aboutsummaryrefslogtreecommitdiffstats
path: root/g10 (follow)
Commit message (Collapse)AuthorAgeFilesLines
* About to do a new releaseWerner Koch2006-06-252-3/+3
|
* * options.h, gpg.c (main), keygen.c (keygen_upd_std_prefs,David Shaw2006-06-224-2/+51
| | | | | | | keygen_add_std_prefs, proc_parameter_file): Add --default-keyserver-url to specify a keyserver URL at key generation time, and "Keyserver:" keyword for doing the same through a batch file.
* * sign.c (do_sign): Accept a truncated hash even for DSA1 keys (be liberalDavid Shaw2006-06-222-1/+13
| | | | | in what you accept, etc).
* * import.c (import_one): Add a flag (from_sk) so we don't check prefsDavid Shaw2006-06-122-6/+13
| | | | | | on an autoconverted public key. The check should only happen on the sk size. Noted by Dirk Traulsen.
* * keygen.c (gen_card_key): Add optional argument to return a pointerDavid Shaw2006-06-102-8/+20
| | | | | | | | (not a copy) of the stub secret key for the secret key we just generated on the card. (generate_card_subkeypair): Use it here so that the signing key on the card can use the card to generate the 0x19 backsig on the primary key. Noted by Janko Heilgeist and Jonas Oberg.
* * parse-packet.c (parse_user_id): Cap the user ID size at 2048 bytes. David Shaw2006-06-092-0/+22
| | | | | | | This prevents a memory allocation attack with a very large user ID. A very large packet length could even cause the allocation (a u32) to wrap around to a small number. Noted by Evgeny Legerov on full-disclosure.
* Revert last. It is still wrong.David Shaw2006-05-272-17/+7
|
* * exec.c (make_tempdir) [_WIN32]: Modified to properly handleDavid Shaw2006-05-272-7/+17
| | | | | arbitrarily long temporary directory paths.
* * keygen.c (gen_dsa): Allow generating DSA2 keys (allow specifying sizes >David Shaw2006-05-253-21/+73
| | | | | | | 1024 when --enable-dsa2 is set). The size of q is set automatically based on the key size. (ask_keysize, generate_keypair): Ask for DSA size when --enable-dsa2 is set.
* * exec.c (make_tempdir): Fix bug with a temporary directory on Win32David Shaw2006-05-252-2/+10
| | | | | that is over 256 bytes long. Noted by Israel G. Lugo.
* * gpg.c (reopen_std): New function to reopen fd 0, 1, or 2 if we areDavid Shaw2006-05-232-0/+72
| | | | | | | | called with them closed. This is to protect our keyring/trustdb files from corruption if they get attached to one of the standard fds. Print a warning if possible that this has happened, and fail completely if we cannot reopen (should never happen). (main): Call it here.
* * parse-packet.c (dump_sig_subpkt, parse_signature), build-packet.cDavid Shaw2006-05-236-19/+34
| | | | | | | | | (build_sig_subpkt_from_sig), getkey.c (fixup_uidnode, merge_selfsigs_main, merge_selfsigs_subkey), keygen.c (keygen_add_key_expire): Fix meaning of key expiration and sig expiration subpackets - zero means "never expire" according to 2440, not "expire instantly".
* * import.c (import_one): Fix bug when importing a new key from a file.David Shaw2006-05-222-7/+8
|
* * getkey.c (get_pubkey_byname), import.c (import_one): Fix key selectionDavid Shaw2006-05-223-4/+19
| | | | | | problem when auto-key-locate returns a list of keys, not all of which are usable (revoked, expired, etc). Noted by Simon Josefsson.
* (keyserver_import_cert): Show warning if there is a CERT fingerprint,David Shaw2006-04-272-1/+9
| | | | | but no --keyserver set.
* * keyserver.c (path_makes_direct): New. (keyserver_spawn): Used hereDavid Shaw2006-04-272-32/+29
| | | | | | to add "_uri" to certain gpgkeys_xxx helpers when the meaning is different if a path is provided (i.e. ldap).
* * keyserver.c: Fix build problem with platforms that stick libcurl inDavid Shaw2006-04-222-3/+5
| | | | | a place not in the regular include search path.
