aboutsummaryrefslogtreecommitdiffstats
path: root/sm/certchain.c (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* * configure.ac: Require libksba 0.9.11.Werner Koch2005-04-181-20/+93
| | | | | | | | | | | | sm/ * call-dirmngr.c (inq_certificate): Add new inquire SENDCERT_SKI. * certlist.c (gpgsm_find_cert): Add new arg KEYID and implement this filter. Changed all callers. * certchain.c (find_up_search_by_keyid): New helper. (find_up): Also try using the AKI.keyIdentifier. (find_up_external): Ditto.
* * certcheck.c: Fixed use of DBG_CRYPTO and DBG_X509.Werner Koch2005-03-171-50/+83
| | | | | | | | | * certchain.c (gpgsm_basic_cert_check): Dump certificates after a failed gcry_pk_verify. (find_up): Do an external lookup also for an authorityKeyIdentifier lookup. Factored external lookup code out to .. (find_up_external): .. new.
* Preparing 1.9.13Werner Koch2004-12-031-4/+17
|
* 2004-10-08 Moritz Schulte <[email protected]>Moritz Schulte2004-10-081-2/+3
| | | | | | | * certchain.c (gpgsm_validate_chain): Do not use keydb_new() in case the no_chain_validation-return-short-cut is used (fixes memory leak).
* (show_key_with_all_names): Print the card S/N.Werner Koch2004-09-201-3/+12
| | | | | | * app-openpgp.c (app_select_openpgp): Its app_munge_serialno and not app_number_serialno.
* * import.c (check_and_store): Do a full validation ifWerner Koch2004-08-171-6/+10
| | | | | | | | | | | | | | --with-validation is set. * certchain.c (gpgsm_basic_cert_check): Print more detailed error messages. * certcheck.c (do_encode_md): Partly support DSA. Add new arg PKALGO. Changed all callers to pass it. (pk_algo_from_sexp): New. tests/pkits: New directory
* (gpgsm_validate_chain): The trust check didn'tWerner Koch2004-07-201-0/+3
| | | | | worked anymore, probably due to the changes at 2003-03-04. Fixed.
* * call-agent.c (gpgsm_agent_pksign, gpgsm_agent_pkdecrypt)Werner Koch2004-04-261-2/+2
| | | | | | | | | | | | | | (gpgsm_agent_genkey, gpgsm_agent_istrusted) (gpgsm_agent_marktrusted, gpgsm_agent_havekey) (gpgsm_agent_passwd): Add new arg CTRL and changed all callers. (start_agent): New arg CTRL. Send progress item when starting a new agent. * sign.c (gpgsm_get_default_cert, get_default_signer): New arg CTRL to be passed down to the agent function. * decrypt.c (prepare_decryption): Ditto. * certreqgen.c (proc_parameters, read_parameters): Ditto. * certcheck.c (gpgsm_create_cms_signature): Ditto.
* * verify.c (gpgsm_verify): Print STATUS_NEWSIG for each signature.Werner Koch2004-04-051-11/+21
| | | | | | | | | | | | | * certchain.c (gpgsm_validate_chain) <gpgsm_cert_use_cer_p>: Do not just warn if a cert is not suitable; bail out immediately. * call-dirmngr.c (isvalid_status_cb): New. (unhexify_fpr): New. Taken from ../g10/call-agent.c (gpgsm_dirmngr_isvalid): Add new arg CTRL, changed caller to pass it thru. Detect need to check the respondert cert and do that. * certchain.c (gpgsm_validate_chain): Add new arg FLAGS. Changed all callers.
* still preparing for a releaseV1-9-6Werner Koch2004-03-061-2/+2
|
* Preparing for a releaseWerner Koch2004-03-061-40/+69
|
* (compare_certs): New.Werner Koch2004-02-261-4/+40
| | | | | | (gpgsm_validate_chain): Fixed infinite certificate checks after bad signatures.
