aboutsummaryrefslogtreecommitdiffstats
path: root/sm/ChangeLog (unfollow)
Commit message (Collapse)AuthorFilesLines
2004-09-30* gpgv.c (i18n_init): Always use LC_ALL.Werner Koch1-0/+12
* kbxutil.c (i18n_init): Always use LC_ALL. * gpgsm.c (i18n_init): Always use LC_ALL. * certdump.c (gpgsm_format_name): Factored code out to .. (gpgsm_format_name2): .. new. (gpgsm_print_name): Factored code out to .. (gpgsm_print_name2): .. new. (print_dn_part): New arg TRANSLATE. Changed all callers. (print_dn_parts): Ditto. (gpgsm_format_keydesc): Do not translate the SUBJECT; we require it to stay UTF-8 but we still want to filter out bad control characters. * gpgconf.c (i18n_init): Always use LC_ALL.
2004-09-30Preparing a new release. Updated gettextWerner Koch1-0/+2
2004-09-30* de.po: Updated.Werner Koch1-0/+5
* POTFILES.in: Add more files. * app-openpgp.c (do_sign): Add the error string to the verify failed messages. * keylist.c (list_cert_colon): Make sure that the expired flag has a higher precedence than the invalid flag.
2004-09-29* minip12.c (parse_bag_encrypted_data): Print error if a badWerner Koch1-0/+6
passphrase has been given. * gpg-agent.texi (Invoking GPG-AGENT): Add a few words about the expected pinentry filename. * import.c (parse_p12): Write an error status line for bad passphrases. Add new arg CTRL and changed caller. * export.c (export_p12): Likewise.
2004-09-20(show_key_with_all_names): Print the card S/N.Werner Koch1-0/+6
* app-openpgp.c (app_select_openpgp): Its app_munge_serialno and not app_number_serialno.
2004-08-24Fixed typo in ocsp OID.Werner Koch1-0/+4
2004-08-18* certlist.c (gpgsm_cert_use_ocsp_p): New.Werner Koch1-0/+6
(cert_usage_p): Support it here. * call-dirmngr.c (gpgsm_dirmngr_isvalid): Use it here.
2004-08-172004-08-17 Marcus Brinkmann <[email protected]>Marcus Brinkmann1-0/+4
* import.c: Fix typo in last change.
2004-08-17* import.c (check_and_store): Do a full validation ifWerner Koch1-0/+15
--with-validation is set. * certchain.c (gpgsm_basic_cert_check): Print more detailed error messages. * certcheck.c (do_encode_md): Partly support DSA. Add new arg PKALGO. Changed all callers to pass it. (pk_algo_from_sexp): New. tests/pkits: New directory
2004-08-16(cmd_encrypt): Use DEFAULT_RECPLIST and not recplistWerner Koch1-0/+5
for encrypt-to keys.
2004-08-06* gpgsm.c: New option --with-ephemeral-keys.Werner Koch1-0/+7
* keylist.c (list_internal_keys): Set it here. (list_cert_raw): And indicate those keys. Changed all our callers to pass the new arg HD through.
2004-08-05* configure.ac: Changed tests for libusb to also suuport theWerner Koch1-0/+5
stable version 0.1.x. * scdaemon.texi (Card applications): New section. * scdaemon.c (main): New option --disable-application. * app.c (is_app_allowed): New. (select_application): Use it to check for disabled applications. * ccid-driver.h (CCID_DRIVER_ERR_ABORTED): New. * ccid-driver.c (ccid_open_reader): Support the stable 0.1 version of libusb. (ccid_get_atr): Handle short messages. * apdu.c (my_rapdu_get_status): Implemented.
2004-07-22* trustlist.c (read_list): Allow colons in the fingerprint.Werner Koch1-0/+4
(headerblurb): Rephrased. * gpg-agent.c (handle_connections): Increase the stack size ot 256k. * de.po: Updated. * scdaemon.c (main): Bumbed thread stack size up to 512k. * keylist.c (list_cert_raw): Print the keygrip.
2004-07-20(gpgsm_validate_chain): The trust check didn'tWerner Koch1-0/+5
worked anymore, probably due to the changes at 2003-03-04. Fixed.
2004-06-06* configure.ac: Require libksba 0.9.7.Werner Koch1-0/+17
* certreqgen.c (get_parameter_uint, create_request): Create an extension for key usage when requested. * gpgsm.c (main): Install emergency_cleanup also as an atexit handler. * verify.c (gpgsm_verify): Removed the separate error code handling for KSBA. We use shared error codes anyway. * export.c (export_p12): Removed debugging code. * encrypt.c (gpgsm_encrypt): Put the session key in to secure memory.
2004-05-11* gpg-agent.c (handle_signal): Reload the trustlist on SIGHUP.Werner Koch1-0/+2
(start_connection_thread): Hack to simulate a ticker. * trustlist.c (agent_trustlist_housekeeping) (agent_reload_trustlist): New. Protected all global functions here with a simple counter which is sufficient for Pth. * fingerprint.c (gpgsm_get_key_algo_info): New. * sign.c (gpgsm_sign): Don't assume RSA in the status line. * keylist.c (list_cert_colon): Really print the algorithm and key length. (list_cert_raw, list_cert_std): Ditto. (list_cert_colon): Reorganized to be able to tell whether a root certificate is trusted.
