aboutsummaryrefslogtreecommitdiffstats
path: root/g10 (unfollow)
Commit message (Collapse)AuthorFilesLines
2002-08-09* options.skel: Some language tweaks, and remove the load-extensionDavid Shaw5-61/+71
section for random gatherers. * keyring.c (create_tmp_file, rename_tmp_file): Create tmp files with user-only permissions, but restore the original permissions if the user has something special set. * openfile.c (copy_options_file): Create new options file (gpg.conf) with user-only permissions. * keydb.c (keydb_add_resource): Create new keyrings with user-only permissions.
2002-08-08* tdbio.c (tdbio_set_dbname): Create new trustdbs with user-onlyDavid Shaw2-0/+8
permissions.
2002-08-07* sig-check.c (signature_check2): Sanity check that the md has a contextDavid Shaw2-1/+17
for the hash that the sig is expecting. This can happen if a onepass sig header does not match the actual sig, and also if the clearsign "Hash:" header is missing or does not match the actual sig.
2002-08-07* keyedit.c (menu_revsig): Properly show a uid is revoked withoutDavid Shaw7-135/+212
restarting gpg. This is Debian bug 124219, though their supplied patch will not do the right thing. * main.h, tdbio.c (tdbio_set_dbname), misc.c (removed check_permissions), keydb.c (keydb_add_resource), g10.c (main, check_permissions): Significant reworking of the permission check mechanism. The new behavior is to check everything in the homedir by checking the homedir itself. If the user wants to put (possibly shared) keyrings outside the homedir, they are not checked. The options file and any extension files are checked wherever they are, as well as their enclosing directories. This is Debian bug 147760.
2002-08-06use of EXTSEP_SStefan Bellon3-2/+7
2002-08-06* options.h, g10.c (main), mainproc.c (proc_encrypted): --ignore-mdc-errorDavid Shaw5-3/+11
option to turn a MDC check error into a warning.
2002-08-06* encode.c (encode_crypt), g10.c (main), sign.c (sign_file,David Shaw4-7/+27
clearsign_file): Use the same --pgpX warning string everywhere to ease translations. * encode.c (write_pubkey_enc_from_list): Warn when using --throw-keyid with --pgpX. Noted by Vedaal Nistar.
2002-08-06* revoke.c (export_minimal_pk, gen_desig_revoke, gen_revoke): Export aDavid Shaw2-132/+179
minimal pk along with the revocation cert when in --pgpX mode so that PGP can import it.
2002-08-06* options.skel: Changed comments.Werner Koch2-2/+4
* gpg.sgml: Fixed doc regarding the name change of the option file.
2002-08-06* g10.c (main): Try to use "gpg.conf" as default option file.Werner Koch3-5/+23
* openfile.c (copy_options_file): Changed name of created file.
2002-08-03The big extension module removal.Werner Koch2-1/+5
2002-08-02* delkey.c (do_delete_key): Always allow to delete a key in batch modeWerner Koch2-0/+18
when specified by fingerprint. Suggested by Enzo Michelangeli.
2002-07-30* options.h, g10.c (main), mainproc.c (proc_encrypted): Return aDavid Shaw6-9/+23
decryption failed error if a MDC does not verify. Warn if a MDC is not present (can disable via --no-mdc-warning). * exec.c (exec_write), g10.c (main), keyserver.c (keyserver_spawn): Use new DISABLE_KEYSERVER_PATH rather than FIXED_EXEC_PATH.
2002-07-29* sig-check.c (do_check): Properly validate v4 sigs with no hashed sectionDavid Shaw2-2/+12
at all.
2002-07-25* keyedit.c (menu_revsig): Change "revsig" to honor selected uids so theDavid Shaw3-11/+25
user can revoke sigs from particular uids only. * keylist.c (list_keyblock_print): Don't display expired uids in --list-keys unless -v and not --list-sigs (just like revoked uids).
