aboutsummaryrefslogtreecommitdiffstats
path: root/g10 (follow)
Commit message (Collapse)AuthorAgeFilesLines
* * g10.c, options.h: Removed option --emulate-checksum-bug.Werner Koch2002-09-1110-126/+152
| | | | | | | | | | | | | | | * misc.c (checksum_u16_nobug): Removed. (checksum_u16): Removed the bug emulation. (checksum_mpi): Ditto. (checksum_mpi_counted_nbits): Removed and replaced all calls with checksum_mpi. * parse-packet.c (read_protected_v3_mpi): New. (parse_key): Use it here to store it as an opaque MPI. * seckey-cert.c (do_check): Changed the v3 unprotection to the new why to store these keys. (protect_secret_key): Likewise. * build-packet.c (do_secret_key): And changed the writing.
* * exec.c (expand_args): Remove loop left over from earlier implementation.David Shaw2002-09-102-4/+13
| | | | | (exec_write): Missed one tick.
* Cleanups and minor fixes.Werner Koch2002-09-1017-64/+121
|
* * g10.c (add_group): Use '=' to separate group name from group members.David Shaw2002-09-093-3/+10
| | | | | | | Use a better error message for when no = is found. * hkp.c (hkp_export): Use CRLF in headers.
* * mainproc.c (print_pkenc_list): Don't increment the error counter whenDavid Shaw2002-09-042-1/+9
| | | | | | | printing the list of keys a message was encrypted to. This would make gpg give a non-zero exit code even for completely valid messages if the message was encrypted to more than one key that the user owned.
* * g10.c (main): Try to set a default character set. Print theWerner Koch2002-09-026-2/+55
| | | | | | | | | used one in verbosity level 3. * gpgv.c (main): Try to set a default character set. * status.c, status.h (STATUS_IMPORT_OK): New. * import.c (import_one,import_secret_one): Print new status.
* * pkclist.c (build_pk_list): Add new status code to indicate an untrustedDavid Shaw2002-08-302-1/+7
| | | | | | user. This (or a disabled key) fail with "unavailable pubkey" (G10ERR_UNU_PUBKEY).
* * pkclist.c (build_pk_list): Fail if any recipient keys are unusable.David Shaw2002-08-304-3/+26
| | | | | | | | | * options.skel: The PGP LDAP keyserver is back. Use MIT keyserver as a sample rather than cryptnet as cryptnet does not support searching yet. * keyedit.c (show_key_with_all_names): Fix error message (preferences are userid/selfsig and not key specific).
* * pkclist.c (do_we_trust_pre): Changed the wording of a warning.Werner Koch2002-08-307-59/+82
| | | | | | | | | | | | | | | | * encode.c (encode_simple,encode_crypt): Use new style CTB for compressssed packets when using MDC. We need to do this so that concatenated messages are properly decrypted. Old style compression assumes that it is the last packet; given that we can't determine the length in advance, the uncompressor does not know where to start. Actually we should use the new CTB always but this would break PGP 2 compatibility. * parse-packet.c (parse): Special treatment for new style CTB compressed packets. * build-packet.c (do_mdc): Removed. Was not used. (do_encrypted_mdc): Count the version number and the MDC packet.
* * sig-check.c (do_check_messages, do_check): Show keyid in error messages.David Shaw2002-08-283-16/+27
| | | | | | * keyserver.c (print_keyinfo): More readable key listings for --search-keys responses.
* * hkp.c (parse_hkp_index, dehtmlize): Move HTML functionality into newDavid Shaw2002-08-262-78/+103
| | | | | | | "dehtmlize" function. Remove HTML before trying to parse each line from the keyserver. If the keyserver provides key type information in the listing, use it.
* * sig-check.c (do_check, do_check_messages): Emit the usual sig warningsDavid Shaw2002-08-233-9/+26
| | | | | | | | even for cached sigs. This also serves to protect against missing a sig expiring while cached. * getkey.c (merge_selfsigs_main): Don't check UID self-sigs twice.