* * options.h, gpg.c (main): Add --enable-dsa2 and --disable-dsa2. DefaultsDavid Shaw2006-04-205-34/+145
| | | | | | | | | | | | | | | | to disable. * pkclist.c (algo_available): If --enable-dsa2 is set, we're allowed to truncate hashes to fit DSA keys. * sign.c (match_dsa_hash): New. Return the best match hash for a given q size. (do_sign, hash_for, sign_file): When signing with a DSA key, if it has q==160, assume it is an old DSA key and don't allow truncation unless --enable-dsa2 is also set. q!=160 always allows truncation since they must be DSA2 keys. (make_keysig_packet): If the user doesn't specify a --cert-digest-algo, use match_dsa_hash to pick the best hash for key signatures.
* * gpg.c (print_mds), armor.c (armor_filter, parse_hash_header): AddDavid Shaw2006-04-208-50/+98
| | | | | | | | | | | | | | SHA-224. * sign.c (write_plaintext_packet), encode.c (encode_simple): Factor common literal packet setup code from here, to... * main.h, plaintext.c (setup_plaintext_name): Here. New. Make sure the literal packet filename field is UTF-8 encoded. * options.h, gpg.c (main): Make sure --set-filename is UTF-8 encoded and note when filenames are already UTF-8.
* * keyedit.c (menu_backsign): Give some more verbose errors when weDavid Shaw2006-04-192-6/+26
| | | | | have no need to backsign.
* * options.skel, photoid.c (get_default_photo_command): Find an imageDavid Shaw2006-04-113-6/+24
| | | | | viewer at runtime. Seems FC5 doesn't have xloadimage.
* * getkey.c (parse_auto_key_locate): Fix dupe-removal code.David Shaw2006-04-095-20/+41
| | | | | | | | | | | | | * keyedit.c (menu_backsign): Allow backsigning even if the secret subkey doesn't have a binding signature. * armor.c (radix64_read): Don't report EOF when reading only a pad (=) character. The EOF actually starts after the pad. * gpg.c (main): Make --export, --send-keys, --recv-keys, --refresh-keys, and --fetch-keys follow their arguments from left to right. Suggested by Peter Palfrader.
* Fixed segvWerner Koch2006-04-082-2/+9
|
* See ChangeLogWerner Koch2006-04-082-4/+23
|
* About to release 1.4.3gnupg-1.4.3Werner Koch2006-04-038-4/+34
|
* * getkey.c (get_pubkey_byname): Fix missing auto_key_retrieve unlock.David Shaw2006-04-012-5/+12
| | | | | Fix strings to not start with a capital letter as per convention.
* Update copyrightDavid Shaw2006-03-301-1/+2
|
* * main.h, seskey.c (encode_md_value): Modify to allow a q size greaterDavid Shaw2006-03-305-35/+94
| | | | | | | | | | | | than 160 bits as per DSA2. This will allow us to verify and issue DSA2 signatures for some backwards compatibility once we start generating DSA2 keys. * sign.c (do_sign), sig-check.c (do_check): Change all callers. * sign.c (do_sign): Enforce the 160-bit check for new signatures here since encode_md_value can handle non-160-bit digests now. This will need to come out once the standard for DSA2 is firmed up.
* * getkey.c (parse_auto_key_locate): Silently strip out duplicates ratherDavid Shaw2006-03-222-5/+15
| | | | | than causing an error.
* Changed URLsWerner Koch2006-03-223-3/+8
|
* * mainproc.c (get_pka_address): Fix bug introduced as part ofDavid Shaw2006-03-222-1/+6
| | | | | sig_to_notation conversion. Noted by Peter Palfradrer.
* Allow for rmd160 signatures when using gpg-agent.Werner Koch2006-03-213-1/+13
|
* * keyserver.c (keyserver_import_cert): Handle the IPGP CERT type forDavid Shaw2006-03-173-24/+43
| | | | | | | both the fingerprint alone, and fingerprint+URL cases. * getkey.c (get_pubkey_byname): Minor cleanup.
