aboutsummaryrefslogtreecommitdiffstats
path: root/g10/keyserver.c (follow)
Commit message (Collapse)AuthorAgeFilesLines
* * keyserver.c (keyserver_spawn): Properly handle PROGRAM responses whenDavid Shaw2002-06-121-2/+1
| | | | | they have a CRLF ending. Noted by Keith Ray.
* * keyserver.c (keyserver_spawn): Handle CRLF endings from keyserverDavid Shaw2002-06-121-19/+28
| | | | | | | | | | | | | helpers. Also don't leak the last line worth of memory from the keyserver response. * main.h, misc.c (deprecated_warning): New function to warn about deprecated options and commands. * g10.c (main), keyserver-internal.h, keyserver.c (parse_keyserver_uri): Use new deprecated function to warn about honor-http-proxy, auto-key-retrieve, and x-broken-hkp.
* * options.h, keyserver.c (keyserver_opts), g10.c (main): New keyserverDavid Shaw2002-06-101-52/+64
| | | | | | | | | | | | | option "include-subkeys". This feature already existed, but now can be turned off. It defaults to on. * options.h, keyserver.c (parse_keyserver_options, keyserver_spawn): There are now enough options to justify making a structure for the keyserver options rather than a page of if-then-else-if-then-etc. * getkey.c (merge_keys_and_selfsig, merge_selfsigs_main): Fix bug in calculating key expiration dates.
* * options.skel, options.h, main.h, keydb.h, pkclist.c (build_pk_list,David Shaw2002-06-071-9/+25
| | | | | | | | | | | | | | | | | | | expand_groups), g10.c (main, add_group): Add new "group" command to allow one name to expand into multiple keys. For simplicity, and to avoid potential loops, we only expand once - you can't make an alias that points to an alias. * main.h, g10.c (main), keygen.c (build_personal_digest_list): Simplify the default digest list - there is really no need for the other hashes since they will never be used after SHA-1 in the list. * options.skel, options.h, g10.c (main), hkp.c (hkp_ask_import, hkp_export, hkp_search), keyserver.c (parse_keyserver_options, parse_keyserver_uri, keyserver_work, keyserver_refresh): Make the "x-broken-hkp" keyserver scheme into keyserver-option "broken-http-proxy". Move honor_http_proxy into keyserver_options. Canonicalize the three variations of "hkp", "x-hkp", and "x-broken-hkp" into "hkp".
* * keyserver.c (keyserver_export): Get confirmation before sendingWerner Koch2002-05-111-0/+11
| | | | | all keys.
* fixes for M_DEBUG, strcasecmp and RISC OSStefan Bellon2002-05-101-29/+29
|
* * keyserver.c (keyserver_refresh): --refresh-keys implies --merge-only soDavid Shaw2002-05-051-0/+5
| | | | | | as not to import keys with keyids that match the ones being refreshed. Noted by Florian Weimer.
* * photoid.c: Provide default image viewer for Win32.David Shaw2002-05-041-2/+2
| | | | | | | | | * misc.c (pct_expando): %t means extension, not name ("jpg", not "jpeg"). * keyserver.c (keyserver_spawn), photoid.c (show_photos), exec.h, exec.c: Allow the caller to determine the temp file extension when starting an exec_write and change all callers.
* * keyedit.c (menu_adduid): 2440bis04 says that multiple attribute packetsDavid Shaw2002-05-011-3/+4
| | | | | | | | on a given key are legal. * keyserver.c (keyserver_refresh): the fake v3 keyid hack applies to "mailto" URLs as well since they are also served by pksd.
* Added a copyright year for files changed this year.Werner Koch2002-04-291-1/+1
|
* * keyedit.c (menu_deluid): Only cause a trust update if we delete aDavid Shaw2002-04-191-7/+2
| | | | | | | | | | | | | | | | | non-revoked user id. * hkp.c (hkp_ask_import), keyserver.c (parse_keyserver_options, keyserver_spawn), options.h: Remove fast-import keyserver option (no longer meaningful). * g10.c (main), keyedit.c (sign_uids), options.h: Change --default-check-level to --default-cert-check-level as it makes clear what it operates on. * g10.c (main): --pgp6 also implies --no-ask-sig-expire. * delkey.c (do_delete_key): Comment.
* Fix auto-key-retrieve to actually work as a keyserver-option (noted byDavid Shaw2002-04-041-2/+2
| | | | | | | | Roger Sondermann). Do not reorder the primary attribute packet - the first user ID must be a genuine one.
* Fix ownertrust display with --with-colons.David Shaw2002-03-311-2/+10
| | | | | | | | | | | | | | | | | | | Properly initialize the user ID refcount for user and photo IDs. Tweak a few prompts to change "y/n" to "y/N", which is how most other prompts are written. Warn the user if they are about to revoke an expired sig (not a problem, but they should know). Control-d escapes the keyserver search prompt. If a subkey is considered revoked solely because the parent key is revoked, print the revocation reason from the parent key. Allow revocation/expiration to apply to a uid/key with no entry in the trustdb.
* Quote and unquote backslashes from keyserver search responses.David Shaw2002-03-291-2/+7
|
* Properly handle a "no keys found" case from the internal HKP codeDavid Shaw2002-03-191-16/+16
| | | | | | | | (external HKP is ok). Also, make a COUNT -1 (i.e. streamed) keyserver response a little more efficient. Add --no-allow-non-selfsigned-uid
* Some minor fixes for revocation keys: print a warning if a key is importedDavid Shaw2002-03-071-10/+29
| | | | | | | | | | that has been revoked by designated revoker, but the designated revoker is not present to verify the revocation (whew!). This applies to all ways to get a key into the system: --import --recv-keys, and --search-keys. If auto-key-retrieve is set, try and retrieve the revocation key. Also, auto-key-retrieve is now a keyserver-option.