* * import.c (clean_subkeys, chk_self_sigs): Merge clean_subkeys intoDavid Shaw2002-08-226-113/+110
| | | | | | | | | | | | | | chk_self_sigs. This improves efficiency as the same signatures are not checked multiple times. Clarify when a subkey is revoked (any revocation signature, even if it is dated before the binding signature). * getkey.c (merge_selfsigs_subkey): Subkey revocation comments. * keylist.c (list_one): Stats are only for public key listings. * g10.c (main), options.skel: Default should be include-revoked for keyserver operations.
* * import.c (import_print_stats): Print new non_imported counterWerner Koch2002-08-212-3/+14
| | | | | which is currently not used becuase we terminate on errors.
* * options.skel: Document no-include-attributes for keyserver-options.David Shaw2002-08-202-8/+17
|
* * keylist.c, keyedit.c, keyserver.c, sign.c: Some TODOs and comments.David Shaw2002-08-207-4/+39
| | | | | | | | | * export.c (do_export_stream): Fix noop bug in exporting sensitive revocation keys. * pkclist.c (do_edit_ownertrust): Comment out the option for showing trust paths until it can be implemented.
* * getkey.c (get_user_id_native): Renamed to ..Werner Koch2002-08-1911-38/+120
| | | | | | | | | | | | (get_user_id_printable): this. Filter out all dangerous characters. Checked all usages. (get_user_id_string_native): Renamed to.. (get_user_id_string_printable): this. Filter out all dangerous characters. Checked all usages. * keyedit.c (show_basic_key_info): New. * keylist.c (print_fingerprint): New mode 3. * import.c (import_one): Use new function to display the user ID.
* 2002-08-16 Timo Schulz <[email protected]>Timo Schulz2002-08-183-1/+26
| | | | | | | | | * g10.c (main): enable opt.interactive. * import.c (import_one): Ask the user if the key shall be imported when the interactive mode is used. Useful to extract selected keys from a file.
* Removed a leftover conflict indicator.Werner Koch2002-08-161-1/+0
|
* * seckey-cert.c: Workaround to allow decryption of v3 keys createdWerner Koch2002-08-162-0/+31
| | | | | with a bug in the mpi_get_secure_buffer.
* * hkp.c (parse_hkp_index): Properly handle really large keys (5 digit keyDavid Shaw2002-08-142-4/+9
| | | | | length) in HKP searches.
* * encode.c (encode_simple): Fix problem with using compression algo 2 andDavid Shaw2002-08-135-47/+114
| | | | | | | | | | | | | | | | | | symmetric compressed files. * encode.c (encode_simple, encode_crypt): If we are not using a MDC, compress even if a file is already compressed. This is to help against the chosen ciphertext attack. * pkclist.c (select_algo_from_prefs): Fix requested algorithm bug so the request succeeds even if the requested algorithm is not the first found. * cipher.c (write_header), encode.c (use_mdc, encode_simple, encode_crypt, encrypt_filter), g10.c (main): Be more eager to use a MDC. We use a MDC if the keys directly support it, if the keys list AES (any) or TWOFISH anywhere in the prefs, or if the cipher chosen does not have a 64 bit blocksize.
* * options.skel: Some language tweaks, and remove the load-extensionDavid Shaw2002-08-095-61/+71
| | | | | | | | | | | | | | | section for random gatherers. * keyring.c (create_tmp_file, rename_tmp_file): Create tmp files with user-only permissions, but restore the original permissions if the user has something special set. * openfile.c (copy_options_file): Create new options file (gpg.conf) with user-only permissions. * keydb.c (keydb_add_resource): Create new keyrings with user-only permissions.
* * tdbio.c (tdbio_set_dbname): Create new trustdbs with user-onlyDavid Shaw2002-08-082-0/+8
| | | | | permissions.
* * sig-check.c (signature_check2): Sanity check that the md has a contextDavid Shaw2002-08-072-1/+17
| | | | | | | for the hash that the sig is expecting. This can happen if a onepass sig header does not match the actual sig, and also if the clearsign "Hash:" header is missing or does not match the actual sig.
