aboutsummaryrefslogtreecommitdiffstats
path: root/g10 (follow)
Commit message (Collapse)AuthorAgeFilesLines
* some late minor fixes.V1-3-6Werner Koch2004-05-228-15/+29
|
* * mainproc.c (check_sig_and_print): If we're honoring preferredDavid Shaw2004-05-225-41/+107
| | | | | | | | | | | | | | | | keyservers, and auto-key-retrieve is set, try and get a missing key from the preferred keyserver subpacket when we verify the sig. * gpgv.c (parse_preferred_keyserver, free_keyserver_spec): Stubs. * keyserver.c (keyidlist): Use new parse_preferred_keyserver function. (keyserver_work): Use the passed-in keyserver spec rather than the options global one. * keyserver-internal.h, keyserver.c (parse_preferred_keyserver): New function to take a sig and return a split out keyserver_spec. (keyserver_import_keyid): Now takes a keyserver_spec.
* * keyserver.c (keyidlist): Go back to the old fast keyid lister. OnlyDavid Shaw2004-05-214-99/+166
| | | | | | | | | merge selfsigs if we have to for honor-keyserver-url. (keyserver_refresh): Keyserver URL handler moved here. (calculate_keyid_fpr): Removed. * keydb.h, keyid.c (keystr_from_desc): Calculate a key string from a KEYDB_SEARCH_DESC.
* * keyserver.c (keyserver_spawn): Fix keyserver options on tempfile onlyDavid Shaw2004-05-212-1/+6
| | | | | platforms. Noted by Roger Sondermann.
* * keyserver.c (keyserver_work): Allow --refresh-keys with a preferredDavid Shaw2004-05-204-119/+57
| | | | | | | | | | | keyserver to happen even if there is no global keyserver set. * sig-check.c (do_check_messages): No need to check for Elgamal signatures any longer. (do_check_messages, do_check, check_key_signature2): --keyid-format conversion. * pkclist.c (show_paths, edit_ownertrust): Remove some unused code.
* * options.h (ctrl): New for member IN_AUTO_KEY_RETRIEVE.David Shaw2004-05-204-6/+62
| | | | | | | | | | | * mainproc.c (check_sig_and_print): track whether we are retrieving a key. * status.c (status_currently_allowed): New. (write_status_text, write_status_text_and_buffer): Use it here. * g10.c: New command --gpgconf-list. (gpgconf_list): New. From Werner on stable branch.
* * g10.c: New command --gpgconf-list. (gpgconf_list): New. From Werner onDavid Shaw2004-05-202-11/+59
| | | | | stable branch.
* * pubkey-enc.c (get_session_key, get_it), keyedit.cDavid Shaw2004-05-203-24/+32
| | | | | (show_key_with_all_names, show_basic_key_info): --keyid-format conversion.
* * sign.c (update_keysig_packet): Policies and notations should be strippedDavid Shaw2004-05-193-3/+23
| | | | | | | out when remaking a self-signature. Noted by Atom Smasher. * keyserver.c (parse_keyserver_uri): Fix compiler warnings.
* * options.h, keyserver-internal.h, keyserver.c (parse_keyserver_uri):David Shaw2004-05-114-45/+70
| | | | | | | Improved URI parser that keeps track of the path information and doesn't modify the input string. (keyserver_spawn): Tell keyserver plugins about the path.
* * keylist.c (show_policy_url, show_keyserver_url, show_notation)Werner Koch2004-05-114-4/+35
| | | | | | | | | | (list_one): Use const char* for i18n string helpers. * keygen.c (do_generate_keypair, read_parameter_file): Really close the files. (do_generate_keypair): Create the secret key file using safe permissions. Noted by Atom Smasher.
* * options.h, mainproc.c (symkey_decrypt_seskey), keyserver.c (structDavid Shaw2004-05-106-15/+27
| | | | | | keyrec, parse_keyrec, keyserver_search_prompt), keyedit.c (keyedit_menu), g10.c (add_keyserver_url, add_policy_url): Fix some compiler warnings.