2002-07-25* exec.c, export.c, import.c, keyedit.c, keyserver.c, misc.c: "Warning" ->David Shaw7-13/+18
"WARNING"
2002-07-24* main.h, import.c (parse_import_options, fix_hkp_corruption, import_one,David Shaw6-26/+116
delete_inv_parts), g10.c (main): New import-option "repair-hkp-subkey-bug", which repairs as much as possible the HKP mangling multiple subkeys bug. It is on by default for keyserver receives, and off by default for regular --import. * main.h, import.c (import, import_one, delete_inv_parts), hkp.c (hkp_ask_import), keyserver.c (keyserver_spawn): Use keyserver import options when doing keyserver receives.
2002-07-24* options.h, exec.h, exec.c (set_exec_path, exec_write), g10.c (main),David Shaw6-8/+42
keyserver.c (keyserver_spawn): If the user does not use "exec-path", completely replace $PATH with GNUPG_LIBEXECDIR before calling the keyserver helper. If the user does use "exec-path", append GNUPG_LIBEXECDIR after the specified path.
2002-07-24Forgot to commit this:Werner Koch2-1/+4
* photoid.c (get_default_photo_command): Also use __MINGW32__ instead of HAVE_DOSISH_SYSTEM.
2002-07-24* import.c (parse_import_options), export.c (parse_export_options): FixDavid Shaw3-2/+12
offset problem with reversed ("no-") meanings.
2002-07-24* import.c (delete_inv_parts): Discard subkey signatures (0x18 and 0x28)David Shaw2-1/+15
if found in the userid section of the key.
2002-07-23* sig-check.c (signature_check2): Signatures made by invalid subkeysDavid Shaw3-3/+62
(bad/missing binding sig) are also invalid. * keylist.c (print_fingerprint): Show the primary as well as the secondary key fingerprint in modes 1 & 2.
2002-07-22* options.h, main.h, g10.c (main), import.c (parse_import_options,David Shaw6-12/+91
delete_inv_parts), keyserver.c (parse_keyserver_options): add new --import-options option. The only current flag is "allow-local-sigs". * g10.c (main): Don't disable MDC in pgp7 mode. * options.h, g10.c (main), keyserver.c (parse_keyserver_options): Remove old keyserver-option include-attributes now that there is an export-option for the same thing.
2002-07-22* options.h, main.h, export.c (parse_export_options, do_export_stream),David Shaw8-33/+111
g10.c (main): add new --export-options option. Current flags are "include-non-rfc", "include-local-sigs", "include-attributes", and "include-sensitive-revkeys". * options.h, hkp.c (hkp_export), keyserver.c (parse_keyserver_options, keyserver_spawn): try passing unknown keyserver options to export options, and if successful, use them when doing a keyserver --send-key. * build-packet.c (build_sig_subpkt): We do not generate SIGSUBPKT_PRIV_VERIFY_CACHE anymore.
2002-07-22* revoke.c (gen_desig_revoke): Lots more comments about includingDavid Shaw3-15/+33
sensitive revkeys along with the revocation sig itself. * keyserver.c (parse_keyserver_options): Simpler implementation that can skip one pass over the options.
2002-07-19* keyedit.c (keyedit_menu, menu_addrevoker): Allow specifying "sensitive"David Shaw3-6/+80
as an argument to an addrevoker command. This sets the 0x40 sensitive revoker flag. * revoke.c (gen_desig_revoke): When generating a designated revocation, include the direct key sig that contains the designated revoker subpacket. This allows sensitive designated revocation subpackets to be exported. Also indicate which revokers are sensitive in the first place.
2002-07-17* keyedit.c (show_key_with_all_names_colon): The 0x40 class bit in aDavid Shaw8-20/+61
designated revoker means "sensitive", not "local". It's exportable under the right circumstances. * main.h, options.h, export.c (do_export_stream), g10.c (main), hkp.c (hkp_export), keyserver.c (keyserver_spawn: Add a flag to skip attribute packets and their signatures while exporting. This is to accomodate keyservers (pksd again) that choke on attributes. Use keyserver-option "include-attributes" to control it. This defaults to ON (i.e. don't skip).
2002-07-09* options.h, keyserver.c (parse_keyserver_uri, keyserver_spawn,David Shaw4-53/+103
keyserver_work), hkp.c (hkp_ask_import, hkp_export, hkp_search): Use a much more strict reading of RFC-2396 for the keyserver URIs. Specifically, don't try and be smart about checking the value of ":port" so long as it is all digits, and properly handle opaque data (those scheme specific parts that do not start with "//").
