aboutsummaryrefslogtreecommitdiffstats
path: root/g10 (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* * cardglue.c (send_status_info): Make CTRL optional.Werner Koch2005-05-218-195/+554
| | | | | | | | | | | (agent_scd_writekey, inq_writekey_parms): New. (agent_openpgp_storekey): Removed. * cardglue.h: Add a few more error code mappings. * keygen.c (copy_mpi): Removed. (save_unprotected_key_to_card): Changed to use agent_scd_writekey. * app-common.h, app-openpgp.c, tlv.c, tlv.h: Updated from newer version in gnupg 1.9 CVS.
* (ccid_transceive): Arghhh. The seqno is anotherWerner Koch2005-05-2010-225/+1086
| | | | | | bit in the R-block than in the I block, this was wrong at one place. Fixes bug #419 and hopefully several others.
* * build-packet.c (do_comment): Removed. (build_packet): IgnoreDavid Shaw2005-05-145-41/+41
| | | | | | | | | | | comment packets. * export.c (do_export_stream): Don't export comment packets any longer. * options.h, g10.c (main): Remove --sk-comments and --no-sk-comments options, and replace with no-op.
* * keygen.c (write_selfsigs): Rename from write_selfsig. Write the sameDavid Shaw2005-05-113-19/+52
| | | | | | | | | | | | | | | selfsig into both the pk and sk, so that someone importing their sk (which will get an autoconvert to the pk) won't end up with two selfsigs. (do_generate_keypair): Call it from here. * parse-packet.c (can_handle_critical_notation): New. Check for particular notation tags that we will accept when critical. Currently, that's only [email protected], since we know how to handle it (pass it through to a mail program). (can_handle_critical): Call it from here. (parse_one_sig_subpkt): Sanity check that notations are well-formed in that the internal lengths add up to the size of the subpacket.
* (do_close_reader): Don't do a reset before close.Werner Koch2005-05-072-1/+8
| | | | | | Some folks reported that it makes the SCR335 hang less often. Look at the source on how to re-enable it.
* * main.h, keygen.c (parse_expire_string, ask_expire_interval), sign.cDavid Shaw2005-05-066-62/+65
| | | | | | | | (sign_file, clearsign_file, sign_symencrypt_file), g10.c (main), keyedit.c (sign_uids): Use seconds rather than days internally to calculate expiration. We no longer need the day-based code as we don't generate v3 keys.
* * sign.c (sign_file, clearsign_file, sign_symencrypt_file): Use theDavid Shaw2005-05-062-6/+11
| | | | | default sig expire value when signing in batchmode.
* * Makefile.am, packet.h, main.h, comment.c: Remove comment.c. We don'tDavid Shaw2005-05-055-111/+3
| | | | | use any of these functions any longer.
* * keygen.c (start_tree): New function to "prime" a KBNODE list.David Shaw2005-05-054-46/+34
| | | | | | | | | | | | (do_generate_keypair): Use it here rather than creating and deleting a comment packet. * keygen.c (gen_elg, gen_dsa): Do not put public factors in secret key as a comment. * options.h, encode.c (encode_simple, encode_crypt), keygen.c (do_create): Remove disabled comment packet code.
* * keygen.c (keygen_set_std_prefs): Add SHA256 and BZip2 to defaultDavid Shaw2005-05-052-3/+22
| | | | | preferences.
* * options.h, g10.c (main): Add new --default-sig-expire andDavid Shaw2005-05-057-48/+129
| | | | | | | | | | | | --default-cert-expire options. Suggested by Florian Weimer. * main.h, keygen.c (parse_expire_string, ask_expire_interval): Use defaults passed in, or "0" to control what default expiration is. * keyedit.c (sign_uids), sign.c (sign_file, clearsign_file, sign_symencrypt_file): Call them here, so that default expiration is used when --ask-xxxxx-expire is off.
* * passphrase.c (agent_get_passphrase): Add new arg CACHEID.Werner Koch2005-05-038-34/+174
| | | | | | | | | | | | | | Changed all callers. (ask_passphrase): Add new arg CACHEID and use it in agent mode. Changed all callers. (passphrase_clear_cache): New arg CACHEID. Changed all callers. * cardglue.c (format_cacheid): New. (pin_cb): Compute a cache ID. (agent_scd_pksign, agent_scd_pkdecrypt): Use it. (agent_clear_pin_cache): New. * card-util.c (change_pin): Clear the PIN cache. (check_pin_for_key_operation): Ditto.
* * trustdb.h, trustdb.c (mark_usable_uid_certs): Add flags for theDavid Shaw2005-04-244-21/+164
| | | | | | | | | | no-pubkey and chosen revocation cases. (clean_uid): New function to clean a user ID of unusable (as defined by mark_usable_uid_certs) certs. * keyedit.c (keyedit_menu, menu_clean_uids): Call it here for new "clean" command that removes unusable sigs from a key.
* * trustdb.h, keyedit.c (keyedit_menu, menu_select_uid_namehash): AllowDavid Shaw2005-04-243-2/+53
| | | | | | specifying user ID via the namehash from --with-colons --fixed-list-mode --list-keys. Suggested by Peter Palfrader.
