located under Windows. The setting of theWerner Koch1-2/+2
Registry key is not anymore required. Helpfiles are not properly located.
2007-07-04Changed to GPLv3.Werner Koch1-4/+2
Removed intl/.
2007-06-14A whole bunch of changes to allow building for Windows.Werner Koch1-2/+2
See the ChangeLogs for details.
2007-03-14From STABLE-BRANCH-1-4David Shaw1-2/+9
* keyserver.c: Windows Vista doesn't grok X_OK and so fails access() tests. Previous versions interpreted X_OK as F_OK anyway, so we'll just use F_OK directly.
2006-12-06Fixes for CVE-2006-6235Werner Koch1-6/+7
2006-10-06* keyserver.c (keyserver_spawn): Write the 16-digit keyid ratherDavid Shaw1-2/+6
than whatever key selector the user used on the command line.
2006-10-02Fix for bug 537Werner Koch1-20/+20
2006-09-14Take advantage of newer gpg-error features.Werner Koch1-1/+1
2006-08-16With --enable-gpg the keyservers are now build and a first test using gpg2Werner Koch1-0/+4
shows no prblems. Needs more testing of course.
2006-05-23g10/ does build again.Werner Koch1-3/+6
2006-04-28Merged recent changes from 1.4Werner Koch1-35/+29
2006-04-27(keyserver_import_cert): Show warning if there is a CERT fingerprint,David Shaw1-0/+6
but no --keyserver set.
2006-04-27* keyserver.c (path_makes_direct): New. (keyserver_spawn): Used hereDavid Shaw1-32/+22
to add "_uri" to certain gpgkeys_xxx helpers when the meaning is different if a path is provided (i.e. ldap).
2006-04-22* keyserver.c: Fix build problem with platforms that stick libcurl inDavid Shaw1-3/+0
a place not in the regular include search path.
2006-04-21Still merging 1.4.3 code backWerner Koch1-1/+1
2006-04-19Continued with merging.Werner Koch1-2/+2
Still does not build.
2006-04-19Merged with gpg 1.4.3 code. Werner Koch1-274/+1028
The gpg part does not yet build.
2006-03-17* keyserver.c (keyserver_import_cert): Handle the IPGP CERT type forDavid Shaw1-12/+25
both the fingerprint alone, and fingerprint+URL cases. * getkey.c (get_pubkey_byname): Minor cleanup.
2006-03-16* cert.c (get_cert): Handle the fixed IPGP type with fingerprint.David Shaw1-1/+1
2006-03-14* keyserver-internal.h, keyserver.c (keyserver_import_pka): Use theDavid Shaw1-3/+9
same API as the other auto-key-locate fetchers. * getkey.c (get_pubkey_byname): Use the fingerprint of the key that we actually fetched. This helps prevent problems where the key that we fetched doesn't have the same name that we used to fetch it. In the case of CERT and PKA, this is an actual security requirement as the URL might point to a key put in by an attacker. By forcing the use of the fingerprint, we won't use the attacker's key here.
2006-03-14* keyserver-internal.h, keyserver.c (keyserver_spawn, keyserver_work,David Shaw1-19/+26
keyserver_import_cert, keyserver_import_name, keyserver_import_ldap): Pass fingerprint info through.
2006-03-14* main.h, import.c (import_one): Optionally return the fingerprint ofDavid Shaw1-2/+3
the key being imported. (import_keys_internal, import_keys_stream, import): Change all callers.
2006-02-24* keydb.h, getkey.c (release_akl), gpg.c (main): AddDavid Shaw1-2/+38
--no-auto-key-locate. * options.h, gpg.c (main): Keep track of each keyserver registered so we can match on them later. * keyserver-internal.h, keyserver.c (cmp_keyserver_spec, keyserver_match), gpgv.c: New. Find a keyserver that matches ours and return its spec. * getkey.c (get_pubkey_byname): Use it here to get the per-keyserver options from an earlier keyserver.
2006-02-24* keyserver.c (parse_keyserver_options): Only change max_cert if it isDavid Shaw1-1/+1
used.
2006-02-23* options.c, gpg.c (main), keyserver.c (keyserver_spawn): No specialDavid Shaw1-16/+7
treatment of include-revoked, include-subkeys, and try-dns-srv. These are keyserver features, and GPG shouldn't get involved here.
2006-02-23* keyserver.c (parse_keyserver_uri, add_canonical_option): Always appendDavid Shaw1-3/+3
options to the list, as ordering may be significant to the user.
2006-02-23* options.h, keyserver.c (add_canonical_option): New.David Shaw1-19/+43
(parse_keyserver_options): Moved from here. (parse_keyserver_uri): Use it here so each keyserver can have some private options in addition to the main keyserver-options (e.g. per-keyserver auth).
2006-02-22* options.h, keyserver-internal.h, keyserver.c (keyserver_import_name),David Shaw1-2/+2
getkey.c (free_akl, parse_auto_key_locate, get_pubkey_byname): The obvious next step: allow arbitrary keyservers in the auto-key-locate list.