aboutsummaryrefslogtreecommitdiffstats
path: root/g10 (follow)
Commit message (Collapse)AuthorAgeFilesLines
* * keyserver.c (keyserver_typemap): Special-case LDAP since curl willDavid Shaw2005-07-272-1/+8
| | | | | report that it can handle it, and we don't want it to.
* * passphrase.c (agent_get_passphrase): Make sure to release theWerner Koch2005-07-264-7/+39
| | | | | | | | | saved codeset. (agent_open): Add arg ORIG_CODESET and switch back to it in case of error. Changed all callers. * zh_TW.po, fr.po, cs.po: Updated.
* Preparing a releaseWerner Koch2005-07-261-2/+1
|
* * keyedit.c (sign_uids): Don't prompt for setting signature expiry toDavid Shaw2005-07-222-17/+25
| | | | | | match key expiry unless --ask-cert-expire is set. Suggested by Peter Palfrader.
* * gpg.sgml (http):Werner Koch2005-07-2211-21/+77
| | | | | | * g10.c, options.h: New option --exit-on-status-write-error. * status.c (write_status_text): Make use of this option.
* * options.h, g10.c (main), keyedit.c (keyedit_menu): Use --interactiveDavid Shaw2005-07-225-10/+15
| | | | | | | | | to enable the uid walking when signing a key with no uids specified to sign. * keylist.c (list_keyblock_print): Fix silly typo. Noted by Greg Sabino Mullane.
* * keyserver.c (curl_can_handle): New. Do a runtime check against libcurlDavid Shaw2005-07-203-16/+43
| | | | | | | | to see if it can handle a particular protocol. (keyserver_typemap): Call it here. * Makefile.am: Pull in libcurl for curl_version_info() if used.
* * g10.c, options.h: New option --limit-card-insert-tries.Werner Koch2005-07-194-2/+18
| | | | | * cardglue.c (open_card): Use it.
* * configure.ac [W32]: Always set DISABLE_KEYSERVER_PATH.Werner Koch2005-07-196-6/+102
| | | | | | | | | | * export.c (parse_export_options): New option export-reset-subkey-passwd. (do_export_stream): Implement it. * misc.c (get_libexecdir): New. * keyserver.c (keyserver_spawn): Use it
* * tdbio.c (open_db): Check for EROFS. Suggested by Bryce Nichols.Werner Koch2005-07-182-1/+9
| | | | | | * ttyio.c (do_get): Move printing of the prompt after disabling echo. Suggested by Scott Worley.
* * trustdb.c (clean_uids_from_key): Don't keep a valid selfsig aroundDavid Shaw2005-07-095-22/+24
| | | | | | | | | | | | | when compacting a uid. There is no reason to make an attacker's job easier - this way they only have a revocation which is useless in bringing the uid back. * keydb.h, kbnode.c (undelete_kbnode): Removed. No longer needed. * import.c (chk_self_sigs): Allow a uid revocation to be enough to allow importing a particular uid (no self sig needed). This allows importing compacted uids.
* * keygen.c (save_unprotected_key_to_card): Better fix for gcc4 warning.David Shaw2005-06-202-1/+6
|
* * gpg.sgml: Document smartcard related options.Werner Koch2005-06-204-4/+21
| | | | | | * g10.c, options.h: New option --no-interactive-selection. * keyedit.c (keyedit_menu): Use it.
* (parse_signature): Use log_info for messagesWerner Koch2005-06-186-5/+22
| | | | | | | about missing timestamp or keyid. In case we don't use that key there won't be no further error and thus gpg does not need to return with an error.
* * keygen.c (save_unprotected_key_to_card): Fix gcc4 warning.David Shaw2005-06-145-8/+45
| | | | | | | | | | * options.h, import.c (parse_import_options, import_one): Add import-clean-uids option to automatically compact unusable uids when importing. Like import-clean-sigs, this may nodify the local keyring. * trustdb.c (clean_uids_from_key): Only allow selfsigs to be a candidate for re-inclusion.