* * keyedit.c (menu_revsig): Properly show a uid is revoked withoutDavid Shaw2002-08-077-135/+212
| | | | | | | | | | | | | | | restarting gpg. This is Debian bug 124219, though their supplied patch will not do the right thing. * main.h, tdbio.c (tdbio_set_dbname), misc.c (removed check_permissions), keydb.c (keydb_add_resource), g10.c (main, check_permissions): Significant reworking of the permission check mechanism. The new behavior is to check everything in the homedir by checking the homedir itself. If the user wants to put (possibly shared) keyrings outside the homedir, they are not checked. The options file and any extension files are checked wherever they are, as well as their enclosing directories. This is Debian bug 147760.
* use of EXTSEP_SStefan Bellon2002-08-063-2/+7
|
* * options.h, g10.c (main), mainproc.c (proc_encrypted): --ignore-mdc-errorDavid Shaw2002-08-065-3/+11
| | | | | option to turn a MDC check error into a warning.
* * encode.c (encode_crypt), g10.c (main), sign.c (sign_file,David Shaw2002-08-064-7/+27
| | | | | | | | | clearsign_file): Use the same --pgpX warning string everywhere to ease translations. * encode.c (write_pubkey_enc_from_list): Warn when using --throw-keyid with --pgpX. Noted by Vedaal Nistar.
* * revoke.c (export_minimal_pk, gen_desig_revoke, gen_revoke): Export aDavid Shaw2002-08-062-132/+179
| | | | | | minimal pk along with the revocation cert when in --pgpX mode so that PGP can import it.
* * options.skel: Changed comments.Werner Koch2002-08-062-2/+4
| | | | | | * gpg.sgml: Fixed doc regarding the name change of the option file.
* * g10.c (main): Try to use "gpg.conf" as default option file.Werner Koch2002-08-063-5/+23
| | | | | * openfile.c (copy_options_file): Changed name of created file.
* The big extension module removal.Werner Koch2002-08-032-1/+5
|
* * delkey.c (do_delete_key): Always allow to delete a key in batch modeWerner Koch2002-08-022-0/+18
| | | | | when specified by fingerprint. Suggested by Enzo Michelangeli.
* * options.h, g10.c (main), mainproc.c (proc_encrypted): Return aDavid Shaw2002-07-306-9/+23
| | | | | | | | | decryption failed error if a MDC does not verify. Warn if a MDC is not present (can disable via --no-mdc-warning). * exec.c (exec_write), g10.c (main), keyserver.c (keyserver_spawn): Use new DISABLE_KEYSERVER_PATH rather than FIXED_EXEC_PATH.
* * sig-check.c (do_check): Properly validate v4 sigs with no hashed sectionDavid Shaw2002-07-292-2/+12
| | | | | at all.
* * keyedit.c (menu_revsig): Change "revsig" to honor selected uids so theDavid Shaw2002-07-253-11/+25
| | | | | | | | user can revoke sigs from particular uids only. * keylist.c (list_keyblock_print): Don't display expired uids in --list-keys unless -v and not --list-sigs (just like revoked uids).
* * exec.c, export.c, import.c, keyedit.c, keyserver.c, misc.c: "Warning" ->David Shaw2002-07-257-13/+18
| | | | | "WARNING"
* * main.h, import.c (parse_import_options, fix_hkp_corruption, import_one,David Shaw2002-07-246-26/+116
| | | | | | | | | | | | delete_inv_parts), g10.c (main): New import-option "repair-hkp-subkey-bug", which repairs as much as possible the HKP mangling multiple subkeys bug. It is on by default for keyserver receives, and off by default for regular --import. * main.h, import.c (import, import_one, delete_inv_parts), hkp.c (hkp_ask_import), keyserver.c (keyserver_spawn): Use keyserver import options when doing keyserver receives.
