aboutsummaryrefslogtreecommitdiffstats
path: root/g10 (unfollow)
Commit message (Collapse)AuthorFilesLines
2004-05-22some late minor fixes.V1-3-6Werner Koch8-15/+29
2004-05-22* mainproc.c (check_sig_and_print): If we're honoring preferredDavid Shaw5-41/+107
keyservers, and auto-key-retrieve is set, try and get a missing key from the preferred keyserver subpacket when we verify the sig. * gpgv.c (parse_preferred_keyserver, free_keyserver_spec): Stubs. * keyserver.c (keyidlist): Use new parse_preferred_keyserver function. (keyserver_work): Use the passed-in keyserver spec rather than the options global one. * keyserver-internal.h, keyserver.c (parse_preferred_keyserver): New function to take a sig and return a split out keyserver_spec. (keyserver_import_keyid): Now takes a keyserver_spec.
2004-05-21* keyserver.c (keyidlist): Go back to the old fast keyid lister. OnlyDavid Shaw4-99/+166
merge selfsigs if we have to for honor-keyserver-url. (keyserver_refresh): Keyserver URL handler moved here. (calculate_keyid_fpr): Removed. * keydb.h, keyid.c (keystr_from_desc): Calculate a key string from a KEYDB_SEARCH_DESC.
2004-05-21* keyserver.c (keyserver_spawn): Fix keyserver options on tempfile onlyDavid Shaw2-1/+6
platforms. Noted by Roger Sondermann.
2004-05-20* keyserver.c (keyserver_work): Allow --refresh-keys with a preferredDavid Shaw4-119/+57
keyserver to happen even if there is no global keyserver set. * sig-check.c (do_check_messages): No need to check for Elgamal signatures any longer. (do_check_messages, do_check, check_key_signature2): --keyid-format conversion. * pkclist.c (show_paths, edit_ownertrust): Remove some unused code.
2004-05-20* options.h (ctrl): New for member IN_AUTO_KEY_RETRIEVE.David Shaw4-6/+62
* mainproc.c (check_sig_and_print): track whether we are retrieving a key. * status.c (status_currently_allowed): New. (write_status_text, write_status_text_and_buffer): Use it here. * g10.c: New command --gpgconf-list. (gpgconf_list): New. From Werner on stable branch.
2004-05-20* g10.c: New command --gpgconf-list. (gpgconf_list): New. From Werner onDavid Shaw2-11/+59
stable branch.
2004-05-20* pubkey-enc.c (get_session_key, get_it), keyedit.cDavid Shaw3-24/+32
(show_key_with_all_names, show_basic_key_info): --keyid-format conversion.
2004-05-19* sign.c (update_keysig_packet): Policies and notations should be strippedDavid Shaw3-3/+23
out when remaking a self-signature. Noted by Atom Smasher. * keyserver.c (parse_keyserver_uri): Fix compiler warnings.
2004-05-11* options.h, keyserver-internal.h, keyserver.c (parse_keyserver_uri):David Shaw4-45/+70
Improved URI parser that keeps track of the path information and doesn't modify the input string. (keyserver_spawn): Tell keyserver plugins about the path.
2004-05-11* keylist.c (show_policy_url, show_keyserver_url, show_notation)Werner Koch4-4/+35
(list_one): Use const char* for i18n string helpers. * keygen.c (do_generate_keypair, read_parameter_file): Really close the files. (do_generate_keypair): Create the secret key file using safe permissions. Noted by Atom Smasher.
2004-05-10* options.h, mainproc.c (symkey_decrypt_seskey), keyserver.c (structDavid Shaw6-15/+27
keyrec, parse_keyrec, keyserver_search_prompt), keyedit.c (keyedit_menu), g10.c (add_keyserver_url, add_policy_url): Fix some compiler warnings.
