aboutsummaryrefslogtreecommitdiffstats
path: root/g10/keyserver.c (follow)
Commit message (Collapse)AuthorAgeFilesLines
* * trustdb.h, trustdb.c (trustdb_check_or_update): New. If the trustdbDavid Shaw2005-02-061-4/+18
| | | | | | | | | | | | | | is dirty and --interactive is set, do an --update-trustdb. If not interactive, do a --check_trustdb unless --no-auto-check-trustdb is set. * import.c (import_keys_internal): Moved from here. * keyserver.c (keyserver_refresh): Call it here after all refreshing has happened so that we don't rebuild after each preferred keyserver set of imports, but do one big rebuild at the end. This is Debian bug #293816, noted by Kurt Roeckx.
* * keyserver.c (parse_keyserver_uri): Allow RFC-2732 IPv6 [literalDavid Shaw2005-01-261-4/+36
| | | | | | address] syntax in keyserver URLs. (keyserver_typemap): Map ftps if we are supporting it.
* * keyserver.c (free_keyserver_spec): Fix small leak.David Shaw2005-01-221-0/+6
| | | | | (keyserver_typemap): Map https if we are supporting it.
* * filter.h, armor.c (armor_filter): Use the eol string from the armorDavid Shaw2005-01-061-1/+8
| | | | | | | | | | filter context instead of hardcoding '\n' or '\r\n'. If no eol string is provided, default to '\n' or '\r\n' as appropriate. (is_armor_header): Trim tabs in armor header lines as well. * keyserver.c (keyserver_spawn): Use it here to force '\n' line endings since the keyserver output file gets a LF->CRLF expansion on win32.
* * keyserver.c (keyserver_typemap): Only map HTTP and FTP if libcurl hasDavid Shaw2004-12-241-2/+4
| | | | | specifically been selected to handle them.
* * options.h, keyserver.c (parse_keyserver_uri): Properly parse auth dataDavid Shaw2004-12-221-0/+20
| | | | | from URLs and pass to keyserver helpers.
* * keyserver.c (keyserver_typemap): New. Map certain keyserver types to aDavid Shaw2004-12-221-10/+24
| | | | | | | | | common type (e.g. ldaps -> ldap). If we are building with curl, map both http and ftp to curl. * build-packet.c (build_sig_subpkt): Only allow one preferred keyserver subpacket at a time.
* Prepared for last 1.4 release candidateWerner Koch2004-12-141-4/+11
|
* * keyserver.c (parse_preferred_keyserver): Force preferred keyserverDavid Shaw2004-12-121-1/+1
| | | | | subpackets to have a URI scheme specified.
* * keyserver.c (keyserver_work): Handle keyserver timeouts.David Shaw2004-10-131-0/+4
|
* * pkclist.c (do_edit_ownertrust): Use the same translated string forDavid Shaw2004-10-111-8/+21
| | | | | | | | | | | | | | showing the user ID as mainproc.c:print_pkenc_list. * mainproc.c (print_pkenc_list): Allow translating the quotes around the user ID. * card-util.c, g10.c, photoid.c, trustdb.c: The last of the \"%s\" -> `%s' quoting for things that aren't user IDs. * keyserver.c (keyserver_spawn): If there is no keyserver host, print the whole URI since it is self-contained.
* * configure.ac: New option --disable-finger.Werner Koch2004-10-111-3/+3
| | | | | | | | * keyserver.c (keyserver_spawn): Print an empty string in log_info if the host is not set (e.g. finger). * gpgkeys_finger.c: New.
* * keyedit.c, keylist.c, keyserver.c, mainproc.c: TheDavid Shaw2004-10-061-1/+4
| | | | | | revoked/expired/expires string change of 2004-09-29 was too simple. Use two styles for each tag.
* * passphrase.c (agent_get_passphrase): Use keystrs for agent strings, andDavid Shaw2004-10-051-0/+4
| | | | | | | | | | fix sprintf warnings. * keyserver.c (keyserver_spawn): Fix BUG() with certain sets of mixed regular and preferred keyserver refreshes. Noted by Sebastian Wiesinger. * keyedit.c (show_key_with_all_names): Show uid validity in menu.
* * keyedit.c, keylist.c, keyserver.c, mainproc.c: Reduce the manyDavid Shaw2004-09-291-5/+8
| | | | | | variations of "revoked" ("revoked", "[revoked]", " [revoked]", "[revoked] ") "and" expired down to two to simplify translation.
