aboutsummaryrefslogtreecommitdiffstats
path: root/g10 (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* * options.h, getkey.c (merge_selfsigs_subkey), gpg.c (main), sig-check.cDavid Shaw2005-10-125-12/+33
| | | | | | (signature_check2): Add --require-backsigs and --no-require-backsigs. Currently defaults to --no-require-backsigs.
* * getkey.c (merge_selfsigs_subkey), sig-check.c (signature_check2),David Shaw2005-10-114-20/+25
| | | | | | | keygen.c (make_backsig): Did some backsig interop testing with the PGP folks. All is well, so I'm turning generation of backsigs on for new keys. Checking for backsigs on verification is still off.
* Yet another fix for the gpg.c renameWerner Koch2005-10-061-0/+15
|
* Fixes for the g10.c -> gpg.c renamedWerner Koch2005-10-051-5/+5
|
* Renamed g10.c to gpg.cWerner Koch2005-10-056-9/+32
| | | | Filelength fixes for W32.
* * mainproc.c (proc_symkey_enc): Take care of a canceled passphraseWerner Koch2005-09-202-1/+21
| | | | | prompt.
* * keylist.c (reorder_keyblock, do_reorder_keyblock): Reorder attributeDavid Shaw2005-09-203-4/+24
| | | | | | | | IDs as well as regular text IDs. * plaintext.c (ask_for_detached_datafile): Use make_filename() on filename so tilde expansion works.
* * main.h, misc.c (parse_options): Add the ability to have helpDavid Shaw2005-09-147-63/+130
| | | | | | | | | strings in xxx-options commands. * keyserver.c (keyserver_opts), import.c (parse_import_options), export.c (parse_export_options), g10.c (parse_list_options, main): Add help strings to xxx-options.
* * keyedit.c (show_names): Moved name display code out fromDavid Shaw2005-09-102-56/+80
| | | | | | | show_key_with_all_names. (keyedit_menu): Call it here for pref and showpref so they can show only the selected user ID. Suggested by Timo Schulz.
* Updated card stuff to support T=0 cards.Werner Koch2005-09-077-458/+393
|
* Add "help" sub option to --*-options.Werner Koch2005-09-074-1/+22
|
* * parse-packet.c (enum_sig_subpkt, parse_signature,David Shaw2005-09-022-12/+22
| | | | | | | parse_attribute_subpkts): Make a number of warnings verbose items. These fire on many slightly mangled keys in the field, so the warning is becoming burdensome.
* * photoid.h, photoid.c (generate_photo_id): Allow passing in aDavid Shaw2005-09-014-25/+52
| | | | | | | | suggested filename. * keyedit.c (keyedit_menu, menu_adduid): Call it here so "addphoto filename" works.
* * photoid.c (generate_photo_id): Enable readline completion and tildeDavid Shaw2005-08-312-3/+19
| | | | | expansion for the JPEG prompt.
* * misc.c (openpgp_pk_algo_usage): Default to allowing CERT for signingDavid Shaw2005-08-277-17/+58
| | | | | | | | | | | | | | | | | algorithms. * keyedit.c (sign_uids): Don't request a signing key to make a certification. * keygen.c (do_add_key_flags): Force the certify flag on for all primary keys, as the spec requires primary keys must be able to certify (if nothing else, which key is going to issue the user ID signature?) (print_key_flags): Show certify flag. (ask_key_flags, ask_algo): Don't allow setting the C flag for subkeys. * keyid.c (usagestr_from_pk), getkey.c (parse_key_usage): Distinguish between a sign/certify key and a certify-only key.
* * keyedit.c (ask_revoke_sig): Add a revsig --with-colons mode.David Shaw2005-08-272-9/+31
| | | | | Suggested by Michael Schierl.
* * Makefile.am: No need to link with curl any longer.David Shaw2005-08-215-38/+84
| | | | | | | | | | | | | * main.h, misc.c (path_access): New. Same as access() but does a PATH search like execlp. * keyserver.c (curl_can_handle): Removed. Replaced by... (curl_cant_handle): We are now relying on curl as the handler of last resort. This is necessary because PGP LDAP and curl LDAP are apples and oranges. (keyserver_typemap): Only test for ldap and ldaps. (keyserver_spawn): If a given handler is unusable (as determined by path_access()) then try gpgkeys_curl.
* * exec.h, exec.c (make_tempdir, expand_args, exec_write, exec_read):David Shaw2005-08-213-24/+38
| | | | | Minor cleanup to use bitfield flags instead of a bunch of integers.
* * g10.c (main): Add aliases sign-with->local-user and user->recipientDavid Shaw2005-08-202-4/+15
| | | | | to make switching from PGP command line to GPG easier.
* * options.skel: Remove the surfnet LDAP keyserver from the list ofDavid Shaw2005-08-193-2/+12
| | | | | | | | samples since it is being shut down. * getkey.c (classify_user_id): Disable the '.' and '+' search modes since they aren't supported yet.
* Missed keydb.h entry for set_passphrase_from_stringDavid Shaw2005-08-061-0/+1
|
* * g10.c (main), passphrase.c (set_passphrase_from_string): NewDavid Shaw2005-08-053-0/+24
| | | | | | --passphrase command line option. Only useful in very special circumstances.
* auto retrieve keys from PKA. Thsi allows to specify an email addressWerner Koch2005-08-0510-325/+503
| | | | | | so that gpg can get the key from DNS. This helps with opportunistic encryption. No integration with the trust modell yet.
* * keygen.c (proc_parameter_file): Sanity check items in keygen batchDavid Shaw2005-08-052-98/+123
| | | | | file. Noted by Michael Schierl.
* * pkclist.c (do_edit_ownertrust): Don't allow ownertrust level 0.David Shaw2005-08-052-1/+4
| | | | | Noted by Michael Schierl.
