aboutsummaryrefslogtreecommitdiffstats
path: root/sm/certlist.c (unfollow)
Commit message (Collapse)AuthorFilesLines
2012-08-24Fix typos spotted during translationsDavid Prévot1-4/+4
* agent/genkey.c: s/to to/to/ * sm/*.c: s/failed to allocated/failed to allocate/ * sm/certlist.c, ./dirmngr/validate.c: s/should have not/should not have/ * g10/seskey.c: missing closing parenthesis * dirmngr/crlcache.c: s/may has/may have/ Consistency fix: * g10/gpg.c, kbx/kbxutil.c, sm/gpgsm.c: uppercase after Syntax * dirmngr/dirmngr_ldap: no period in Syntax * dirmngr/dirmngr-client.c: infinitive for option description: s/certificates are expected/expect certificates/
2011-12-07gpgsm: Add new validation model "steed".Werner Koch1-1/+16
* sm/gpgsm.h (VALIDATE_FLAG_STEED): New. * sm/gpgsm.c (gpgsm_parse_validation_model): Add model "steed". * sm/server.c (option_handler): Allow validation model "steed". * sm/certlist.c (gpgsm_cert_has_well_known_private_key): New. * sm/certchain.c (do_validate_chain): Handle the well-known-private-key attribute. Support the "steed" model. (gpgsm_validate_chain): Ditto. * sm/verify.c (gpgsm_verify): Return "steed" in the trust status line. * sm/keylist.c (list_cert_colon): Print the new 'w' flag. -- This is the first part of changes to implement the STEED proposal as described at http://g10code.com/steed.html . The idea for X.509 is not to use plain self-signed certificates but certificates signed by a dummy CA (i.e. one for which the private key is known). Having a single CA as an indication for the use of STEED might help other X.509 implementations to implement STEED.
2011-04-25Fix regression in gpg's mail address parsing.Werner Koch1-2/+2
Since 2009-12-08 gpg was not able to find email addresses indicated by a leading '<'. This happened when I merged the user id classification code of gpgsm and gpg.
2011-02-04Nuked almost all trailing white space.post-nuke-of-trailing-wsWerner Koch1-22/+21
We better do this once and for all instead of cluttering all future commits with diffs of trailing white spaces. In the majority of cases blank or single lines are affected and thus this change won't disturb a git blame too much. For future commits the pre-commit scripts checks that this won't happen again.
2009-12-08Unification of the search descriptor usage.Werner Koch1-2/+2
2008-10-20Marked all unused args on non-W32 platforms.Werner Koch1-0/+2
2008-03-20Fix a bug in the ambigious name detection.Werner Koch1-10/+22
Minor cleanups.
2008-02-13Always search missing certifcates using a running Dirmngr's cache.Werner Koch1-1/+1
2008-01-29Fixed a W32 crash in gpg2 when creating a new keyring.Werner Koch1-1/+1
Typo fixes.
2007-11-19Document --auto-issuer-key-retrieve.Werner Koch1-1/+1
2007-08-23Add new features to kbxutil.Werner Koch1-4/+61
Fixed bug 829 (can't encrypt if duplicated certs are in the keybox)
2007-08-10Implemented the chain model for X.509 validation.Werner Koch1-1/+2
2007-07-04Changed to GPLv3.Werner Koch1-10/+5
Removed intl/.
2006-10-18Preparing a releasegnupg-1.9.93Werner Koch1-3/+6
2006-09-06The big Assuan error code removal.Werner Koch1-6/+6
2006-06-20Updated FSF's address.Werner Koch1-1/+2
2005-07-27Removed directories which are only used by the 1.9 branchWerner Koch1-315/+0
2005-04-18* configure.ac: Require libksba 0.9.11.Werner Koch1-5/+35
sm/ * call-dirmngr.c (inq_certificate): Add new inquire SENDCERT_SKI. * certlist.c (gpgsm_find_cert): Add new arg KEYID and implement this filter. Changed all callers. * certchain.c (find_up_search_by_keyid): New helper. (find_up): Also try using the AKI.keyIdentifier. (find_up_external): Ditto.
2004-08-24Fixed typo in ocsp OID.Werner Koch1-1/+1
2004-08-18* certlist.c (gpgsm_cert_use_ocsp_p): New.Werner Koch1-1/+28
(cert_usage_p): Support it here. * call-dirmngr.c (gpgsm_dirmngr_isvalid): Use it here.
