aboutsummaryrefslogtreecommitdiffstats
path: root/sm/gpgsm.c (unfollow)
Commit message (Collapse)AuthorFilesLines
2006-09-18Added common certificates.Werner Koch1-3/+22
2006-09-13Various fixes and new features.Werner Koch1-45/+40
Enhanced gpg-connect-agent.
2006-09-06The big Assuan error code removal.Werner Koch1-2/+3
2006-08-29See ChangeLogsWerner Koch1-41/+67
2006-06-20Updated FSF's address.Werner Koch1-4/+12
2005-11-23Print a note that the software has not been approved for qualified signatures.Werner Koch1-0/+5
2005-07-27Removed directories which are only used by the 1.9 branchWerner Koch1-1458/+0
2005-07-21* gpgsm.c (main): New options --no-log-file and --debug-none.Werner Koch1-1/+7
* certreqgen.c (get_parameter, get_parameter_value): Add SEQ arg to allow enumeration. Changed all callers. (create_request): Process DNS and URI parameters. * gpgsm-gencert.sh: Reworked to allow for multiple email addresses as well as DNsanmes and URi. Present the parameter file before creating the certificate.
2005-04-21* configure.ac: Do not build gpg by default.Werner Koch1-0/+12
* gpgsm.c: New options --{enable,disable}-trusted-cert-crl-check. * certchain.c (gpgsm_validate_chain): Make use of it. * certchain.c (gpgsm_validate_chain): Check revocations even for expired certificates. This is required because on signature verification an expired key is fine whereas a revoked one is not. * gpgconf-comp.c: Add gpgsm option disable-trusted-cert-crl-check.
2005-04-18* configure.ac: Require libksba 0.9.11.Werner Koch1-1/+1
sm/ * call-dirmngr.c (inq_certificate): Add new inquire SENDCERT_SKI. * certlist.c (gpgsm_find_cert): Add new arg KEYID and implement this filter. Changed all callers. * certchain.c (find_up_search_by_keyid): New helper. (find_up): Also try using the AKI.keyIdentifier. (find_up_external): Ditto.
2004-12-22(set_binary): New.Werner Koch1-4/+36
(main, open_read, open_fwrite): Use it.
2004-12-21* preset-passphrase.c (preset_passphrase): Handle --passphrase.Werner Koch1-0/+3
* Makefile.am (gpg_preset_passphrase_LDADD): Reorder libs so that pwquery may use stuff from jnlib. Conditionally add -lwsock2 (gpg_protect_tool_LDADD): Ditto. * preset-passphrase.c (main): Use default_homedir(). (main) [W32]: Initialize sockets. * simple-pwquery.c (agent_open) [W32]: Implement for W32. (readline) [W32]: Use recv instead of read. (writen) [W32]: Use send instead of write. (my_stpcpy): Define a stpcpy replacement so that this file continues to be self-contained. (agent_send_all_options) [W32]: Don't call ttyname. * gnupg-badge-openpgp.eps, gnupg-badge-openpgp.jpg: New * gnupg.texi: Add a logo. * sysnotes.texi: New. * gpgsm.c (main): Use default_homedir(). (main) [W32]: Default to disabled CRL checks. * gpgconf-comp.c (get_config_pathname) [DOSISH]: Detect absolute pathnames with a drive letter.
2004-12-21* gpg-agent.c (main): Use default_homedir().Werner Koch1-9/+2
* protect-tool.c (main): Ditto. * signal.c (got_fatal_signal, got_usr_signal) (got_fatal_signal) [DOSISH]: Don't build. * simple-gettext.c: Include sysutils.h * homedir.c: New. * Makefile.am (libcommon_a_SOURCES): Add it. (EXTRA_DIST): Removed mkerror and mkerrtok. * gpgv.c, g10.c (main): Use default_hoemdir (). * scdaemon.c (main): Use default_homedir(). * gpgsm.c (main): Use default_homedir().
