aboutsummaryrefslogtreecommitdiffstats
path: root/g10/openfile.c (follow)
Commit message (Collapse)AuthorAgeFilesLines
* gpg: Make the use of "--verify FILE" for detached sigs harder.Werner Koch2014-11-141-27/+56
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * g10/openfile.c (open_sigfile): Factor some code out to ... (get_matching_datafile): new function. * g10/plaintext.c (hash_datafiles): Do not try to find matching file in batch mode. * g10/mainproc.c (check_sig_and_print): Print a warning if a possibly matching data file is not used by a standard signatures. -- Allowing to use the abbreviated form for detached signatures is a long standing bug which has only been noticed by the public with the release of 2.1.0. :-( What we do is to remove the ability to check detached signature in --batch using the one file abbreviated mode. This should exhibit problems in scripts which use this insecure practice. We also print a warning if a matching data file exists but was not considered because the detached signature was actually a standard signature: gpgv: Good signature from "Werner Koch (dist sig)" gpgv: WARNING: not a detached signature; \ file 'gnupg-2.1.0.tar.bz2' was NOT verified! We can only print a warning because it is possible that a standard signature is indeed to be verified but by coincidence a file with a matching name is stored alongside the standard signature. Reported-by: Simon Nicolussi (to gnupg-users on Nov 7) Signed-off-by: Werner Koch <[email protected]> (backported from commit 69384568f66a48eff3968bb1714aa13925580e9f)
* Remove trailing white space from two files.Werner Koch2014-08-121-8/+8
| | | | --
* Changed to GPLv3.Werner Koch2007-07-041-4/+2
| | | | | Removed intl/.
* More W32 related changesWerner Koch2007-06-261-29/+27
|
* A whole bunch of changes to allow building for Windows.Werner Koch2007-06-141-1/+4
| | | | | See the ChangeLogs for details.
* Preparing 2.0.4gnupg-2.0.4Werner Koch2007-05-091-2/+2
|
* Upgraded gettext.Werner Koch2007-05-071-2/+12
| | | | | Fixed accidental dependency on libgcrypt 1.3.0.
* Doc fix.Werner Koch2006-12-081-2/+2
| | | | | Don't let gpg2 fail if the option skeleton file is missing
* * openfile.c (ask_outfile_name): Fixed buffer overflow occurringWerner Koch2006-11-271-34/+36
| | | | | | if make_printable_string returns a longer string. Fixes bug 728.
* Take advantage of newer gpg-error features.Werner Koch2006-09-141-2/+2
|
* Merged with gpg 1.4.3 code. Werner Koch2006-04-191-40/+73
| | | | | The gpg part does not yet build.
* 2004-09-11 Moritz Schulte <[email protected]>Moritz Schulte2004-09-111-1/+1
| | | | | * openfile.c (copy_options_file): Fixed last commit (added a `+').
* Better take the length of SKELEXT into accountWerner Koch2004-08-311-1/+2
|
* * openfile.c (copy_options_file): Use gpg-conf.skelWerner Koch2004-08-311-1/+1
| | | | | * Makefile.am: Install options.skel as gpg-conf.skel.
* * gpgv.c: Removed g10defs.h.Werner Koch2004-02-121-1/+1
| | | | | * Makefile.am: Include cmacros.am for common flags.
* Finished the bulk of changes for gnupg 1.9. This included switchingWerner Koch2003-06-181-25/+27
| | | | | | | | | | | to libgcrypt functions, using shared error codes from libgpg-error, replacing the old functions we used to have in ../util by those in ../jnlib and ../common, renaming the malloc functions and a couple of types. Note, that not all changes are listed below becuause they are too similar and done at far too many places. As of today the code builds using the current libgcrypt from CVS but it is very unlikely that it actually works.
* This commit was manufactured by cvs2svn to create branchRepo Admin2003-06-051-0/+389
| | | | 'GNUPG-1-9-BRANCH'.
* This commit was manufactured by cvs2svn to create branchRepo Admin2002-10-191-362/+0
| | | | 'GNUPG-1-9-BRANCH'.