* Treat key lists internally as fingerprints when possible. All this is viaDavid Shaw2002-02-261-60/+102
| | | | | | | | | | | | KEYDB_SEARCH_DESC - no point in reinventing the wheel. This allows the helper program to search the keyserver by fingerprint if desired (and the keyserver supports it). Note that automatic fingerprint promotion during refresh only applies to v4 keys as a v4 fingerprint can be easily changed into a long or short key id, and a v3 cannot. Take two copies of hextobyte() from pubkey-enc.c and getkey.c and make them into one copy in misc.c.
* Detect a "no keys found" case even if the keyserver helper program doesDavid Shaw2002-02-221-10/+22
| | | | | | | not explicitly say how many keys were found. Bug fix - don't report non-revoked keys as revoked in HKP key searches.
* Catch corruption in HKP index lines (can be caused by broken or maliciousDavid Shaw2002-02-191-0/+9
| | | | | | | | | | keyservers). Add KEYSERVER_NOT_SUPPORTED for unsupported actions (say, a keyserver that has no way to search, or a readonly keyserver that has no way to add). Also add a USE_EXTERNAL_HKP define to disable the internal HKP keyserver code.
* Workaround for the pksd and OKS keyserver bug that calculates v4 RSADavid Shaw2002-02-041-4/+37
| | | | | | | | keyids as if they were v3. The workaround/hack is to fetch both the v4 (e.g. 99242560) and v3 (e.g. 68FDDBC7) keyids. This only happens for key refresh while using the HKP scheme and the refresh-add-fake-v3-keyids keyserver option must be set. This should stay off by default.
* Bug fix - do not append keys to each other when --sending more than one.David Shaw2002-02-041-1/+1
|
* Minor tweaks: remove --no-default-check-level, don't cache child tempfilesDavid Shaw2002-01-031-1/+1
| | | | | and simpler code in keyserver
* moved util.h include downwardsStefan Bellon2002-01-021-1/+1
|
* Bugfix in photoid.c and keyserver.cDavid Shaw2001-12-291-1/+1
| | | | | | Properly handle permission/ownership checks on files that are shared (for example /usr/local/lib/gnupg/idea)
* Add an outofband indicator to the keyserver protocol.David Shaw2001-12-281-42/+47
| | | | | | Use signature flags for exportability check rather than re-parsing the subpacket.
* Some exec cleanups and tweaks for photo ID and keyserver executionDavid Shaw2001-12-271-11/+8
|
* Some tweaks - copyleft info for mkdtemp.c, and header pruning in photoid.cDavid Shaw2001-12-251-16/+11
| | | | | and keyserver.c
* Fixed a typo and W32 support for the latest CVS changes.Timo Schulz2001-12-231-0/+2
|
* * keyserver.c (keyserver_spawn): Removed some variablesWerner Koch2001-12-221-10/+7
| | | | | | | | | | | | declaration due to shadowing warnings. * build-packet.c (build_attribute_subpkt): s/index/idx/ to avoid compiler warnig due to index(3). * getkey.c (get_ctx_handle): Use KEYDB_HANDLE as return value. * keylist.c (list_one): Made resname const. * keyedit.c (keyedit_menu): Allow "addphoto" only when --openpgp is not used. * options.skel: Changed one example photo viewer to qiv.
* Photo ID support (actually generic "attribute packet" support, but thereDavid Shaw2001-12-211-243/+67
| | | | | is only one attribute packet defined thus far, and it's a picture)
* * options.in: Remove load-extension tigerWerner Koch2001-12-211-0/+1
| | | | | * Makefile.am (./options): append it if there is such a module.
* Use mkdtemp() to make temp directories. If there is no mkdtemp(), provideDavid Shaw2001-12-201-26/+11
| | | | | one.
* New function to check the permissions of GNUPGHOME and the various filesDavid Shaw2001-12-201-15/+37
| | | | | | | | | that live there for safe permission/ownership (--no-permission-warning to disable) The newer glibcs print scary warnings about using mktemp(). The use here was actually safe, but the warning was bound to confuse people, so here is an arguably better tempname creator that pulls random bits from the pool.
* Much stricter checking of the keyserver URIDavid Shaw2001-12-181-3/+18
| | | | | | | IDEA warning for pk messages encrypted with IDEA (symmetric is already done) Print IDEA warning for each occurance except for secret key protection and unknown cipher from an encrypted message.
* Remove warning - no need to check for control/illegal characters, asDavid Shaw2001-12-171-1/+2
| | | | | utf8_to_native does this for us
* Fix capitalization issuesDavid Shaw2001-12-171-18/+15
|
* * keyserver.c (keyserver_spawn): Assert that we have dropped privs.Werner Koch2001-12-151-13/+41
| | | | | | | | | | | | | | | | | * pubkey-enc.c (get_session_key): Check that the public key algorithm is indeed usable for en/decryption. This avoid a strange error message from pubkey_decrypt if for some reasons a bad algorithm indentifier is passed. * hkp.c (hkp_export): Do not print possible control characters from a keyserver response. (parse_hkp_index): Made uid an unsigned char* because it is passed to isspace(). (hkp_search): Ditto for the char* vars. * g10.c (main): Print the IDEA warning also for -c and -se. * g10.c (get_temp_dir): Assert that we have dropped privs * encode.c (encode_crypt): Include the first key into the --pgp2 check.
* The new keyserver code itselfDavid Shaw2001-12-061-0/+988
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-22 03:57:59 +0000