aboutsummaryrefslogtreecommitdiffstats
path: root/g10 (unfollow)
Commit message (Collapse)AuthorFilesLines
2006-04-03About to release 1.4.3gnupg-1.4.3Werner Koch8-4/+34
2006-04-01* getkey.c (get_pubkey_byname): Fix missing auto_key_retrieve unlock.David Shaw2-5/+12
Fix strings to not start with a capital letter as per convention.
2006-03-30Update copyrightDavid Shaw1-1/+2
2006-03-30* main.h, seskey.c (encode_md_value): Modify to allow a q size greaterDavid Shaw5-35/+94
than 160 bits as per DSA2. This will allow us to verify and issue DSA2 signatures for some backwards compatibility once we start generating DSA2 keys. * sign.c (do_sign), sig-check.c (do_check): Change all callers. * sign.c (do_sign): Enforce the 160-bit check for new signatures here since encode_md_value can handle non-160-bit digests now. This will need to come out once the standard for DSA2 is firmed up.
2006-03-22* getkey.c (parse_auto_key_locate): Silently strip out duplicates ratherDavid Shaw2-5/+15
than causing an error.
2006-03-22Changed URLsWerner Koch3-3/+8
2006-03-22* mainproc.c (get_pka_address): Fix bug introduced as part ofDavid Shaw2-1/+6
sig_to_notation conversion. Noted by Peter Palfradrer.
2006-03-21Allow for rmd160 signatures when using gpg-agent.Werner Koch3-1/+13
2006-03-17* keyserver.c (keyserver_import_cert): Handle the IPGP CERT type forDavid Shaw3-24/+43
both the fingerprint alone, and fingerprint+URL cases. * getkey.c (get_pubkey_byname): Minor cleanup.
2006-03-16* cert.c (get_cert): Handle the fixed IPGP type with fingerprint.David Shaw1-1/+1
2006-03-14* keyserver-internal.h, keyserver.c (keyserver_import_pka): Use theDavid Shaw4-31/+61
same API as the other auto-key-locate fetchers. * getkey.c (get_pubkey_byname): Use the fingerprint of the key that we actually fetched. This helps prevent problems where the key that we fetched doesn't have the same name that we used to fetch it. In the case of CERT and PKA, this is an actual security requirement as the URL might point to a key put in by an attacker. By forcing the use of the fingerprint, we won't use the attacker's key here.
2006-03-14* keyserver-internal.h, keyserver.c (keyserver_spawn, keyserver_work,David Shaw4-26/+40
keyserver_import_cert, keyserver_import_name, keyserver_import_ldap): Pass fingerprint info through.
2006-03-14* main.h, import.c (import_one): Optionally return the fingerprint ofDavid Shaw4-26/+43
the key being imported. (import_keys_internal, import_keys_stream, import): Change all callers.
2006-03-12* sig-check.c (signature_check2): Print the backsig warning when thereDavid Shaw3-8/+20
is no backsig present. Give a URL for more information. * keyedit.c (menu_backsign): Small tweak to work properly with keys originally generated with older GnuPGs that included comments in the secret keys.
2006-03-09* build-packet.c (string_to_notation): Add ability to indicate a notationDavid Shaw3-39/+85
to be deleted with a '-' prefix. * keyedit.c (menu_set_notation): Use it here to allow deleting a notation marked with '-'. This works with either "-notation" or "-notation=value".
2006-03-09Preparing for an RC23Werner Koch2-11/+16
2006-03-09* keyedit.c (menu_set_notation): New function to set notations onDavid Shaw2-4/+250
self-signatures. (keyedit_menu): Call it here. (tty_print_notations): Helper. (show_prefs): Show notations in "showpref".
2006-03-09* mainproc.c (get_pka_address), keylist.c (show_notation): RemoveDavid Shaw3-92/+64
duplicate code by using notation functions.
2006-03-09* packet.h, build-packet.c (sig_to_notation), keygen.cDavid Shaw4-8/+20
(keygen_add_notations): Provide printable text for non-human-readable notation values.
2006-03-08* packet.h, build-packet.c (sig_to_notation), keygen.cDavid Shaw4-6/+15
(keygen_add_notations): Tweak to handle non-human-readable notation values.
2006-03-08* options.h, sign.c (mk_notation_policy_etc), gpg.c (add_notation_data):David Shaw9-117/+275
Use it here for the various notation commands. * packet.h, main.h, keygen.c (keygen_add_notations), build-packet.c (string_to_notation, sig_to_notation) (free_notation): New "one stop shopping" functions to handle notations and start removing some code duplication.
2006-03-08* options.h, mainproc.c (check_sig_and_print), gpg.c (main):David Shaw6-14/+27
pka-lookups, not pka-lookup. * options.h, gpg.c (main), keyedit.c [cmds], sig-check.c (signature_check2): Rename "backsign" to "cross-certify" as a more accurate name.
2006-03-07* options.h, gpg.c (main, parse_trust_model), pkclist.cDavid Shaw6-50/+23
(check_signatures_trust), mainproc.c (check_sig_and_print, pka_uri_from_sig), trustdb.c (init_trustdb): Some tweaks to PKA so that it is a verify-option now.
