aboutsummaryrefslogtreecommitdiffstats
path: root/g10 (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* * misc.c (pct_expando): Add two new expandos - signer's fingerprint (%g),David Shaw2003-07-014-12/+44
| | | | | | | | | | | and signer's primary fingerprint (%p). * tdbio.h, tdbio.c (create_version_record, tdbio_write_nextcheck, tdbio_read_record, tdbio_write_record): Force a 0 into the trust_model field. This is to help smooth the 1.2->1.4 switchover, as otherwise a 1.4 trustdb could be rebuilt as classic on 1.2 while still claiming to be a non-classic trust model.
* * keyserver.c (keyserver_spawn): Use ascii_isspace instead of spacep sinceDavid Shaw2003-06-262-1/+6
| | | | | ascii_isspace includes \r and \n.
* * signal.c, tdbio.c: Comment out the transaction code. It was not used inDavid Shaw2003-06-243-4/+13
| | | | | | this version, and was causing some build problems on quasi-posix platforms (Solaris and Forte c89).
* * Makefile.am: Include W32LIBS where appropriate.David Shaw2003-06-202-1/+3
|
* * keyedit.c (sign_uids): Add additional prompt to the signature levelDavid Shaw2003-06-193-2/+19
| | | | | | | | | | question. (menu_expire): When changing expiration dates, don't replace selfsigs on revoked uids since this would effectively unrevoke them. There is also no point in replacing expired selfsigs. This is bug #181. * g10.c (main): Add --rfc2440 alias for --openpgp since in a few months, they won't be the same thing.
* * keyserver.c (parse_keyserver_uri): Accept "http" as an alias for "hkp",David Shaw2003-06-193-2/+12
| | | | | | | since it is occasionally written that way. * mainproc.c (check_sig_and_print): Grammar fix ;)
* * keygen.c (ask_user_id): Make --allow-freeform-uid apply to the emailDavid Shaw2003-06-182-4/+12
| | | | | field as well as the name field, and allow mixing fields when it is set.
* * hkp.c (hkp_search): Return proper error code on failure.David Shaw2003-06-185-15/+49
| | | | | | | | | | | * keyedit.c (sign_uids): Do not allow signing a user ID without a self-signature. --expert overrides. * options.skel: Use subkeys.pgp.net as the default keyserver. * trustdb.c (validate_one_keyblock): Certifications on revoked or expired uids do not count in the web of trust.
* * keylist.c (list_keyblock_colon): Don't include validity values whenDavid Shaw2003-06-153-17/+46
| | | | | | | | | | | | | | listing secret keys since they can be incorrect and/or misleading. This is a temporary kludge, and will be handled properly in 1.9/2.0. * signal.c (init_one_signal, pause_on_sigusr, do_block): Only use sigprocmask() if we have sigset_t, and only use sigaction() if we have struct sigaction. This is for Forte c89 on Solaris which seems to define only the function call half of the two pairs by default. (pause_on_sigusr): Typo. (do_block): If we can't use sigprocmask() and sigset_t, try to get the number of signals from NSIG as well as MAXSIG, and if we can't, fail with an explanation.
* * parse-packet.c (parse): Disallow old style partial length forWerner Koch2003-06-102-2/+27
| | | | | all key material packets to avoid possible corruption of keyrings.
* * import.c (import_keys): Invalidate the cache so that the fileWerner Koch2003-06-082-0/+7
| | | | | descriptor gets closed. Fixes bug reported by Juan F. Codagnone.
* * keyedit.c (sign_uids): Do not sign expired uids without --expert (sameDavid Shaw2003-06-073-9/+46
| | | | | | | | | behavior as revoked uids). * mainproc.c (print_notation_data, check_sig_and_print): Only show the "key available from" preferred keyserver line if the key is not currently present.
* Make sure that only ascii is passed to isfoo functions.Werner Koch2003-06-078-18/+31
|
* * options.skel: Use new hkp://subkeys.pgp.net as sample keyserver sinceDavid Shaw2003-06-045-10/+38
| | | | | | | | | | | | | | they at least handle subkeys correctly. * mainproc.c (print_notation_data), parse-packet.c (dump_sig_subpkt, parse_one_sig_subpkt, can_handle_critical): Add read-only support for preferred keyserver subpackets. They're basically policy URLs with a different name. * g10.c (main): Add "--set-notation" as alias to "--notation-data" this is to make things consistent with --set-policy-url meaning both sigs and certs.