* * gpgsm.c (main): New option --debug-ignore-expiration.Werner Koch2004-02-201-5/+9
| | | | | | | * certchain.c (gpgsm_validate_chain): Use it here. * certlist.c (cert_usage_p): Apply extKeyUsage.
* * gpgsm.c: New option --with-md5-fingerprint.Werner Koch2004-02-171-92/+177
| | | | | | | | | | | | | | | | | | | | | | | * keylist.c (list_cert_std): Print MD5 fpr. * gpgsm.c: New options --with-validation. * server.c (option_handler): New option "with-validation". * keylist.c (list_cert_std, list_internal_keys): New args CTRL and WITH_VALIDATION. Changed callers to set it. (list_external_cb, list_external_keys): Pass CTRL to the callback. (list_cert_colon): Add arg CTRL. Check validation if requested. * certchain.c (unknown_criticals, allowed_ca, check_cert_policy) (gpgsm_validate_chain): New args LISTMODE and FP. (do_list): New helper for info output. (find_up): New arg FIND_NEXT. (gpgsm_validate_chain): After a bad signature try again with other CA certificates. * import.c (print_imported_status): New arg NEW_CERT. Print additional STATUS_IMPORT_OK becuase that is what gpgme expects. (check_and_store): Always call above function after import. * server.c (get_status_string): Added STATUS_IMPORT_OK.
* * keybox.h (keybox_flag_t): New.Werner Koch2004-02-021-0/+6
| | | | | | | | | | | | | | | | | | | | | * keybox-search.c (get_flag_from_image, keybox_get_flags): New. (_keybox_get_flag_location): New. * certchain.c (gpgsm_validate_chain): Mark revoked certs in the keybox. * keylist.c (list_cert_colon): New arg VALIDITY; use it to print a revoked flag. (list_internal_keys): Retrieve validity flag. (list_external_cb): Pass 0 as validity flag. * keydb.c (keydb_get_flags, keydb_set_flags): New. (keydb_set_cert_flags): New. (lock_all): Return a proper error code. (keydb_lock): New. (keydb_delete): Don't lock but check that it has been locked. (keydb_update_keyblock): Ditto. * delete.c (delete_one): Take a lock.
* (check_cert_policy): Fixed read error checking.V1-9-4Werner Koch2004-01-301-6/+12
| | | | | | (check_cert_policy): With no critical policies issue only a warning if the policy file does not exists.
* (gpgsm_validate_chain): Changed the message printedWerner Koch2004-01-281-2/+2
| | | | | for an untrusted root certificate.
* Replaced deprecated type names.Werner Koch2003-12-171-16/+16
| | | | | | | | * certdump.c (gpgsm_print_serial): Cleaned up cast use in strtoul. (gpgsm_dump_serial): Ditto. * decrypt.c (gpgsm_decrypt): Replaced ERR by RC.
* * gpgsm.c, gpgsm.h: New options --{enable,disable}-ocsp.Werner Koch2003-12-011-3/+5
| | | | | | | | (gpgsm_init_default_ctrl): Set USE_OCSP to the default value. * certchain.c (gpgsm_validate_chain): Handle USE_OCSP. * call-dirmngr.c (gpgsm_dirmngr_isvalid): Add arg USE_OCSP and proceed accordingly.
* * verify.c (gpgsm_verify): Fixed for changes API of gcry_md_info.Werner Koch2003-11-181-1/+1
| | | | | * certchain.c (unknown_criticals): Fixed an error code test.
* Mainly changes to adjust for the changed KSBA API.Werner Koch2003-11-121-6/+6
|
* * verify.c (strtimestamp_r, gpgsm_verify):Werner Koch2003-10-311-16/+21
| | | | | | | | | | | * sign.c (gpgsm_sign): * keylist.c (print_time, list_cert_std, list_cert_colon): * certdump.c (gpgsm_print_time, gpgsm_dump_time, gpgsm_dump_cert): * certchain.c (gpgsm_validate_chain): Changed to use ksba_isotime_t.
* This commit was manufactured by cvs2svn to create branchRepo Admin2003-08-051-0/+793
| | | | 'GNUPG-1-9-BRANCH'.