2006-03-07More tests added; make distcheck worksWerner Koch4-3/+28
2006-03-07* sign.c (make_keysig_packet): Don't use MD5 for a RSA_S key as thatDavid Shaw2-3/+5
is not a PGP 2.x algorithm.
2006-03-06* mainproc.c (proc_compressed): "Uncompressed" is not a valid compressionDavid Shaw2-1/+8
algorithm.
2006-03-06Stricter test of allowed signature packet compositions.Werner Koch2-100/+114
There is still one problem to solve.
2006-03-06Fixed problem with PGP2 style signatures and mutilple plaintext dataWerner Koch2-33/+62
2006-03-05Replaced an assert and fixed batch mode issue in cardglue.Werner Koch5-14/+42
2006-03-01* getkey.c (parse_auto_key_locate): Error if the user selects "cert" orDavid Shaw3-10/+20
"pka" when those features are disabled. * misc.c (has_invalid_email_chars): Fix some C syntax that broke the compilers on SGI IRIX MIPS and Compaq/DEC OSF/1 Alpha. Noted by Nelson H. F. Beebe.
2006-02-27* options.skel: Document auto-key-locate and give a pointer to SimonDavid Shaw2-0/+29
Josefsson's page for CERT.
2006-02-24* keydb.h, getkey.c (release_akl), gpg.c (main): AddDavid Shaw8-27/+114
--no-auto-key-locate. * options.h, gpg.c (main): Keep track of each keyserver registered so we can match on them later. * keyserver-internal.h, keyserver.c (cmp_keyserver_spec, keyserver_match), gpgv.c: New. Find a keyserver that matches ours and return its spec. * getkey.c (get_pubkey_byname): Use it here to get the per-keyserver options from an earlier keyserver.
2006-02-24* keyserver.c (parse_keyserver_options): Only change max_cert if it isDavid Shaw2-1/+4
used.
2006-02-23* options.c, gpg.c (main), keyserver.c (keyserver_spawn): No specialDavid Shaw4-26/+19
treatment of include-revoked, include-subkeys, and try-dns-srv. These are keyserver features, and GPG shouldn't get involved here.
2006-02-23* keyserver.c (parse_keyserver_uri, add_canonical_option): Always appendDavid Shaw2-3/+7
options to the list, as ordering may be significant to the user.
2006-02-23* gpg.c (add_notation_data): Fix reversed logic for isascii check whenDavid Shaw2-1/+4
adding notations. Noted by Christian Biere.
2006-02-23* options.h, keyserver.c (add_canonical_option): New.David Shaw4-20/+54
(parse_keyserver_options): Moved from here. (parse_keyserver_uri): Use it here so each keyserver can have some private options in addition to the main keyserver-options (e.g. per-keyserver auth).
2006-02-22* options.h, keyserver-internal.h, keyserver.c (keyserver_import_name),David Shaw6-9/+45
getkey.c (free_akl, parse_auto_key_locate, get_pubkey_byname): The obvious next step: allow arbitrary keyservers in the auto-key-locate list.
2006-02-22* options.h, keyserver.c (parse_keyserver_options): RemoveDavid Shaw3-7/+9
auto-cert-retrieve as it is no longer meaningful. Add max-cert-size to allow users to pick a max key size retrieved via CERT.
2006-02-22* options.h, gpg.c (main), mainproc.c (check_sig_and_print), keyserver.cDavid Shaw5-10/+19
(keyserver_opts): Rename auto-pka-retrieve to honor-pka-record to be consistent with honor-keyserver-url.
2006-02-22* options.h, keydb.h, g10.c (main), getkey.c (parse_auto_key_locate):David Shaw5-64/+139
Parse a list of key access methods. (get_pubkey_byname): Walk the list here to try and retrieve keys we don't have locally.
2006-02-21* getkey.c (get_pubkey_byname): Fix minor security problem with PKA whenDavid Shaw5-6/+27
importing at -r time. The URL in the PKA record may point to a key put in by an attacker. Fix is to use the fingerprint from the PKA record as the recipient. This ensures that the PKA record is followed. * keyserver-internal.h, keyserver.c (keyserver_import_pka): Return the fingerprint we requested.
2006-02-21* gpgv.c: Stub keyserver_import_ldap.David Shaw4-0/+47
* keyserver-internal.h, keyserver.c (keyserver_import_ldap): Import using the PGP Universal trick of asking ldap://keys.(maildomain) for the key.
2006-02-21* keyserver.c (parse_keyserver_uri): Include the scheme in the uriDavid Shaw2-2/+12
even when we've assumed "hkp" when there was no scheme.
2006-02-14about to release 1.4.3rc1gnupg-1.4.3rc1Werner Koch2-2/+2
2006-02-14Fixed a wrong return code with gpg --verifyWerner Koch3-24/+48
2006-02-09Lock random seed fileWerner Koch2-1/+8
2006-02-08Fixed a couple of problemsWerner Koch1-20/+59
2006-02-06Add support fro CardMan 4040Werner Koch3-241/+563
2006-01-24* keyserver.c (parse_keyserver_uri): If there is a path present, set theDavid Shaw2-0/+8
direct_uri flag so the right keyserver helper is run.
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-20 07:03:30 +0000