* * options.h, import.c (parse_import_options, clean_sigs_from_all_uids,David Shaw2005-06-123-6/+49
| | | | | | | | import_one): Add import-clean-sigs option to automatically clean a key when importing. Note that when importing a key that is already on the local keyring, the clean applies to the merged key - i.e. existing superceded or invalid signatures are removed.
* * getkey.c (merge_selfsigs_main, merge_selfsigs_subkey): Make sureDavid Shaw2005-06-122-7/+18
| | | | | | that even after keys may be merged together, we only have one chosen selfsig.
* * options.h, import.c (parse_import_options, delete_inv_parts):David Shaw2005-06-103-26/+5
| | | | | import-unusable-sigs is now a noop.
* * options.h, export.c (do_export_stream), keyedit.c (keyedit_menu,David Shaw2005-06-106-108/+10
| | | | | | | | | menu_clean_subkeys_from_key), trustdb.h, trustdb.c (clean_subkeys_from_key): Remove subkey cleaning function. It is of very limited usefulness since it cannot be used on any subkey that can sign, and can only affect multiple selfsigs on encryption-only subkeys.
* * keydb.h, kbnode.c (undelete_kbnode): New function to undelete aDavid Shaw2005-06-104-10/+53
| | | | | | | | kbnode. * trustdb.c (clean_uids_from_key): Further tweak the algorithm so that the last good selfsig is kept when the chosen selfsig is a revocation.
* * trustdb.c (clean_uids_from_key), keyedit.cDavid Shaw2005-06-093-33/+35
| | | | | | (menu_clean_uids_from_key): Tweak algorithm to preserve the last selfsig which helps prevent uid resurrections.
* * getkey.c (fixup_uidnode, merge_selfsigs_main): Handle both expiredDavid Shaw2005-06-082-12/+16
| | | | | | | and revoked uids in fixup_uidnode(). No need to special case in merge_selfsigs_main(). This also means that an expired uid will have its selfsig tagged with chosen_selfsig.
* * options.h, g10.c (main), export.c (parse_export_options,David Shaw2005-06-084-23/+46
| | | | | | | | do_export_stream): Add export-options export-clean-sigs, export-clean-uids, export-clean-subkeys, and export-clean which is all of the above. Export-minimal is the same except it also removes all non-selfsigs. export-unusable-sigs is now a noop.
* * signal.c [HAVE_DOSISH_SYSTEM]: Fix unused function warnings on mingw32.David Shaw2005-06-013-19/+17
| | | | | | | Noted by Joe Vender. * passphrase.c [_WIN32]: Remove unused variables.
* * keyedit.c (menu_clean_uids_from_key, menu_clean_subkeys_from_key),David Shaw2005-05-313-4/+11
| | | | | | trustdb.c (clean_uids_from_key, clean_subkeys_from_key): Fix mingw32 build warnings. Noted by Joe Vender.
* * keydb.h [!ENABLE_AGENT_SUPPORT]: Define dummy types.Werner Koch2005-05-316-11/+60
| | | | | | | | | | | | | * cardglue.c (assuan_strerror, assuan_transact): Dummy functions if not build with agent support. * zh_TW.po, zh_CN.po, es.po, ro.po: Updated. * tr.po: Updated from TP. Note: this is an exception in general translations from the Robot are not anymore accepted. * regcomp.c (MB_CUR_MAX) [_WIN32]: Define it only if not defined.
* Updated FSF street address and preparations for a release candidate.Werner Koch2005-05-3179-81/+172
|
* * trustdb.h, trustdb.c (clean_subkeys_from_key): New. Walk throughDavid Shaw2005-05-314-20/+129
| | | | | | | | | | | | | the subkeys on a key, and mark any that aren't usable for deletion. Note that a signing subkey is never marked for deletion since these keys are still useful after expiration or revocation. * keyedit.c (menu_clean_subkeys_from_key): New function to call clean_subkeys_from_key() on a key. Note that the strings here are not marked for translation yet. The UI is still in flux, and there is no point in annoying the translators twice. (keyedit_menu): Call it here as part of the "clean" command.