2004-05-11* sign.c (gpgsm_sign): Include the error source in the final errorWerner Koch1-0/+10
message. * decrypt.c (gpgsm_decrypt): Ditto. * fingerprint.c (gpgsm_get_key_algo_info): New. * sign.c (gpgsm_sign): Don't assume RSA in the status line. * keylist.c (list_cert_colon): Really print the algorithm and key length. (list_cert_raw, list_cert_std): Ditto. * gpgsm.h (opt): Add member CONFIG_FILENAME. * gpgsm.c (main): Use it here instead of the local var.
2004-05-11* sysutils.c (disable_core_dumps): Only set the current limit.Werner Koch1-0/+3
(enable_core_dumps): New. * gpgsm.texi (Esoteric Options): Add --debug-allow-core-dump. * gpgsm.c: New option --debug-allow-core-dump. * gpgsm.h (opt): Add member CONFIG_FILENAME. * gpgsm.c (main): Use it here instead of the local var. * server.c (gpgsm_server): Print some additional information with the hello in verbose mode.
2004-05-11* gpgsm.h (opt): Add member CONFIG_FILENAME.Werner Koch1-0/+7
* gpgsm.c (main): Use it here instead of the local var. * server.c (gpgsm_server): Print some additional information with the hello in verbose mode.
2004-04-30* protect-tool.c: New option --enable-status-msg.Werner Koch1-0/+3
(store_private_key): Print status messages for imported keys. (read_and_unprotect): Ditto for bad passphrase. * import.c (check_and_store): Do not update the stats for hidden imports of issuer certs. (popen_protect_tool): Request statusmessages from the protect-tool. (parse_p12): Detect status messages. Add new arg STATS and update them. (print_imported_summary): Include secret key stats.
2004-04-30(check_and_store): Do not update the stats for hiddenWerner Koch1-0/+5
imports of issuer certs.
2004-04-28* gpgsm.c: New command --keydb-clear-some-cert-flags.Werner Koch1-0/+7
* keydb.c (keydb_clear_some_cert_flags): New. (keydb_update_keyblock, keydb_set_flags): Change error code CONFLICT to NOT_LOCKED.
2004-04-26* scdaemon.c (main): Do the last change the usual way. This is soWerner Koch1-0/+3
that we can easily test for versioned config files above. * gpgsm.c (main) <gpgconf>: Do not use /dev/null as default config filename.
2004-04-26* call-agent.c (gpgsm_agent_pksign, gpgsm_agent_pkdecrypt)Werner Koch1-0/+14
(gpgsm_agent_genkey, gpgsm_agent_istrusted) (gpgsm_agent_marktrusted, gpgsm_agent_havekey) (gpgsm_agent_passwd): Add new arg CTRL and changed all callers. (start_agent): New arg CTRL. Send progress item when starting a new agent. * sign.c (gpgsm_get_default_cert, get_default_signer): New arg CTRL to be passed down to the agent function. * decrypt.c (prepare_decryption): Ditto. * certreqgen.c (proc_parameters, read_parameters): Ditto. * certcheck.c (gpgsm_create_cms_signature): Ditto.
2004-04-26The keybox gets now compressed after 3 hours and ephemeralWerner Koch1-0/+2
stored certificates are deleted after about a day.
2004-04-23(oidtranstbl): New. OIDs collected from several sources.Werner Koch1-0/+7
(print_name_raw, print_names_raw, list_cert_raw): New. (gpgsm_list_keys): Check the dump mode and pass it down as necessary.
2004-04-22(main): New commands --dump-keys, --dump-external-keys,Werner Koch1-0/+5
--dump-secret-keys.
2004-04-13* misc.c (setup_pinentry_env): New.Werner Koch1-0/+6
* import.c (popen_protect_tool): Call it. * export.c (popen_protect_tool): Call it.
2004-04-08(gpgsm_decrypt): Return GPG_ERR_NO_DATA if it is not aWerner Koch1-0/+5
encrypted message.
2004-04-07* gpgsm.c: New option --force-crl-refresh.Werner Koch1-0/+5
* call-dirmngr.c (gpgsm_dirmngr_isvalid): Pass option to dirmngr.
2004-04-06Add STATUS_NEWSIGWerner Koch1-0/+1
2004-04-05* verify.c (gpgsm_verify): Print STATUS_NEWSIG for each signature.Werner Koch1-0/+16
* certchain.c (gpgsm_validate_chain) <gpgsm_cert_use_cer_p>: Do not just warn if a cert is not suitable; bail out immediately. * call-dirmngr.c (isvalid_status_cb): New. (unhexify_fpr): New. Taken from ../g10/call-agent.c (gpgsm_dirmngr_isvalid): Add new arg CTRL, changed caller to pass it thru. Detect need to check the respondert cert and do that. * certchain.c (gpgsm_validate_chain): Add new arg FLAGS. Changed all callers.