2004-12-18* configure.ac (AH_BOTTOM): Define EXEEXT_S.Werner Koch1-0/+1
* autogen.sh: Updated --build-w32 feature. * gpg-agent.c (main): Remove special Pth initialize. * w32-pth.c (pth_init): Reverse return values. Use TRUE and FALSE constants. (pth_kill, pth_mutex_acquire, pth_attr_set, pth_join, pth_cancel): Ditto. * scdaemon.c (main) [W32]: Remove special Pth initialize..
2004-12-15A whole bunch of changes to allow building for W32.Werner Koch1-3/+12
2004-12-06* exechelp.h, exechelp.c: New. Based on code from ../sm/import.c.Werner Koch1-0/+2
* gpgsm.c (run_protect_tool) [_WIN32]: Disabled. * import.c (popen_protect_tool): Simplified by making use of gnupg_spawn_process. (parse_p12): Likewise, using gnupg_wait_process. * export.c (popen_protect_tool): Ditto. (export_p12): Ditto.
2004-12-02First take on a W32 portWerner Koch1-21/+23
2004-11-23* b64enc.c: Include stdio.h and string.hWerner Koch1-1/+6
* gpgsm.c: New option --prefer-system-dirmngr. * call-dirmngr.c (start_dirmngr): Implement this option. * gpgconf-comp.c <dirmngr>: Add the proxy options. <gpgsm>: Add --prefer-system-daemon.
2004-10-01* gpgconf-comp.c (my_dgettext): Also switch codeset and directoryWerner Koch1-1/+1
for the other used domains (i.e. dirmngr). * gpgconf.c (main): Fixed translation markers.
2004-09-30* gpgv.c (i18n_init): Always use LC_ALL.Werner Koch1-5/+0
* kbxutil.c (i18n_init): Always use LC_ALL. * gpgsm.c (i18n_init): Always use LC_ALL. * certdump.c (gpgsm_format_name): Factored code out to .. (gpgsm_format_name2): .. new. (gpgsm_print_name): Factored code out to .. (gpgsm_print_name2): .. new. (print_dn_part): New arg TRANSLATE. Changed all callers. (print_dn_parts): Ditto. (gpgsm_format_keydesc): Do not translate the SUBJECT; we require it to stay UTF-8 but we still want to filter out bad control characters. * gpgconf.c (i18n_init): Always use LC_ALL.
2004-09-29Print warning when --default-key is used.Werner Koch1-0/+1
2004-08-17* import.c (check_and_store): Do a full validation ifWerner Koch1-2/+6
--with-validation is set. * certchain.c (gpgsm_basic_cert_check): Print more detailed error messages. * certcheck.c (do_encode_md): Partly support DSA. Add new arg PKALGO. Changed all callers to pass it. (pk_algo_from_sexp): New. tests/pkits: New directory
2004-08-06* gpgsm.c: New option --with-ephemeral-keys.Werner Koch1-0/+3
* keylist.c (list_internal_keys): Set it here. (list_cert_raw): And indicate those keys. Changed all our callers to pass the new arg HD through.
2004-06-06* configure.ac: Require libksba 0.9.7.Werner Koch1-5/+11
* certreqgen.c (get_parameter_uint, create_request): Create an extension for key usage when requested. * gpgsm.c (main): Install emergency_cleanup also as an atexit handler. * verify.c (gpgsm_verify): Removed the separate error code handling for KSBA. We use shared error codes anyway. * export.c (export_p12): Removed debugging code. * encrypt.c (gpgsm_encrypt): Put the session key in to secure memory.
2004-05-11* sysutils.c (disable_core_dumps): Only set the current limit.Werner Koch1-0/+5
(enable_core_dumps): New. * gpgsm.texi (Esoteric Options): Add --debug-allow-core-dump. * gpgsm.c: New option --debug-allow-core-dump. * gpgsm.h (opt): Add member CONFIG_FILENAME. * gpgsm.c (main): Use it here instead of the local var. * server.c (gpgsm_server): Print some additional information with the hello in verbose mode.
2004-05-11* gpgsm.h (opt): Add member CONFIG_FILENAME.Werner Koch1-7/+5
* gpgsm.c (main): Use it here instead of the local var. * server.c (gpgsm_server): Print some additional information with the hello in verbose mode.