* * keyedit.c (keyedit_menu, menu_set_keyserver_url): Allow passingDavid Shaw2004-05-085-88/+134
| | | | | | | | | | preferred keyserver on "keyserver" command line. Sanity check keyserver URL before accepting it. * keyserver-internal.h, g10.c (main), keyserver.c (parse_keyserver_uri): Add an option to require the scheme:// and change all callers. (free_keyserver_spec): Make public.
* (write_plaintext_packet): Fixed the detection of tooWerner Koch2004-05-072-8/+18
| | | | | large files in the same way as in encode.c.
* * keylist.c (show_notation): Use bits to select which sort of notation toDavid Shaw2004-05-056-47/+75
| | | | | | | | | | show. Don't allow a not-shown notation to prevent us from issuing the proper --status-fd message. * options.h, g10.c (main): Add show-std/standard-notations and show-user-notations. show-notations is both. Default is to show standard notations only during verify. Change all callers.
* * main.h, keylist.c (show_notation): Add argument to show only userDavid Shaw2004-04-296-7/+28
| | | | | | | notations, only standard notations, or both. Change all callers. * keyserver.c (keyserver_spawn): We still need EXEC_TEMPFILE_ONLY.
* * card-util.c (card_edit): Require PIN only for generate.Werner Koch2004-04-283-33/+37
| | | | | * app-openpgp.c (do_setattr): Sync FORCE_CHV1.
* (keyserver_spawn) [EXEC_TEMPFILE_ONLY]: RemovedWerner Koch2004-04-272-4/+3
| | | | | setting use_temp_file because this option has been removed.
* A bunch of changes for the openpgp card.Werner Koch2004-04-2719-259/+1954
|
* * getkey.c (get_seckey_byname2): Significantly simplify this function byDavid Shaw2004-04-262-32/+18
| | | | | | | using key_byname to do the heavy lifting. Note that this also fixes an old problem when the first key on the secret keyring has an unusable stub primary, but is still chosen.
* * getkey.c (key_byname): If namelist is NULL, return the first key in theDavid Shaw2004-04-262-29/+46
| | | | | keyring.
* * keygen.c (make_backsig): If DO_BACKSIGS is not defined, do not createDavid Shaw2004-04-237-6/+121
| | | | | | | | | | | | | | | | backsigs. * getkey.c (merge_selfsigs_subkey): Find 0x19 backsigs on subkey selfsigs and verify they are valid. If DO_BACKSIGS is not defined, fake this as always valid. * packet.h, parse-packet.c (parse_signature): Make parse_signature non-static so we can parse 0x19s in self-sigs. * main.h, sig-check.c (check_backsig): Check a 0x19 signature. (signature_check2): Give a backsig warning if there is no or a bad 0x19 with signatures from a subkey.
* * parse-packet.c (dump_sig_subpkt, parse_one_sig_subpkt,David Shaw2004-04-222-76/+93
| | | | | can_handle_critical): Parse and display 0x19 signatures.
* * keyserver.c (parse_keyserver_uri): Do not accept "http" as an alias forDavid Shaw2004-04-202-2/+6
| | | | | "hkp". They are not the same thing.
* * options.h, g10.c (main): Add keyserver-option honor-keyserver-url.David Shaw2004-04-194-94/+177
| | | | | | | | | | | | | | | | | | parse_keyserver_options now returns a success code. * keyserver.c (parse_keyserver_options): Return error on failure to parse. Currently there is no way to fail as any unrecognized options get saved to be sent to the keyserver plugins later. Check length of keyserver option tokens since with =arguments we must only match the prefix. (free_keyserver_spec): Moved code from parse_keyserver_url. (keyserver_work, keyserver_spawn): Pass in a struct keyserver_spec rather than using the global keyserver option. (calculate_keyid_fpr): New. Fills in a KEYDB_SEARCH_DESC for a key. (keyidlist): New implementation using get_pubkey_bynames rather than searching the keydb directly. If honor-keyserver-url is set, make up a keyserver_spec and try and fetch that key directly. Do not include it in the returned keyidlist in that case.