2004-05-08* keyedit.c (keyedit_menu, menu_set_keyserver_url): Allow passingDavid Shaw5-88/+134
preferred keyserver on "keyserver" command line. Sanity check keyserver URL before accepting it. * keyserver-internal.h, g10.c (main), keyserver.c (parse_keyserver_uri): Add an option to require the scheme:// and change all callers. (free_keyserver_spec): Make public.
2004-05-07(write_plaintext_packet): Fixed the detection of tooWerner Koch2-8/+18
large files in the same way as in encode.c.
2004-05-05* keylist.c (show_notation): Use bits to select which sort of notation toDavid Shaw6-47/+75
show. Don't allow a not-shown notation to prevent us from issuing the proper --status-fd message. * options.h, g10.c (main): Add show-std/standard-notations and show-user-notations. show-notations is both. Default is to show standard notations only during verify. Change all callers.
2004-04-29* main.h, keylist.c (show_notation): Add argument to show only userDavid Shaw6-7/+28
notations, only standard notations, or both. Change all callers. * keyserver.c (keyserver_spawn): We still need EXEC_TEMPFILE_ONLY.
2004-04-28* card-util.c (card_edit): Require PIN only for generate.Werner Koch3-33/+37
* app-openpgp.c (do_setattr): Sync FORCE_CHV1.
2004-04-27(keyserver_spawn) [EXEC_TEMPFILE_ONLY]: RemovedWerner Koch2-4/+3
setting use_temp_file because this option has been removed.
2004-04-27A bunch of changes for the openpgp card.Werner Koch19-259/+1954
2004-04-26* getkey.c (get_seckey_byname2): Significantly simplify this function byDavid Shaw2-32/+18
using key_byname to do the heavy lifting. Note that this also fixes an old problem when the first key on the secret keyring has an unusable stub primary, but is still chosen.
2004-04-26* getkey.c (key_byname): If namelist is NULL, return the first key in theDavid Shaw2-29/+46
keyring.
2004-04-23* keygen.c (make_backsig): If DO_BACKSIGS is not defined, do not createDavid Shaw7-6/+121
backsigs. * getkey.c (merge_selfsigs_subkey): Find 0x19 backsigs on subkey selfsigs and verify they are valid. If DO_BACKSIGS is not defined, fake this as always valid. * packet.h, parse-packet.c (parse_signature): Make parse_signature non-static so we can parse 0x19s in self-sigs. * main.h, sig-check.c (check_backsig): Check a 0x19 signature. (signature_check2): Give a backsig warning if there is no or a bad 0x19 with signatures from a subkey.
2004-04-22* parse-packet.c (dump_sig_subpkt, parse_one_sig_subpkt,David Shaw2-76/+93
can_handle_critical): Parse and display 0x19 signatures.
2004-04-20* keyserver.c (parse_keyserver_uri): Do not accept "http" as an alias forDavid Shaw2-2/+6
"hkp". They are not the same thing.
2004-04-19* options.h, g10.c (main): Add keyserver-option honor-keyserver-url.David Shaw4-94/+177
parse_keyserver_options now returns a success code. * keyserver.c (parse_keyserver_options): Return error on failure to parse. Currently there is no way to fail as any unrecognized options get saved to be sent to the keyserver plugins later. Check length of keyserver option tokens since with =arguments we must only match the prefix. (free_keyserver_spec): Moved code from parse_keyserver_url. (keyserver_work, keyserver_spawn): Pass in a struct keyserver_spec rather than using the global keyserver option. (calculate_keyid_fpr): New. Fills in a KEYDB_SEARCH_DESC for a key. (keyidlist): New implementation using get_pubkey_bynames rather than searching the keydb directly. If honor-keyserver-url is set, make up a keyserver_spec and try and fetch that key directly. Do not include it in the returned keyidlist in that case.