* * signal.c (got_fatal_signal): HAVE_DECL_SYS_SIGLIST is defined, but zeroDavid Shaw2004-09-281-3/+3
| | | | | | | | if not found. Noted by John Clizbe. * keyserver.c (parse_keyrec): Fix problem with non-expiring keys appearing expired in --search-keys results.
* * keyedit.c (keyedit_menu): Don't show "addcardkey" in the menu if we doDavid Shaw2004-09-211-4/+4
| | | | | | | | not have card support. * keydb.h, keyserver.c (print_keyrec, keyserver_spawn): fpr is an array of unsigned bytes.
* * card-util.c (fetch_url, card_edit): Use the pubkey URL stored on theDavid Shaw2004-09-111-2/+3
| | | | | | | | | | card to fetch an updated copy. Works with either straight URLs or HKP or LDAP keyservers. * keyserver-internal.h, keyserver.c (keyserver_import_fprint), import.c (revocation_present): Use a keyserver_spec so the caller can pass in whatever keyserver they like.
* * keyserver.c (parse_keyrec): Force the 'e'xpired flag on as soon as weDavid Shaw2004-09-031-13/+16
| | | | | know the key is definitely expired. Some translatable string cleanup.
* * keyserver.c (keyserver_spawn): Show log line for what keyserver actionDavid Shaw2004-08-231-5/+15
| | | | | | | | | we are taking. * keyid.c (keystr): If printing a keyid that lacks the high 4 bytes, print the low 4 alone. (keystr_from_desc): Handle short keyids and warn on v3 fingerprints.
* * keyserver.c (keyserver_search_prompt): Make sure the search string isDavid Shaw2004-08-231-9/+19
| | | | | converted from UTF-8 before display.
* * keyserver.c (keyserver_refresh): Keep track of keys already fetched soDavid Shaw2004-05-261-3/+8
| | | | | | we don't do a regular keyserver fetch if the preferred keyserver fetch has exhausted the list.
* * mainproc.c (check_sig_and_print): If we're honoring preferredDavid Shaw2004-05-221-26/+30
| | | | | | | | | | | | | | | | keyservers, and auto-key-retrieve is set, try and get a missing key from the preferred keyserver subpacket when we verify the sig. * gpgv.c (parse_preferred_keyserver, free_keyserver_spec): Stubs. * keyserver.c (keyidlist): Use new parse_preferred_keyserver function. (keyserver_work): Use the passed-in keyserver spec rather than the options global one. * keyserver-internal.h, keyserver.c (parse_preferred_keyserver): New function to take a sig and return a split out keyserver_spec. (keyserver_import_keyid): Now takes a keyserver_spec.
* * keyserver.c (keyidlist): Go back to the old fast keyid lister. OnlyDavid Shaw2004-05-211-99/+133
| | | | | | | | | merge selfsigs if we have to for honor-keyserver-url. (keyserver_refresh): Keyserver URL handler moved here. (calculate_keyid_fpr): Removed. * keydb.h, keyid.c (keystr_from_desc): Calculate a key string from a KEYDB_SEARCH_DESC.
* * keyserver.c (keyserver_spawn): Fix keyserver options on tempfile onlyDavid Shaw2004-05-211-1/+1
| | | | | platforms. Noted by Roger Sondermann.
* * keyserver.c (keyserver_work): Allow --refresh-keys with a preferredDavid Shaw2004-05-201-1/+1
| | | | | | | | | | | keyserver to happen even if there is no global keyserver set. * sig-check.c (do_check_messages): No need to check for Elgamal signatures any longer. (do_check_messages, do_check, check_key_signature2): --keyid-format conversion. * pkclist.c (show_paths, edit_ownertrust): Remove some unused code.
* * sign.c (update_keysig_packet): Policies and notations should be strippedDavid Shaw2004-05-191-3/+3
| | | | | | | out when remaking a self-signature. Noted by Atom Smasher. * keyserver.c (parse_keyserver_uri): Fix compiler warnings.
* * options.h, keyserver-internal.h, keyserver.c (parse_keyserver_uri):David Shaw2004-05-111-44/+61
| | | | | | | Improved URI parser that keeps track of the path information and doesn't modify the input string. (keyserver_spawn): Tell keyserver plugins about the path.
* * options.h, mainproc.c (symkey_decrypt_seskey), keyserver.c (structDavid Shaw2004-05-101-6/+12
| | | | | | keyrec, parse_keyrec, keyserver_search_prompt), keyedit.c (keyedit_menu), g10.c (add_keyserver_url, add_policy_url): Fix some compiler warnings.
