aboutsummaryrefslogtreecommitdiffstats
path: root/g10 (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* * keygen.c (print_status_key_created): New.Werner Koch2002-10-122-1/+27
| | | | | | (do_generate_keypair): Use it to print the fingerprint. (generate_subkeypair): Likewise.
* * keyedit.c (menu_addrevoker): Properly back out if the signature fails.David Shaw2002-10-112-4/+44
| | | | | | Also, do not allow appointing the same revoker twice, and report ALREADY_SIGNED if the user tries it.
* And changelog :)David Shaw2002-10-071-0/+10
|
* * import.c (import_keys_internal): Missed one s/inp/inp2/.David Shaw2002-10-073-9/+15
| | | | | | | | | * keylist.c (print_capabilities): Properly indicate per-key capabilities of sign&encrypt primary keys that have secret-parts-missing (i.e. no capabilities at all) * mainproc.c (symkey_decrypt_sesskey): Fix compiler warning.
* * getkey.c (get_pubkey_direct): Don't cache keys retrieved via thisDavid Shaw2002-10-043-4/+14
| | | | | | | | | function as they may not have all their fields filled in. * sig-check.c (signature_check2): Use new is_primary flag to check rather than comparing main_keyid with keyid as this still works in the case of a not fully filled in pk.
* * import.c (import_keys_internal): s/inp/inp2/ to avoid shadowingWerner Koch2002-10-043-13/+22
| | | | | | | | warning. * passphrase.c (agent_get_passphrase): Fixed signed/unsigned char problem in %-escaping. Noted by Ingo Kl�cker.
* * options.h, g10.c (main): Add --strict and --no-strict to switch theDavid Shaw2002-10-033-0/+10
| | | | | log_warning severity level from info to error.
* * keylist.c (print_capabilities): Secret-parts-missing keys should showDavid Shaw2002-10-034-5/+26
| | | | | | | | | that fact in the capabilities, and only primary signing keys can certify other keys. * packet.h, parse_packet.c (parse_key): Add is_primary flag for public keys (it already exists for secret keys).
* * import.c (import_secret_one): Check for an illegal (>110) protectionDavid Shaw2002-10-027-15/+42
| | | | | | | | | | | | | | | | | | cipher when importing a secret key. * keylist.c (list_keyblock_print): Show a '#' for a secret-parts-missing key. * parse_packet.c (parse_key): Some comments. * revoke.c (gen_revoke): Remove some debugging code. * trustdb.c (verify_own_keys): Make trusted-key a non-deprecated option again. * seckey-cert.c (do_check): Don't give the IDEA warning unless the cipher in question is in fact IDEA.
* * import.c (import_one): Make sure that a newly imported key starts with aDavid Shaw2002-10-012-1/+14
| | | | | clean ownertrust.
* * getkey.c (get_pubkey_direct): New.Werner Koch2002-10-012-1/+66
| | | | | | | (merge_selfsigs_main): Use it here to look for an ultimately trusted key. Using the full get_pubkey might lead to an infinitive recursion.
* * keyserver.c (parse_keyserver_uri): Force the keyserver URI scheme toDavid Shaw2002-09-302-0/+13
| | | | | lowercase to be case-insensitive.
* 2002-09-28 David Shaw <[email protected]>David Shaw2002-09-284-14/+40
| | | | | | | | | | | | | | * export.c (do_export_stream): Comment. * sig-check.c (check_key_signature2): Properly handle a non-designated revocation import. 2002-09-26 Werner Koch <[email protected]> * g10.c (set_homedir): New. Changed all direct assignments to use this. * gpgv.c (set_homedir): Ditto.
* * Makefile.am: Link gpg with EGDLIBS (i.e. NETLIBS) as EGD uses sockets.David Shaw2002-09-252-1/+7
| | | | | | Remove the old NETLIBS variable since the keyserver stuff is no longer internal.
* * import.c (import_keys_stream): Fix compiler type warning.David Shaw2002-09-244-11/+19
| | | | | | * keyring.c (keyring_rebuild_cache), sig-check.c (check_key_signature2), import.c (import, chk_self_sigs): Minor language cleanups.
* added fast-import to import-optionsStefan Bellon2002-09-235-21/+33
|
* avoid function cloneStefan Bellon2002-09-222-50/+40
|
* added trustdb update/check for stream import as wellStefan Bellon2002-09-212-3/+16
|
* trustdb checks/updates after importStefan Bellon2002-09-212-1/+16
|
* comment type fixWerner Koch2002-09-201-1/+1
|
* From stable branchDavid Shaw2002-09-193-13/+23
| | | | | | | | | | * keyserver.c (keyserver_spawn): Properly handle line truncation. Don't leak memory (~10-20 bytes) on searches. (keyserver_search_prompt): Cleanup. * keylist.c (list_keyblock_colon): Show 1F direct key signatures in --with-colons listing.