2004-04-16* plaintext.c (handle_plaintext): Accept 'u' as a plaintext mode thatDavid Shaw5-27/+46
requires end of line conversion. This is being considered for a UTF8 text packet. If this doesn't take place, no major harm done. If it does take place, we'll get a jump on starting the changeover. * g10.c (main): --no-use-embedded-filename. * build-packet.c (calc_plaintext, do_plaintext): Do not create illegal (packet header indicates a size larger than the actual packet) encrypted data packets when not compressing and using a filename longer than 255 characters. * keyedit.c (no_primary_warning): Cleanup. (menu_expire): Don't give primary warning for subkey expiration changes. These cannot reorder primaries.
2004-04-16* keygen.c (gen_elg, gen_dsa, gen_rsa, do_create, do_generate_keypair,David Shaw5-81/+220
generate_subkeypair): New is_subkey argument to set whether a generated key is a subkey. Do not overload the ret_sk. This is some early cleanup to do backsigs for signing subkeys. * keygen.c (write_keybinding, do_generate_keypair, generate_subkeypair): Keep track of the unprotected subkey secret key so we can make a backsig with it. * keygen.c (make_backsig): New function to add a backsig to a binding sig of signing subkeys. Currently disabled. (write_keybinding): Call it here, for signing subkeys only. * sign.c (make_keysig_packet): Allow generating 0x19 signatures (same as 0x18 or 0x28, but used for backsigs). * packet.h, build-packet.c (build_sig_subpkt): Add new SIGSUBPKT_SIGNATURE type for embedded signatures.
2004-04-16* main.h, misc.c (optsep, argsplit, optlen, parse_options): Simplify codeDavid Shaw5-37/+62
and properly handle a partial match against an option with an argument. * keyserver-internal.h, keyserver.c (parse_keyserver_options): Use new optsep and argsplit functions.
2004-04-16* main.h, misc.c (argsplit): Refactor argsep into argsplit and argsep soDavid Shaw3-32/+59
they can be called separately.
2004-04-15* options.h, keyserver.c (parse_keyserver_options): Remove duplicate codeDavid Shaw7-95/+90
from parse_keyserver_options by calling the generic parse_options. * keyserver.c (keyserver_spawn, keyserver_refresh), g10.c (main), gpgv.c (main), mainproc.c (check_sig_and_print), import.c (revocation_present): Change all callers.
2004-04-15* packet.h, getkey.c (fixup_uidnode, merge_selfsigs_subkey): Keep track ofDavid Shaw4-4/+20
which self-sig we actually chose. * keyedit.c (menu_expire, menu_set_primary_uid, menu_set_preferences): Use it here to avoid updating non-used self-sigs and possibly promoting an old self-sig into consideration again.
2004-04-14* options.h, import.c, keyserver-internal.h, g10.c, mainproc.c,David Shaw7-53/+80
keyserver.c (parse_keyserver_uri): Parse keyserver URI into a structure. Cleanup for new "guess my keyserver" functionality, as well as refreshing via a preferred keyserver subpacket.
2004-04-14* options.h: Encapsulate keyserver details. Change all callers.David Shaw6-48/+57
2004-03-28* keyedit.c (keyedit_menu): Request a trustdb update when adding a newDavid Shaw2-2/+10
user ID so the new ID gets validity set. Reported by Owen Taylor.
2004-03-25* options.h, g10.c (main), compress-bz2.c (init_uncompress): RenameDavid Shaw4-8/+14
--bzip2-compress-lowmem to --bzip2-decompress-lowmem since it applies to decompression, not compression.
2004-03-24* keyedit.c (sign_uids, show_key_and_fingerprint, ask_revoke_sig,David Shaw2-64/+61
menu_revsig, menu_showphoto): --keyid-format conversion. (menu_addrevoker): Use print_pubkey_info() rather than duplicating code.