* * keygen.c (write_keyblock): Don't try and build deleted kbnodes sinceDavid Shaw2005-08-042-8/+14
| | | | | we start our tree with one.
* Revert bad patch.David Shaw2005-08-041-8/+1
|
* * keygen.c (start_tree): Need to use an actual packet type (which weDavid Shaw2005-08-042-1/+13
| | | | | can then delete) to start the tree.
* Fixes pertaining to revocation creation with subkey-only exported card keysWerner Koch2005-08-046-7/+44
|
* Implemented PKA trust modelWerner Koch2005-07-2811-58/+286
|
* Converted all m_free to xfree etc.Werner Koch2005-07-2743-802/+805
|
* * keyserver.c (keyserver_typemap): Special-case LDAP since curl willDavid Shaw2005-07-272-1/+8
| | | | | report that it can handle it, and we don't want it to.
* * passphrase.c (agent_get_passphrase): Make sure to release theWerner Koch2005-07-264-7/+39
| | | | | | | | | saved codeset. (agent_open): Add arg ORIG_CODESET and switch back to it in case of error. Changed all callers. * zh_TW.po, fr.po, cs.po: Updated.
* Preparing a releaseWerner Koch2005-07-261-2/+1
|
* * keyedit.c (sign_uids): Don't prompt for setting signature expiry toDavid Shaw2005-07-222-17/+25
| | | | | | match key expiry unless --ask-cert-expire is set. Suggested by Peter Palfrader.
* * gpg.sgml (http):Werner Koch2005-07-2211-21/+77
| | | | | | * g10.c, options.h: New option --exit-on-status-write-error. * status.c (write_status_text): Make use of this option.
* * options.h, g10.c (main), keyedit.c (keyedit_menu): Use --interactiveDavid Shaw2005-07-225-10/+15
| | | | | | | | | to enable the uid walking when signing a key with no uids specified to sign. * keylist.c (list_keyblock_print): Fix silly typo. Noted by Greg Sabino Mullane.
* * keyserver.c (curl_can_handle): New. Do a runtime check against libcurlDavid Shaw2005-07-203-16/+43
| | | | | | | | to see if it can handle a particular protocol. (keyserver_typemap): Call it here. * Makefile.am: Pull in libcurl for curl_version_info() if used.
* * g10.c, options.h: New option --limit-card-insert-tries.Werner Koch2005-07-194-2/+18
| | | | | * cardglue.c (open_card): Use it.
* * configure.ac [W32]: Always set DISABLE_KEYSERVER_PATH.Werner Koch2005-07-196-6/+102
| | | | | | | | | | * export.c (parse_export_options): New option export-reset-subkey-passwd. (do_export_stream): Implement it. * misc.c (get_libexecdir): New. * keyserver.c (keyserver_spawn): Use it
* * tdbio.c (open_db): Check for EROFS. Suggested by Bryce Nichols.Werner Koch2005-07-182-1/+9
| | | | | | * ttyio.c (do_get): Move printing of the prompt after disabling echo. Suggested by Scott Worley.
* * trustdb.c (clean_uids_from_key): Don't keep a valid selfsig aroundDavid Shaw2005-07-095-22/+24
| | | | | | | | | | | | | when compacting a uid. There is no reason to make an attacker's job easier - this way they only have a revocation which is useless in bringing the uid back. * keydb.h, kbnode.c (undelete_kbnode): Removed. No longer needed. * import.c (chk_self_sigs): Allow a uid revocation to be enough to allow importing a particular uid (no self sig needed). This allows importing compacted uids.
* * keygen.c (save_unprotected_key_to_card): Better fix for gcc4 warning.David Shaw2005-06-202-1/+6
|
* * gpg.sgml: Document smartcard related options.Werner Koch2005-06-204-4/+21
| | | | | | * g10.c, options.h: New option --no-interactive-selection. * keyedit.c (keyedit_menu): Use it.
* (parse_signature): Use log_info for messagesWerner Koch2005-06-186-5/+22
| | | | | | | about missing timestamp or keyid. In case we don't use that key there won't be no further error and thus gpg does not need to return with an error.
* * keygen.c (save_unprotected_key_to_card): Fix gcc4 warning.David Shaw2005-06-145-8/+45
| | | | | | | | | | * options.h, import.c (parse_import_options, import_one): Add import-clean-uids option to automatically compact unusable uids when importing. Like import-clean-sigs, this may nodify the local keyring. * trustdb.c (clean_uids_from_key): Only allow selfsigs to be a candidate for re-inclusion.
* * options.h, import.c (parse_import_options, clean_sigs_from_all_uids,David Shaw2005-06-123-6/+49
| | | | | | | | import_one): Add import-clean-sigs option to automatically clean a key when importing. Note that when importing a key that is already on the local keyring, the clean applies to the merged key - i.e. existing superceded or invalid signatures are removed.
* * getkey.c (merge_selfsigs_main, merge_selfsigs_subkey): Make sureDavid Shaw2005-06-122-7/+18
| | | | | | that even after keys may be merged together, we only have one chosen selfsig.
* * options.h, import.c (parse_import_options, delete_inv_parts):David Shaw2005-06-103-26/+5
| | | | | import-unusable-sigs is now a noop.
* * options.h, export.c (do_export_stream), keyedit.c (keyedit_menu,David Shaw2005-06-106-108/+10
| | | | | | | | | menu_clean_subkeys_from_key), trustdb.h, trustdb.c (clean_subkeys_from_key): Remove subkey cleaning function. It is of very limited usefulness since it cannot be used on any subkey that can sign, and can only affect multiple selfsigs on encryption-only subkeys.
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-21 21:40:43 +0000