* * keyedit.c (sign_uids, keyedit_menu): When the user requests to signDavid Shaw2005-04-222-17/+36
| | | | | | | a key without specifying which user IDs to sign, and declines to sign all user IDs, walk through the set of user IDs and prompt for which to sign.
* * mainproc.c (symkey_decrypt_seskey): There is no need to have anDavid Shaw2005-04-222-33/+40
| | | | | | | extra check for a bad passphrase and/or unknown cipher algorithm here. We'll fail quite happily later, and usually with a better error message to boot.
* * keyserver.c (keyserver_spawn): Free some memory.David Shaw2005-04-173-1/+31
| | | | | * sign.c (hash_for): Comments.
* * g10.c (main, add_notation_data, add_policy_url)Werner Koch2005-04-115-7/+34
| | | | | | | | | | | (add_keyserver_url): Use isascii() to protect the isfoo macros and to replace direct tests. Possible problems noted by Christian Biere. * keyserver.c (parse_keyserver_uri): Ditto. * g10.c (main): Declare --pipemode deprecated. * misc.c (deprecated_command): New.
* * ccid-driver.c (ccid_slot_status): Fixed debug messages.Werner Koch2005-04-074-6/+90
| | | | | | | | | * card-util.c (card_edit): Add command "verify". Enhanced admin command to allow optional arguments "on", "off" and "verify". (card_status): Print private DOs in colon mode. * app-openpgp.c (do_check_pin): Add hack to allow verification of CHV3.
* Changes to make use of code taken from libassuan. This replaces theWerner Koch2005-04-053-570/+230
| | | | | | | old ad-hoc connection code to gpg-agent. We do need this for the forthcoming diversion of card code to an already running gpg-agent with card-support.
* * mainproc.c (proc_plaintext): Properly handle SIG+LITERAL (old-style PGP)David Shaw2005-04-012-19/+41
| | | | | signatures that use hashes other than SHA-1, RIPEMD160, or MD5.
* (keygen_set_std_prefs): Explain the chosen order ofWerner Koch2005-04-011-1/+13
| | | | | AES key sizes.
* * exec.h, exec.c (set_exec_path): Remove some dead code and change allDavid Shaw2005-03-315-23/+16
| | | | | callers. We no longer need to append to $PATH.
* * keydb.c (keydb_add_resource): Clarify meaning of flags. Add newWerner Koch2005-03-313-6/+24
| | | | | | flag 4. Use log_info for errors registering the default secret key. * g10.c (main): Flag the default keyrings.
* * keyserver.c (keyserver_spawn): Don't mess about with the $PATH.David Shaw2005-03-312-9/+42
| | | | | | Rather, call keyserver helpers with the full path. This fixes some PATH-inspired DLL problems on W32. Noted by Carlo Luciano Bianco.
* (pin_cb): Print a warning if the info string hack isWerner Koch2005-03-306-18/+31
| | | | | not there. This may happen due to typos in the translation.
* * gpgv.c: Stubs for tty_enable_completion() & tty_disable_completion().David Shaw2005-03-214-3/+27
| | | | | | | | | * openfile.c (ask_outfile_name): Enable readline completion when prompting for an output filename. * plaintext.c (ask_for_detached_datafile): Enable readline completion when prompting for a detached sig datafile.
* * keyedit.c (command_generator, keyedit_completion): ChangedWerner Koch2005-03-213-14/+33
| | | | | | indentation. * card-util.c (command_generator, card_edit_completion): Ditto.
* * card-util.c (command_generator, card_edit_completion)David Shaw2005-03-202-14/+76
| | | | | | | [GNUPG_MAJOR_VERSION==1 && HAVE_LIBREADLINE]: New functions to enable command completion in the --card-edit menu. (card_edit): Call them here.
* * keyedit.c (command_generator, keyedit_completion) [HAVE_LIBREADLINE]:David Shaw2005-03-182-3/+59
| | | | | | New functions to enable command completion in the --edit-key menu. (keyedit_menu): Call them here.
* * getkey.c (get_seckey_byname2): If no explicit default key is set, don'tDavid Shaw2005-03-172-4/+13
| | | | | pick a disabled default. Noted by David Crick.
* * Makefile.am: Calculate GNUPG_LIBEXECDIR directly. Do not redefineDavid Shaw2005-03-172-12/+7
| | | | | $libexecdir.
* * options.h, keyserver.c (parse_keyserver_options, keyserver_spawn): Don'tDavid Shaw2005-03-173-22/+18
| | | | | | treat 'verbose' and 'include-disabled' as special. Just pass them through silently to the keyserver helper.
* (parse_ccid_descriptor): Make SCM workaroundWerner Koch2005-03-162-28/+76
| | | | | | | | | | | | | reader type specific. (scan_or_find_devices): Do not check the interface subclass in the SPR532 kludge, as this depends on the firmware version. (ccid_get_atr): Get the Slot status first. This solves the problem with readers hanging on recent Linux 2.6.x. (bulk_in): Add argument TIMEOUT and changed all callers to pass an appropriate one. Change the standard timeout from 10 to 5 seconds. (ccid_slot_status): Add a retry code with an initial short timeout. (do_close_reader): Do an usb_reset before closing the reader.