* * main.h, misc.c (parse_options): New general option line parser. Fix theDavid Shaw2003-05-315-72/+60
| | | | | | | | | bug in the old version that did not handle report syntax errors after a valid entry. * import.c (parse_import_options), export.c (parse_export_options): Call it here instead of duplicating the code.
* * keylist.c (list_one): Don't show the keyring filename when inDavid Shaw2003-05-308-30/+116
| | | | | | | | | | | | | | | | | | | | | | --with-colons mode. Actually translate "Keyring" string. * mainproc.c (proc_tree): We can't currently handle multiple signatures of different classes or digests (we'd pretty much have to run a different hash context for each), but if they are all the same, make an exception. This is Debian bug #194292. * sig-check.c (check_key_signature2): Make string translatable. * packet.h, getkey.c (fixup_uidnode): Mark real primary uids differently than assumed primaries. * keyedit.c (no_primary_warning): Use the differently marked primaries here in a new function to warn when an --edit-key command might rearrange the self-sig dates enough to change which uid is primary. (menu_expire, menu_set_preferences): Use no_primary_warning() here. * Makefile.am: Use @DLLIBS@ for -ldl.
* * armor.c, g10.c, kbnode.c, misc.c, pkclist.c, sign.c, build-packet.c,David Shaw2003-05-2224-199/+197
| | | | | | | | | getkey.c, keydb.c, openfile.c, plaintext.c, status.c, gpgv.c, keygen.c, options.h, sig-check.c, tdbio.h, encode.c, hkp.c, mainproc.c, parse-packet.c, signal.c, textfilter.c: Edit all preprocessor instructions to remove whitespace before the '#'. This is not required by C89, but there are some compilers out there that don't like it.
* * sign.c (write_plaintext_packet)Werner Koch2003-05-214-5/+16
| | | | | | | | * progress.c (handle_progress) * encode.c (encode_simple,encode_crypt): Make sure that a filename of "-" is considered to be stdin so that iobuf_get_filelength won't get called. This fixes bug 156 reported by Gregery Barton.
* * keylist.c (list_keyblock_print): Don't dump attribs forDavid Shaw2003-05-204-14/+26
| | | | | | | | | revoked/expired/etc uids for non-colon key listings. This is for consistency with --show-photos. * main.h, keylist.c (dump_attribs), mainproc.c (check_sig_and_print): Dump attribs if --attrib-fd is set when verifying signatures.
* * parse-packet.c (parse_key): Clear disabled flag when parsing a new key.David Shaw2003-05-115-19/+118
| | | | | | | | | | | | | Just in case someone forgets to clear the whole key. * getkey.c (merge_selfsigs_main): Add an "if all else fails" path for setting a single user ID primary when there are multiple set primaries all at the same second, or no primaries set and the most recent user IDs are at the same second, or no signed user IDs at all. This is arbitrary, but deterministic. * exec.h, photoid.h: Add copyright message.
* * g10.c (main): New --gnupg option to disable the various --openpgp,David Shaw2003-05-098-24/+55
| | | | | | | | | | | | | | | | --pgpX, etc. options. This is the same as --no-XXXX for those options. * packet.h, getkey.c (skip_disabled), keylist.c (print_capabilities): New "pk_is_disabled" macro to retrieve the cached disabled value if available, and fill it in via cache_disabled_value if not available. * trustdb.h, gpgv.c (is_disabled), trustdb.c (is_disabled): Rename to cache_disabled_value. Cache the result of the check so we don't need to hit the trustdb more than once. * trustdb.c (get_validity): Cache the disabled value since we have it handy and it might be useful later.
* * revoke.c (ask_revocation_reason): Clear old reason if user elects toDavid Shaw2003-05-072-0/+4
| | | | | repeat question. This is bug 153.
* * keyedit.c (sign_uids): Show keyid of the key making the signature.David Shaw2003-05-077-27/+46
| | | | | | | | | | | * trustdb.h, trustdb.c (is_disabled), keylist.c (print_capabilities), gpgv.c (is_disabled): is_disabled now takes a pk and not just the keyid. This is for speed since there is no need to re-fetch a key when we already have that key handy. * getkey.c (skip_disabled): New function to get a pk and call is_disabled on it. (key_byname): Use it here.