* * cert.c (get_cert): Handle the fixed IPGP type with fingerprint.David Shaw2006-03-161-1/+1
|
* * keyserver-internal.h, keyserver.c (keyserver_import_pka): Use theDavid Shaw2006-03-144-31/+61
| | | | | | | | | | | | same API as the other auto-key-locate fetchers. * getkey.c (get_pubkey_byname): Use the fingerprint of the key that we actually fetched. This helps prevent problems where the key that we fetched doesn't have the same name that we used to fetch it. In the case of CERT and PKA, this is an actual security requirement as the URL might point to a key put in by an attacker. By forcing the use of the fingerprint, we won't use the attacker's key here.
* * keyserver-internal.h, keyserver.c (keyserver_spawn, keyserver_work,David Shaw2006-03-144-26/+40
| | | | | | keyserver_import_cert, keyserver_import_name, keyserver_import_ldap): Pass fingerprint info through.
* * main.h, import.c (import_one): Optionally return the fingerprint ofDavid Shaw2006-03-144-26/+43
| | | | | | the key being imported. (import_keys_internal, import_keys_stream, import): Change all callers.
* * sig-check.c (signature_check2): Print the backsig warning when thereDavid Shaw2006-03-123-8/+20
| | | | | | | | | is no backsig present. Give a URL for more information. * keyedit.c (menu_backsign): Small tweak to work properly with keys originally generated with older GnuPGs that included comments in the secret keys.
* * build-packet.c (string_to_notation): Add ability to indicate a notationDavid Shaw2006-03-093-39/+85
| | | | | | | | to be deleted with a '-' prefix. * keyedit.c (menu_set_notation): Use it here to allow deleting a notation marked with '-'. This works with either "-notation" or "-notation=value".
* Preparing for an RC23Werner Koch2006-03-092-11/+16
|
* * keyedit.c (menu_set_notation): New function to set notations onDavid Shaw2006-03-092-4/+250
| | | | | | | self-signatures. (keyedit_menu): Call it here. (tty_print_notations): Helper. (show_prefs): Show notations in "showpref".
* * mainproc.c (get_pka_address), keylist.c (show_notation): RemoveDavid Shaw2006-03-093-92/+64
| | | | | duplicate code by using notation functions.
* * packet.h, build-packet.c (sig_to_notation), keygen.cDavid Shaw2006-03-094-8/+20
| | | | | | (keygen_add_notations): Provide printable text for non-human-readable notation values.
* * packet.h, build-packet.c (sig_to_notation), keygen.cDavid Shaw2006-03-084-6/+15
| | | | | | (keygen_add_notations): Tweak to handle non-human-readable notation values.
* * options.h, sign.c (mk_notation_policy_etc), gpg.c (add_notation_data):David Shaw2006-03-089-117/+275
| | | | | | | | | | Use it here for the various notation commands. * packet.h, main.h, keygen.c (keygen_add_notations), build-packet.c (string_to_notation, sig_to_notation) (free_notation): New "one stop shopping" functions to handle notations and start removing some code duplication.
* * options.h, mainproc.c (check_sig_and_print), gpg.c (main):David Shaw2006-03-086-14/+27
| | | | | | | | | pka-lookups, not pka-lookup. * options.h, gpg.c (main), keyedit.c [cmds], sig-check.c (signature_check2): Rename "backsign" to "cross-certify" as a more accurate name.
* * options.h, gpg.c (main, parse_trust_model), pkclist.cDavid Shaw2006-03-076-50/+23
| | | | | | | (check_signatures_trust), mainproc.c (check_sig_and_print, pka_uri_from_sig), trustdb.c (init_trustdb): Some tweaks to PKA so that it is a verify-option now.
* More tests added; make distcheck worksWerner Koch2006-03-074-3/+28
|
* * sign.c (make_keysig_packet): Don't use MD5 for a RSA_S key as thatDavid Shaw2006-03-072-3/+5
| | | | | is not a PGP 2.x algorithm.
* * mainproc.c (proc_compressed): "Uncompressed" is not a valid compressionDavid Shaw2006-03-062-1/+8
| | | | | algorithm.
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-21 13:23:13 +0000