aboutsummaryrefslogtreecommitdiffstats
path: root/g10 (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* * encode.c (encode_simple): Fix problem with using compression algo 2 andDavid Shaw2002-08-135-47/+114
| | | | | | | | | | | | | | | | | | symmetric compressed files. * encode.c (encode_simple, encode_crypt): If we are not using a MDC, compress even if a file is already compressed. This is to help against the chosen ciphertext attack. * pkclist.c (select_algo_from_prefs): Fix requested algorithm bug so the request succeeds even if the requested algorithm is not the first found. * cipher.c (write_header), encode.c (use_mdc, encode_simple, encode_crypt, encrypt_filter), g10.c (main): Be more eager to use a MDC. We use a MDC if the keys directly support it, if the keys list AES (any) or TWOFISH anywhere in the prefs, or if the cipher chosen does not have a 64 bit blocksize.
* * options.skel: Some language tweaks, and remove the load-extensionDavid Shaw2002-08-095-61/+71
| | | | | | | | | | | | | | | section for random gatherers. * keyring.c (create_tmp_file, rename_tmp_file): Create tmp files with user-only permissions, but restore the original permissions if the user has something special set. * openfile.c (copy_options_file): Create new options file (gpg.conf) with user-only permissions. * keydb.c (keydb_add_resource): Create new keyrings with user-only permissions.
* * tdbio.c (tdbio_set_dbname): Create new trustdbs with user-onlyDavid Shaw2002-08-082-0/+8
| | | | | permissions.
* * sig-check.c (signature_check2): Sanity check that the md has a contextDavid Shaw2002-08-072-1/+17
| | | | | | | for the hash that the sig is expecting. This can happen if a onepass sig header does not match the actual sig, and also if the clearsign "Hash:" header is missing or does not match the actual sig.
* * keyedit.c (menu_revsig): Properly show a uid is revoked withoutDavid Shaw2002-08-077-135/+212
| | | | | | | | | | | | | | | restarting gpg. This is Debian bug 124219, though their supplied patch will not do the right thing. * main.h, tdbio.c (tdbio_set_dbname), misc.c (removed check_permissions), keydb.c (keydb_add_resource), g10.c (main, check_permissions): Significant reworking of the permission check mechanism. The new behavior is to check everything in the homedir by checking the homedir itself. If the user wants to put (possibly shared) keyrings outside the homedir, they are not checked. The options file and any extension files are checked wherever they are, as well as their enclosing directories. This is Debian bug 147760.
* use of EXTSEP_SStefan Bellon2002-08-063-2/+7
|
* * options.h, g10.c (main), mainproc.c (proc_encrypted): --ignore-mdc-errorDavid Shaw2002-08-065-3/+11
| | | | | option to turn a MDC check error into a warning.
* * encode.c (encode_crypt), g10.c (main), sign.c (sign_file,David Shaw2002-08-064-7/+27
| | | | | | | | | clearsign_file): Use the same --pgpX warning string everywhere to ease translations. * encode.c (write_pubkey_enc_from_list): Warn when using --throw-keyid with --pgpX. Noted by Vedaal Nistar.
* * revoke.c (export_minimal_pk, gen_desig_revoke, gen_revoke): Export aDavid Shaw2002-08-062-132/+179
| | | | | | minimal pk along with the revocation cert when in --pgpX mode so that PGP can import it.
* * options.skel: Changed comments.Werner Koch2002-08-062-2/+4
| | | | | | * gpg.sgml: Fixed doc regarding the name change of the option file.
* * g10.c (main): Try to use "gpg.conf" as default option file.Werner Koch2002-08-063-5/+23
| | | | | * openfile.c (copy_options_file): Changed name of created file.
* The big extension module removal.Werner Koch2002-08-032-1/+5
|
* * delkey.c (do_delete_key): Always allow to delete a key in batch modeWerner Koch2002-08-022-0/+18
| | | | | when specified by fingerprint. Suggested by Enzo Michelangeli.
* * options.h, g10.c (main), mainproc.c (proc_encrypted): Return aDavid Shaw2002-07-306-9/+23
| | | | | | | | | decryption failed error if a MDC does not verify. Warn if a MDC is not present (can disable via --no-mdc-warning). * exec.c (exec_write), g10.c (main), keyserver.c (keyserver_spawn): Use new DISABLE_KEYSERVER_PATH rather than FIXED_EXEC_PATH.
* * sig-check.c (do_check): Properly validate v4 sigs with no hashed sectionDavid Shaw2002-07-292-2/+12
| | | | | at all.
