aboutsummaryrefslogtreecommitdiffstats
path: root/sm/certpath.c (follow)
Commit message (Collapse)AuthorAgeFilesLines
* *** empty log message ***Werner Koch2002-08-161-773/+0
|
* * call-agent.c (learn_cb): Special treatment when the issuerWerner Koch2002-08-161-16/+16
| | | | | certificate is missing.
* * certpath.c (check_cert_policy): Don't use log_error to print aWerner Koch2002-07-021-2/+7
| | | | | warning.
* * keydb.c (keydb_store_cert): Add optional ar EXISTED and changedWerner Koch2002-07-021-1/+1
| | | | | | | | | | | | all callers. * call-agent.c (learn_cb): Print info message only for real imports. * import.c (gpgsm_import): Moved duplicated code to ... (check_and_store): new function. Added magic to import the entire chain. Print status only for real imports and moved printing code to .. (print_imported_status): New.
* * gpgsm.c: New option --auto-issuer-key-retrieve.Werner Koch2002-06-291-2/+80
| | | | | | | | | | | | | | | | * certpath.c (find_up): Try to retrieve an issuer key from an external source and from the ephemeral key DB. (find_up_store_certs_cb): New. * keydb.c (keydb_set_ephemeral): Does now return the old state. Call the backend only when required. * call-dirmngr.c (start_dirmngr): Use GNUPG_DEFAULT_DIRMNGR. (lookup_status_cb): Issue status only when CTRL is not NULL. (gpgsm_dirmngr_lookup): Document that CTRL is optional. * call-agent.c (start_agent): Use GNUPG_DEFAULT_AGENT.
* * server.c (cmd_recipient): Add more reason codes.Werner Koch2002-06-281-1/+1
|
* * gpgsm.c, gpgsm.h: New option --debug-no-path-validation.Werner Koch2002-06-241-2/+2
| | | | | | | | | * certpath.c (gpgsm_validate_path): Use it here instead of the debug flag hack. * certpath.c (check_cert_policy): Return No_Policy_Match if the policy file could not be opened.
* * certlist.c (gpgsm_add_to_certlist): Fixed locating of aWerner Koch2002-06-201-1/+9
| | | | | | | | | | | | | | | | | | | | | | | certificate with the required key usage. * gpgsm.c (main): Fixed a segv when using --outfile without an argument. * keylist.c (print_capabilities): Also check for non-repudiation and data encipherment. * certlist.c (cert_usage_p): Test for signing and encryption was swapped. Add a case for certification usage, handle non-repudiation and data encipherment. (gpgsm_cert_use_cert_p): New. (gpgsm_add_to_certlist): Added a CTRL argument and changed all callers to pass it. * certpath.c (gpgsm_validate_path): Use it here to print a status message. Added a CTRL argument and changed all callers to pass it. * decrypt.c (gpgsm_decrypt): Print a status message for wrong key usage. * verify.c (gpgsm_verify): Ditto. * keydb.c (classify_user_id): Allow a colon delimited fingerprint.
* * sign.c (hash_and_copy_data): New.Werner Koch2002-06-121-6/+33
| | | | | | | | | | | (gpgsm_sign): Implemented normal (non-detached) signatures. * gpgsm.c (main): Ditto. * certpath.c (gpgsm_validate_path): Special error handling for no policy match. * configure.ac (NEED_LIBKSBA_VERSION): We need 0.4.3 now.
* sm/Werner Koch2002-05-141-1/+1
| | | | | | | | | | | | | | * gpgsm.c: New option --faked-system-time * sign.c (gpgsm_sign): And use it here. * certpath.c (gpgsm_validate_path): Ditto. common/ * gettime.c: New. agent/ * cache.c (housekeeping, agent_put_cache): Use our time() wrapper. / * doc/: New * configure.ac, Makefile.am: Added doc/
* * certpath.c (gpgsm_validate_path): Added EXPTIME arg and changedWerner Koch2002-05-031-6/+22
| | | | | | | all callers. * verify.c (gpgsm_verify): Tweaked usage of log_debug and log_error. Return EXPSIG status and add expiretime to VALIDSIG.