2004-04-26* call-agent.c (gpgsm_agent_pksign, gpgsm_agent_pkdecrypt)Werner Koch1-2/+2
(gpgsm_agent_genkey, gpgsm_agent_istrusted) (gpgsm_agent_marktrusted, gpgsm_agent_havekey) (gpgsm_agent_passwd): Add new arg CTRL and changed all callers. (start_agent): New arg CTRL. Send progress item when starting a new agent. * sign.c (gpgsm_get_default_cert, get_default_signer): New arg CTRL to be passed down to the agent function. * decrypt.c (prepare_decryption): Ditto. * certreqgen.c (proc_parameters, read_parameters): Ditto. * certcheck.c (gpgsm_create_cms_signature): Ditto.
2004-04-05* verify.c (gpgsm_verify): Print STATUS_NEWSIG for each signature.Werner Koch1-2/+3
* certchain.c (gpgsm_validate_chain) <gpgsm_cert_use_cer_p>: Do not just warn if a cert is not suitable; bail out immediately. * call-dirmngr.c (isvalid_status_cb): New. (unhexify_fpr): New. Taken from ../g10/call-agent.c (gpgsm_dirmngr_isvalid): Add new arg CTRL, changed caller to pass it thru. Detect need to check the respondert cert and do that. * certchain.c (gpgsm_validate_chain): Add new arg FLAGS. Changed all callers.
2004-03-16(main): Implemented --gpgconf-list.Werner Koch1-0/+1
2004-02-20* gpgsm.c (main): New option --debug-ignore-expiration.Werner Koch1-8/+74
* certchain.c (gpgsm_validate_chain): Use it here. * certlist.c (cert_usage_p): Apply extKeyUsage.
2004-02-17* gpgsm.c: New option --with-md5-fingerprint.Werner Koch1-1/+1
* keylist.c (list_cert_std): Print MD5 fpr. * gpgsm.c: New options --with-validation. * server.c (option_handler): New option "with-validation". * keylist.c (list_cert_std, list_internal_keys): New args CTRL and WITH_VALIDATION. Changed callers to set it. (list_external_cb, list_external_keys): Pass CTRL to the callback. (list_cert_colon): Add arg CTRL. Check validation if requested. * certchain.c (unknown_criticals, allowed_ca, check_cert_policy) (gpgsm_validate_chain): New args LISTMODE and FP. (do_list): New helper for info output. (find_up): New arg FIND_NEXT. (gpgsm_validate_chain): After a bad signature try again with other CA certificates. * import.c (print_imported_status): New arg NEW_CERT. Print additional STATUS_IMPORT_OK becuase that is what gpgme expects. (check_and_store): Always call above function after import. * server.c (get_status_string): Added STATUS_IMPORT_OK.
2003-12-17* server.c (gpgsm_server): Add arg DEFAULT_RECPLIST.Werner Koch1-23/+67
(cmd_encrypt): Add all enrypt-to marked certs to the list. * encrypt.c (gpgsm_encrypt): Check that real recipients are available. * gpgsm.c (main): Make the --encrypt-to and --no-encrypt-to options work. Pass the list of recients to gpgsm_server. * gpgsm.h (certlist_s): Add field IS_ENCRYPT_TO. (opt): Add NO_ENCRYPT_TO. * certlist.c (gpgsm_add_to_certlist): New arg IS_ENCRYPT_TO. Changed all callers and ignore duplicate entries. (is_cert_in_certlist): New. (gpgsm_add_cert_to_certlist): New.
2003-12-17Replaced deprecated type names.Werner Koch1-11/+11
* certdump.c (gpgsm_print_serial): Cleaned up cast use in strtoul. (gpgsm_dump_serial): Ditto. * decrypt.c (gpgsm_decrypt): Replaced ERR by RC.
2003-12-16* gpgsm.c (main): Set the prefixes for assuan logging.Werner Koch1-2/+2
* sign.c (gpgsm_sign): Add validation checks for the default certificate. * gpgsm.c: Add -k as alias for --list-keys and -K for --list-secret-keys.
2003-11-12Mainly changes to adjust for the changed KSBA API.Werner Koch1-3/+3
2003-08-05This commit was manufactured by cvs2svn to create branchRepo Admin1-0/+315
'GNUPG-1-9-BRANCH'.