* * keyedit.c (keyedit_menu, menu_set_keyserver_url): Allow passingDavid Shaw2004-05-081-4/+10
| | | | | | | | | | preferred keyserver on "keyserver" command line. Sanity check keyserver URL before accepting it. * keyserver-internal.h, g10.c (main), keyserver.c (parse_keyserver_uri): Add an option to require the scheme:// and change all callers. (free_keyserver_spec): Make public.
* * main.h, keylist.c (show_notation): Add argument to show only userDavid Shaw2004-04-291-0/+4
| | | | | | | notations, only standard notations, or both. Change all callers. * keyserver.c (keyserver_spawn): We still need EXEC_TEMPFILE_ONLY.
* (keyserver_spawn) [EXEC_TEMPFILE_ONLY]: RemovedWerner Koch2004-04-271-4/+0
| | | | | setting use_temp_file because this option has been removed.
* * keyserver.c (parse_keyserver_uri): Do not accept "http" as an alias forDavid Shaw2004-04-201-2/+1
| | | | | "hkp". They are not the same thing.
* * options.h, g10.c (main): Add keyserver-option honor-keyserver-url.David Shaw2004-04-191-92/+146
| | | | | | | | | | | | | | | | | | parse_keyserver_options now returns a success code. * keyserver.c (parse_keyserver_options): Return error on failure to parse. Currently there is no way to fail as any unrecognized options get saved to be sent to the keyserver plugins later. Check length of keyserver option tokens since with =arguments we must only match the prefix. (free_keyserver_spec): Moved code from parse_keyserver_url. (keyserver_work, keyserver_spawn): Pass in a struct keyserver_spec rather than using the global keyserver option. (calculate_keyid_fpr): New. Fills in a KEYDB_SEARCH_DESC for a key. (keyidlist): New implementation using get_pubkey_bynames rather than searching the keydb directly. If honor-keyserver-url is set, make up a keyserver_spec and try and fetch that key directly. Do not include it in the returned keyidlist in that case.
* * main.h, misc.c (optsep, argsplit, optlen, parse_options): Simplify codeDavid Shaw2004-04-161-3/+7
| | | | | | | | and properly handle a partial match against an option with an argument. * keyserver-internal.h, keyserver.c (parse_keyserver_options): Use new optsep and argsplit functions.
* * options.h, keyserver.c (parse_keyserver_options): Remove duplicate codeDavid Shaw2004-04-151-79/+59
| | | | | | | | | from parse_keyserver_options by calling the generic parse_options. * keyserver.c (keyserver_spawn, keyserver_refresh), g10.c (main), gpgv.c (main), mainproc.c (check_sig_and_print), import.c (revocation_present): Change all callers.
* * options.h, import.c, keyserver-internal.h, g10.c, mainproc.c,David Shaw2004-04-141-45/+65
| | | | | | | keyserver.c (parse_keyserver_uri): Parse keyserver URI into a structure. Cleanup for new "guess my keyserver" functionality, as well as refreshing via a preferred keyserver subpacket.
* * options.h: Encapsulate keyserver details. Change all callers.David Shaw2004-04-141-38/+38
|
* * revoke.c (export_minimal_pk), export.c (do_export_stream), passphrase.cDavid Shaw2004-03-051-3/+10
| | | | | | | | | | | (passphrase_to_dek), keyserver.c (print_keyrec): A few more places to use --keyid-format. * options.h, g10.c (main), export.c (parse_export_options, do_export_stream): Remove --export-all and the "include-non-rfc" export-option as they are no longer meaningful with the removal of v3 Elgamal keys.
* * keyserver.c (keyserver_spawn): Use the full 64-bit keyid in the INFODavid Shaw2004-02-221-8/+30
| | | | | | | header lines, and include "sig:" records for the benefit of people who store their keys in LDAP servers. It makes it easy to do queries for things like "all keys signed by Isabella".
* * keyserver.c (keyserver_export): Disallow user strings that aren't keyDavid Shaw2004-02-201-13/+29
| | | | | | | IDs. (keyserver_import): Clarify error message. (keyserver_spawn): Properly handle 8 bit characters in user IDs in the info lines during SEND.
* * mkdtemp.c: Removed.David Shaw2004-02-201-1/+2
| | | | | | | | * Makefile.am: We get mkdtemp.c from libutil.a now, so don't link with @LIBOBJS@. * keyserver.c (keyserver_spawn): Pass the scheme to the keyserver helper.
