aboutsummaryrefslogtreecommitdiffstats
path: root/g10 (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* * main.h, keygen.c (keygen_add_revkey): Add revocation key subpackets to aDavid Shaw2002-05-169-27/+232
| | | | | | | | | | | | | | | | | | | | | | signature (callable by make_keysig_packet). (write_direct_sig): Write a 1F direct key signature. (parse_revocation_key): Parse a string in algo:fpr:sensitive format into a revocation key. (get_parameter_revkey, do_generate_keypair): Call above functions when prompted from a batch key generation file. * build-packet.c (build_sig_subpkt): Allow multiple revocation key subpackets in a single sig. * keydb.h, getkey.c (get_seckey_byfprint): Same as get_pubkey_byfprint, except for secret keys. We only know the fingerprint of a revocation key, so this is needed to retrieve the secret key needed to issue a revokation. * packet.h, parse-packet.c (parse_signature, parse_revkeys): Split revkey parsing off into a new function that can be used to reparse after manipulating the revkey list. * sign.c (make_keysig_packet): Ability to make 1F direct key signatures.
* * options.skel: keyserver.pgp.com is gone, so list pgp.surfnet.nl as aDavid Shaw2002-05-153-29/+69
| | | | | | | | | sample LDAP server instead. * getkey.c (merge_selfsigs_main): Properly handle multiple revocation keys in a single packet. Properly handle revocation keys that are in out-of-order packets. Remove duplicates in revocation key list.
* 2002-05-14 Timo Schulz <[email protected]>Timo Schulz2002-05-142-1/+5
| | | | | * exec.c (make_tempdir) [MINGW32]: Added missing '\'.
* EXTSEP_S instead of hardcoded dotStefan Bellon2002-05-132-1/+6
|
* * photoid.c (show_photos): Use the long keyid as the filename for theDavid Shaw2002-05-136-30/+73
| | | | | | | | | | | | | | | photo. Use the short keyid as the filename on 8.3 systems. * exec.h, exec.c (make_tempdir, exec_write, exec_finish): Allow caller to specify filename. This should make things easier on windows and macs where the file extension is required, but a whole filename is even better. * keyedit.c (show_key_with_all_names, show_prefs): Show proper prefs for a v4 key uid with no selfsig at all. * misc.c (check_permissions): Don't check permissions on non-normal files (pipes, character devices, etc.)
* * mainproc.c (proc_symkey_enc): Avoid segv in case the parserWerner Koch2002-05-112-1/+6
| | | | | encountered an invalid packet.
* * keyserver.c (keyserver_export): Get confirmation before sendingWerner Koch2002-05-112-0/+16
| | | | | all keys.
* fixes for M_DEBUG, strcasecmp and RISC OSStefan Bellon2002-05-105-38/+45
|
* * packet.h, getkey.c (fixup_uidnode), keyedit.c (show_prefs): Show assumedDavid Shaw2002-05-107-27/+81
| | | | | | | | | | prefs for hash and compression as well as the cipher pref. Show assumed prefs if there are no prefs at all on a v4 self-signed key. * options.h, g10.c (main), sign.c (make_keysig_packet): New --cert-digest-algo function to override the default key signing hash algorithm.
* * getkey.c (merge_selfsigs_main): Make sure the revocation key list startsDavid Shaw2002-05-097-44/+85
| | | | | | | | | | | | | | | | clean as this function may be called more than once (e.g. from functions in --edit). * g10.c, encode.c (encode_crypt), sign.c (sign_file, sign_symencrypt_file): Make --compress-algo work like the documentation says. It should be like --cipher-algo and --digest-algo in that it can override the preferences calculation and impose the setting the user wants. No --compress-algo setting allows the usual preferences calculation to take place. * main.h, compress.c (compress_filter): use new DEFAULT_COMPRESS_ALGO define, and add a sanity check for compress algo value.
* * pkclist.c (select_algo_from_prefs): There is an assumed compressionDavid Shaw2002-05-092-1/+9
| | | | | preference for uncompressed data.
* * options.h, g10.c (main), getkey.c (finish_lookup), pkclist.cDavid Shaw2002-05-075-20/+40
| | | | | | | | (algo_available): --pgp7, identical to --pgp6 except that it permits a few algorithms that PGP 7 added: AES128, AES192, AES256, and TWOFISH. Any more of these --pgpX flags, and it'll be time to start looking at a generic --emulate-pgp X option.
