aboutsummaryrefslogtreecommitdiffstats
path: root/keyserver/gpgkeys_ldap.c (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Move strsep() and ascii_isspace() to libcompat.David Shaw2006-09-281-1/+1
|
* Put in the basic wiring (just hextobyte for now) for a libcompat.a thatDavid Shaw2006-09-281-1/+1
| | | | | | | can contain replacement files that can be linked to keyserver helpers without bringing in the whole libutil.a. libutil.a contains a complete copy of libcompat.a so we only need to link to one of them.
* * gpgkeys_ldap.c (build_attrs), ksutil.c (ks_toupper, ks_strcasecmp),David Shaw2006-09-281-4/+4
| | | | | | ksutil.h: Remove the need for strcasecmp as the field tags are always lowercase.
* Allow to build w/o curl.Werner Koch2006-09-261-6/+18
|
* * gpgkeys_hkp.c (send_key), gpgkeys_ldap.c (send_key,David Shaw2006-07-171-6/+6
| | | | | | send_key_keyserver): Improved version of previous fix. Force match on spaces in string.
* * gpgkeys_hkp.c (send_key), gpgkeys_ldap.c (send_key, send_key_keyserver):David Shaw2006-07-141-8/+14
| | | | | | Fix string matching problem when the ascii armored form of the key happens to match "KEY" at the beginning of the line.
* * gpgkeys_ldap.c (printquoted), curl-shim.c (curl_escape): Fix badDavid Shaw2006-07-121-1/+1
| | | | | encoding of characters > 127. Noted by Nalin Dahyabhai.
* * gpgkeys_ldap.c (ldap_quote, get_name, search_key): LDAP-quoteDavid Shaw2006-04-111-47/+10
| | | | | directly into place rather than mallocing temporary buffers.
* * gpgkeys_ldap.c (get_name): Build strings with strcat rather thanDavid Shaw2006-04-111-8/+19
| | | | | using sprintf which is harder to read and modify.
* * ksutil.h, ksutil.c (classify_ks_search): Add KS_SEARCH_KEYID_SHORTDavid Shaw2006-04-111-12/+77
| | | | | | | | and KS_SEARCH_KEYID_LONG to search for a key ID. * gpgkeys_ldap.c (search_key): Use it here to flip from pgpUserID searches to pgpKeyID or pgpCertID.
* * gpgkeys_ldap.c: #define LDAP_DEPRECATED for newer OpenLDAPs so they useDavid Shaw2006-03-271-0/+2
| | | | | the regular old API that is compatible with other LDAP libraries.
* * gpgkeys_ldap.c (main): Fix build problem with non-OpenLDAP LDAPDavid Shaw2006-03-031-5/+10
| | | | | libraries that have TLS.
* * gpgkeys_ldap.c (make_one_attr, build_attrs, send_key): Don't allowDavid Shaw2006-02-221-29/+30
| | | | | duplicate attributes as OpenLDAP is now enforcing this.
* * gpgkeys_ldap.c (main): Add binddn and bindpw so users can passDavid Shaw2006-02-221-16/+75
| | | | | credentials to a remote LDAP server.
* * ksutil.h, ksutil.c (parse_ks_options): New keyserver command "getname".David Shaw2005-12-231-16/+143
| | | | | | * gpgkeys_hkp.c (main, get_name), gpgkeys_ldap.c (main, get_name): Use it here to do direct name (rather than key ID) fetches.
* * ksutil.h, ksutil.c (parse_ks_options): Remove exact-name andDavid Shaw2005-08-261-8/+16
| | | | | | | | | exact-email. (classify_ks_search): Mimic the gpg search modes instead with *, =, <, and @. * gpgkeys_ldap.c (search_key), gpgkeys_hkp.c (search_key): Call them here. Suggested by Jason Harris.
* * ksutil.h, ksutil.c (parse_ks_options): New keyserver-option exact-name. David Shaw2005-08-181-2/+7
| | | | | | | | The last of exact-name and exact-email overrides the earlier. * gpgkeys_ldap.c (search_key), gpgkeys_hkp.c (search_key): Use it here to do a name-only search.
* * gpgkeys_ldap.c (ldap_quote): \-quote a string for LDAP.David Shaw2005-08-181-3/+49
| | | | | | * gpgkeys_ldap.c (search_key): Use it here to escape reserved characters in searches.
* * ksutil.h, ksutil.c (parse_ks_options): New keyserver-optionDavid Shaw2005-08-181-3/+10
| | | | | | | | exact-email. * gpgkeys_ldap.c (search_key), gpgkeys_hkp.c (search_key): Use it here to do an email-only search.