* * keyserver.c (argsep): Move to misc.c.David Shaw2004-02-141-59/+0
| | | | | | | * main.h, misc.c (parse_options), export.c (parse_export_options), import.c (parse_import_options), g10.c (main): Use it here to allow for options with optional arguments. Change all callers.
* * mainproc.c (list_node): Show sigs with --verbose.David Shaw2004-01-241-4/+5
| | | | | | | | | * options.h, g10.c (set_screen_dimensions): New function to look at COLUMNS and LINES. * keyserver.c (parse_keyrec, keyserver_search_prompt), keyedit.c (print_and_check_one_sig): Use new screen dimension variables.
* * options.h, g10.c (main), import.c (parse_import_options, import_one,David Shaw2003-12-311-1/+1
| | | | | | import_secret_one), keyserver.c (keyserver_refresh): Change --merge-only to --import-option merge-only. Deprecate --merge-only.
* * options.h, g10.c (main), keyserver.c (keyserver_opts,David Shaw2003-12-281-3/+1
| | | | | | | parse_keyserver_uri): honor-http-proxy is no longer an option since we can do the same thing with http-proxy with no arguments. Also remove broken-http-proxy since it can be better handled in the HTTP helper.
* * keyserver.c (argsep): New variation on strsep that knows about optionalDavid Shaw2003-12-281-23/+54
| | | | | arguments. (parse_keyserver_options): Use it here for optional arguments.
* * keyserver.c (strip_leading_space, get_arg): New.David Shaw2003-12-281-1/+45
| | | | | | | (parse_keyserver_options): Use them here to allow arguments to keyserver-options. Since none of our options need arguments yet, just pass them through whole to the keyserver helper.
* * main.h, misc.c (parse_options): Add a "noisy" flag to enable and disableDavid Shaw2003-12-281-3/+4
| | | | | | | | | the messages about which option didn't match or matched ambiguously. Change all callers (g10.c, keyserver.c). * main.h, import.c (import_options), export.c (export_options): Pass the noisy flag through.
* * parse-packet.c (parse_signature): No need to reserve 8 bytes for theDavid Shaw2003-07-101-4/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | unhashed signature cache any longer. * misc.c (pct_expando): Add two new expandos - signer's fingerprint (%g), and signer's primary fingerprint (%p). * Makefile.am: Include W32LIBS where appropriate. * g10.c (main): Add --rfc2440 alias for --openpgp since in a few months, they won't be the same thing. * keyserver.c (parse_keyserver_uri): Accept "http" as an alias for "hkp", since it is occasionally written that way. (keyserver_spawn): Use ascii_isspace to avoid locale issues. * keygen.c (ask_user_id): Make --allow-freeform-uid apply to the email field as well as the name field, and allow mixing fields when it is set. * options.skel: Use subkeys.pgp.net as the default keyserver. * trustdb.c (validate_one_keyblock): Certifications on revoked or expired uids do not count in the web of trust. * signal.c (init_one_signal, pause_on_sigusr, do_block): Only use sigprocmask() if we have sigset_t, and only use sigaction() if we have struct sigaction. This is for Forte c89 on Solaris which seems to define only the function call half of the two pairs by default. (pause_on_sigusr): Typo. (do_block): If we can't use sigprocmask() and sigset_t, try to get the number of signals from NSIG as well as MAXSIG, and if we can't, fail with an explanation. * signal.c, tdbio.c: Comment out the transaction code. It was not used in this version, and was causing some build problems on quasi-posix platforms (Solaris and Forte c89). * keylist.c (list_keyblock_colon): Don't include validity values when listing secret keys since they can be incorrect and/or misleading. This is a temporary kludge, and will be handled properly in 1.9/2.0. * mainproc.c (check_sig_and_print): Only show the "key available from" preferred keyserver line if the key is not currently present. * keyedit.c (sign_uids): Do not sign expired uids without --expert (same behavior as revoked uids). Do not allow signing a user ID without a self-signature. --expert overrides. Add additional prompt to the signature level question. (menu_expire): When changing expiration dates, don't replace selfsigs on revoked uids since this would effectively unrevoke them. There is also no point in replacing expired selfsigs. This is bug #181 * g10.c (add_notation_data): Make sure that only ascii is passed to iscntrl. Noted by Christian Biere. * getkey.c (classify_user_id2): Replaced isspace by spacep * keygen.c (ask_user_id): Ditto. (get_parameter_algo): Ditto. * keyedit.c (keyedit_menu): Ditto. * tdbdump.c (import_ownertrust): Ditto. s/isxdigit/hexdigitp/. * revoke.c (ask_revocation_reason): * keyserver.c (keyserver_spawn): Dito.