* * export.c (do_export_stream): Warn the user when exporting a secret keyDavid Shaw2002-05-076-26/+67
| | | | | | | | | | | | | if it or any of its secret subkeys are protected with SHA1 while simple_sk_checksum is set. * parse-packet.c (parse_key): Show when the SHA1 protection is used in --list-packets. * options.h, build-packet.c (do_comment), g10.c (main): Rename --no-comment as --sk-comments/--no-sk-comments (--no-comment still works) and make the default be --no-sk-comments.
* * keygen.c (get_parameter_algo): Never allow generation of theWerner Koch2002-05-073-4/+34
| | | | | | | | deprecated RSA-E or RSA-S flavors of PGP RSA. (ask_algo): Allow generation of RSA sign and encrypt in expert mode. Don't allow ElGamal S+E unless in expert mode. * helptext.c: Added entry keygen.algo.rsa_se.
* * keyedit.c (sign_uids): If --expert it set, allow re-signing a uid toDavid Shaw2002-05-073-21/+64
| | | | | | promote a v3 self-sig to a v4 one. This essentially deletes the old v3 self-sig and replaces it with a v4 one.
* * packet.h, parse-packet.c (parse_key), getkey.c (merge_keys_and_selfsig,David Shaw2002-05-074-16/+38
| | | | | | | merge_selfsigs_main): a v3 key with a v4 self-sig must never let the v4 self-sig express a key expiration time that extends beyond the original v3 expiration time.
* * keyedit.c (sign_uids): When making a self-signature via "sign" don't askDavid Shaw2002-05-062-18/+48
| | | | | | | about sig level or expiration, and include the usual preferences and such for v4 self-sigs. (menu_set_preferences): Convert uids from UTF8 to native before printing.
* * keyedit.c (sign_uids): Convert uids from UTF8 to native before printing.David Shaw2002-05-062-10/+32
| | | | | | (menu_set_primary_uid): Show error if the user tries to make a uid with a v3 self-sig primary.
* * import.c (import_one): When merging with a key we already have, don'tDavid Shaw2002-05-053-17/+30
| | | | | | | | | | | let a key conflict (same keyid but different key) stop the import: just skip the bad key and continue. * exec.c (make_tempdir): Under Win32, don't try environment variables for temp directories - GetTempDir tries environment variables internally, and it's better not to second-guess it in case MS adds some sort of temp dir handling to Windows at some point.
* 2002-05-04 Timo Schulz <[email protected]>Timo Schulz2002-05-052-0/+8
| | | | | | * mainproc.c (proc_symkey_enc): Don't ask for a passphrase in the list only mode.
* * keyserver.c (keyserver_refresh): --refresh-keys implies --merge-only soDavid Shaw2002-05-052-0/+11
| | | | | | as not to import keys with keyids that match the ones being refreshed. Noted by Florian Weimer.
* fixed m_alloc(0) bug and added checks to revkey and numrevkeysStefan Bellon2002-05-044-39/+58
|
* * photoid.c: Provide default image viewer for Win32.David Shaw2002-05-046-14/+34
| | | | | | | | | * misc.c (pct_expando): %t means extension, not name ("jpg", not "jpeg"). * keyserver.c (keyserver_spawn), photoid.c (show_photos), exec.h, exec.c: Allow the caller to determine the temp file extension when starting an exec_write and change all callers.
* * keyedit.c (sign_uids): Nonrevocable key signatures cause an automaticDavid Shaw2002-05-032-2/+8
| | | | | promotion to v4.
* * configure.ac: Add --disable-exec flag to disable all remote programDavid Shaw2002-05-032-0/+19
| | | | | | | | | execution. --disable-exec implies --disable-ldap and --disable-mailto. Also look in /usr/lib for sendmail. If sendmail is not found, do not default - just fail. * exec.c: Provide stubs for exec_ functions when NO_EXEC is defined.
* * photoid.h, photoid.c (parse_image_header, image_type_to_string): UsefulDavid Shaw2002-05-0211-158/+284
| | | | | | | | | | | | | | | | | | | functions to return data about an image. * packet.h, parse-packet.c (make_attribute_uidname, parse_attribute_subpkts, parse_attribute), photoid.h, photoid.c (show_photos): Handle multiple images in a single attribute packet. * main.h, misc.c (pct_expando), sign.c (mk_notation_and_policy), photoid.c (show_photos): Simpler expando code that does not require using compile-time string sizes. Call image_type_to_string to get image strings (i.e. "jpg", "image/jpeg"). Change all callers. * keyedit.c (menu_showphoto), keylist.c (list_keyblock_print): Allow viewing multiple images within a single attribute packet. * gpgv.c: Various stubs for link happiness.
