aboutsummaryrefslogtreecommitdiffstats
path: root/g10 (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* * keyedit.c (sign_mk_attrib, trustsig_prompt, sign_uids, keyedit_menu):David Shaw2002-11-034-39/+191
| | | | | | | | | | | Prompt for and create a trust signature with "tsign". This is functional, but needs better UI text. * build-packet.c (build_sig_subpkt): Able to build trust and regexp subpackets. * pkclist.c (do_edit_ownertrust): Comment.
* * keygen.c (set_one_pref, keygen_set_std_prefs): Allow using the fullDavid Shaw2002-11-035-85/+130
| | | | | | | | | | | algorithm name (CAST5, SHA1) rather than the short form (S3, H2). * main.h, keygen.c (keygen_get_std_prefs), keyedit.c (keyedit_menu): Return and use a fake uid packet rather than a string since we already have a nice parser/printer in keyedit.c:show_prefs. * main.h, misc.c (string_to_compress_algo): New.
* * g10.c (main): Add --no-throw-keyid.David Shaw2002-11-016-12/+69
| | | | | | | | | | * keydb.h, encode.c (write_pubkey_enc_from_list), g10.c (main), pkclist.c (build_pk_list): Add --hidden-recipient (-R) and --hidden-encrypt-to, which do a single-user variation on --throw-keyid. The "hide this key" flag is carried in bit 0 of the pk_list flags field. * keyserver.c (parse_keyrec): Fix shadowing warning.
* added RISC OS module loading supportStefan Bellon2002-10-316-13/+37
|
* * build-packet.c (do_plaintext), encode.c (encode_sesskey, encode_simple,David Shaw2002-10-314-5/+12
| | | | | | | encode_crypt), sign.c (write_plaintext_packet): Use wipememory() instead of memset() to wipe sensitive memory as the memset() might be optimized away.
* * trustdb.c (check_regexp): Modern regexps require REG_EXTENDED.David Shaw2002-10-302-1/+5
|
* * packet.h, trustdb.h, trustdb.c (trust_string): New. Return a stringDavid Shaw2002-10-309-37/+334
| | | | | | | | | | | | | | | | | | | | | | | | | | like "fully trusted", "marginally trusted", etc. (get_min_ownertrust): New. Return minimum ownertrust. (update_min_ownertrust): New. Set minimum ownertrust. (check_regexp): New. Check a regular epression against a user ID. (ask_ownertrust): Allow specifying a minimum value. (get_ownertrust_info): Follow the minimum ownertrust when returning a letter. (clear_validity): Remove minimum ownertrust when a key becomes invalid. (release_key_items): Release regexp along with the rest of the info. (validate_one_keyblock, validate_keys): Build a trust sig chain while validating. Call check_regexp for regexps. Use the minimum ownertrust if the user does not specify a genuine ownertrust. * pkclist.c (do_edit_ownertrust): Only allow user to select a trust level greater than the minimum value. * parse-packet.c (can_handle_critical): Can handle critical trust and regexp subpackets. * trustdb.h, trustdb.c (clear_ownertrusts), delkey.c (do_delete_key), import.c (import_one): Rename clear_ownertrust to clear_ownertrusts and have it clear the min_ownertrust value as well. * keylist.c (list_keyblock_print): Indent uid to match pub and sig.
* * keyedit.c (print_and_check_one_sig, show_key_and_fingerprint,David Shaw2002-10-297-11/+56
| | | | | | | | | | | | | menu_addrevoker), keylist.c (list_keyblock_print, print_fingerprint): Show "T" or the trust depth for trust signatures, and add spaces to some strings to make room for it. * packet.h, parse-packet.c (dump_sig_subpkt, parse_one_sig_subpkt, parse_signature): Parse trust signature values. * tdbio.h, tdbio.c (tdbio_read_record, tdbio_write_record): Reserve a byte for the minimum ownertrust value (for use with trust signatures).
* tidied RISC OS filetype supportStefan Bellon2002-10-295-52/+45
|
* filetype support for RISC OSStefan Bellon2002-10-284-8/+66
|
* * main.h, import.c (sec_to_pub_keyblock, import_secret_one,David Shaw2002-10-234-5/+85
| | | | | | | parse_import_options), g10.c (main): New import-option "convert-sk-to-pk" to convert a secret key into a public key during import. It is on by default.
* * pubkey-enc.c (get_it): Fix segv, test for revoked only when PKWerner Koch2002-10-232-1/+6
| | | | | has been assigned.
* 2002-10-18 Timo Schulz <[email protected]>Timo Schulz2002-10-185-57/+69
| | | | | | | | | * keylist.c: (print_pubkey_info): New. (print_seckey_info): New. * main.h: Prototypes for the new functions. * delkey.c (do_delete_key): Use it here. * revoke.c (gen_desig_revoke): Ditto.