* This commit was manufactured by cvs2svn to create branchRepo Admin2002-10-191-786/+0
| | | | 'GNUPG-1-9-BRANCH'.
* * certcheck.c (gpgsm_check_cert_sig): Add cert hash debugging.NEWPG-0-9-2Werner Koch2002-09-191-3/+16
| | | | | | * certchain.c (find_up): Print info when the cert was not found by the autorithyKeyIdentifier.
* Made it compile.Werner Koch2002-08-161-4/+4
|
* * certpath.c: Renamed to ..Werner Koch2002-08-161-1/+1
| | | | | | * certchain.c: this. Renamed all all other usages of "path" in the context of certificates to "chain".
* * call-agent.c (learn_cb): Special treatment when the issuerWerner Koch2002-08-161-16/+16
| | | | | certificate is missing.
* * certpath.c (check_cert_policy): Don't use log_error to print aWerner Koch2002-07-021-2/+7
| | | | | warning.
* * keydb.c (keydb_store_cert): Add optional ar EXISTED and changedWerner Koch2002-07-021-1/+1
| | | | | | | | | | | | all callers. * call-agent.c (learn_cb): Print info message only for real imports. * import.c (gpgsm_import): Moved duplicated code to ... (check_and_store): new function. Added magic to import the entire chain. Print status only for real imports and moved printing code to .. (print_imported_status): New.
* * gpgsm.c: New option --auto-issuer-key-retrieve.Werner Koch2002-06-291-2/+80
| | | | | | | | | | | | | | | | * certpath.c (find_up): Try to retrieve an issuer key from an external source and from the ephemeral key DB. (find_up_store_certs_cb): New. * keydb.c (keydb_set_ephemeral): Does now return the old state. Call the backend only when required. * call-dirmngr.c (start_dirmngr): Use GNUPG_DEFAULT_DIRMNGR. (lookup_status_cb): Issue status only when CTRL is not NULL. (gpgsm_dirmngr_lookup): Document that CTRL is optional. * call-agent.c (start_agent): Use GNUPG_DEFAULT_AGENT.
* * server.c (cmd_recipient): Add more reason codes.Werner Koch2002-06-281-1/+1
|
* * gpgsm.c, gpgsm.h: New option --debug-no-path-validation.Werner Koch2002-06-241-2/+2
| | | | | | | | | * certpath.c (gpgsm_validate_path): Use it here instead of the debug flag hack. * certpath.c (check_cert_policy): Return No_Policy_Match if the policy file could not be opened.
* * certlist.c (gpgsm_add_to_certlist): Fixed locating of aWerner Koch2002-06-201-1/+9
| | | | | | | | | | | | | | | | | | | | | | | certificate with the required key usage. * gpgsm.c (main): Fixed a segv when using --outfile without an argument. * keylist.c (print_capabilities): Also check for non-repudiation and data encipherment. * certlist.c (cert_usage_p): Test for signing and encryption was swapped. Add a case for certification usage, handle non-repudiation and data encipherment. (gpgsm_cert_use_cert_p): New. (gpgsm_add_to_certlist): Added a CTRL argument and changed all callers to pass it. * certpath.c (gpgsm_validate_path): Use it here to print a status message. Added a CTRL argument and changed all callers to pass it. * decrypt.c (gpgsm_decrypt): Print a status message for wrong key usage. * verify.c (gpgsm_verify): Ditto. * keydb.c (classify_user_id): Allow a colon delimited fingerprint.
* * sign.c (hash_and_copy_data): New.Werner Koch2002-06-121-6/+33
| | | | | | | | | | | (gpgsm_sign): Implemented normal (non-detached) signatures. * gpgsm.c (main): Ditto. * certpath.c (gpgsm_validate_path): Special error handling for no policy match. * configure.ac (NEED_LIBKSBA_VERSION): We need 0.4.3 now.