* Allow multiple policy URLs on a given signature.David Shaw2002-05-026-87/+142
| | | | | | | Split "--notation-data" into "--cert-notation" and "--sig-notation" so the user can set different policies for key and data signing. For backwards compatibility, "--notation-data" sets both, as before.
* util/Werner Koch2002-05-022-11/+5
| | | | | | | | * memory.c (alloc): Malloc at least 1 byte. Noted by Winona Brown. g10/ * options.skel: Removed the comment on trusted-keys because this option is now deprecated.
* * keyedit.c (menu_adduid): 2440bis04 says that multiple attribute packetsDavid Shaw2002-05-013-37/+22
| | | | | | | | on a given key are legal. * keyserver.c (keyserver_refresh): the fake v3 keyid hack applies to "mailto" URLs as well since they are also served by pksd.
* Added a copyright year for files changed this year.Werner Koch2002-04-2939-38/+42
|
* fixed comment styleWerner Koch2002-04-291-1/+1
|
* g10/Werner Koch2002-04-255-0/+157
| | | | | | | | | | | | | | | * g10.c, options.h: New options --display, --ttyname, --ttytype, --lc-ctype, --lc-messages to be used with future versions of the gpg-agent. * passphrase.c (agent_send_option,agent_send_all_options): New. (agent_open): Send options to the agent. * trustdb.c (update_ownertrust, clear_ownertrust): Do an explicit do_sync because revalidation_mark does it only if when the timestamp actually changes. / * configure.ac: Check for locale.h and setlocale
* After generating a new key, show the key information (name, keyid,David Shaw2002-04-235-43/+103
| | | | | | | | | | | | fingerprint, etc.) Do not print uncheckable signatures (missing key..) in --check-sigs. Print statistics (N missing keys, etc.) after --check-sigs. When signing a key with an expiration date on it, the "Do you want your signature to expire at the same time?" question should default to YES
* * parse-packet.c (parse_plaintext), packet.h, plaintext.cDavid Shaw2002-04-238-13/+49
| | | | | | | | | | | | | | (handle_plaintext): Fix bug in handling literal packets with zero-length data (no data was being confused with partial body length). * misc.c (pct_expando), options.skel: %t means extension ("jpg"). %T means MIME type ("image/jpeg"). * import.c (import_one): Only trigger trust update if the keyring is actually changed. * export.c (do_export_stream): Missing a m_free.
* po/Werner Koch2002-04-222-1/+6
| | | | | * et.po, tr.po, cs.po, it.po, id.po: Updated.
* RISC OS specific changesStefan Bellon2002-04-223-3/+12
|
* * keygen.c (generate_subkeypair): 2440bis04 adds that creating subkeys onDavid Shaw2002-04-203-4/+16
| | | | | | | | | v3 keys is a MUST NOT. * getkey.c (finish_lookup): The --pgp6 "use the primary key" behavior should only apply while data signing and not encryption. Noted by Roger Sondermann.
* * keyedit.c (menu_deluid): Only cause a trust update if we delete aDavid Shaw2002-04-197-22/+39
| | | | | | | | | | | | | | | | | non-revoked user id. * hkp.c (hkp_ask_import), keyserver.c (parse_keyserver_options, keyserver_spawn), options.h: Remove fast-import keyserver option (no longer meaningful). * g10.c (main), keyedit.c (sign_uids), options.h: Change --default-check-level to --default-cert-check-level as it makes clear what it operates on. * g10.c (main): --pgp6 also implies --no-ask-sig-expire. * delkey.c (do_delete_key): Comment.
