aboutsummaryrefslogtreecommitdiffstats
path: root/sm/gpgsm.c (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* * gpgsm.c (set_debug): Set the new --debug-level flags.Werner Koch2004-02-181-49/+130
| | | | | | | | | | (main): New option --gpgconf-list. (main): Do not setup -u and -r keys when not required. (main): Setup the used character set. * keydb.c (keydb_add_resource): Print a hint to start the gpg-agent.
* * gpgsm.c: New option --with-md5-fingerprint.Werner Koch2004-02-171-2/+10
| | | | | | | | | | | | | | | | | | | | | | | * keylist.c (list_cert_std): Print MD5 fpr. * gpgsm.c: New options --with-validation. * server.c (option_handler): New option "with-validation". * keylist.c (list_cert_std, list_internal_keys): New args CTRL and WITH_VALIDATION. Changed callers to set it. (list_external_cb, list_external_keys): Pass CTRL to the callback. (list_cert_colon): Add arg CTRL. Check validation if requested. * certchain.c (unknown_criticals, allowed_ca, check_cert_policy) (gpgsm_validate_chain): New args LISTMODE and FP. (do_list): New helper for info output. (find_up): New arg FIND_NEXT. (gpgsm_validate_chain): After a bad signature try again with other CA certificates. * import.c (print_imported_status): New arg NEW_CERT. Print additional STATUS_IMPORT_OK becuase that is what gpgme expects. (check_and_store): Always call above function after import. * server.c (get_status_string): Added STATUS_IMPORT_OK.
* * encrypt.c (init_dek): Check for too weak algorithms.Werner Koch2004-02-131-3/+12
| | | | | | | | | | | | * import.c (parse_p12, popen_protect_tool): New. * base64.c (gpgsm_create_reader): New arg ALLOW_MULTI_PEM. Changed all callers. (base64_reader_cb): Handle it here. (gpgsm_reader_eof_seen): New. (base64_reader_cb): Set a flag for EOF. (simple_reader_cb): Ditto.
* * Makefile.am (AM_CPPFLAGS): Pass directory constants via -D; thisWerner Koch2004-02-121-1/+1
| | | | | will allow to override directory names at make time.
* * server.c (gpgsm_server): Add arg DEFAULT_RECPLIST.Werner Koch2003-12-171-24/+44
| | | | | | | | | | | | | | | (cmd_encrypt): Add all enrypt-to marked certs to the list. * encrypt.c (gpgsm_encrypt): Check that real recipients are available. * gpgsm.c (main): Make the --encrypt-to and --no-encrypt-to options work. Pass the list of recients to gpgsm_server. * gpgsm.h (certlist_s): Add field IS_ENCRYPT_TO. (opt): Add NO_ENCRYPT_TO. * certlist.c (gpgsm_add_to_certlist): New arg IS_ENCRYPT_TO. Changed all callers and ignore duplicate entries. (is_cert_in_certlist): New. (gpgsm_add_cert_to_certlist): New.
* Replaced deprecated type names.Werner Koch2003-12-171-1/+1
| | | | | | | | * certdump.c (gpgsm_print_serial): Cleaned up cast use in strtoul. (gpgsm_dump_serial): Ditto. * decrypt.c (gpgsm_decrypt): Replaced ERR by RC.
* * gpgsm.c (main): Set the prefixes for assuan logging.Werner Koch2003-12-161-3/+6
| | | | | | | | | * sign.c (gpgsm_sign): Add validation checks for the default certificate. * gpgsm.c: Add -k as alias for --list-keys and -K for --list-secret-keys.
* * encrypt.c (init_dek): Use gry_create_nonce for the IV; there isWerner Koch2003-12-161-2/+2
| | | | | | not need for real strong random here and it even better protect the random bits used for the key.
* * gpgsm.c, gpgsm.h: New options --{enable,disable}-ocsp.Werner Koch2003-12-011-0/+14
| | | | | | | | (gpgsm_init_default_ctrl): Set USE_OCSP to the default value. * certchain.c (gpgsm_validate_chain): Handle USE_OCSP. * call-dirmngr.c (gpgsm_dirmngr_isvalid): Add arg USE_OCSP and proceed accordingly.
* * verify.c (strtimestamp_r, gpgsm_verify):Werner Koch2003-10-311-1/+4
| | | | | | | | | | | * sign.c (gpgsm_sign): * keylist.c (print_time, list_cert_std, list_cert_colon): * certdump.c (gpgsm_print_time, gpgsm_dump_time, gpgsm_dump_cert): * certchain.c (gpgsm_validate_chain): Changed to use ksba_isotime_t.
* This commit was manufactured by cvs2svn to create branchRepo Admin2003-08-051-0/+1458
| | | | 'GNUPG-1-9-BRANCH'.
* This commit was manufactured by cvs2svn to create branchRepo Admin2002-10-191-1388/+0
| | | | 'GNUPG-1-9-BRANCH'.