* * trustdb.h, trustdb.c (clean_uids_from_key): New. Walk through theDavid Shaw2005-05-304-14/+144
| | | | | | | | | user IDs on a key, and mark any that aren't valid for deletion. * keyedit.c (menu_clean_uids_from_key): New function to call clean_uids_from_key() on a key. (keyedit_menu): Call it from here as part of the "clean" command.
* * g10.c (main): Default {export|import}-unusable-sigs to off until theDavid Shaw2005-05-272-2/+7
| | | | | "clean" UI can be finished.
* * passphrase.c (ask_passphrase): Unescape the description string.Werner Koch2005-05-246-44/+59
| | | | | | | * cardglue.c (unescape_status_string): Removed. Changed all caller to use ... * misc.c (unescape_percent_string): New.
* (add_notation_data): Check number of at-signs.Werner Koch2005-05-241-1/+1
|
* (add_notation_data): Check number of at-signs.Werner Koch2005-05-242-1/+11
|
* * app-openpgp.c, app-common.h: Again updated from gnupg 1.9 CVS.Werner Koch2005-05-234-232/+22
| | | | | | | * cardglue.c (open_card): Check USE_AGENT. (agent_scd_checkpin): Implemented Assuan part. (agent_scd_change_pin): Ditto.
* * cardglue.c (open_card): Check USE_AGENT.Werner Koch2005-05-234-75/+190
| | | | | | | | | | | | | | | | | | | * g10.c (main): Option --debug-ccid-driver may now be given several times increase the debug level. * ccid-driver.c (parse_ccid_descriptor): Mark SCR335 FW version 5.14 as good. (do_close_reader): Never do a reset. The caller should instead make sure that the reader has been closed properly. The new retry code in ccid_slot_status will make sure that the readersatrts up fine even if the last process didn't closed the USB connection properly. (ccid_get_atr): For certain readers try switching to ISO mode. Thanks to Ludovic Rousseau for this hint and the magic numbers. (print_command_failed): New. (bulk_in): Use it here. Add new arg NO_DEBUG. (ccid_slot_status): Disabled debugging.
* * cardglue.c (send_status_info): Make CTRL optional.Werner Koch2005-05-218-195/+554
| | | | | | | | | | | (agent_scd_writekey, inq_writekey_parms): New. (agent_openpgp_storekey): Removed. * cardglue.h: Add a few more error code mappings. * keygen.c (copy_mpi): Removed. (save_unprotected_key_to_card): Changed to use agent_scd_writekey. * app-common.h, app-openpgp.c, tlv.c, tlv.h: Updated from newer version in gnupg 1.9 CVS.
* (ccid_transceive): Arghhh. The seqno is anotherWerner Koch2005-05-2010-225/+1086
| | | | | | bit in the R-block than in the I block, this was wrong at one place. Fixes bug #419 and hopefully several others.
* * build-packet.c (do_comment): Removed. (build_packet): IgnoreDavid Shaw2005-05-145-41/+41
| | | | | | | | | | | comment packets. * export.c (do_export_stream): Don't export comment packets any longer. * options.h, g10.c (main): Remove --sk-comments and --no-sk-comments options, and replace with no-op.
* * keygen.c (write_selfsigs): Rename from write_selfsig. Write the sameDavid Shaw2005-05-113-19/+52
| | | | | | | | | | | | | | | selfsig into both the pk and sk, so that someone importing their sk (which will get an autoconvert to the pk) won't end up with two selfsigs. (do_generate_keypair): Call it from here. * parse-packet.c (can_handle_critical_notation): New. Check for particular notation tags that we will accept when critical. Currently, that's only [email protected], since we know how to handle it (pass it through to a mail program). (can_handle_critical): Call it from here. (parse_one_sig_subpkt): Sanity check that notations are well-formed in that the internal lengths add up to the size of the subpacket.