* * g10.c (main): Show errors for failure in export, send-keys, recv-keys,David Shaw2003-05-037-46/+156
| | | | | | | | | | | | | | | | and refresh-keys. * keyserver.c (keyserver_work): Range check the TCP port for HKP. * options.h, g10.c (main): Give algorithm warnings for algorithms chosen against the --pgpX and --openpgp rules. * keydb.h, pkclist.c (algo_available): Make TIGER192 invalid in --openpgp mode. * sign.c (sign_file), pkclist.c (algo_available): Allow passing a hint of 0.
* * sign.c (sign_file): Fix bug that causes spurious compression preferenceDavid Shaw2003-05-027-142/+179
| | | | | | | | | | | | | | | | warning. * sign.c (clearsign_file): Fix bug that prevents proper warning message from appearing when clearsigning in --pgp2 mode with a non-v3 RSA key. * main.h, misc.c (compliance_option_string, compliance_string, compliance_failure), sign.c (sign_file, clearsign_file), encode.c (encode_crypt, write_pubkey_enc_from_list): New functions to put the "this message may not be usable...." warning in one place. * options.h, g10.c (main): Part two of the simplification. Use a single enum to indicate what we are compliant to (1991, 2440, PGPx, etc.)
* * options.h, armor.c, cipher.c, g10.c, keyedit.c, pkclist.c, sign.c,David Shaw2003-05-0211-78/+90
| | | | | | | encode.c, getkey.c, revoke.c: The current flags for different levels of PGP-ness are massively complex. This is step one in simplifying them. No functional change yet, just use a macro to check for compliance level.
* * packet.h, build-packet.c (build_sig_subpkt), export.cDavid Shaw2003-05-026-42/+14
| | | | | | | | (do_export_stream), import.c (remove_bad_stuff, import), parse-packet.c (dump_sig_subpkt, parse_one_sig_subpkt): Remove vestigal code for the old sig cache subpacket. This wasn't completely harmless as it caused subpacket 101 to disappear on import and export.
* * pkclist.c (do_we_trust_pre): If an untrusted key was chosen by aDavid Shaw2003-04-303-25/+82
| | | | | | | | | | | | | | particular user ID, use that ID as the one to ask about when prompting whether to use the key anyway. (build_pk_list): Similar change here when adding keys to the recipient list. * trustdb.c (update_validity): Fix bug that prevented more than one validity record per trust record. (get_validity): When retrieving validity for a (user) supplied user ID, return the validity for that user ID only, and do not fall back to the general key validity. (validate_one_keyblock): Some commentary on whether non-self-signed user IDs belong in the web of trust (arguably, they do).
* * sig-check.c (check_key_signature2): Made "no subkey for subkeyWerner Koch2003-04-293-3/+12
| | | | | | | | binding packet" a verbose item instead of a !quiet one. There are too many garbled keys out in the wild. * getkey.c (premerge_public_with_secret): Made "no secret subkey for" warning a verbose item and translatable.
* * filter.h: Remove const from WHAT.Werner Koch2003-04-295-12/+25
| | | | | | | | * progress.c (handle_progress): Store a copy of NAME. (progress_filter): Release WHAT, make sure not to print a NULL WHAT. * openfile.c (open_sigfile): Adjust free for new progress semantics. * plaintext.c (ask_for_detached_datafile): Don't dealloc pfx->WHAT.
* * build-packet.c (build_sig_subpkt): Comments.David Shaw2003-04-285-7/+29
| | | | | | | | | | | | | * exec.c (exec_write): Cast NULL to void* to properly terminate varargs list. * keyedit.c (show_key_with_all_names): Just for safety, catch an invalid pk algorithm. * sign.c (make_keysig_packet): Crucial that the call to mksubpkt comes LAST before the calls to finalize the sig as that makes it possible for the mksubpkt function to get a reliable pointer to the subpacket area.
* * sign.c (mk_notation_and_policy): Make some strings translatable.David Shaw2003-04-271-2/+4
|
* * sign.c (mk_notation_and_policy): Make some strings translatable.David Shaw2003-04-272-4/+7
|
* * mainproc.c (check_sig_and_print): Show sig class when verifying a sigDavid Shaw2003-04-277-22/+46
| | | | | | | | | | | | | with --verbose on, and add version, pk and hash algorithms and sig class to VALIDSIG. * g10.c (main): Add --no-textmode. * export.c (do_export_stream), keyedit.c (show_key_with_all_names, menu_addrevoker), mainproc.c (check_sig_and_print), photoid.c (show_photos), trustdb.c (get_validity, reset_trust_records, validate_keys): Make some strings translatable.