2004-04-28* gpgsm.c: New command --keydb-clear-some-cert-flags.Werner Koch1-0/+11
* keydb.c (keydb_clear_some_cert_flags): New. (keydb_update_keyblock, keydb_set_flags): Change error code CONFLICT to NOT_LOCKED.
2004-04-26* scdaemon.c (main): Do the last change the usual way. This is soWerner Koch1-2/+4
that we can easily test for versioned config files above. * gpgsm.c (main) <gpgconf>: Do not use /dev/null as default config filename.
2004-04-26* call-agent.c (gpgsm_agent_pksign, gpgsm_agent_pkdecrypt)Werner Koch1-2/+2
(gpgsm_agent_genkey, gpgsm_agent_istrusted) (gpgsm_agent_marktrusted, gpgsm_agent_havekey) (gpgsm_agent_passwd): Add new arg CTRL and changed all callers. (start_agent): New arg CTRL. Send progress item when starting a new agent. * sign.c (gpgsm_get_default_cert, get_default_signer): New arg CTRL to be passed down to the agent function. * decrypt.c (prepare_decryption): Ditto. * certreqgen.c (proc_parameters, read_parameters): Ditto. * certcheck.c (gpgsm_create_cms_signature): Ditto.
2004-04-22(main): New commands --dump-keys, --dump-external-keys,Werner Koch1-0/+32
--dump-secret-keys.
2004-04-07* gpgsm.c: New option --force-crl-refresh.Werner Koch1-1/+6
* call-dirmngr.c (gpgsm_dirmngr_isvalid): Pass option to dirmngr.
2004-04-06* configure.ac: Require libgcrypt 1.1.94.Werner Koch1-10/+10
Introduce PACKAGE_GT and set it to gnupg2. * gpg-agent.c (main): Use new libgcrypt thread library register scheme. * Makevars (DOMAIN): Init from PACKAGE_GT
2004-03-17* gpg-agent.c (main) <gpgconf>: Fixed default value quoting.Werner Koch1-2/+2
* scdaemon.c (main) <gpgconf>: Fixed default value quoting. * gpgsm.c (main) <gpgconf>: Fixed default value quoting.
2004-03-16(main): Implemented --gpgconf-list.Werner Koch1-16/+44
2004-03-15(list_cert_colon): Hack to set the expired flag.Werner Koch1-2/+2
2004-02-21* keylist.c (list_internal_keys): Return error codes.Werner Koch1-1/+5
(list_external_keys, gpgsm_list_keys): Ditto. * server.c (do_listkeys): Ditto. * gpgsm.c (main): Display a key description for --passwd. * call-agent.c (gpgsm_agent_passwd): New arg DESC.
2004-02-20* gpgsm.c (main): New option --debug-ignore-expiration.Werner Koch1-1/+4
* certchain.c (gpgsm_validate_chain): Use it here. * certlist.c (cert_usage_p): Apply extKeyUsage.
2004-02-19* protect-tool.c: New options --have-cert and --prompt.Werner Koch1-0/+10
(export_p12_file): Read a certificate from STDIN and pass it to p12_build. Detect a keygrip and construct the filename in that case. Unprotcet a key if needed. Print error messages for key formats we can't handle. (release_passphrase): New. (get_passphrase): New arg PROMPTNO. Return the allocated string. Changed all callers. * minip12.c: Revamped the build part. (p12_build): New args CERT and CERTLEN. * simple-pwquery.c (agent_open): Don't mangle INFOSTR. * export.c (export_p12, popen_protect_tool) (gpgsm_p12_export): New. * gpgsm.c (main): New command --export-secret-key-p12.
2004-02-18* gpgsm.c (set_debug): Set the new --debug-level flags.Werner Koch1-49/+130
(main): New option --gpgconf-list. (main): Do not setup -u and -r keys when not required. (main): Setup the used character set. * keydb.c (keydb_add_resource): Print a hint to start the gpg-agent.