* Updated FSF street address and preparations for a release candidate.Werner Koch2005-05-311-1/+2
|
* * gpgkeys_ldap.c, ksutil.h, ksutil.c (print_nocr): Moved fromDavid Shaw2005-03-221-11/+0
| | | | | | | | | gpgkeys_ldap.c. Print a string, but strip out any CRs. * gpgkeys_finger.c (get_key), gpgkeys_hkp.c (get_key), gpgkeys_http.c (get_key): Use it here when outputting key material to canonicalize line endings.
* * gpgkeys_ldap.c (main): Fix three wrong calls to fail_all(). NotedDavid Shaw2005-03-191-3/+3
| | | | | by Stefan Bellon.
* * gpgkeys_curl.c, gpgkeys_finger.c, gpgkeys_ldap.c: Start usingDavid Shaw2005-03-171-235/+135
| | | | | | | | parse_ks_options and remove a lot of common code. * ksutil.h, ksutil.c (parse_ks_options): Parse OPAQUE, and default debug with no arguments to 1.
* * gpgkeys_ldap.c: Include lber.h if configure determines we need it.David Shaw2005-03-171-0/+3
|
* * curl-shim.c (curl_easy_perform): Fix compile warning.David Shaw2005-02-121-0/+35
| | | | | | * curl-shim.h, gpgkeys_curl.c (main), gpgkeys_ldap.c (main): Add ca-cert-file option, to pass in the SSL cert.
* * gpgkeys_ldap.c (print_nocr): New. (get_key): Call it here toDavid Shaw2005-01-241-1/+13
| | | | | | | | | canonicalize line endings. * gpgkeys_curl.c (writer): Discard everything outside the BEGIN and END lines when retrieving keys. Canonicalize line endings. (main): Accept FTPS.
* * gpgkeys_ldap.c (main): Add "check-cert" option to disable SSLDavid Shaw2005-01-221-7/+35
| | | | | | | | | certificate checking (which is on by default). * gpgkeys_curl.c (main): Add "debug" option to match the LDAP helper. Add "check-cert" option to disable SSL certificate checking (which is on by default).
* * ksutil.h, gpgkeys_curl.c, gpgkeys_hkp.c, gpgkeys_ldap.c,David Shaw2005-01-131-20/+1
| | | | | | gpgkeys_finger.c, gpgkeys_http.c: Part 2 of the cleanup. Move all the various defines to ksutil.h.
* * gpgkeys_finger.c, gpgkeys_hkp.c, gpgkeys_http.c, gpgkeys_ldap.c: Part 1David Shaw2005-01-131-20/+28
| | | | | of a minor cleanup to use #defines instead of hard-coded sizes.
* * gpgkeys_curl.c (main): New "follow-redirects" option. Takes an optionalDavid Shaw2004-12-221-1/+3
| | | | | | | | | | numeric value for the maximum number of redirects to allow. Defaults to 5. * gpgkeys_curl.c (main), gpgkeys_finger.c (main), gpgkeys_hkp.c (main), gpgkeys_http.c (main), gpgkeys_ldap.c (main): Make sure that a "timeout" option passed with no arguments is properly handled.
* * gpgkeys_ldap.c (main, show_help): Kludge to implement standardWerner Koch2004-10-151-3/+22
| | | | | | | | | GNU options. Factored help printing out. * gpgkeys_finger.c (main, show_help): Ditto. * gpgkeys_hkp.c (main, show_help): Ditto. * gpgkeys_http.c (main, show_help): Ditto. * gpgkeys_test.in, gpgkeys_mailto.in: Implement --version and --help.
* * gpgkeys_ldap.c (main), gpgkeys_hkp.c (main), gpgkeys_http.c (main),David Shaw2004-10-131-0/+24
| | | | | | | | gpgkeys_finger.c (main): Call timeout functions before performing an action that could block for a long time. * ksutil.h, ksutil.c: New. Right now just contains timeout functions.
* * gpgkeys_finger.c, gpgkeys_hkp.c, gpgkeys_http.c, gpgkeys_ldap.c: Fix aDavid Shaw2004-10-111-2/+2
| | | | | few occurances of "filename" to `filename'.
* * gpgkeys_ldap.c (get_key, search_key), gpgkeys_hkp.c (get_key,David Shaw2004-08-231-7/+0
| | | | | | search_key), gpgkeys_http.c (get_key): Do not give informational logs since this is now done inside gpg.
* * gpgkeys_ldap.c (get_key): Factor out informational display into newDavid Shaw2004-08-231-74/+78
| | | | | function build_info().
* * gpgkeys_ldap.c (build_attrs): Properly terminate user ID strings thatDavid Shaw2004-08-231-0/+2
| | | | | got shrunk due to encoding.
* * gpgkeys_ldap.c (find_basekeyspacedn): Use LDAP_SCOPE_BASE along with aDavid Shaw2004-08-231-7/+24
| | | | | | | | full DN rather than LDAP_SCOPE_ONELEVEL plus a filter to find the pgpServerInfo object. Some LDAP setups don't like the search. (main): Stop binding to the server since it seems no server really requires it, and some require it not be there.