* * keyedit.c (menu_revsig): Change "revsig" to honor selected uids so theDavid Shaw2002-07-253-11/+25
| | | | | | | | user can revoke sigs from particular uids only. * keylist.c (list_keyblock_print): Don't display expired uids in --list-keys unless -v and not --list-sigs (just like revoked uids).
* * exec.c, export.c, import.c, keyedit.c, keyserver.c, misc.c: "Warning" ->David Shaw2002-07-257-13/+18
| | | | | "WARNING"
* * main.h, import.c (parse_import_options, fix_hkp_corruption, import_one,David Shaw2002-07-246-26/+116
| | | | | | | | | | | | delete_inv_parts), g10.c (main): New import-option "repair-hkp-subkey-bug", which repairs as much as possible the HKP mangling multiple subkeys bug. It is on by default for keyserver receives, and off by default for regular --import. * main.h, import.c (import, import_one, delete_inv_parts), hkp.c (hkp_ask_import), keyserver.c (keyserver_spawn): Use keyserver import options when doing keyserver receives.
* * options.h, exec.h, exec.c (set_exec_path, exec_write), g10.c (main),David Shaw2002-07-246-8/+42
| | | | | | | | keyserver.c (keyserver_spawn): If the user does not use "exec-path", completely replace $PATH with GNUPG_LIBEXECDIR before calling the keyserver helper. If the user does use "exec-path", append GNUPG_LIBEXECDIR after the specified path.
* Forgot to commit this:Werner Koch2002-07-242-1/+4
| | | | | | * photoid.c (get_default_photo_command): Also use __MINGW32__ instead of HAVE_DOSISH_SYSTEM.
* * import.c (parse_import_options), export.c (parse_export_options): FixDavid Shaw2002-07-243-2/+12
| | | | | offset problem with reversed ("no-") meanings.
* * import.c (delete_inv_parts): Discard subkey signatures (0x18 and 0x28)David Shaw2002-07-242-1/+15
| | | | | if found in the userid section of the key.
* * sig-check.c (signature_check2): Signatures made by invalid subkeysDavid Shaw2002-07-233-3/+62
| | | | | | | | (bad/missing binding sig) are also invalid. * keylist.c (print_fingerprint): Show the primary as well as the secondary key fingerprint in modes 1 & 2.
* * options.h, main.h, g10.c (main), import.c (parse_import_options,David Shaw2002-07-226-12/+91
| | | | | | | | | | | | delete_inv_parts), keyserver.c (parse_keyserver_options): add new --import-options option. The only current flag is "allow-local-sigs". * g10.c (main): Don't disable MDC in pgp7 mode. * options.h, g10.c (main), keyserver.c (parse_keyserver_options): Remove old keyserver-option include-attributes now that there is an export-option for the same thing.
* * options.h, main.h, export.c (parse_export_options, do_export_stream),David Shaw2002-07-228-33/+111
| | | | | | | | | | | | | | g10.c (main): add new --export-options option. Current flags are "include-non-rfc", "include-local-sigs", "include-attributes", and "include-sensitive-revkeys". * options.h, hkp.c (hkp_export), keyserver.c (parse_keyserver_options, keyserver_spawn): try passing unknown keyserver options to export options, and if successful, use them when doing a keyserver --send-key. * build-packet.c (build_sig_subpkt): We do not generate SIGSUBPKT_PRIV_VERIFY_CACHE anymore.
* * revoke.c (gen_desig_revoke): Lots more comments about includingDavid Shaw2002-07-223-15/+33
| | | | | | | | sensitive revkeys along with the revocation sig itself. * keyserver.c (parse_keyserver_options): Simpler implementation that can skip one pass over the options.
* * keyedit.c (keyedit_menu, menu_addrevoker): Allow specifying "sensitive"David Shaw2002-07-193-6/+80
| | | | | | | | | | | as an argument to an addrevoker command. This sets the 0x40 sensitive revoker flag. * revoke.c (gen_desig_revoke): When generating a designated revocation, include the direct key sig that contains the designated revoker subpacket. This allows sensitive designated revocation subpackets to be exported. Also indicate which revokers are sensitive in the first place.
* * keyedit.c (show_key_with_all_names_colon): The 0x40 class bit in aDavid Shaw2002-07-178-20/+61
| | | | | | | | | | | | | designated revoker means "sensitive", not "local". It's exportable under the right circumstances. * main.h, options.h, export.c (do_export_stream), g10.c (main), hkp.c (hkp_export), keyserver.c (keyserver_spawn: Add a flag to skip attribute packets and their signatures while exporting. This is to accomodate keyservers (pksd again) that choke on attributes. Use keyserver-option "include-attributes" to control it. This defaults to ON (i.e. don't skip).
