aboutsummaryrefslogtreecommitdiffstats
path: root/g10/mainproc.c (unfollow)
Commit message (Collapse)AuthorFilesLines
2013-10-02gpg: Fix bug with deeply nested compressed packets.Werner Koch1-9/+43
* g10/mainproc.c (MAX_NESTING_DEPTH): New. (proc_compressed): Return an error code. (check_nesting): New. (do_proc_packets): Check packet nesting depth. Handle errors from check_compressed. Signed-off-by: Werner Koch <[email protected]>
2012-11-08Support the not anymore patented IDEA cipher algorithm.Werner Koch1-9/+0
* cipher/idea.c: New. Take from Libgcrypt master and adjust for direct use in GnuPG. * cipher/idea-stub.c: Remove. * cipher/Makefile.am: Add idea.c and remove idea-stub.c rules. * configure.ac: Remove idea-stub code. * g10/gpg.c (check_permissions): Remove code path for ITEM==2. (main): Make --load-extension a dummy option. * g10/keygen.c (keygen_set_std_prefs): Include IDEA only in PGP2 compatibility mode. * g10/misc.c (idea_cipher_warn): Remove. Also remove all callers. * g10/seckey-cert.c (do_check): Remove emitting of STATUS_RSA_OR_IDEA. * g10/status.c (get_status_string): Remove STATUS_RSA_OR_IDEA. * g10/status.h (STATUS_RSA_OR_IDEA): Remove. -- To keep the number of actually used algorithms low, we support IDEA only in a basically read-only way (unless --pgp2 is used during key generation). It does not make sense to suggest the use of this old 64 bit blocksize algorithm. However, there is old data available where it might be helpful to have IDEA available.
2011-07-01Add pubkey letters e and E for ECC.Werner Koch1-30/+32
This does not mean we have any kind of ECC support now. It is merely to avoid printing a question mark for the algorithm. Trailing white space changes as usual.
2010-08-31Minor fixesWerner Koch1-0/+8
2008-10-03* main.h, mainproc.c (check_sig_and_print), keylist.cDavid Shaw1-3/+4
(list_keyblock_print), pkclist.c (do_edit_ownertrust), keyedit.c (menu_showphoto), photoid.c (generate_photo_id, show_photos), misc.c (pct_expando): Add %v and %V expandos so that displaying photo IDs can show the attribute validity tag (%v) and string (%V). Originally by Daniel Gillmor.
2007-12-12Updated ZH po file.Werner Koch1-1/+1
Allow de/encryption using legacy type 20 keys. Updated config.{sub,guess}
2007-12-11Allow decryption using type 20 Elgamal keys.Werner Koch1-3/+10
2007-10-23Switched to GPLv3.Werner Koch1-4/+2
Updated gettext.
2007-04-17* packet.h, mainproc.c (reset_literals_seen): New function to resetDavid Shaw1-2/+8
the literals count. * verify.c (verify_one_file), decrypt.c (decrypt_messages): Call it here so we allow multiple literals in --multifile mode (in different files - not concatenated together).
2007-03-05Preparing 1.4.7gnupg-1.4.7Werner Koch1-15/+47
2006-04-08Fixed segvWerner Koch1-2/+4
2006-03-22* mainproc.c (get_pka_address): Fix bug introduced as part ofDavid Shaw1-1/+1
sig_to_notation conversion. Noted by Peter Palfradrer.
2006-03-09Preparing for an RC23Werner Koch1-2/+2
2006-03-09* mainproc.c (get_pka_address), keylist.c (show_notation): RemoveDavid Shaw1-35/+20
duplicate code by using notation functions.
2006-03-08* options.h, mainproc.c (check_sig_and_print), gpg.c (main):David Shaw1-1/+1
pka-lookups, not pka-lookup. * options.h, gpg.c (main), keyedit.c [cmds], sig-check.c (signature_check2): Rename "backsign" to "cross-certify" as a more accurate name.