2004-03-24(gpgsm_sign): Include a short list of capabilities.Werner Koch1-0/+4
2004-03-17* gpg-agent.c (main) <gpgconf>: Fixed default value quoting.Werner Koch1-0/+4
* scdaemon.c (main) <gpgconf>: Fixed default value quoting. * gpgsm.c (main) <gpgconf>: Fixed default value quoting.
2004-03-16(main): Implemented --gpgconf-list.Werner Koch1-0/+4
2004-03-15(list_cert_colon): Hack to set the expired flag.Werner Koch1-0/+10
2004-03-06Preparing for a releaseWerner Koch1-0/+15
2004-03-03(gpgsm_export): Make sure that we don't export moreWerner Koch1-0/+5
than one certificate.
2004-03-02(create_duptable, destroy_duptable)Werner Koch1-0/+6
(insert_duptable): New. (gpgsm_export): Avoid duplicates.
2004-02-26(compare_certs): New.Werner Koch1-0/+6
(gpgsm_validate_chain): Fixed infinite certificate checks after bad signatures.
2004-02-24(list_cert_colon): Print the fingerprint as theWerner Koch1-0/+5
cert-id for root certificates.
2004-02-21* keylist.c (list_internal_keys): Return error codes.Werner Koch1-0/+9
(list_external_keys, gpgsm_list_keys): Ditto. * server.c (do_listkeys): Ditto. * gpgsm.c (main): Display a key description for --passwd. * call-agent.c (gpgsm_agent_passwd): New arg DESC.
2004-02-20* gpgsm.c (main): New option --debug-ignore-expiration.Werner Koch1-0/+7
* certchain.c (gpgsm_validate_chain): Use it here. * certlist.c (cert_usage_p): Apply extKeyUsage.
2004-02-19* protect-tool.c: New options --have-cert and --prompt.Werner Koch1-0/+6
(export_p12_file): Read a certificate from STDIN and pass it to p12_build. Detect a keygrip and construct the filename in that case. Unprotcet a key if needed. Print error messages for key formats we can't handle. (release_passphrase): New. (get_passphrase): New arg PROMPTNO. Return the allocated string. Changed all callers. * minip12.c: Revamped the build part. (p12_build): New args CERT and CERTLEN. * simple-pwquery.c (agent_open): Don't mangle INFOSTR. * export.c (export_p12, popen_protect_tool) (gpgsm_p12_export): New. * gpgsm.c (main): New command --export-secret-key-p12.
2004-02-18* gpgsm.c (set_debug): Set the new --debug-level flags.Werner Koch1-0/+10
(main): New option --gpgconf-list. (main): Do not setup -u and -r keys when not required. (main): Setup the used character set. * keydb.c (keydb_add_resource): Print a hint to start the gpg-agent.
2004-02-17* gpgsm.c: Fixed value parsing for --with-validation.Werner Koch1-0/+4
* call-agent.c (start_agent): Ignore an empty GPG_AGENT_INFO. * call-dirmngr.c (start_dirmngr): Likewise for DIRMNGR_INFO.
2004-02-17* gpgsm.c: New option --with-md5-fingerprint.Werner Koch1-0/+23
* keylist.c (list_cert_std): Print MD5 fpr. * gpgsm.c: New options --with-validation. * server.c (option_handler): New option "with-validation". * keylist.c (list_cert_std, list_internal_keys): New args CTRL and WITH_VALIDATION. Changed callers to set it. (list_external_cb, list_external_keys): Pass CTRL to the callback. (list_cert_colon): Add arg CTRL. Check validation if requested. * certchain.c (unknown_criticals, allowed_ca, check_cert_policy) (gpgsm_validate_chain): New args LISTMODE and FP. (do_list): New helper for info output. (find_up): New arg FIND_NEXT. (gpgsm_validate_chain): After a bad signature try again with other CA certificates. * import.c (print_imported_status): New arg NEW_CERT. Print additional STATUS_IMPORT_OK becuase that is what gpgme expects. (check_and_store): Always call above function after import. * server.c (get_status_string): Added STATUS_IMPORT_OK.
2004-02-13* certcheck.c (gpgsm_create_cms_signature): Format a descriptionWerner Koch1-0/+10
for use by the pinentry. * decrypt.c (gpgsm_decrypt): Ditto. Free HEXKEYGRIP. * certdump.c (format_name_cookie, format_name_writer) (gpgsm_format_name): New. (gpgsm_format_serial): New. (gpgsm_format_keydesc): New. * call-agent.c (gpgsm_agent_pksign): New arg DESC. (gpgsm_agent_pkdecrypt): Ditto.
2004-02-13* encrypt.c (init_dek): Check for too weak algorithms.Werner Koch1-0/+18
* import.c (parse_p12, popen_protect_tool): New. * base64.c (gpgsm_create_reader): New arg ALLOW_MULTI_PEM. Changed all callers. (base64_reader_cb): Handle it here. (gpgsm_reader_eof_seen): New. (base64_reader_cb): Set a flag for EOF. (simple_reader_cb): Ditto.
2004-02-12* Makefile.am (AM_CPPFLAGS): Pass directory constants via -D; thisWerner Koch1-0/+5
will allow to override directory names at make time.