* * keyedit.c (sign_uids, keyedit_menu, menu_deluid, menu_delsig,David Shaw2002-04-193-18/+41
| | | | | | | | | menu_expire, menu_revsig, menu_revkey): Only force a trustdb check if we did something that changes it. * g10.c: add "--auto-check-trustdb" to override a "--no-auto-check-trustdb"
* * tdbio.c (tdbio_write_nextcheck): Return a status whether theWerner Koch2002-04-197-21/+98
| | | | | | | | | | | | | | | | | | stamp was actually changed. * trustdb.c (revalidation_mark): Sync the changes. Removed the sync operation done by its callers. (get_validity): Add logic for maintaining a pending_check flag. (clear_ownertrust): New. * keyedit.c (sign_uids): Don't call revalidation_mark depending on primary_pk. (keyedit_menu): Call revalidation_mark after "trust". (show_key_with_all_names): Print a warning on the wrong listed key validity. * delkey.c (do_delete_key): Clear the owenertrust information when deleting a public key.
* * seskey.c (encode_md_value): Print an error message if a wrongWerner Koch2002-04-184-6/+30
| | | | | | digest algorithm is used with DSA. Changed all callers to cope with a NULL return. Problem noted by Imad R. Faiad.
* * trustdb.c (validate_keys): Never schedule a nextcheck into theWerner Koch2002-04-182-17/+108
| | | | | | | | | past. (validate_key_list): New arg curtime use it to set next_expire. (validate_one_keyblock): Take the current time from the caller. (clear_validity, reset_unconnected_keys): New. (validate_keys): Reset all unconnected keys.
* * trustdb.c (mark_usable_uid_certs): Properly handle nonrevocableDavid Shaw2002-04-183-21/+59
| | | | | | | | | | | signatures that can expire. In short, the only thing that can override an unexpired nonrevocable signature is another unexpired nonrevocable signature. * getkey.c (finish_lookup): Always use primary signing key for signatures when --pgp6 is on since pgp6 and 7 do not understand signatures made by signing subkeys.
* * trustdb.c (validate_keys): Never schedule a nextcheck into theWerner Koch2002-04-182-2/+12
| | | | | past.
* * getkey.c (lookup): Advance the searchmode after a search FIRST.Werner Koch2002-04-182-0/+7
|
* * getkey.c (premerge_public_with_secret): Fixed 0x12345678! syntaxWerner Koch2002-04-185-17/+41
| | | | | | | | | | | | for use with secret keys. * seckey-cert.c (do_check): Always calculate the old checksum for use after unprotection. * g10.c, options.skel: New option --no-escape-from. Made --escape-from and --force-v3-sigs the default and removed them from the options skeleton.
* * parse-packet.c (parse_key): Support a SHA1 checksum as perWerner Koch2002-04-177-34/+98
| | | | | | | | | | draft-rfc2440-bis04. * packet.h (PKT_secret_key): Add field sha1chk. * seckey-cert.c (do_check): Check the SHA1 checksum (protect_secret_key): And create it. * build-packet.c (do_secret_key): Mark it as sha-1 protected. * g10.c, options.h: New option --simple-sk-checksum.
* * parse-packet.c (parse_signature): Minor fix - signatures should expireDavid Shaw2002-04-145-4/+25
| | | | | | | | | | | | | | at their expiration time and not one second later. * keygen.c (proc_parameter_file): Allow specifying preferences string (i.e. "s5 s2 z1 z2", etc) in a batchmode key generation file. * keyedit.c (keyedit_menu): Print standard error message when signing a revoked key (no new translation). * getkey.c (merge_selfsigs): Get the default set of key prefs from the real (not attribute) primary uid.
* * pkclist.c (build_pk_list): Fix bug that allowed a key to be selectedDavid Shaw2002-04-134-6/+52
| | | | | | | | | | | | | twice in batch mode if one instance was the default recipient and the other was an encrypt-to. Noted by Stefan Bellon. * parse-packet.c (dump_sig_subpkt): Show data in trust and regexp sig subpackets. * keyedit.c (keyedit_menu): Use new function real_uids_left to prevent deleting the last real (i.e. non-attribute) uid. Again, according to the attribute draft. (menu_showphoto): Make another string translatable.
* * build-packet.c (build_sig_subpkt): Delete subpackets from both hashedDavid Shaw2002-04-124-114/+101
| | | | | | | | | | | | | and unhashed area on update. (find_subpkt): No longer needed. * keyedit.c (sign_uids): With --pgp2 on, refuse to sign a v3 key with a v4 signature. As usual, --expert overrides. Try to tweak some strings to a closer match so they can all be translated in one place. Use different helptext keys to allow different help text for different questions. * keygen.c (keygen_upd_std_prefs): Remove preferences from both hashed and unhashed areas if they are not going to be used.
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-21 15:28:22 +0000