* * pkclist.c (do_edit_ownertrust): Show all user IDs. This shouldWerner Koch2002-10-172-0/+35
| | | | | | be enhanced to also show the current trust level. Suggested by Florian Weimer.
* * g10.c (main): Handle --strict and --no-strict from the command lineDavid Shaw2002-10-172-0/+15
| | | | | before the options file is loaded.
* * g10.c (main): Disable --textmode when encrypting (symmetric or pk) inDavid Shaw2002-10-152-0/+17
| | | | | | --pgp2 mode as PGP 2 can't handle the unknown length literal packet. Reported by Michael Richardson.
* * keyserver-internal.h, keyserver.c (print_keyrec, parse_keyrec,David Shaw2002-10-143-205/+403
| | | | | | | | | | show_prompt, keyserver_search_prompt, keyserver_spawn): Go to version 1 of the keyserver protocol. This is a better design, similar to --with-colons, that allows for keys with multiple user IDs rather than using multiple keys. It also matches the machine readable pksd format. Also use a prettier --search-keys listing format that can fill different size windows (currently set at 24 lines).
* * keygen.c (print_status_key_created): New.Werner Koch2002-10-122-1/+27
| | | | | | (do_generate_keypair): Use it to print the fingerprint. (generate_subkeypair): Likewise.
* * keyedit.c (menu_addrevoker): Properly back out if the signature fails.David Shaw2002-10-112-4/+44
| | | | | | Also, do not allow appointing the same revoker twice, and report ALREADY_SIGNED if the user tries it.
* And changelog :)David Shaw2002-10-071-0/+10
|
* * import.c (import_keys_internal): Missed one s/inp/inp2/.David Shaw2002-10-073-9/+15
| | | | | | | | | * keylist.c (print_capabilities): Properly indicate per-key capabilities of sign&encrypt primary keys that have secret-parts-missing (i.e. no capabilities at all) * mainproc.c (symkey_decrypt_sesskey): Fix compiler warning.
* * getkey.c (get_pubkey_direct): Don't cache keys retrieved via thisDavid Shaw2002-10-043-4/+14
| | | | | | | | | function as they may not have all their fields filled in. * sig-check.c (signature_check2): Use new is_primary flag to check rather than comparing main_keyid with keyid as this still works in the case of a not fully filled in pk.
* * import.c (import_keys_internal): s/inp/inp2/ to avoid shadowingWerner Koch2002-10-043-13/+22
| | | | | | | | warning. * passphrase.c (agent_get_passphrase): Fixed signed/unsigned char problem in %-escaping. Noted by Ingo Kl�cker.
* * options.h, g10.c (main): Add --strict and --no-strict to switch theDavid Shaw2002-10-033-0/+10
| | | | | log_warning severity level from info to error.
* * keylist.c (print_capabilities): Secret-parts-missing keys should showDavid Shaw2002-10-034-5/+26
| | | | | | | | | that fact in the capabilities, and only primary signing keys can certify other keys. * packet.h, parse_packet.c (parse_key): Add is_primary flag for public keys (it already exists for secret keys).
* * import.c (import_secret_one): Check for an illegal (>110) protectionDavid Shaw2002-10-027-15/+42
| | | | | | | | | | | | | | | | | | cipher when importing a secret key. * keylist.c (list_keyblock_print): Show a '#' for a secret-parts-missing key. * parse_packet.c (parse_key): Some comments. * revoke.c (gen_revoke): Remove some debugging code. * trustdb.c (verify_own_keys): Make trusted-key a non-deprecated option again. * seckey-cert.c (do_check): Don't give the IDEA warning unless the cipher in question is in fact IDEA.
* * import.c (import_one): Make sure that a newly imported key starts with aDavid Shaw2002-10-012-1/+14
| | | | | clean ownertrust.
* * getkey.c (get_pubkey_direct): New.Werner Koch2002-10-012-1/+66
| | | | | | | (merge_selfsigs_main): Use it here to look for an ultimately trusted key. Using the full get_pubkey might lead to an infinitive recursion.
* * keyserver.c (parse_keyserver_uri): Force the keyserver URI scheme toDavid Shaw2002-09-302-0/+13
| | | | | lowercase to be case-insensitive.
* 2002-09-28 David Shaw <[email protected]>David Shaw2002-09-284-14/+40
| | | | | | | | | | | | | | * export.c (do_export_stream): Comment. * sig-check.c (check_key_signature2): Properly handle a non-designated revocation import. 2002-09-26 Werner Koch <[email protected]> * g10.c (set_homedir): New. Changed all direct assignments to use this. * gpgv.c (set_homedir): Ditto.
* * Makefile.am: Link gpg with EGDLIBS (i.e. NETLIBS) as EGD uses sockets.David Shaw2002-09-252-1/+7
| | | | | | Remove the old NETLIBS variable since the keyserver stuff is no longer internal.