* * gpgsm.c (main): Disable the internal libgcrypt locking.Werner Koch2002-09-031-1/+5
|
* * gpgsm.c (main): Use the log file only in server mode.Werner Koch2002-08-201-9/+2
| | | | | | | | | | * import.c (print_imported_summary): New. (check_and_store): Update the counters, take new argument. (import_one): Factored out core of gpgsm_import. (gpgsm_import): Print counters. (gpgsm_import_files): New. * gpgsm.c (main): Use the new function for import.
* * call-agent.c (learn_cb): Special treatment when the issuerWerner Koch2002-08-161-6/+5
| | | | | certificate is missing.
* Minor changes for gettextNEWPG-0-3-10Werner Koch2002-08-101-1/+1
|
* * gpgsm.c (emergency_cleanup): New.Werner Koch2002-08-091-96/+47
| | | | | | | | (main): Initialize the signal handler. * sign.c (gpgsm_sign): Reset the hash context for subsequent signers and release it at the end.
* * delete.c: New.Werner Koch2002-07-221-8/+5
| | | | | | | | | | * gpgsm.c: Made --delete-key work. * server.c (cmd_delkeys): New. (register_commands): New command DELKEYS. * decrypt.c (gpgsm_decrypt): Print a convenience note when RC2 is used and a STATUS_ERROR with the algorithm oid.
* * server.c (gpgsm_status2): Insert a blank between all optionalWerner Koch2002-07-031-8/+8
| | | | | | | | arguments when using assuan. * server.c (cmd_recipient): No more need for extra blank in constants. * import.c (print_imported_status): Ditto. * gpgsm.c (main): Ditto.
* * call-dirmngr.c (gpgsm_dirmngr_isvalid): print status of dirmngrWerner Koch2002-07-021-1/+8
| | | | | | | | call in very verbose mode. * gpgsm.c (main): Use the same error codes for STATUS_INV_RECP as with the server mode.
* * gpgsm.c: New option --auto-issuer-key-retrieve.Werner Koch2002-06-291-2/+8
| | | | | | | | | | | | | | | | * certpath.c (find_up): Try to retrieve an issuer key from an external source and from the ephemeral key DB. (find_up_store_certs_cb): New. * keydb.c (keydb_set_ephemeral): Does now return the old state. Call the backend only when required. * call-dirmngr.c (start_dirmngr): Use GNUPG_DEFAULT_DIRMNGR. (lookup_status_cb): Issue status only when CTRL is not NULL. (gpgsm_dirmngr_lookup): Document that CTRL is optional. * call-agent.c (start_agent): Use GNUPG_DEFAULT_AGENT.
* * gpgsm.c (main): Use GNUPG_DEFAULT_HOMEDIR constant.Werner Koch2002-06-271-3/+1
| | | | | | | | | | | | | * call-agent.c (start_agent): Create and pass the list of FD to keep in the child to assuan. * call-dirmngr.c (start_dirmngr): Ditto. * scdaemon.c (main): Use GNUPG_DEFAULT_HOMEDIR constant. * assuan-pipe-connect.c (assuan_pipe_connect): No special handling for the log_fd and stderr. Connect stderr to /dev/null if it should not be retained.
* * import.c (gpgsm_import): Print an STATUS_IMPORTED.Werner Koch2002-06-261-1/+1
| | | | | * gpgsm.c: --debug-no-path-validation does not take an argument.
* * certdump.c (print_dn_part): Always print a leading slash,Werner Koch2002-06-251-1/+0
| | | | | | | | | | | removed NEED_DELIM arg and changed caller. * export.c (gpgsm_export): Print LFs to FP and not stdout. (print_short_info): Ditto. Make use of gpgsm_print_name. * server.c (cmd_export): Use output-fd instead of data lines; this was actually the specified way.
* * gpgsm.c, gpgsm.h: New option --debug-no-path-validation.Werner Koch2002-06-241-0/+4
| | | | | | | | | * certpath.c (gpgsm_validate_path): Use it here instead of the debug flag hack. * certpath.c (check_cert_policy): Return No_Policy_Match if the policy file could not be opened.
* * certlist.c (gpgsm_add_to_certlist): Fixed locating of aWerner Koch2002-06-201-2/+2
| | | | | | | | | | | | | | | | | | | | | | | certificate with the required key usage. * gpgsm.c (main): Fixed a segv when using --outfile without an argument. * keylist.c (print_capabilities): Also check for non-repudiation and data encipherment. * certlist.c (cert_usage_p): Test for signing and encryption was swapped. Add a case for certification usage, handle non-repudiation and data encipherment. (gpgsm_cert_use_cert_p): New. (gpgsm_add_to_certlist): Added a CTRL argument and changed all callers to pass it. * certpath.c (gpgsm_validate_path): Use it here to print a status message. Added a CTRL argument and changed all callers to pass it. * decrypt.c (gpgsm_decrypt): Print a status message for wrong key usage. * verify.c (gpgsm_verify): Ditto. * keydb.c (classify_user_id): Allow a colon delimited fingerprint.
