| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|
|
|
|
|
| |
import_one): Add import-minimal option. Similar to export-minimal, except
it works on the way in.
|
|
|
|
|
|
|
|
| |
non-selfsigs from key during cleaning. Change all callers.
* export.c (do_export_stream): Use it here so we don't need additional
minimize code in the export path.
|
|
|
|
|
| |
336211 by Javier Fernández-Sanguino Peña.
|
|
|
|
|
|
|
|
|
|
|
| |
speaking this should be only in gpg_CPPFLAGS, but then we have to
compile everything twice for gpg and gpgv.
* apdu.c (open_pcsc_reader): Fix double free.
* gpg.c (main) [__APPLE__]: Default the PCSC driver to the OS X
location. Suggested by Patty A. Hardy.
|
|
|
|
|
| |
the sigs that are cleaned. Suggested by Dirk Traulsen and many others.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
so keyserver mangled keys with doubled user IDs can be properly
cleaned - possibly sigs on the different user IDs cancel each other
out.
* import.c (parse_import_options), export.c (parse_export_options):
List "xxx-clean" before the longer options so we don't end up with a
partial match on the longer options.
* trustdb.c (clean_uids_from_key): Return proper number of cleaned
user IDs. Don't count user IDs as cleaned unless we actually delete
something.
|
|
|
|
|
|
| |
adding a cert-only designated revoker. Code was looking for a key with
sign ability, and not cert ability. Noted by Timo Schulz.
|
| |
|
|
|
|
|
|
| |
algo capabilities if parameter file doesn't specify them. Noted by Timo
Schulz.
|
| |
|
| |
|
|
|
|
|
|
|
|
|
| |
add 0x19 backsigs to old keys that don't have them.
* misc.c (parse_options): Fix build warning.
* main.h, keygen.c (make_backsig): Make public.
|
|
|
|
|
|
| |
(signature_check2): Add --require-backsigs and --no-require-backsigs.
Currently defaults to --no-require-backsigs.
|
|
|
|
|
|
|
| |
keygen.c (make_backsig): Did some backsig interop testing with the PGP
folks. All is well, so I'm turning generation of backsigs on for new
keys. Checking for backsigs on verification is still off.
|
| |
|
| |
|
|
|
|
| |
Filelength fixes for W32.
|
|
|
|
|
| |
prompt.
|
|
|
|
|
|
|
|
| |
IDs as well as regular text IDs.
* plaintext.c (ask_for_detached_datafile): Use make_filename() on
filename so tilde expansion works.
|
|
|
|
|
|
|
|
|
| |
strings in xxx-options commands.
* keyserver.c (keyserver_opts), import.c (parse_import_options),
export.c (parse_export_options), g10.c (parse_list_options, main):
Add help strings to xxx-options.
|
|
|
|
|
|
|
| |
show_key_with_all_names. (keyedit_menu): Call it here for pref and
showpref so they can show only the selected user ID. Suggested by
Timo Schulz.
|
| |
|
| |
|
|
|
|
|
|
|
| |
parse_attribute_subpkts): Make a number of warnings verbose items.
These fire on many slightly mangled keys in the field, so the
warning is becoming burdensome.
|
|
|
|
|
|
|
|
| |
suggested filename.
* keyedit.c (keyedit_menu, menu_adduid): Call it here so "addphoto
filename" works.
|
|
|
|
|
| |
expansion for the JPEG prompt.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
algorithms.
* keyedit.c (sign_uids): Don't request a signing key to make a
certification.
* keygen.c (do_add_key_flags): Force the certify flag on for all
primary keys, as the spec requires primary keys must be able to
certify (if nothing else, which key is going to issue the user ID
signature?) (print_key_flags): Show certify flag. (ask_key_flags,
ask_algo): Don't allow setting the C flag for subkeys.
* keyid.c (usagestr_from_pk), getkey.c (parse_key_usage): Distinguish
between a sign/certify key and a certify-only key.
|
|
|
|
|
| |
Suggested by Michael Schierl.
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* main.h, misc.c (path_access): New. Same as access() but does a PATH
search like execlp.
* keyserver.c (curl_can_handle): Removed. Replaced by...
(curl_cant_handle): We are now relying on curl as the handler of last
resort. This is necessary because PGP LDAP and curl LDAP are apples
and oranges. (keyserver_typemap): Only test for ldap and ldaps.
(keyserver_spawn): If a given handler is unusable (as determined by
path_access()) then try gpgkeys_curl.
|
|
|
|
|
| |
Minor cleanup to use bitfield flags instead of a bunch of integers.
|
|
|
|
|
| |
to make switching from PGP command line to GPG easier.
|
|
|
|
|
|
|
|
| |
samples since it is being shut down.
* getkey.c (classify_user_id): Disable the '.' and '+' search modes
since they aren't supported yet.
|
| |
|
|
|
|
|
|
| |
--passphrase command line option. Only useful in very special
circumstances.
|
|
|
|
|
|
| |
so that gpg can get the key from DNS. This helps with opportunistic
encryption. No integration with the trust modell yet.
|
|
|
|
|
| |
file. Noted by Michael Schierl.
|
|
|
|
|
| |
Noted by Michael Schierl.
|
|
|
|
|
| |
we start our tree with one.
|
| |
|
|
|
|
|
| |
can then delete) to start the tree.
|
| |
|
| |
|
| |
|
|
|
|
|
| |
report that it can handle it, and we don't want it to.
|
|
|
|
|
|
|
|
|
| |
saved codeset.
(agent_open): Add arg ORIG_CODESET and switch back to it in case
of error. Changed all callers.
* zh_TW.po, fr.po, cs.po: Updated.
|
| |
|
|
|
|
|
|
| |
match key expiry unless --ask-cert-expire is set. Suggested by Peter
Palfrader.
|
|
|
|
|
|
| |
* g10.c, options.h: New option --exit-on-status-write-error.
* status.c (write_status_text): Make use of this option.
|
|
|
|
|
|
|
|
|
| |
to enable the uid walking when signing a key with no uids specified to
sign.
* keylist.c (list_keyblock_print): Fix silly typo. Noted by Greg
Sabino Mullane.
|
|
|
|
|
|
|
|
| |
to see if it can handle a particular protocol. (keyserver_typemap): Call
it here.
* Makefile.am: Pull in libcurl for curl_version_info() if used.
|