* * options.h, keyserver.c (parse_keyserver_uri, keyserver_spawn,David Shaw2002-07-094-53/+103
| | | | | | | | | keyserver_work), hkp.c (hkp_ask_import, hkp_export, hkp_search): Use a much more strict reading of RFC-2396 for the keyserver URIs. Specifically, don't try and be smart about checking the value of ":port" so long as it is all digits, and properly handle opaque data (those scheme specific parts that do not start with "//").
* * photoid.c (get_default_photo_command, show_photos): HonorDavid Shaw2002-07-047-6/+46
| | | | | | | | | | | | | | | | | FIXED_PHOTO_VIEWER and DISABLE_PHOTO_VIEWER. * mainproc.c (check_sig_and_print): Use --show-photos to show photos when verifying a sig made by a key with a photo. * keyserver.c (parse_keyserver_uri): Properly parse a URI with no :port section and an empty file path, but with a terminating '/'. (keyserver_work): Honor DISABLE_KEYSERVER_HELPERS. * hkp.c (hkp_ask_import): Display keyserver URI as a URI, but only if verbose. * exec.c, g10.c: USE_EXEC_PATH -> FIXED_EXEC_PATH
* * exec.h, exec.c (set_exec_path, exec_write), g10.c (main): IfDavid Shaw2002-07-034-9/+30
| | | | | | USE_EXEC_PATH is defined at compile time, use it to lock the exec-path and not allow the user to change it.
* * options.h, g10.c (main), keyserver.c (keyserver_refresh): Maintain andDavid Shaw2002-07-025-7/+41
| | | | | | | | | | | | use the original keyserver URI for cosmetics rather than trying to recreate it when needed. * mainproc.c (check_sig_and_print): Properly disregard expired uids. Make sure that the first uid listed is a real uid and not an attribute (attributes should only be listed in the "aka" section). When there are no valid textual userids, try for an invalid textual userid before using any attribute uid.
* Removed old keyserver (daemon) code.Timo Schulz2002-07-023-487/+0
|
* * options.skel: Fix a few typos, clarify "group", and remove sample photoDavid Shaw2002-07-014-13/+17
| | | | | | | | viewers for Win32 since they are the defaults now. * parse-packet.c (make_attribute_uidname), keylist.c (dump_attribs): Fix two typecast warnings.
* * packet.h, build-packet.c (build_attribute_subpkt), exec.c (expand_args),David Shaw2002-07-016-10/+17
| | | | | | mkdtemp.c (mkdtemp), photoid.c (parse_image_header): Fix some signedness compiler warnings.
* * encode.c (encode_symmetric): Do not use the new encryption code.Werner Koch2002-07-012-1/+11
|
* * photoid.c: Use __MINGW32__ to include windows becauseWerner Koch2002-06-302-2/+11
| | | | | | HAVE_DOSISH_SYSTEM is also set for OS/2 and plain DOS. Provide constant missing in older mingw installations.
* Update head to match stable 1.0David Shaw2002-06-2978-13781/+24084
|
* Does now work with libgcryptWerner Koch2000-12-211-1/+1
|
* Removed the libgcrypt stuff and started to modify the source to work withWerner Koch2000-12-191-3/+3
| | | | | that external library.
* Some configuration changesWerner Koch2000-11-143-5/+15
|
* Add features packet and fixes MIPS3.Werner Koch2000-10-115-1/+21
|
* Changed keyring handling - saving still does not work.Werner Koch2000-10-1011-180/+196
| | | | | Added new cipher mode and updated cipher test program.
* See ChangeLog: Fri Oct 6 14:29:16 CEST 2000 Werner KochWerner Koch2000-10-0616-1312/+467
|
* See ChangeLog: Wed Oct 4 13:16:18 CEST 2000 Werner KochWerner Koch2000-10-0414-293/+263
|
* See ChangeLog: Mon Sep 18 16:35:45 CEST 2000 Werner KochWerner Koch2000-09-1826-772/+1424
|
* See ChangeLog: Mon Aug 21 17:59:17 CEST 2000 Werner KochWerner Koch2000-08-216-0/+380
|
* See ChangeLog: Fri Aug 18 14:27:14 CEST 2000 Werner KochWerner Koch2000-08-182-1/+6
|
* See ChangeLog: Mon Jul 31 10:04:47 CEST 2000 Werner KochWerner Koch2000-07-3110-335/+517
|
* See ChangeLog: Fri Jul 28 18:19:11 CEST 2000 Werner KochWerner Koch2000-07-285-2/+31
|
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-21 17:02:28 +0000