* Cleanups and minor fixes.Werner Koch2002-09-101-3/+3
|
* * options.skel: Some language tweaks, and remove the load-extensionDavid Shaw2002-08-091-0/+3
| | | | | | | | | | | | | | | section for random gatherers. * keyring.c (create_tmp_file, rename_tmp_file): Create tmp files with user-only permissions, but restore the original permissions if the user has something special set. * openfile.c (copy_options_file): Create new options file (gpg.conf) with user-only permissions. * keydb.c (keydb_add_resource): Create new keyrings with user-only permissions.
* use of EXTSEP_SStefan Bellon2002-08-061-1/+1
|
* * g10.c (main): Try to use "gpg.conf" as default option file.Werner Koch2002-08-061-3/+3
| | | | | * openfile.c (copy_options_file): Changed name of created file.
* Update head to match stable 1.0David Shaw2002-06-291-47/+55
|
* See ChangeLog: Mon Sep 18 16:35:45 CEST 2000 Werner KochWerner Koch2000-09-181-2/+30
|
* See ChangeLog: Fri Jul 14 19:38:23 CEST 2000 Werner KochWerner Koch2000-07-141-6/+31
|
* See ChangeLog: Thu Jan 27 18:00:44 CET 2000 Werner KochWerner Koch2000-01-271-3/+3
|
* See ChangeLog: Mon Jan 24 13:04:28 CET 2000 Werner KochWerner Koch2000-01-241-16/+16
|
* See ChangeLog: Tue Oct 26 14:10:21 CEST 1999 Werner KochWerner Koch1999-10-261-11/+37
|
* See ChangeLog: Mon Jul 12 14:55:34 CEST 1999 Werner KochWerner Koch1999-07-121-1/+1
|
* See ChangeLog: Thu Jul 1 12:47:31 CEST 1999 Werner KochWerner Koch1999-07-011-0/+38
|
* See ChangeLog: Tue Jun 1 16:01:46 CEST 1999 Werner KochWerner Koch1999-06-011-0/+32
|
* See ChangeLog: Sun May 23 14:20:22 CEST 1999 Werner KochWerner Koch1999-05-231-2/+2
|
* See ChangeLog: Sat May 22 22:47:26 CEST 1999 Werner KochWerner Koch1999-05-221-1/+1
|
* See ChangeLog: Wed May 19 16:04:30 CEST 1999 Werner KochWerner Koch1999-05-191-0/+2
|
* See ChangeLog: Thu Feb 25 18:47:39 CET 1999 Werner KochWerner Koch1999-02-251-1/+6
|
* See ChangeLog: Sun Jan 24 18:16:26 CET 1999 Werner KochWerner Koch1999-01-241-1/+12
|
* See ChangeLog: Tue Dec 29 14:41:47 CET 1998 Werner KochWerner Koch1998-12-291-3/+3
|
* See ChangeLog: Wed Dec 23 13:34:22 CET 1998 Werner KochWerner Koch1998-12-231-3/+3
|
* See ChangeLog: Fri Nov 27 12:39:29 CET 1998 Werner KochWerner Koch1998-11-271-1/+1
|
* some random changesWerner Koch1998-10-251-5/+49
|
* bug fix releaseV0-3-4Werner Koch1998-08-111-7/+14
|
* ready for a new releaseWerner Koch1998-08-081-37/+18
|
* syncWerner Koch1998-07-141-0/+2
|
* applied Mathews typo and grammar fixesWerner Koch1998-04-141-1/+1
|
* partial DSA supportWerner Koch1998-03-091-3/+4
|
* release 0.2.9Werner Koch1998-02-261-2/+3
|
* Renamed to GNUPGV-0-2-8Werner Koch1998-02-241-6/+6
|
* changed configuration stuff, replaced some Makefile.am by distfiles.Werner Koch1997-12-231-2/+31
|
* very first releaseWerner Koch1997-12-201-1/+1
|
* IDEA removed, signing worksWerner Koch1997-11-241-0/+119