* From stable branchDavid Shaw2002-09-174-26/+102
| | | | | | | | | | | | | | * keyedit.c (menu_addrevoker): The direct key signature for revocation keys must be at least v4 to carry the revocation key subpacket. Add a PGP 2.x warning for revocation keys. * g10.c (check_permissions): Rearrange strings to make translating easier (don't incorporate string parts). * keyedit.c (sign_uids): Make strings translatable. * sig-check.c (check_key_signature2): Make string translatable.
* Import from stable branch.David Shaw2002-09-135-71/+100
| | | | | | | | | | | | | | | | | | | | 2002-09-13 David Shaw <[email protected]> * getkey.c (check_revocation_keys): Move.... * main.h, sig-check.c (check_revocation_keys): to here. Also return the signature_check error code rather than 0/1 and cache the sig result. * sig-check.c (check_key_signature2): Divert to check_revocation_keys if a revocation sig is made by someone other than the pk owner. * getkey.c (merge_selfsigs_main): Tidy. 2002-09-13 Werner Koch <[email protected]> * g10.c (main) [__MINGW32__]: Activate oLoadExtension.
* * Makefile.am, hkp.c, hkp.h, keyserver.c (keyserver_work): Remove internalDavid Shaw2002-09-125-681/+6
| | | | | HKP support.
* * keyserver.c (keyserver_spawn): Remove whitespace after keyserverDavid Shaw2002-09-122-5/+11
| | | | | commands.
* * g10.c, options.h: Removed option --emulate-checksum-bug.Werner Koch2002-09-1110-126/+152
| | | | | | | | | | | | | | | * misc.c (checksum_u16_nobug): Removed. (checksum_u16): Removed the bug emulation. (checksum_mpi): Ditto. (checksum_mpi_counted_nbits): Removed and replaced all calls with checksum_mpi. * parse-packet.c (read_protected_v3_mpi): New. (parse_key): Use it here to store it as an opaque MPI. * seckey-cert.c (do_check): Changed the v3 unprotection to the new why to store these keys. (protect_secret_key): Likewise. * build-packet.c (do_secret_key): And changed the writing.
* * exec.c (expand_args): Remove loop left over from earlier implementation.David Shaw2002-09-102-4/+13
| | | | | (exec_write): Missed one tick.
* Cleanups and minor fixes.Werner Koch2002-09-1017-64/+121
|
* * g10.c (add_group): Use '=' to separate group name from group members.David Shaw2002-09-093-3/+10
| | | | | | | Use a better error message for when no = is found. * hkp.c (hkp_export): Use CRLF in headers.
* * mainproc.c (print_pkenc_list): Don't increment the error counter whenDavid Shaw2002-09-042-1/+9
| | | | | | | printing the list of keys a message was encrypted to. This would make gpg give a non-zero exit code even for completely valid messages if the message was encrypted to more than one key that the user owned.
* * g10.c (main): Try to set a default character set. Print theWerner Koch2002-09-026-2/+55
| | | | | | | | | used one in verbosity level 3. * gpgv.c (main): Try to set a default character set. * status.c, status.h (STATUS_IMPORT_OK): New. * import.c (import_one,import_secret_one): Print new status.
* * pkclist.c (build_pk_list): Add new status code to indicate an untrustedDavid Shaw2002-08-302-1/+7
| | | | | | user. This (or a disabled key) fail with "unavailable pubkey" (G10ERR_UNU_PUBKEY).
* * pkclist.c (build_pk_list): Fail if any recipient keys are unusable.David Shaw2002-08-304-3/+26
| | | | | | | | | * options.skel: The PGP LDAP keyserver is back. Use MIT keyserver as a sample rather than cryptnet as cryptnet does not support searching yet. * keyedit.c (show_key_with_all_names): Fix error message (preferences are userid/selfsig and not key specific).
* * pkclist.c (do_we_trust_pre): Changed the wording of a warning.Werner Koch2002-08-307-59/+82
| | | | | | | | | | | | | | | | * encode.c (encode_simple,encode_crypt): Use new style CTB for compressssed packets when using MDC. We need to do this so that concatenated messages are properly decrypted. Old style compression assumes that it is the last packet; given that we can't determine the length in advance, the uncompressor does not know where to start. Actually we should use the new CTB always but this would break PGP 2 compatibility. * parse-packet.c (parse): Special treatment for new style CTB compressed packets. * build-packet.c (do_mdc): Removed. Was not used. (do_encrypted_mdc): Count the version number and the MDC packet.
* * sig-check.c (do_check_messages, do_check): Show keyid in error messages.David Shaw2002-08-283-16/+27
| | | | | | * keyserver.c (print_keyinfo): More readable key listings for --search-keys responses.