* (do_close_reader): Don't do a reset before close.Werner Koch2005-05-072-1/+8
| | | | | | Some folks reported that it makes the SCR335 hang less often. Look at the source on how to re-enable it.
* * main.h, keygen.c (parse_expire_string, ask_expire_interval), sign.cDavid Shaw2005-05-066-62/+65
| | | | | | | | (sign_file, clearsign_file, sign_symencrypt_file), g10.c (main), keyedit.c (sign_uids): Use seconds rather than days internally to calculate expiration. We no longer need the day-based code as we don't generate v3 keys.
* * sign.c (sign_file, clearsign_file, sign_symencrypt_file): Use theDavid Shaw2005-05-062-6/+11
| | | | | default sig expire value when signing in batchmode.
* * Makefile.am, packet.h, main.h, comment.c: Remove comment.c. We don'tDavid Shaw2005-05-055-111/+3
| | | | | use any of these functions any longer.
* * keygen.c (start_tree): New function to "prime" a KBNODE list.David Shaw2005-05-054-46/+34
| | | | | | | | | | | | (do_generate_keypair): Use it here rather than creating and deleting a comment packet. * keygen.c (gen_elg, gen_dsa): Do not put public factors in secret key as a comment. * options.h, encode.c (encode_simple, encode_crypt), keygen.c (do_create): Remove disabled comment packet code.
* * keygen.c (keygen_set_std_prefs): Add SHA256 and BZip2 to defaultDavid Shaw2005-05-052-3/+22
| | | | | preferences.
* * options.h, g10.c (main): Add new --default-sig-expire andDavid Shaw2005-05-057-48/+129
| | | | | | | | | | | | --default-cert-expire options. Suggested by Florian Weimer. * main.h, keygen.c (parse_expire_string, ask_expire_interval): Use defaults passed in, or "0" to control what default expiration is. * keyedit.c (sign_uids), sign.c (sign_file, clearsign_file, sign_symencrypt_file): Call them here, so that default expiration is used when --ask-xxxxx-expire is off.
* * passphrase.c (agent_get_passphrase): Add new arg CACHEID.Werner Koch2005-05-038-34/+174
| | | | | | | | | | | | | | Changed all callers. (ask_passphrase): Add new arg CACHEID and use it in agent mode. Changed all callers. (passphrase_clear_cache): New arg CACHEID. Changed all callers. * cardglue.c (format_cacheid): New. (pin_cb): Compute a cache ID. (agent_scd_pksign, agent_scd_pkdecrypt): Use it. (agent_clear_pin_cache): New. * card-util.c (change_pin): Clear the PIN cache. (check_pin_for_key_operation): Ditto.
* * trustdb.h, trustdb.c (mark_usable_uid_certs): Add flags for theDavid Shaw2005-04-244-21/+164
| | | | | | | | | | no-pubkey and chosen revocation cases. (clean_uid): New function to clean a user ID of unusable (as defined by mark_usable_uid_certs) certs. * keyedit.c (keyedit_menu, menu_clean_uids): Call it here for new "clean" command that removes unusable sigs from a key.
* * trustdb.h, keyedit.c (keyedit_menu, menu_select_uid_namehash): AllowDavid Shaw2005-04-243-2/+53
| | | | | | specifying user ID via the namehash from --with-colons --fixed-list-mode --list-keys. Suggested by Peter Palfrader.
* * keyedit.c (sign_uids, keyedit_menu): When the user requests to signDavid Shaw2005-04-222-17/+36
| | | | | | | a key without specifying which user IDs to sign, and declines to sign all user IDs, walk through the set of user IDs and prompt for which to sign.