aboutsummaryrefslogtreecommitdiffstats
path: root/g10 (unfollow)
Commit message (Collapse)AuthorFilesLines
2002-08-21* import.c (import_print_stats): Print new non_imported counterWerner Koch2-3/+14
which is currently not used becuase we terminate on errors.
2002-08-20* options.skel: Document no-include-attributes for keyserver-options.David Shaw2-8/+17
2002-08-20* keylist.c, keyedit.c, keyserver.c, sign.c: Some TODOs and comments.David Shaw7-4/+39
* export.c (do_export_stream): Fix noop bug in exporting sensitive revocation keys. * pkclist.c (do_edit_ownertrust): Comment out the option for showing trust paths until it can be implemented.
2002-08-19* getkey.c (get_user_id_native): Renamed to ..Werner Koch11-38/+120
(get_user_id_printable): this. Filter out all dangerous characters. Checked all usages. (get_user_id_string_native): Renamed to.. (get_user_id_string_printable): this. Filter out all dangerous characters. Checked all usages. * keyedit.c (show_basic_key_info): New. * keylist.c (print_fingerprint): New mode 3. * import.c (import_one): Use new function to display the user ID.
2002-08-182002-08-16 Timo Schulz <[email protected]>Timo Schulz3-1/+26
* g10.c (main): enable opt.interactive. * import.c (import_one): Ask the user if the key shall be imported when the interactive mode is used. Useful to extract selected keys from a file.
2002-08-16Removed a leftover conflict indicator.Werner Koch1-1/+0
2002-08-16* seckey-cert.c: Workaround to allow decryption of v3 keys createdWerner Koch2-0/+31
with a bug in the mpi_get_secure_buffer.
2002-08-14* hkp.c (parse_hkp_index): Properly handle really large keys (5 digit keyDavid Shaw2-4/+9
length) in HKP searches.
2002-08-13* encode.c (encode_simple): Fix problem with using compression algo 2 andDavid Shaw5-47/+114
symmetric compressed files. * encode.c (encode_simple, encode_crypt): If we are not using a MDC, compress even if a file is already compressed. This is to help against the chosen ciphertext attack. * pkclist.c (select_algo_from_prefs): Fix requested algorithm bug so the request succeeds even if the requested algorithm is not the first found. * cipher.c (write_header), encode.c (use_mdc, encode_simple, encode_crypt, encrypt_filter), g10.c (main): Be more eager to use a MDC. We use a MDC if the keys directly support it, if the keys list AES (any) or TWOFISH anywhere in the prefs, or if the cipher chosen does not have a 64 bit blocksize.
2002-08-09* options.skel: Some language tweaks, and remove the load-extensionDavid Shaw5-61/+71
section for random gatherers. * keyring.c (create_tmp_file, rename_tmp_file): Create tmp files with user-only permissions, but restore the original permissions if the user has something special set. * openfile.c (copy_options_file): Create new options file (gpg.conf) with user-only permissions. * keydb.c (keydb_add_resource): Create new keyrings with user-only permissions.
2002-08-08* tdbio.c (tdbio_set_dbname): Create new trustdbs with user-onlyDavid Shaw2-0/+8
permissions.
2002-08-07* sig-check.c (signature_check2): Sanity check that the md has a contextDavid Shaw2-1/+17
for the hash that the sig is expecting. This can happen if a onepass sig header does not match the actual sig, and also if the clearsign "Hash:" header is missing or does not match the actual sig.
2002-08-07* keyedit.c (menu_revsig): Properly show a uid is revoked withoutDavid Shaw7-135/+212
restarting gpg. This is Debian bug 124219, though their supplied patch will not do the right thing. * main.h, tdbio.c (tdbio_set_dbname), misc.c (removed check_permissions), keydb.c (keydb_add_resource), g10.c (main, check_permissions): Significant reworking of the permission check mechanism. The new behavior is to check everything in the homedir by checking the homedir itself. If the user wants to put (possibly shared) keyrings outside the homedir, they are not checked. The options file and any extension files are checked wherever they are, as well as their enclosing directories. This is Debian bug 147760.
2002-08-06use of EXTSEP_SStefan Bellon3-2/+7
2002-08-06* options.h, g10.c (main), mainproc.c (proc_encrypted): --ignore-mdc-errorDavid Shaw5-3/+11
option to turn a MDC check error into a warning.
2002-08-06* encode.c (encode_crypt), g10.c (main), sign.c (sign_file,David Shaw4-7/+27
clearsign_file): Use the same --pgpX warning string everywhere to ease translations. * encode.c (write_pubkey_enc_from_list): Warn when using --throw-keyid with --pgpX. Noted by Vedaal Nistar.