* * mainproc.c (check_sig_and_print): Show digest algorithm when verifying aDavid Shaw2003-04-263-5/+20
| | | | | | | | | sig with --verbose on. * parse-packet.c (enum_sig_subpkt): Make a warning message a --verbose warning message since the devel version can make signatures that trigger it each time.
* * hkp.c (hkp_ask_import, hkp_export, hkp_search): Make sure to allocateDavid Shaw2003-04-252-3/+14
| | | | | space for the ":port" text in HKP URLs.
* Reverted recent changes in the copyright notices. We can't use aWerner Koch2003-04-234-3/+14
| | | | | | | | range of years but must list each year we have prepared a release and applied a textual change to a file. It is common that some files are not changed in a couple of years and a range would not allow to express this.
* * plaintext.c (ask_for_detached_datafile, hash_datafiles): Fix compilerDavid Shaw2003-04-222-3/+4
| | | | | warnings.
* * keyedit.c (sign_uids): Allow replacing expired signatures. AllowDavid Shaw2003-04-226-14/+73
| | | | | | | | | | | | | | duplicate signatures with --expert. * pkclist.c (check_signatures_trust): Don't display a null fingerprint when checking a signature with --always-trust enabled. * filter.h (progress_filter_context_t), progress.c (handle_progress): Fix compiler warnings. Make "what" constant. * build-packet.c (do_plaintext): Do not create invalid literal packets with >255-byte names.
* * g10.c, options.h: New option --enable-progress-filter.Werner Koch2003-04-1513-14/+108
| | | | | * progress.c (handle_progress): Make use of it.
* This commit was manufactured by cvs2svn to create branchRepo Admin2003-04-151-0/+104
| | | | 'STABLE-BRANCH-1-2'.
* Reverted recent changes to --output. This is the stable branch and itWerner Koch2003-04-145-113/+62
| | | | | might break applications.
* Forgot to sync the CVS. Check in the code again.Timo Schulz2003-04-135-62/+113
|
* Return cancel flag also for the old agent protocol.Werner Koch2003-04-101-1/+5
|
* * passphrase.c (read_passphrase_from_fd): Do a dummy read if theWerner Koch2003-04-102-35/+48
| | | | | | | | agent is to be used. Noted by Ingo Kl�cker. (agent_get_passphrase): Inhibit caching when we have no fingerprint. This is required for key generation as well as for symmetric only encryption.
* * passphrase .c (agent_get_passphrase): New arg CANCELED.Werner Koch2003-04-0910-36/+126
| | | | | | | | | | | | | | | | (passphrase_to_dek): Ditto. Passed to above. Changed all callers to pass NULL. * seckey-cert.c (do_check): New arg CANCELED. (check_secret_key): Terminate loop when canceled. * keyedit.c (change_passphrase): Pass ERRTEXT untranslated to passphrase_to_dek and translate where appropriate. * seckey-cert.c (check_secret_key): Ditto. * keygen.c (ask_passphrase): Ditto. * passphrase.c (agent_get_passphrase): Translate the TRYAGAIN_TEXT. Switch the codeset to utf-8.
* * decrypt.c (decrypt_messages): Fixed error handling; the fucntionWerner Koch2003-04-092-13/+14
| | | | | | used to re-loop with same file after an error. Reported by Joseph Walton.
* * hkp.c (dehtmlize): Fix bug #121 (memory corruption on some platforms).David Shaw2003-04-096-10/+38
| | | | | | | | | | | | | | | | Special thanks to Michael C. Toren for his help in lining up a sparc to test this fix on. * keyserver.c (keyserver_work): Call out error for keyserver helper with a different version than us. * main.h, g10.c (main), import.c (parse_import_options, fix_pks_corruption): It's really PKS corruption, not HKP corruption. Keep the old repair-hkp-subkey-bug command as an alias. * g10.c (main): Rename --no-version to --no-emit-version for consistency. Keep --no-version as an alias.
* * Makefile.am (EXTRA_DIST): Add autogen.sh wrapper which isWerner Koch2003-04-082-8/+33
| | | | | useful for some cross-compiling targets.
* * pkclist.c (algo_available): PGP 8 can use the SHA-256 hash.David Shaw2003-04-043-21/+29
| | | | | | * sign.c (sign_file, clearsign_file, sign_symencrypt_file): Remove unused code.