2004-02-17* gpgsm.c: New option --with-md5-fingerprint.Werner Koch1-2/+10
* keylist.c (list_cert_std): Print MD5 fpr. * gpgsm.c: New options --with-validation. * server.c (option_handler): New option "with-validation". * keylist.c (list_cert_std, list_internal_keys): New args CTRL and WITH_VALIDATION. Changed callers to set it. (list_external_cb, list_external_keys): Pass CTRL to the callback. (list_cert_colon): Add arg CTRL. Check validation if requested. * certchain.c (unknown_criticals, allowed_ca, check_cert_policy) (gpgsm_validate_chain): New args LISTMODE and FP. (do_list): New helper for info output. (find_up): New arg FIND_NEXT. (gpgsm_validate_chain): After a bad signature try again with other CA certificates. * import.c (print_imported_status): New arg NEW_CERT. Print additional STATUS_IMPORT_OK becuase that is what gpgme expects. (check_and_store): Always call above function after import. * server.c (get_status_string): Added STATUS_IMPORT_OK.
2004-02-13* encrypt.c (init_dek): Check for too weak algorithms.Werner Koch1-3/+12
* import.c (parse_p12, popen_protect_tool): New. * base64.c (gpgsm_create_reader): New arg ALLOW_MULTI_PEM. Changed all callers. (base64_reader_cb): Handle it here. (gpgsm_reader_eof_seen): New. (base64_reader_cb): Set a flag for EOF. (simple_reader_cb): Ditto.
2004-02-12* Makefile.am (AM_CPPFLAGS): Pass directory constants via -D; thisWerner Koch1-1/+1
will allow to override directory names at make time.
2003-12-17* server.c (gpgsm_server): Add arg DEFAULT_RECPLIST.Werner Koch1-24/+44
(cmd_encrypt): Add all enrypt-to marked certs to the list. * encrypt.c (gpgsm_encrypt): Check that real recipients are available. * gpgsm.c (main): Make the --encrypt-to and --no-encrypt-to options work. Pass the list of recients to gpgsm_server. * gpgsm.h (certlist_s): Add field IS_ENCRYPT_TO. (opt): Add NO_ENCRYPT_TO. * certlist.c (gpgsm_add_to_certlist): New arg IS_ENCRYPT_TO. Changed all callers and ignore duplicate entries. (is_cert_in_certlist): New. (gpgsm_add_cert_to_certlist): New.
2003-12-17Replaced deprecated type names.Werner Koch1-1/+1
* certdump.c (gpgsm_print_serial): Cleaned up cast use in strtoul. (gpgsm_dump_serial): Ditto. * decrypt.c (gpgsm_decrypt): Replaced ERR by RC.
2003-12-16* gpgsm.c (main): Set the prefixes for assuan logging.Werner Koch1-3/+6
* sign.c (gpgsm_sign): Add validation checks for the default certificate. * gpgsm.c: Add -k as alias for --list-keys and -K for --list-secret-keys.
2003-12-16* encrypt.c (init_dek): Use gry_create_nonce for the IV; there isWerner Koch1-2/+2
not need for real strong random here and it even better protect the random bits used for the key.
2003-12-01* gpgsm.c, gpgsm.h: New options --{enable,disable}-ocsp.Werner Koch1-0/+14
(gpgsm_init_default_ctrl): Set USE_OCSP to the default value. * certchain.c (gpgsm_validate_chain): Handle USE_OCSP. * call-dirmngr.c (gpgsm_dirmngr_isvalid): Add arg USE_OCSP and proceed accordingly.
2003-10-31* verify.c (strtimestamp_r, gpgsm_verify):Werner Koch1-1/+4
* sign.c (gpgsm_sign): * keylist.c (print_time, list_cert_std, list_cert_colon): * certdump.c (gpgsm_print_time, gpgsm_dump_time, gpgsm_dump_cert): * certchain.c (gpgsm_validate_chain): Changed to use ksba_isotime_t.
2003-08-05This commit was manufactured by cvs2svn to create branchRepo Admin1-0/+1458
'GNUPG-1-9-BRANCH'.
2003-07-29Remove leftover cruftWerner Koch1-1/+1
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-22 22:47:35 +0000