2004-03-19* trustdb.c (update_min_ownertrust, validate_keys): Do not use keystrDavid Shaw5-7/+29
functions in log_debug. * import.c (import_one): Try and collapse user IDs when importing a key for the first time. * keyedit.c (menu_addrevoker): Allow appointing a subkey as a designated revoker if the user forces it via keyid!, so long as the subkey can certify. Also use the proper date string when prompting for confirmation. * g10.c (main): Maintain ordering of multiple Comment lines. Requested by Peter Hyman.
2004-03-18* mainproc.c (proc_pubkey_enc, print_pkenc_list, list_node):David Shaw2-49/+51
--keyid-format conversion.
2004-03-16* getkey.c (skip_unusable, merge_selfsigs_main,David Shaw2-36/+46
premerge_public_with_secret, lookup, get_user_id_string): --keyid-format conversion.
2004-03-15* trustdb.c (add_utk, verify_own_keys, update_min_ownertrust,David Shaw2-31/+34
get_validity, ask_ownertrust, validate_keys): --keyid-format conversion.
2004-03-15* import.c (check_prefs_warning, check_prefs): --keyid-format conversionDavid Shaw2-228/+273
and a little better text. (import_one, import_secret_one, import_revoke_cert, chk_self_sigs, delete_inv_parts, merge_blocks): Still more --keyid-format conversions.
2004-03-06* keylist.c (print_seckey_info, print_pubkey_info): --keyid-formatDavid Shaw2-35/+28
conversion. (list_keyblock_print): 0xshort should not push us into the new list format since it is not much longer than regular 8-character short keyids.
2004-03-06* keydb.h, keyid.c (keystr_from_pk, keystr_from_sk): New functions to pullDavid Shaw4-65/+95
a key string from a key in one step. This isn't faster than before, but makes for neater code. * keylist.c (list_keyblock_print): Use keystr_from_xx here. (print_key_data): No need to pass a keyid in.
2004-03-06* keyid.c (keyid_from_sk): Minor performance boost by caching secret keyDavid Shaw2-25/+41
keyids so we don't have to calculate them each time.
2004-03-05* getkey.c (merge_selfsigs_subkey): Do not mark subkeys valid if we do notDavid Shaw3-5/+19
support their pk algorithm. This allows for early (during get_*) rejection of a subkey, and selection of another. * passphrase.c (passphrase_to_dek): Give a little more information when we have room to do so.
2004-03-05* revoke.c (export_minimal_pk), export.c (do_export_stream), passphrase.cDavid Shaw7-60/+68
(passphrase_to_dek), keyserver.c (print_keyrec): A few more places to use --keyid-format. * options.h, g10.c (main), export.c (parse_export_options, do_export_stream): Remove --export-all and the "include-non-rfc" export-option as they are no longer meaningful with the removal of v3 Elgamal keys.
2004-03-04* armor.c (fake_packet, armor_filter): Use the 2440 partial lengthDavid Shaw2-25/+53
encoding for the faked plaintext packet.
2004-03-03* options.h, g10.c (main), mainproc.c (check_sig_and_print): RemoveDavid Shaw4-12/+13
verify-option show-long-keyids and replace with the more general keyid-format.
2004-03-03* build-packet.c (write_header2): Remove call to start old gpg partialDavid Shaw3-77/+89
length mode and change all callers. (do_plaintext): Turn off partial length encoding now that we're done writing the packet. (do_comment, do_user_id): Try for a headerlen of 2 since that's the smallest and most likely encoding for these packets. * parse-packet.c (parse): Remove call to start old gpg partial length mode.
2004-03-03* options.h, g10.c (main): Add a more flexible --keyid-format option toDavid Shaw7-81/+133
replace the list-option (and eventually verify-option) show-long-keyids. The format can be short, long, 0xshort, and 0xlong. * keydb.h, keyid.c (keystr, keystrlen): New functions to generate a printable keyid. * keyedit.c (print_and_check_one_sig, show_key_with_all_names), keylist.c (list_keyblock_print): Use new keystr() function here to print keyids.