2002-07-04* photoid.c (get_default_photo_command, show_photos): HonorDavid Shaw7-6/+46
FIXED_PHOTO_VIEWER and DISABLE_PHOTO_VIEWER. * mainproc.c (check_sig_and_print): Use --show-photos to show photos when verifying a sig made by a key with a photo. * keyserver.c (parse_keyserver_uri): Properly parse a URI with no :port section and an empty file path, but with a terminating '/'. (keyserver_work): Honor DISABLE_KEYSERVER_HELPERS. * hkp.c (hkp_ask_import): Display keyserver URI as a URI, but only if verbose. * exec.c, g10.c: USE_EXEC_PATH -> FIXED_EXEC_PATH
2002-07-03* exec.h, exec.c (set_exec_path, exec_write), g10.c (main): IfDavid Shaw4-9/+30
USE_EXEC_PATH is defined at compile time, use it to lock the exec-path and not allow the user to change it.
2002-07-02* options.h, g10.c (main), keyserver.c (keyserver_refresh): Maintain andDavid Shaw5-7/+41
use the original keyserver URI for cosmetics rather than trying to recreate it when needed. * mainproc.c (check_sig_and_print): Properly disregard expired uids. Make sure that the first uid listed is a real uid and not an attribute (attributes should only be listed in the "aka" section). When there are no valid textual userids, try for an invalid textual userid before using any attribute uid.
2002-07-02Removed old keyserver (daemon) code.Timo Schulz3-487/+0
2002-07-01* options.skel: Fix a few typos, clarify "group", and remove sample photoDavid Shaw4-13/+17
viewers for Win32 since they are the defaults now. * parse-packet.c (make_attribute_uidname), keylist.c (dump_attribs): Fix two typecast warnings.
2002-07-01* packet.h, build-packet.c (build_attribute_subpkt), exec.c (expand_args),David Shaw6-10/+17
mkdtemp.c (mkdtemp), photoid.c (parse_image_header): Fix some signedness compiler warnings.
2002-07-01* encode.c (encode_symmetric): Do not use the new encryption code.Werner Koch2-1/+11
2002-06-30* photoid.c: Use __MINGW32__ to include windows becauseWerner Koch2-2/+11
HAVE_DOSISH_SYSTEM is also set for OS/2 and plain DOS. Provide constant missing in older mingw installations.
2002-06-29Update head to match stable 1.0David Shaw78-13781/+24084
2000-12-21Does now work with libgcryptWerner Koch1-1/+1
2000-12-19Removed the libgcrypt stuff and started to modify the source to work withWerner Koch1-3/+3
that external library.
2000-11-14Some configuration changesWerner Koch3-5/+15
2000-10-11Add features packet and fixes MIPS3.Werner Koch5-1/+21
2000-10-10Changed keyring handling - saving still does not work.Werner Koch11-180/+196
Added new cipher mode and updated cipher test program.
2000-10-06See ChangeLog: Fri Oct 6 14:29:16 CEST 2000 Werner KochWerner Koch16-1312/+467
2000-10-04See ChangeLog: Wed Oct 4 13:16:18 CEST 2000 Werner KochWerner Koch14-293/+263
2000-09-18See ChangeLog: Mon Sep 18 16:35:45 CEST 2000 Werner KochWerner Koch26-772/+1424
2000-08-21See ChangeLog: Mon Aug 21 17:59:17 CEST 2000 Werner KochWerner Koch6-0/+380
2000-08-18See ChangeLog: Fri Aug 18 14:27:14 CEST 2000 Werner KochWerner Koch2-1/+6
2000-07-31See ChangeLog: Mon Jul 31 10:04:47 CEST 2000 Werner KochWerner Koch10-335/+517
2000-07-28See ChangeLog: Fri Jul 28 18:19:11 CEST 2000 Werner KochWerner Koch5-2/+31
2000-07-25See ChangeLog: Tue Jul 25 17:44:15 CEST 2000 Werner KochWerner Koch10-148/+222