* * options.h, exec.h, exec.c (set_exec_path, exec_write), g10.c (main),David Shaw2002-07-246-8/+42
| | | | | | | | keyserver.c (keyserver_spawn): If the user does not use "exec-path", completely replace $PATH with GNUPG_LIBEXECDIR before calling the keyserver helper. If the user does use "exec-path", append GNUPG_LIBEXECDIR after the specified path.
* Forgot to commit this:Werner Koch2002-07-242-1/+4
| | | | | | * photoid.c (get_default_photo_command): Also use __MINGW32__ instead of HAVE_DOSISH_SYSTEM.
* * import.c (parse_import_options), export.c (parse_export_options): FixDavid Shaw2002-07-243-2/+12
| | | | | offset problem with reversed ("no-") meanings.
* * import.c (delete_inv_parts): Discard subkey signatures (0x18 and 0x28)David Shaw2002-07-242-1/+15
| | | | | if found in the userid section of the key.
* * sig-check.c (signature_check2): Signatures made by invalid subkeysDavid Shaw2002-07-233-3/+62
| | | | | | | | (bad/missing binding sig) are also invalid. * keylist.c (print_fingerprint): Show the primary as well as the secondary key fingerprint in modes 1 & 2.
* * options.h, main.h, g10.c (main), import.c (parse_import_options,David Shaw2002-07-226-12/+91
| | | | | | | | | | | | delete_inv_parts), keyserver.c (parse_keyserver_options): add new --import-options option. The only current flag is "allow-local-sigs". * g10.c (main): Don't disable MDC in pgp7 mode. * options.h, g10.c (main), keyserver.c (parse_keyserver_options): Remove old keyserver-option include-attributes now that there is an export-option for the same thing.
* * options.h, main.h, export.c (parse_export_options, do_export_stream),David Shaw2002-07-228-33/+111
| | | | | | | | | | | | | | g10.c (main): add new --export-options option. Current flags are "include-non-rfc", "include-local-sigs", "include-attributes", and "include-sensitive-revkeys". * options.h, hkp.c (hkp_export), keyserver.c (parse_keyserver_options, keyserver_spawn): try passing unknown keyserver options to export options, and if successful, use them when doing a keyserver --send-key. * build-packet.c (build_sig_subpkt): We do not generate SIGSUBPKT_PRIV_VERIFY_CACHE anymore.
* * revoke.c (gen_desig_revoke): Lots more comments about includingDavid Shaw2002-07-223-15/+33
| | | | | | | | sensitive revkeys along with the revocation sig itself. * keyserver.c (parse_keyserver_options): Simpler implementation that can skip one pass over the options.
* * keyedit.c (keyedit_menu, menu_addrevoker): Allow specifying "sensitive"David Shaw2002-07-193-6/+80
| | | | | | | | | | | as an argument to an addrevoker command. This sets the 0x40 sensitive revoker flag. * revoke.c (gen_desig_revoke): When generating a designated revocation, include the direct key sig that contains the designated revoker subpacket. This allows sensitive designated revocation subpackets to be exported. Also indicate which revokers are sensitive in the first place.
* * keyedit.c (show_key_with_all_names_colon): The 0x40 class bit in aDavid Shaw2002-07-178-20/+61
| | | | | | | | | | | | | designated revoker means "sensitive", not "local". It's exportable under the right circumstances. * main.h, options.h, export.c (do_export_stream), g10.c (main), hkp.c (hkp_export), keyserver.c (keyserver_spawn: Add a flag to skip attribute packets and their signatures while exporting. This is to accomodate keyservers (pksd again) that choke on attributes. Use keyserver-option "include-attributes" to control it. This defaults to ON (i.e. don't skip).
* * options.h, keyserver.c (parse_keyserver_uri, keyserver_spawn,David Shaw2002-07-094-53/+103
| | | | | | | | | keyserver_work), hkp.c (hkp_ask_import, hkp_export, hkp_search): Use a much more strict reading of RFC-2396 for the keyserver URIs. Specifically, don't try and be smart about checking the value of ":port" so long as it is all digits, and properly handle opaque data (those scheme specific parts that do not start with "//").
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-18 22:28:27 +0000