2006-03-07* options.h, gpg.c (main, parse_trust_model), pkclist.cDavid Shaw1-2/+3
(check_signatures_trust), mainproc.c (check_sig_and_print, pka_uri_from_sig), trustdb.c (init_trustdb): Some tweaks to PKA so that it is a verify-option now.
2006-03-07More tests added; make distcheck worksWerner Koch1-3/+12
2006-03-06* mainproc.c (proc_compressed): "Uncompressed" is not a valid compressionDavid Shaw1-1/+3
algorithm.
2006-03-06Stricter test of allowed signature packet compositions.Werner Koch1-98/+111
There is still one problem to solve.
2006-03-06Fixed problem with PGP2 style signatures and mutilple plaintext dataWerner Koch1-33/+57
2006-03-05Replaced an assert and fixed batch mode issue in cardglue.Werner Koch1-1/+6
2006-02-22* options.h, gpg.c (main), mainproc.c (check_sig_and_print), keyserver.cDavid Shaw1-4/+3
(keyserver_opts): Rename auto-pka-retrieve to honor-pka-record to be consistent with honor-keyserver-url.
2006-02-14Fixed a wrong return code with gpg --verifyWerner Koch1-23/+39
2006-01-01* mainproc.c (check_sig_and_print), keyserver.cDavid Shaw1-1/+1
(keyserver_import_pka), card-util.c (fetch_url): Always require a scheme:// for keyserver URLs except when used as part of the --keyserver command for backwards compatibility.
2005-12-20Finished PKA featureWerner Koch1-1/+1
2005-12-08Made strings translatable. Minor fixes.Werner Koch1-1/+1
2005-09-20* mainproc.c (proc_symkey_enc): Take care of a canceled passphraseWerner Koch1-1/+16
prompt.
2005-08-05auto retrieve keys from PKA. Thsi allows to specify an email addressWerner Koch1-2/+5
so that gpg can get the key from DNS. This helps with opportunistic encryption. No integration with the trust modell yet.
2005-07-28Implemented PKA trust modelWerner Koch1-3/+112
2005-07-27Converted all m_free to xfree etc.Werner Koch1-32/+32
2005-05-31Updated FSF street address and preparations for a release candidate.Werner Koch1-1/+2
2005-04-22* mainproc.c (symkey_decrypt_seskey): There is no need to have anDavid Shaw1-33/+33
extra check for a bad passphrase and/or unknown cipher algorithm here. We'll fail quite happily later, and usually with a better error message to boot.
2005-04-01* mainproc.c (proc_plaintext): Properly handle SIG+LITERAL (old-style PGP)David Shaw1-19/+35
signatures that use hashes other than SHA-1, RIPEMD160, or MD5.
2005-02-10Disable the "quick check" bytes for PK decryptions. This is inDavid Shaw1-2/+4
regards to the Mister and Zuccherato attack on OpenPGP CFB mode.
2005-02-03Updated to match the switch to the NSIS installer.Werner Koch1-1/+1
2004-10-21* options.h, g10.c (main), mainproc.c (check_sig_and_print): RenameDavid Shaw1-2/+2
verify-option show-validity to show-uid-validity to match the similar list-option. * app-openpgp.c (verify_chv3): Fix typo.
2004-10-11* pkclist.c (do_edit_ownertrust): Use the same translated string forDavid Shaw1-6/+3
showing the user ID as mainproc.c:print_pkenc_list. * mainproc.c (print_pkenc_list): Allow translating the quotes around the user ID. * card-util.c, g10.c, photoid.c, trustdb.c: The last of the \"%s\" -> `%s' quoting for things that aren't user IDs. * keyserver.c (keyserver_spawn): If there is no keyserver host, print the whole URI since it is self-contained.
2004-10-07* pkclist.c (build_pk_list): Keystrify.David Shaw1-22/+41
* mainproc.c (check_sig_and_print), pkclist.c (do_edit_ownertrust): Improve translatability of user ID prompts.