2003-06-27Key generation and signing using the OpenPGP card does rudimentary work.Werner Koch1-1/+1
2003-06-03Make use of libgpg-errorWerner Koch1-15/+17
2002-10-19This commit was manufactured by cvs2svn to create branchRepo Admin1-313/+0
'GNUPG-1-9-BRANCH'.
2002-08-16* call-agent.c (learn_cb): Special treatment when the issuerWerner Koch1-2/+2
certificate is missing.
2002-08-09* gpgsm.c (emergency_cleanup): New.Werner Koch1-5/+22
(main): Initialize the signal handler. * sign.c (gpgsm_sign): Reset the hash context for subsequent signers and release it at the end.
2002-06-20* certlist.c (gpgsm_add_to_certlist): Fixed locating of aWerner Koch1-17/+84
certificate with the required key usage. * gpgsm.c (main): Fixed a segv when using --outfile without an argument. * keylist.c (print_capabilities): Also check for non-repudiation and data encipherment. * certlist.c (cert_usage_p): Test for signing and encryption was swapped. Add a case for certification usage, handle non-repudiation and data encipherment. (gpgsm_cert_use_cert_p): New. (gpgsm_add_to_certlist): Added a CTRL argument and changed all callers to pass it. * certpath.c (gpgsm_validate_path): Use it here to print a status message. Added a CTRL argument and changed all callers to pass it. * decrypt.c (gpgsm_decrypt): Print a status message for wrong key usage. * verify.c (gpgsm_verify): Ditto. * keydb.c (classify_user_id): Allow a colon delimited fingerprint.
2002-05-03* certpath.c (gpgsm_validate_path): Added EXPTIME arg and changedWerner Koch1-1/+1
all callers. * verify.c (gpgsm_verify): Tweaked usage of log_debug and log_error. Return EXPSIG status and add expiretime to VALIDSIG.
2002-04-12* certlist.c (cert_usable_p): New.Werner Koch1-1/+89
(gpgsm_cert_use_sign_p,gpgsm_cert_use_encrypt_p): New. (gpgsm_cert_use_verify_p,gpgsm_cert_use_decrypt_p): New. (gpgsm_add_to_certlist): Check the key usage. * sign.c (gpgsm_sign): Ditto. * verify.c (gpgsm_verify): Print a message wehn an unsuitable certificate was used. * decrypt.c (gpgsm_decrypt): Ditto * keylist.c (print_capabilities): Determine values from the cert.
2002-03-12* verify.c (gpgsm_verify): Detect certs-only message.Werner Koch1-0/+1
2002-02-07* certlist.c (gpgsm_add_to_certlist): Check that the specifiedWerner Koch1-2/+22
name identifies a certificate unambiguously. (gpgsm_find_cert): Ditto. * server.c (cmd_listkeys): Check that the data stream is available. (cmd_listsecretkeys): Ditto. (has_option): New. (cmd_sign): Fix ambiguousity in option recognition. * gpgsm.c (main): Enable --logger-fd. * encrypt.c (gpgsm_encrypt): Increased buffer size for better performance. * call-agent.c (gpgsm_agent_pksign): Check the S-Exp received from the agent. * keylist.c (list_cert_colon): Filter out control characters.
2002-01-15* import.c (gpgsm_import): Just do a basic cert check beforeWerner Koch1-2/+6
storing it. * certpath.c (gpgsm_basic_cert_check): New. * keydb.c (keydb_store_cert): New. * import.c (store_cert): Removed and change all caller to use the new function. * verify.c (store_cert): Ditto. * certlist.c (gpgsm_add_to_certlist): Validate the path * certpath.c (gpgsm_validate_path): Check the trust list. * call-agent.c (gpgsm_agent_istrusted): New.
2002-01-14* call-dirmngr.c (inq_certificate): Changed for new interface semantic.Werner Koch1-0/+28
* certlist.c (gpgsm_find_cert): New. DirMngr should now work. Remember that there is a --disable-crl-check option in gpgsm to be used when there is a problem with the dirmngr communication or you want to do faster tests.
2001-12-13* keylist.c (list_cert_colon): Print alternative names of subjectWerner Koch1-1/+1
and a few other values.
2001-12-11Implemented encryption in server mode.Werner Koch1-0/+88
Allow to specify a recipient on the commandline There is still a default hardwired recipient if none has been set.
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-14 18:38:25 +0000