* sm/Werner Koch2002-05-141-1/+1
| | | | | | | | | | | | | | * gpgsm.c: New option --faked-system-time * sign.c (gpgsm_sign): And use it here. * certpath.c (gpgsm_validate_path): Ditto. common/ * gettime.c: New. agent/ * cache.c (housekeeping, agent_put_cache): Use our time() wrapper. / * doc/: New * configure.ac, Makefile.am: Added doc/
* * certpath.c (gpgsm_validate_path): Added EXPTIME arg and changedWerner Koch2002-05-031-6/+22
| | | | | | | all callers. * verify.c (gpgsm_verify): Tweaked usage of log_debug and log_error. Return EXPSIG status and add expiretime to VALIDSIG.
* * certpath.c (find_up): New to use the authorithKeyIdentifier.Werner Koch2002-04-151-4/+31
| | | | | Use it in all other functions to locate the signing cert..
* * certpath.c (gpgsm_walk_cert_chain): Be a bit more silent onWerner Koch2002-03-281-1/+4
| | | | | common errors.
* * decrypt.c (gpgsm_decrypt): Allow multiple recipients.Werner Koch2002-03-131-1/+4
|
* * verify.c (gpgsm_verify): Detect certs-only message.Werner Koch2002-03-121-2/+14
|
* * server.c (option_handler): Allow to use -2 for "send all certsWerner Koch2002-02-251-0/+18
| | | | | | | except the root cert". * sign.c (add_certificate_list): Implement it here. * certpath.c (gpgsm_is_root_cert): New.
* * certpath.c (check_cert_policy): New.Werner Koch2002-02-191-3/+119
| | | | | | | | (gpgsm_validate_path): And call it from here. * gpgsm.c (main): New options --policy-file, --disable-policy-checks and --enable-policy-checks. * gpgsm.h (opt): Added policy_file, no_policy_checks.
* * certpath.c (gpgsm_validate_path): Ask the agent to add theWerner Koch2002-02-181-7/+17
| | | | | | certificate into the trusted list. * call-agent.c (gpgsm_agent_marktrusted): New.
* * gpgsm.c (main): Disable core dumps.Werner Koch2002-01-251-0/+61
| | | | | | | | | | | | | * sign.c (add_certificate_list): New. (gpgsm_sign): Add the certificates to the CMS object. * certpath.c (gpgsm_walk_cert_chain): New. * gpgsm.h (server_control_s): Add included_certs. * gpgsm.c: Add option --include-certs. (gpgsm_init_default_ctrl): New. (main): Call it. * server.c (gpgsm_server): Ditto. (option_handler): Support --include-certs.
* * certpath.c (gpgsm_validate_path): Print the DN of a missing issuer.Werner Koch2002-01-231-2/+18
| | | | | | * certdump.c (gpgsm_dump_string): New. (print_dn): Replaced by above.
* * certpath.c (unknown_criticals): New.Werner Koch2002-01-221-9/+114
| | | | | | | (allowed_ca): New. (gpgsm_validate_path): Check validity, CA attribute, path length and unknown critical extensions.
* * import.c (gpgsm_import): Just do a basic cert check beforeWerner Koch2002-01-151-9/+116
| | | | | | | | | | | | | | | | storing it. * certpath.c (gpgsm_basic_cert_check): New. * keydb.c (keydb_store_cert): New. * import.c (store_cert): Removed and change all caller to use the new function. * verify.c (store_cert): Ditto. * certlist.c (gpgsm_add_to_certlist): Validate the path * certpath.c (gpgsm_validate_path): Check the trust list. * call-agent.c (gpgsm_agent_istrusted): New.
* * call-dirmngr.c: New.Werner Koch2002-01-111-0/+31
| | | | | | | * certpath.c (gpgsm_validate_path): Check the CRL here. * fingerprint.c (gpgsm_get_certid): New. * gpgsm.c: New options --dirmngr-program and --disable-crl-checks.
* * keylist.c (list_cert_colon): Print alternative names of subjectWerner Koch2001-12-131-2/+2
| | | | | and a few other values.
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-13 01:05:31 +0000