* * hkp.c (parse_hkp_index, dehtmlize): Move HTML functionality into newDavid Shaw2002-08-262-78/+103
| | | | | | | "dehtmlize" function. Remove HTML before trying to parse each line from the keyserver. If the keyserver provides key type information in the listing, use it.
* * sig-check.c (do_check, do_check_messages): Emit the usual sig warningsDavid Shaw2002-08-233-9/+26
| | | | | | | | even for cached sigs. This also serves to protect against missing a sig expiring while cached. * getkey.c (merge_selfsigs_main): Don't check UID self-sigs twice.
* * import.c (clean_subkeys, chk_self_sigs): Merge clean_subkeys intoDavid Shaw2002-08-226-113/+110
| | | | | | | | | | | | | | chk_self_sigs. This improves efficiency as the same signatures are not checked multiple times. Clarify when a subkey is revoked (any revocation signature, even if it is dated before the binding signature). * getkey.c (merge_selfsigs_subkey): Subkey revocation comments. * keylist.c (list_one): Stats are only for public key listings. * g10.c (main), options.skel: Default should be include-revoked for keyserver operations.
* * import.c (import_print_stats): Print new non_imported counterWerner Koch2002-08-212-3/+14
| | | | | which is currently not used becuase we terminate on errors.
* * options.skel: Document no-include-attributes for keyserver-options.David Shaw2002-08-202-8/+17
|
* * keylist.c, keyedit.c, keyserver.c, sign.c: Some TODOs and comments.David Shaw2002-08-207-4/+39
| | | | | | | | | * export.c (do_export_stream): Fix noop bug in exporting sensitive revocation keys. * pkclist.c (do_edit_ownertrust): Comment out the option for showing trust paths until it can be implemented.
* * getkey.c (get_user_id_native): Renamed to ..Werner Koch2002-08-1911-38/+120
| | | | | | | | | | | | (get_user_id_printable): this. Filter out all dangerous characters. Checked all usages. (get_user_id_string_native): Renamed to.. (get_user_id_string_printable): this. Filter out all dangerous characters. Checked all usages. * keyedit.c (show_basic_key_info): New. * keylist.c (print_fingerprint): New mode 3. * import.c (import_one): Use new function to display the user ID.
* 2002-08-16 Timo Schulz <[email protected]>Timo Schulz2002-08-183-1/+26
| | | | | | | | | * g10.c (main): enable opt.interactive. * import.c (import_one): Ask the user if the key shall be imported when the interactive mode is used. Useful to extract selected keys from a file.
* Removed a leftover conflict indicator.Werner Koch2002-08-161-1/+0
|
* * seckey-cert.c: Workaround to allow decryption of v3 keys createdWerner Koch2002-08-162-0/+31
| | | | | with a bug in the mpi_get_secure_buffer.
* * hkp.c (parse_hkp_index): Properly handle really large keys (5 digit keyDavid Shaw2002-08-142-4/+9
| | | | | length) in HKP searches.
* * encode.c (encode_simple): Fix problem with using compression algo 2 andDavid Shaw2002-08-135-47/+114
| | | | | | | | | | | | | | | | | | symmetric compressed files. * encode.c (encode_simple, encode_crypt): If we are not using a MDC, compress even if a file is already compressed. This is to help against the chosen ciphertext attack. * pkclist.c (select_algo_from_prefs): Fix requested algorithm bug so the request succeeds even if the requested algorithm is not the first found. * cipher.c (write_header), encode.c (use_mdc, encode_simple, encode_crypt, encrypt_filter), g10.c (main): Be more eager to use a MDC. We use a MDC if the keys directly support it, if the keys list AES (any) or TWOFISH anywhere in the prefs, or if the cipher chosen does not have a 64 bit blocksize.
* * options.skel: Some language tweaks, and remove the load-extensionDavid Shaw2002-08-095-61/+71
| | | | | | | | | | | | | | | section for random gatherers. * keyring.c (create_tmp_file, rename_tmp_file): Create tmp files with user-only permissions, but restore the original permissions if the user has something special set. * openfile.c (copy_options_file): Create new options file (gpg.conf) with user-only permissions. * keydb.c (keydb_add_resource): Create new keyrings with user-only permissions.
* * tdbio.c (tdbio_set_dbname): Create new trustdbs with user-onlyDavid Shaw2002-08-082-0/+8
| | | | | permissions.
* * sig-check.c (signature_check2): Sanity check that the md has a contextDavid Shaw2002-08-072-1/+17
| | | | | | | for the hash that the sig is expecting. This can happen if a onepass sig header does not match the actual sig, and also if the clearsign "Hash:" header is missing or does not match the actual sig.