* * card-util.c (card_status): Use isotimestamp and not theWerner Koch2005-03-142-3/+7
| | | | | | | | localized asctimestamp to match the timezone used in the key information. * miscutil.c (isotimestamp): New.
* * cardglue.c (pin_cb): Disable debug output.Werner Koch2005-03-146-3/+33
| | | | | | | | * mk-w32-dist: Check for patch files. * w32installer.nsi: Translated a few more strings. Print a warning if permssions are not suitable for the installation. Add Uninstaller entries.
* * keyserver.c (parse_keyserver_options): Accept honor-http-proxy as anDavid Shaw2005-03-102-0/+11
| | | | | alias for http-proxy.
* * delkey.c (do_delete_key, delete_keys): Fix problem with --expertDavid Shaw2005-03-102-22/+38
| | | | | preventing --delete-secret-and-public-keys from deleting secret keys.
* (keyedit_menu) [W32]: Run the trustdb stale checkWerner Koch2005-03-102-1/+19
| | | | | earlier.
* * primegen.c (is_prime): Free A2. Noted by [email protected].Werner Koch2005-03-075-23/+81
| | | | | | | | | | | | | | | | | | | Fixes #423. * DETAILS: Document new status codes. * cardglue.c (agent_scd_pkdecrypt, agent_scd_pksign) (agent_scd_genkey, agent_scd_setattr, agent_scd_change_pin) (agent_scd_checkpin, agent_openpgp_storekey): Make sure to send a SC_OP_FAILURE after card operations which might change data. * card-util.c (change_pin): Send a SC_OP_SUCCESS after a PIN has been changed. (change_name): Removed a debug output. * status.h, status.c: New codes BAD_PASSPHRASE_PIN, SC_OP_FAILURE and SC_OP_SUCCESS. * de.po: Updated. Translation is still in the works, though.
* * keyedit.c (keyedit_menu): Only print the key signing hint when signingDavid Shaw2005-02-242-1/+8
| | | | | from a place where it is useful (i.e. --edit-key and not --sign-key).
* * card-util.c (fetch_url): Fetch the key from the defaultWerner Koch2005-02-162-4/+14
| | | | | | | | keyserver if no URL is available. * w32installer.nsi: Added page to select the language. * mk-w32-dist: Create the opt.ini using the available languages.
* * gpg.sgml: Add bkuptocard command for --edit-key.Werner Koch2005-02-156-40/+202
| | | | | | | | * passphrase.c (agent_get_passphrase): Don't call free_public_key if PK is NULL. (passphrase_clear_cache): Ditto. Removed debug output. (passphrase_to_dek): Ditto.
* Disable the "quick check" bytes for PK decryptions. This is inDavid Shaw2005-02-103-5/+18
| | | | | regards to the Mister and Zuccherato attack on OpenPGP CFB mode.
* * trustdb.h, trustdb.c (trustdb_check_or_update): New. If the trustdbDavid Shaw2005-02-065-15/+55
| | | | | | | | | | | | | | is dirty and --interactive is set, do an --update-trustdb. If not interactive, do a --check_trustdb unless --no-auto-check-trustdb is set. * import.c (import_keys_internal): Moved from here. * keyserver.c (keyserver_refresh): Call it here after all refreshing has happened so that we don't rebuild after each preferred keyserver set of imports, but do one big rebuild at the end. This is Debian bug #293816, noted by Kurt Roeckx.
* * getkey.c (merge_selfsigs_subkey): Merged away definition from theDavid Shaw2005-02-052-0/+6
| | | | | backsigs code.
* Updated to match the switch to the NSIS installer.Werner Koch2005-02-033-136/+164
|
* * keygen.c (do_generate_keypair): Write the auth key to the cardDavid Shaw2005-02-012-11/+27
| | | | | | | | | before the encryption key. This is a partial workaround for a PGP bug (as of this writing, all versions including 8.1), that causes it to try and encrypt to the most recent subkey regardless of whether that subkey is actually an encryption type. In this case, the auth key is an RSA key so it succeeds.
* * keyid.c (keyid_from_sk, keyid_from_pk): Use 0xFFFFFFFFFFFFFFFFDavid Shaw2005-01-284-6/+15
| | | | | | | | | instead of 0x0000000000000000 for the invalid key ID since all-zeroes is reserved for the anonymous recipient. * keyedit.c (change_passphrase), keygen.c (generate_subkeypair): Fix a string ;)
* * keygen.c (generate_subkeypair): Detect primary key on-card andWerner Koch2005-01-273-18/+75
| | | | | | | | | | ask for the passphrase. Return an error if the primary key is a plain stub. * keyedit.c (change_passphrase): Don't ever change any stub key. Print a note if a key consists of only stub keys. Reported by Dany Nativel. These are bugs #401 and #402.