2004-10-06* keyedit.c, keylist.c, keyserver.c, mainproc.c: TheDavid Shaw1-2/+10
revoked/expired/expires string change of 2004-09-29 was too simple. Use two styles for each tag.
2004-09-29* keyedit.c, keylist.c, keyserver.c, mainproc.c: Reduce the manyDavid Shaw1-2/+2
variations of "revoked" ("revoked", "[revoked]", " [revoked]", "[revoked] ") "and" expired down to two to simplify translation.
2004-09-22* mainproc.c (check_sig_and_print), keyedit.c (show_prefs,David Shaw1-1/+1
menu_set_keyserver_url): Make sure that keyserver URLs with control characters inside are printed properly. In fact, handle them as UTF8.
2004-07-15* keyedit.c (sign_uids): Properly handle remaking a self-sig on revoked orDavid Shaw1-0/+7
expired user IDs. Also, once we've established that a given uid cannot or will not be signed, don't continue to ask about each sig. * mainproc.c (proc_symkey_enc), seckey-cert.c (do_check): Check the S2K hash algorithm before we try to generate a passphrase using it. This prevents hitting BUG() when generating a passphrase using a hash that we don't have. * sign.c (sign_symencrypt_file): Allow using --force-mdc in --sign --symmetric messages.
2004-05-22some late minor fixes.V1-3-6Werner Koch1-4/+4
2004-05-22* mainproc.c (check_sig_and_print): If we're honoring preferredDavid Shaw1-13/+38
keyservers, and auto-key-retrieve is set, try and get a missing key from the preferred keyserver subpacket when we verify the sig. * gpgv.c (parse_preferred_keyserver, free_keyserver_spec): Stubs. * keyserver.c (keyidlist): Use new parse_preferred_keyserver function. (keyserver_work): Use the passed-in keyserver spec rather than the options global one. * keyserver-internal.h, keyserver.c (parse_preferred_keyserver): New function to take a sig and return a split out keyserver_spec. (keyserver_import_keyid): Now takes a keyserver_spec.
2004-05-20* options.h (ctrl): New for member IN_AUTO_KEY_RETRIEVE.David Shaw1-1/+6
* mainproc.c (check_sig_and_print): track whether we are retrieving a key. * status.c (status_currently_allowed): New. (write_status_text, write_status_text_and_buffer): Use it here. * g10.c: New command --gpgconf-list. (gpgconf_list): New. From Werner on stable branch.
2004-05-10* options.h, mainproc.c (symkey_decrypt_seskey), keyserver.c (structDavid Shaw1-1/+1
keyrec, parse_keyrec, keyserver_search_prompt), keyedit.c (keyedit_menu), g10.c (add_keyserver_url, add_policy_url): Fix some compiler warnings.
2004-05-05* keylist.c (show_notation): Use bits to select which sort of notation toDavid Shaw1-1/+3
show. Don't allow a not-shown notation to prevent us from issuing the proper --status-fd message. * options.h, g10.c (main): Add show-std/standard-notations and show-user-notations. show-notations is both. Default is to show standard notations only during verify. Change all callers.
2004-04-29* main.h, keylist.c (show_notation): Add argument to show only userDavid Shaw1-2/+2
notations, only standard notations, or both. Change all callers. * keyserver.c (keyserver_spawn): We still need EXEC_TEMPFILE_ONLY.
2004-04-15* options.h, keyserver.c (parse_keyserver_options): Remove duplicate codeDavid Shaw1-1/+1
from parse_keyserver_options by calling the generic parse_options. * keyserver.c (keyserver_spawn, keyserver_refresh), g10.c (main), gpgv.c (main), mainproc.c (check_sig_and_print), import.c (revocation_present): Change all callers.
2004-04-14* options.h, import.c, keyserver-internal.h, g10.c, mainproc.c,David Shaw1-1/+1
keyserver.c (parse_keyserver_uri): Parse keyserver URI into a structure. Cleanup for new "guess my keyserver" functionality, as well as refreshing via a preferred keyserver subpacket.