2002-08-06* revoke.c (export_minimal_pk, gen_desig_revoke, gen_revoke): Export aDavid Shaw2-132/+179
minimal pk along with the revocation cert when in --pgpX mode so that PGP can import it.
2002-08-06* options.skel: Changed comments.Werner Koch2-2/+4
* gpg.sgml: Fixed doc regarding the name change of the option file.
2002-08-06* g10.c (main): Try to use "gpg.conf" as default option file.Werner Koch3-5/+23
* openfile.c (copy_options_file): Changed name of created file.
2002-08-03The big extension module removal.Werner Koch2-1/+5
2002-08-02* delkey.c (do_delete_key): Always allow to delete a key in batch modeWerner Koch2-0/+18
when specified by fingerprint. Suggested by Enzo Michelangeli.
2002-07-30* options.h, g10.c (main), mainproc.c (proc_encrypted): Return aDavid Shaw6-9/+23
decryption failed error if a MDC does not verify. Warn if a MDC is not present (can disable via --no-mdc-warning). * exec.c (exec_write), g10.c (main), keyserver.c (keyserver_spawn): Use new DISABLE_KEYSERVER_PATH rather than FIXED_EXEC_PATH.
2002-07-29* sig-check.c (do_check): Properly validate v4 sigs with no hashed sectionDavid Shaw2-2/+12
at all.
2002-07-25* keyedit.c (menu_revsig): Change "revsig" to honor selected uids so theDavid Shaw3-11/+25
user can revoke sigs from particular uids only. * keylist.c (list_keyblock_print): Don't display expired uids in --list-keys unless -v and not --list-sigs (just like revoked uids).
2002-07-25* exec.c, export.c, import.c, keyedit.c, keyserver.c, misc.c: "Warning" ->David Shaw7-13/+18
"WARNING"
2002-07-24* main.h, import.c (parse_import_options, fix_hkp_corruption, import_one,David Shaw6-26/+116
delete_inv_parts), g10.c (main): New import-option "repair-hkp-subkey-bug", which repairs as much as possible the HKP mangling multiple subkeys bug. It is on by default for keyserver receives, and off by default for regular --import. * main.h, import.c (import, import_one, delete_inv_parts), hkp.c (hkp_ask_import), keyserver.c (keyserver_spawn): Use keyserver import options when doing keyserver receives.
2002-07-24* options.h, exec.h, exec.c (set_exec_path, exec_write), g10.c (main),David Shaw6-8/+42
keyserver.c (keyserver_spawn): If the user does not use "exec-path", completely replace $PATH with GNUPG_LIBEXECDIR before calling the keyserver helper. If the user does use "exec-path", append GNUPG_LIBEXECDIR after the specified path.
2002-07-24Forgot to commit this:Werner Koch2-1/+4
* photoid.c (get_default_photo_command): Also use __MINGW32__ instead of HAVE_DOSISH_SYSTEM.
2002-07-24* import.c (parse_import_options), export.c (parse_export_options): FixDavid Shaw3-2/+12
offset problem with reversed ("no-") meanings.
2002-07-24* import.c (delete_inv_parts): Discard subkey signatures (0x18 and 0x28)David Shaw2-1/+15
if found in the userid section of the key.
2002-07-23* sig-check.c (signature_check2): Signatures made by invalid subkeysDavid Shaw3-3/+62
(bad/missing binding sig) are also invalid. * keylist.c (print_fingerprint): Show the primary as well as the secondary key fingerprint in modes 1 & 2.
2002-07-22* options.h, main.h, g10.c (main), import.c (parse_import_options,David Shaw6-12/+91
delete_inv_parts), keyserver.c (parse_keyserver_options): add new --import-options option. The only current flag is "allow-local-sigs". * g10.c (main): Don't disable MDC in pgp7 mode. * options.h, g10.c (main), keyserver.c (parse_keyserver_options): Remove old keyserver-option include-attributes now that there is an export-option for the same thing.
2002-07-22* options.h, main.h, export.c (parse_export_options, do_export_stream),David Shaw8-33/+111
g10.c (main): add new --export-options option. Current flags are "include-non-rfc", "include-local-sigs", "include-attributes", and "include-sensitive-revkeys". * options.h, hkp.c (hkp_export), keyserver.c (parse_keyserver_options, keyserver_spawn): try passing unknown keyserver options to export options, and if successful, use them when doing a keyserver --send-key. * build-packet.c (build_sig_subpkt): We do not generate SIGSUBPKT_PRIV_VERIFY_CACHE anymore.