* * plaintext.c (handle_plaintext): Accept 'u' as a plaintext mode thatDavid Shaw2004-04-165-27/+46
| | | | | | | | | | | | | | | | | | requires end of line conversion. This is being considered for a UTF8 text packet. If this doesn't take place, no major harm done. If it does take place, we'll get a jump on starting the changeover. * g10.c (main): --no-use-embedded-filename. * build-packet.c (calc_plaintext, do_plaintext): Do not create illegal (packet header indicates a size larger than the actual packet) encrypted data packets when not compressing and using a filename longer than 255 characters. * keyedit.c (no_primary_warning): Cleanup. (menu_expire): Don't give primary warning for subkey expiration changes. These cannot reorder primaries.
* * keygen.c (gen_elg, gen_dsa, gen_rsa, do_create, do_generate_keypair,David Shaw2004-04-165-81/+220
| | | | | | | | | | | | | | | | | | | | | generate_subkeypair): New is_subkey argument to set whether a generated key is a subkey. Do not overload the ret_sk. This is some early cleanup to do backsigs for signing subkeys. * keygen.c (write_keybinding, do_generate_keypair, generate_subkeypair): Keep track of the unprotected subkey secret key so we can make a backsig with it. * keygen.c (make_backsig): New function to add a backsig to a binding sig of signing subkeys. Currently disabled. (write_keybinding): Call it here, for signing subkeys only. * sign.c (make_keysig_packet): Allow generating 0x19 signatures (same as 0x18 or 0x28, but used for backsigs). * packet.h, build-packet.c (build_sig_subpkt): Add new SIGSUBPKT_SIGNATURE type for embedded signatures.
* * main.h, misc.c (optsep, argsplit, optlen, parse_options): Simplify codeDavid Shaw2004-04-165-37/+62
| | | | | | | | and properly handle a partial match against an option with an argument. * keyserver-internal.h, keyserver.c (parse_keyserver_options): Use new optsep and argsplit functions.
* * main.h, misc.c (argsplit): Refactor argsep into argsplit and argsep soDavid Shaw2004-04-163-32/+59
| | | | | they can be called separately.
* * options.h, keyserver.c (parse_keyserver_options): Remove duplicate codeDavid Shaw2004-04-157-95/+90
| | | | | | | | | from parse_keyserver_options by calling the generic parse_options. * keyserver.c (keyserver_spawn, keyserver_refresh), g10.c (main), gpgv.c (main), mainproc.c (check_sig_and_print), import.c (revocation_present): Change all callers.
* * packet.h, getkey.c (fixup_uidnode, merge_selfsigs_subkey): Keep track ofDavid Shaw2004-04-154-4/+20
| | | | | | | | | which self-sig we actually chose. * keyedit.c (menu_expire, menu_set_primary_uid, menu_set_preferences): Use it here to avoid updating non-used self-sigs and possibly promoting an old self-sig into consideration again.
* * options.h, import.c, keyserver-internal.h, g10.c, mainproc.c,David Shaw2004-04-147-53/+80
| | | | | | | keyserver.c (parse_keyserver_uri): Parse keyserver URI into a structure. Cleanup for new "guess my keyserver" functionality, as well as refreshing via a preferred keyserver subpacket.
* * options.h: Encapsulate keyserver details. Change all callers.David Shaw2004-04-146-48/+57
|
* * keyedit.c (keyedit_menu): Request a trustdb update when adding a newDavid Shaw2004-03-282-2/+10
| | | | | user ID so the new ID gets validity set. Reported by Owen Taylor.
* * options.h, g10.c (main), compress-bz2.c (init_uncompress): RenameDavid Shaw2004-03-254-8/+14
| | | | | | --bzip2-compress-lowmem to --bzip2-decompress-lowmem since it applies to decompression, not compression.
* * keyedit.c (sign_uids, show_key_and_fingerprint, ask_revoke_sig,David Shaw2004-03-242-64/+61
| | | | | | menu_revsig, menu_showphoto): --keyid-format conversion. (menu_addrevoker): Use print_pubkey_info() rather than duplicating code.
