| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
|
| |
Make self-check interval larger
|
| |
|
|
|
|
|
| |
A couple of minor changes.
|
| |
|
|
|
|
|
|
| |
Support Camellia for testing.
More audit stuff.
|
|
|
|
|
| |
Removed intl/.
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
doc/
* gpg.texi (GPG Configuration): Document envvar LANGUAGE.
(GPG Configuration Options): Document show-primary-uid-only.
g10/
* gpg.c (main): Add verify option show-primary-uid-only.
* options.h (VERIFY_SHOW_PRIMARY_UID_ONLY): New.
* mainproc.c (check_sig_and_print): Implement it.
* encr-data.c (decrypt_data): Correctly test for unknown algorithm.
* import.c (check_prefs): Ditto.
* keyedit.c (show_prefs): Ditto.
* mainproc.c (proc_symkey_enc): Ditto.
|
|
|
|
|
| |
* encrypt.c (encrypt_dek): Release S_CIPH.
|
| |
|
| |
|
|
|
|
|
|
|
| |
char * vs. unsigned char * warnings. The GNU coding standards used to
say that these mismatches are okay and better than a bunch of casts.
Obviously this has changed now.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* certreqgen.c (get_parameter_uint, create_request): Create
an extension for key usage when requested.
* gpgsm.c (main): Install emergency_cleanup also as an atexit
handler.
* verify.c (gpgsm_verify): Removed the separate error code
handling for KSBA. We use shared error codes anyway.
* export.c (export_p12): Removed debugging code.
* encrypt.c (gpgsm_encrypt): Put the session key in to secure memory.
|
|
|
|
|
|
|
|
|
|
|
|
| |
* import.c (parse_p12, popen_protect_tool): New.
* base64.c (gpgsm_create_reader): New arg ALLOW_MULTI_PEM.
Changed all callers.
(base64_reader_cb): Handle it here.
(gpgsm_reader_eof_seen): New.
(base64_reader_cb): Set a flag for EOF.
(simple_reader_cb): Ditto.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
(cmd_encrypt): Add all enrypt-to marked certs to the list.
* encrypt.c (gpgsm_encrypt): Check that real recipients are
available.
* gpgsm.c (main): Make the --encrypt-to and --no-encrypt-to
options work. Pass the list of recients to gpgsm_server.
* gpgsm.h (certlist_s): Add field IS_ENCRYPT_TO.
(opt): Add NO_ENCRYPT_TO.
* certlist.c (gpgsm_add_to_certlist): New arg IS_ENCRYPT_TO.
Changed all callers and ignore duplicate entries.
(is_cert_in_certlist): New.
(gpgsm_add_cert_to_certlist): New.
|
|
|
|
|
|
|
|
| |
* certdump.c (gpgsm_print_serial): Cleaned up cast use in strtoul.
(gpgsm_dump_serial): Ditto.
* decrypt.c (gpgsm_decrypt): Replaced ERR by RC.
|
|
|
|
|
|
| |
not need for real strong random here and it even better protect
the random bits used for the key.
|
| |
|
|
|
|
|
|
|
| |
* encrypt.c (encode_session_key): Allocate enough space. Cast key
byte to unsigned char to prevent sign extension.
(encrypt_dek): Check return value before error.
|
|
|
|
|
| |
* encrypt.c (encode_session_key): Use new Libgcrypt interface.
|
|
|
|
| |
'GNUPG-1-9-BRANCH'.
|
|
|
|
| |
'GNUPG-1-9-BRANCH'.
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
* sign.c (gpgsm_get_default_cert): New.
(get_default_signer): Use the new function if local_user is not
set otherwise used that value.
* encrypt.c (get_default_recipient): Removed.
(gpgsm_encrypt): Use gpgsm_get_default_cert.
* verify.c (gpgsm_verify): Better error text for a bad signature
found by comparing the hashs.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
name identifies a certificate unambiguously.
(gpgsm_find_cert): Ditto.
* server.c (cmd_listkeys): Check that the data stream is available.
(cmd_listsecretkeys): Ditto.
(has_option): New.
(cmd_sign): Fix ambiguousity in option recognition.
* gpgsm.c (main): Enable --logger-fd.
* encrypt.c (gpgsm_encrypt): Increased buffer size for better
performance.
* call-agent.c (gpgsm_agent_pksign): Check the S-Exp received from
the agent.
* keylist.c (list_cert_colon): Filter out control characters.
|
|
|
|
|
|
|
|
| |
* server.c (cmd_genkey): New.
* certreqgen.c: New. The parameter handling code has been taken
from gnupg/g10/keygen.c version 1.0.6.
* call-agent.c (gpgsm_agent_genkey): New.
|
|
|
|
|
| |
libgcrypt-1.1.5 is required (cvs or tarball)
|
|
|
|
|
| |
* sign.c (gpgsm_sign): Write a STATUS_SIG_CREATED.
|
| |
|
| |
|
|
|
|
|
|
| |
Allow to specify a recipient on the commandline
There is still a default hardwired recipient if none has been set.
|
| |
|
| |
|
|
of direct creation of ksba_reader/writer.
* gpgsm.c (main): Set ctrl.auto_encoding unless --no-armor is used.
This way we can feed PEM encoded stuff to --verify.
|