* * import.c (import_keys_stream): Fix compiler type warning.David Shaw2002-09-244-11/+19
| | | | | | * keyring.c (keyring_rebuild_cache), sig-check.c (check_key_signature2), import.c (import, chk_self_sigs): Minor language cleanups.
* added fast-import to import-optionsStefan Bellon2002-09-235-21/+33
|
* avoid function cloneStefan Bellon2002-09-222-50/+40
|
* added trustdb update/check for stream import as wellStefan Bellon2002-09-212-3/+16
|
* trustdb checks/updates after importStefan Bellon2002-09-212-1/+16
|
* comment type fixWerner Koch2002-09-201-1/+1
|
* From stable branchDavid Shaw2002-09-193-13/+23
| | | | | | | | | | * keyserver.c (keyserver_spawn): Properly handle line truncation. Don't leak memory (~10-20 bytes) on searches. (keyserver_search_prompt): Cleanup. * keylist.c (list_keyblock_colon): Show 1F direct key signatures in --with-colons listing.
* From stable branchDavid Shaw2002-09-174-26/+102
| | | | | | | | | | | | | | * keyedit.c (menu_addrevoker): The direct key signature for revocation keys must be at least v4 to carry the revocation key subpacket. Add a PGP 2.x warning for revocation keys. * g10.c (check_permissions): Rearrange strings to make translating easier (don't incorporate string parts). * keyedit.c (sign_uids): Make strings translatable. * sig-check.c (check_key_signature2): Make string translatable.
* Import from stable branch.David Shaw2002-09-135-71/+100
| | | | | | | | | | | | | | | | | | | | 2002-09-13 David Shaw <[email protected]> * getkey.c (check_revocation_keys): Move.... * main.h, sig-check.c (check_revocation_keys): to here. Also return the signature_check error code rather than 0/1 and cache the sig result. * sig-check.c (check_key_signature2): Divert to check_revocation_keys if a revocation sig is made by someone other than the pk owner. * getkey.c (merge_selfsigs_main): Tidy. 2002-09-13 Werner Koch <[email protected]> * g10.c (main) [__MINGW32__]: Activate oLoadExtension.
* * Makefile.am, hkp.c, hkp.h, keyserver.c (keyserver_work): Remove internalDavid Shaw2002-09-125-681/+6
| | | | | HKP support.
* * keyserver.c (keyserver_spawn): Remove whitespace after keyserverDavid Shaw2002-09-122-5/+11
| | | | | commands.
* * g10.c, options.h: Removed option --emulate-checksum-bug.Werner Koch2002-09-1110-126/+152
| | | | | | | | | | | | | | | * misc.c (checksum_u16_nobug): Removed. (checksum_u16): Removed the bug emulation. (checksum_mpi): Ditto. (checksum_mpi_counted_nbits): Removed and replaced all calls with checksum_mpi. * parse-packet.c (read_protected_v3_mpi): New. (parse_key): Use it here to store it as an opaque MPI. * seckey-cert.c (do_check): Changed the v3 unprotection to the new why to store these keys. (protect_secret_key): Likewise. * build-packet.c (do_secret_key): And changed the writing.
* * exec.c (expand_args): Remove loop left over from earlier implementation.David Shaw2002-09-102-4/+13
| | | | | (exec_write): Missed one tick.
* Cleanups and minor fixes.Werner Koch2002-09-1017-64/+121
|
* * g10.c (add_group): Use '=' to separate group name from group members.David Shaw2002-09-093-3/+10
| | | | | | | Use a better error message for when no = is found. * hkp.c (hkp_export): Use CRLF in headers.
* * mainproc.c (print_pkenc_list): Don't increment the error counter whenDavid Shaw2002-09-042-1/+9
| | | | | | | printing the list of keys a message was encrypted to. This would make gpg give a non-zero exit code even for completely valid messages if the message was encrypted to more than one key that the user owned.
* * g10.c (main): Try to set a default character set. Print theWerner Koch2002-09-026-2/+55
| | | | | | | | | used one in verbosity level 3. * gpgv.c (main): Try to set a default character set. * status.c, status.h (STATUS_IMPORT_OK): New. * import.c (import_one,import_secret_one): Print new status.
* * pkclist.c (build_pk_list): Add new status code to indicate an untrustedDavid Shaw2002-08-302-1/+7
| | | | | | user. This (or a disabled key) fail with "unavailable pubkey" (G10ERR_UNU_PUBKEY).
* * pkclist.c (build_pk_list): Fail if any recipient keys are unusable.David Shaw2002-08-304-3/+26
| | | | | | | | | * options.skel: The PGP LDAP keyserver is back. Use MIT keyserver as a sample rather than cryptnet as cryptnet does not support searching yet. * keyedit.c (show_key_with_all_names): Fix error message (preferences are userid/selfsig and not key specific).