2002-07-22* revoke.c (gen_desig_revoke): Lots more comments about includingDavid Shaw3-15/+33
sensitive revkeys along with the revocation sig itself. * keyserver.c (parse_keyserver_options): Simpler implementation that can skip one pass over the options.
2002-07-19* keyedit.c (keyedit_menu, menu_addrevoker): Allow specifying "sensitive"David Shaw3-6/+80
as an argument to an addrevoker command. This sets the 0x40 sensitive revoker flag. * revoke.c (gen_desig_revoke): When generating a designated revocation, include the direct key sig that contains the designated revoker subpacket. This allows sensitive designated revocation subpackets to be exported. Also indicate which revokers are sensitive in the first place.
2002-07-17* keyedit.c (show_key_with_all_names_colon): The 0x40 class bit in aDavid Shaw8-20/+61
designated revoker means "sensitive", not "local". It's exportable under the right circumstances. * main.h, options.h, export.c (do_export_stream), g10.c (main), hkp.c (hkp_export), keyserver.c (keyserver_spawn: Add a flag to skip attribute packets and their signatures while exporting. This is to accomodate keyservers (pksd again) that choke on attributes. Use keyserver-option "include-attributes" to control it. This defaults to ON (i.e. don't skip).
2002-07-09* options.h, keyserver.c (parse_keyserver_uri, keyserver_spawn,David Shaw4-53/+103
keyserver_work), hkp.c (hkp_ask_import, hkp_export, hkp_search): Use a much more strict reading of RFC-2396 for the keyserver URIs. Specifically, don't try and be smart about checking the value of ":port" so long as it is all digits, and properly handle opaque data (those scheme specific parts that do not start with "//").
2002-07-04* photoid.c (get_default_photo_command, show_photos): HonorDavid Shaw7-6/+46
FIXED_PHOTO_VIEWER and DISABLE_PHOTO_VIEWER. * mainproc.c (check_sig_and_print): Use --show-photos to show photos when verifying a sig made by a key with a photo. * keyserver.c (parse_keyserver_uri): Properly parse a URI with no :port section and an empty file path, but with a terminating '/'. (keyserver_work): Honor DISABLE_KEYSERVER_HELPERS. * hkp.c (hkp_ask_import): Display keyserver URI as a URI, but only if verbose. * exec.c, g10.c: USE_EXEC_PATH -> FIXED_EXEC_PATH
2002-07-03* exec.h, exec.c (set_exec_path, exec_write), g10.c (main): IfDavid Shaw4-9/+30
USE_EXEC_PATH is defined at compile time, use it to lock the exec-path and not allow the user to change it.
2002-07-02* options.h, g10.c (main), keyserver.c (keyserver_refresh): Maintain andDavid Shaw5-7/+41
use the original keyserver URI for cosmetics rather than trying to recreate it when needed. * mainproc.c (check_sig_and_print): Properly disregard expired uids. Make sure that the first uid listed is a real uid and not an attribute (attributes should only be listed in the "aka" section). When there are no valid textual userids, try for an invalid textual userid before using any attribute uid.
2002-07-02Removed old keyserver (daemon) code.Timo Schulz3-487/+0
2002-07-01* options.skel: Fix a few typos, clarify "group", and remove sample photoDavid Shaw4-13/+17
viewers for Win32 since they are the defaults now. * parse-packet.c (make_attribute_uidname), keylist.c (dump_attribs): Fix two typecast warnings.
2002-07-01* packet.h, build-packet.c (build_attribute_subpkt), exec.c (expand_args),David Shaw6-10/+17
mkdtemp.c (mkdtemp), photoid.c (parse_image_header): Fix some signedness compiler warnings.
2002-07-01* encode.c (encode_symmetric): Do not use the new encryption code.Werner Koch2-1/+11
2002-06-30* photoid.c: Use __MINGW32__ to include windows becauseWerner Koch2-2/+11
HAVE_DOSISH_SYSTEM is also set for OS/2 and plain DOS. Provide constant missing in older mingw installations.
2002-06-29Update head to match stable 1.0David Shaw78-13781/+24084
2000-12-21Does now work with libgcryptWerner Koch1-1/+1
2000-12-19Removed the libgcrypt stuff and started to modify the source to work withWerner Koch1-3/+3
that external library.
2000-11-14Some configuration changesWerner Koch3-5/+15
2000-10-11Add features packet and fixes MIPS3.Werner Koch5-1/+21
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-21 12:00:11 +0000