* * certpath.c (find_up): New to use the authorithKeyIdentifier.Werner Koch2002-04-151-4/+31
| | | | | Use it in all other functions to locate the signing cert..
* * certpath.c (gpgsm_walk_cert_chain): Be a bit more silent onWerner Koch2002-03-281-1/+4
| | | | | common errors.
* * decrypt.c (gpgsm_decrypt): Allow multiple recipients.Werner Koch2002-03-131-1/+4
|
* * verify.c (gpgsm_verify): Detect certs-only message.Werner Koch2002-03-121-2/+14
|
* * server.c (option_handler): Allow to use -2 for "send all certsWerner Koch2002-02-251-0/+18
| | | | | | | except the root cert". * sign.c (add_certificate_list): Implement it here. * certpath.c (gpgsm_is_root_cert): New.
* * certpath.c (check_cert_policy): New.Werner Koch2002-02-191-3/+119
| | | | | | | | (gpgsm_validate_path): And call it from here. * gpgsm.c (main): New options --policy-file, --disable-policy-checks and --enable-policy-checks. * gpgsm.h (opt): Added policy_file, no_policy_checks.
* * certpath.c (gpgsm_validate_path): Ask the agent to add theWerner Koch2002-02-181-7/+17
| | | | | | certificate into the trusted list. * call-agent.c (gpgsm_agent_marktrusted): New.
* * gpgsm.c (main): Disable core dumps.Werner Koch2002-01-251-0/+61
| | | | | | | | | | | | | * sign.c (add_certificate_list): New. (gpgsm_sign): Add the certificates to the CMS object. * certpath.c (gpgsm_walk_cert_chain): New. * gpgsm.h (server_control_s): Add included_certs. * gpgsm.c: Add option --include-certs. (gpgsm_init_default_ctrl): New. (main): Call it. * server.c (gpgsm_server): Ditto. (option_handler): Support --include-certs.
* * certpath.c (gpgsm_validate_path): Print the DN of a missing issuer.Werner Koch2002-01-231-2/+18
| | | | | | * certdump.c (gpgsm_dump_string): New. (print_dn): Replaced by above.
* * certpath.c (unknown_criticals): New.Werner Koch2002-01-221-9/+114
| | | | | | | (allowed_ca): New. (gpgsm_validate_path): Check validity, CA attribute, path length and unknown critical extensions.
* * import.c (gpgsm_import): Just do a basic cert check beforeWerner Koch2002-01-151-9/+116
| | | | | | | | | | | | | | | | storing it. * certpath.c (gpgsm_basic_cert_check): New. * keydb.c (keydb_store_cert): New. * import.c (store_cert): Removed and change all caller to use the new function. * verify.c (store_cert): Ditto. * certlist.c (gpgsm_add_to_certlist): Validate the path * certpath.c (gpgsm_validate_path): Check the trust list. * call-agent.c (gpgsm_agent_istrusted): New.
* * call-dirmngr.c: New.Werner Koch2002-01-111-0/+31
| | | | | | | * certpath.c (gpgsm_validate_path): Check the CRL here. * fingerprint.c (gpgsm_get_certid): New. * gpgsm.c: New options --dirmngr-program and --disable-crl-checks.
* * keylist.c (list_cert_colon): Print alternative names of subjectWerner Koch2001-12-131-2/+2
| | | | | and a few other values.
* Added new directory common to enable sharing of some code and errorWerner Koch2001-11-241-6/+6
| | | | | | numbers between gpg, gpgsm and gpg-agent. Move some files and code to there.
* Base code for gpgsm --verify does workWerner Koch2001-11-161-4/+3
|
* We have reached a state where we are able to import certs andWerner Koch2001-11-131-0/+131
check the certification path.
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-13 07:09:02 +0000