* * gpgkeys_ldap.c (main): Add "debug" option. This is only really usefulDavid Shaw2004-07-291-11/+60
| | | | | | | | with OpenLDAP, but it's practically vital to debug SSL and TLS setups. Add "basedn" option. This allows users to override the autodetection for base DN. SSL overrides TLS, so TLS will not be started on SSL connections (starting an already started car).
* * gpgkeys_ldap.c (build_attrs): Add "pgpKeySize" and "pgpSubKeyID"David Shaw2004-07-281-2/+42
| | | | | | | | attributes so we can do subkey searches. * gpgkeys_ldap.c (main): Under certain error conditions, we might try and unbind twice. Don't.
* * gpgkeys_ldap.c (join_two_modlists): New. (send_key): Use new function soDavid Shaw2004-07-281-19/+62
| | | | | | | we can try a modify operation first, and fail over to an add if that fails. Add cannot cope with the NULLs at the head of the modify request, so we jump into the list in the middle.
* * gpgkeys_ldap.c (main): Don't try and error out before making a ldapsDavid Shaw2004-07-281-28/+19
| | | | | | | connection to the NAI keyserver since we cannot tell if it is a NAI keyserver until we connect. Fail if we cannot find a base keyspace DN. Fix a false success message for TLS being enabled.
* * configure.ac (AM_GNU_GETTEXT_VERSION): New.Werner Koch2004-07-271-0/+7
| | | | | | | | | | | (min_automake_version): New. * LINGUAS: Added all languages we supported in 1.2.5. Copied all po files from 1.2.5. * autogen.sh: Updated to the modern version, grepping the required tool versions from configure.ac.
* * gpgkeys_ldap.c (ldap2epochtime): We can always rely on timegm() beingDavid Shaw2004-05-211-22/+3
| | | | | available now, since it's a replacement function.
* * gpgkeys_ldap.c (send_key): List pgpCertID as one of the deletedDavid Shaw2004-02-261-8/+11
| | | | | | | attributes. This guarantees that if something goes wrong, we won't be able to complete the transaction, thus leaving any key already existing on the server intact.
* * gpgkeys_ldap.c (delete_one_attr): Removed. (make_one_attr): DeleteDavid Shaw2004-02-241-79/+75
| | | | | | | | functionality added. Optional deduping functionality added (currently only used for pgpSignerID). (build_attrs): Translate sig entries into pgpSignerID. Properly build the timestamp for pgpKeyCreateTime and pgpKeyExpireTime.
* * gpgkeys_ldap.c (delete_one_attr): New function to replace attributesDavid Shaw2004-02-231-9/+55
| | | | | | | | | with NULL (a "delete" that works even for nonexistant attributes). (send_key): Use it here to remove attributes so a modify operation starts with a clean playing field. Bias sends to modify before add, since (I suspect) people update their existing keys more often than they make and send new keys to the server.
* * gpgkeys_ldap.c (epoch2ldaptime): New. Converse of ldap2epochtime.David Shaw2004-02-221-57/+521
| | | | | | | | | | (make_one_attr): New. Build a modification list in memory to send to the LDAP server. (build_attrs): New. Parse INFO lines sent over by gpg. (free_mod_values): New. Unwinds a modification list. (send_key_keyserver): Renamed from old send_key(). (send_key): New function to send a key to a LDAP server. (main): Use send_key() for real LDAP servers, send_key_keyserver() otherwise.
* * gpgkeys_ldap.c: Replacement prototypes for setenv and unsetenv.David Shaw2004-02-201-36/+51
| | | | | | | | | | (search_key): Catch a SIZELIMIT_EXCEEDED error and show the user whatever the server did give us. (find_basekeyspacedn): There is no guarantee that namingContexts will be readable. * Makefile.am: Link gpgkeys_ldap with libutil.a to get the replacement functions (and eventually translations, etc).
* * gpgkeys_ldap.c (ldap2epochtime): LDAP timestamps are UTC, so do notDavid Shaw2004-02-191-10/+34
| | | | | | | correct for timezones. (main): Find the basekeyspacedn before we try to start TLS, so we can give a better error message when a user tries to use TLS with a LDAP keyserver.
* * Makefile.am: Add automake conditionals to symlink gpgkeys_ldaps toDavid Shaw2004-02-191-11/+125
| | | | | | | | | | gpgkeys_ldap when needed. * gpgkeys_ldap.c (main): Add support for LDAPS and TLS connections. These are only useful and usable when talking to real LDAP keyservers. Add new "tls" option to tune TLS use from off, to try quietly, to try loudly, or to require TLS.
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-21 19:34:42 +0000