* * trustdb.c (update_min_ownertrust, validate_keys): Do not use keystrDavid Shaw2004-03-195-7/+29
| | | | | | | | | | | | | | | functions in log_debug. * import.c (import_one): Try and collapse user IDs when importing a key for the first time. * keyedit.c (menu_addrevoker): Allow appointing a subkey as a designated revoker if the user forces it via keyid!, so long as the subkey can certify. Also use the proper date string when prompting for confirmation. * g10.c (main): Maintain ordering of multiple Comment lines. Requested by Peter Hyman.
* * mainproc.c (proc_pubkey_enc, print_pkenc_list, list_node):David Shaw2004-03-182-49/+51
| | | | | --keyid-format conversion.
* * getkey.c (skip_unusable, merge_selfsigs_main,David Shaw2004-03-162-36/+46
| | | | | | premerge_public_with_secret, lookup, get_user_id_string): --keyid-format conversion.
* * trustdb.c (add_utk, verify_own_keys, update_min_ownertrust,David Shaw2004-03-152-31/+34
| | | | | get_validity, ask_ownertrust, validate_keys): --keyid-format conversion.
* * import.c (check_prefs_warning, check_prefs): --keyid-format conversionDavid Shaw2004-03-152-228/+273
| | | | | | | and a little better text. (import_one, import_secret_one, import_revoke_cert, chk_self_sigs, delete_inv_parts, merge_blocks): Still more --keyid-format conversions.
* * keylist.c (print_seckey_info, print_pubkey_info): --keyid-formatDavid Shaw2004-03-062-35/+28
| | | | | | | conversion. (list_keyblock_print): 0xshort should not push us into the new list format since it is not much longer than regular 8-character short keyids.
* * keydb.h, keyid.c (keystr_from_pk, keystr_from_sk): New functions to pullDavid Shaw2004-03-064-65/+95
| | | | | | | | | a key string from a key in one step. This isn't faster than before, but makes for neater code. * keylist.c (list_keyblock_print): Use keystr_from_xx here. (print_key_data): No need to pass a keyid in.
* * keyid.c (keyid_from_sk): Minor performance boost by caching secret keyDavid Shaw2004-03-062-25/+41
| | | | | keyids so we don't have to calculate them each time.
* * getkey.c (merge_selfsigs_subkey): Do not mark subkeys valid if we do notDavid Shaw2004-03-053-5/+19
| | | | | | | | | support their pk algorithm. This allows for early (during get_*) rejection of a subkey, and selection of another. * passphrase.c (passphrase_to_dek): Give a little more information when we have room to do so.
* * revoke.c (export_minimal_pk), export.c (do_export_stream), passphrase.cDavid Shaw2004-03-057-60/+68
| | | | | | | | | | | (passphrase_to_dek), keyserver.c (print_keyrec): A few more places to use --keyid-format. * options.h, g10.c (main), export.c (parse_export_options, do_export_stream): Remove --export-all and the "include-non-rfc" export-option as they are no longer meaningful with the removal of v3 Elgamal keys.
* * armor.c (fake_packet, armor_filter): Use the 2440 partial lengthDavid Shaw2004-03-042-25/+53
| | | | | encoding for the faked plaintext packet.
* * options.h, g10.c (main), mainproc.c (check_sig_and_print): RemoveDavid Shaw2004-03-034-12/+13
| | | | | | verify-option show-long-keyids and replace with the more general keyid-format.
* * build-packet.c (write_header2): Remove call to start old gpg partialDavid Shaw2004-03-033-77/+89
| | | | | | | | | | | length mode and change all callers. (do_plaintext): Turn off partial length encoding now that we're done writing the packet. (do_comment, do_user_id): Try for a headerlen of 2 since that's the smallest and most likely encoding for these packets. * parse-packet.c (parse): Remove call to start old gpg partial length mode.
* * options.h, g10.c (main): Add a more flexible --keyid-format option toDavid Shaw2004-03-037-81/+133
| | | | | | | | | | | | replace the list-option (and eventually verify-option) show-long-keyids. The format can be short, long, 0xshort, and 0xlong. * keydb.h, keyid.c (keystr, keystrlen): New functions to generate a printable keyid. * keyedit.c (print_and_check_one_sig, show_key_with_all_names), keylist.c (list_keyblock_print): Use new keystr() function here to print keyids.