* * call-agent.c (learn_cb): Use log_info instead of log_error onWerner Koch2002-06-191-1/+11
| | | | | | | | | | | | successful import. * keydb.c (keydb_set_ephemeral): New. (keydb_store_cert): New are ephemeral, changed all callers. * keylist.c (list_external_cb): Store cert as ephemeral. * export.c (gpgsm_export): Kludge to export epehmeral certificates. * gpgsm.c (main): New command --list-external-keys.
* * gpgsm.c (main): New option --log-file.Werner Koch2002-06-131-0/+11
|
* * gpgsm.c (open_fwrite): New.Werner Koch2002-06-121-10/+56
| | | | | (main): Allow --output for --verify.
* * sign.c (hash_and_copy_data): New.Werner Koch2002-06-121-5/+6
| | | | | | | | | | | (gpgsm_sign): Implemented normal (non-detached) signatures. * gpgsm.c (main): Ditto. * certpath.c (gpgsm_validate_path): Special error handling for no policy match. * configure.ac (NEED_LIBKSBA_VERSION): We need 0.4.3 now.
* * gpgsm.c (main): New command --list-sigsNEWPG-0-3-7Werner Koch2002-06-041-3/+6
| | | | | | | * keylist.c (list_cert_std): New. Use it whenever colon mode is not used. (list_cert_chain): New.
* * gpgsm.c (main): Don't print the "go ahead" message for anWerner Koch2002-05-311-1/+1
| | | | | invalid command.
* * keylist.c (list_internal_keys): Renamed from gpgsm_list_keys.Werner Koch2002-05-211-2/+2
| | | | | | | | | | | (list_external_keys): New. (gpgsm_list_keys): Dispatcher for above. * call-dirmngr.c (lookup_cb,pattern_from_strlist) (gpgsm_dirmngr_lookup): New. * server.c (option_handler): Handle new option --list-mode. (do_listkeys): Handle options and actually use the mode argument. (get_status_string): New code TRUNCATED.
* sm/Werner Koch2002-05-141-3/+15
| | | | | | | | | | | | | | * gpgsm.c: New option --faked-system-time * sign.c (gpgsm_sign): And use it here. * certpath.c (gpgsm_validate_path): Ditto. common/ * gettime.c: New. agent/ * cache.c (housekeeping, agent_put_cache): Use our time() wrapper. / * doc/: New * configure.ac, Makefile.am: Added doc/
* 2002-04-25 Marcus Brinkmann <[email protected]>Marcus Brinkmann2002-04-241-5/+5
| | | | | | | | * server.c (option_handler): Accept display, ttyname, ttytype, lc_ctype and lc_messages options. * gpgsm.c (main): Allocate memory for these options. * gpgsm.h (struct opt): Make corresponding members non-const.
* 2002-04-24 Marcus Brinkmann <[email protected]>Marcus Brinkmann2002-04-241-0/+17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * configure.ac: Check for locale.h. agent/ 2002-04-24 Marcus Brinkmann <[email protected]> * agent.h (struct opt): Add members display, ttyname, ttytype, lc_ctype, and lc_messages. * gpg-agent.c (enum cmd_and_opt_values): Add oDisplay, oTTYname, oTTYtype, oLCctype, and LCmessages. (main): Handle these options. * command.c (option_handler): New function. (register_commands): Register option handler. * query.c (start_pinentry): Pass the various display and tty options to the pinentry. sm/ 2002-04-24 Marcus Brinkmann <[email protected]> * gpgsm.h (struct opt): New members display, ttyname, ttytype, lc_ctype, lc_messages. * gpgsm.c (enum cmd_and_opt_values): New members oDisplay, oTTYname, oTTYtype, oLCctype, oLCmessages. (opts): New entries for these options. (main): Handle these new options. * call-agent.c (start_agent): Set the various display and tty parameter after resetting.
* released 0.3.5NEWPG-0-3-5Werner Koch2002-04-151-1/+1
|
* * gpgsm.c (main): Check ksba version.Werner Koch2002-04-151-2/+7
|
* * export.c: New.Werner Koch2002-03-211-4/+9
| | | | | | * gpgsm.c: Add command --export. * server.c (cmd_export): New.
* Doc fixes, moved some fizmes to TODO, fixed minor bugs.Werner Koch2002-03-181-2/+2
|
* * verify.c (gpgsm_verify): Detect certs-only message.Werner Koch2002-03-121-3/+9
|
* sm/Werner Koch2002-03-061-1/+27
| | | | | | | | | | | | | | | | | * gpgsm.c: New command --learn-card * call-agent.c (learn_cb,gpgsm_agent_learn): New. * gpgsm.c (main): Print error messages for non-implemented commands. agent/ * learncard.c: New. * divert-scd.c (ask_for_card): The serial number is binary so convert it to hex here. * findkey.c (agent_write_private_key): New. * genkey.c (store_key): And use it here. scd/ * pkdecrypt.c (agent_pkdecrypt): Changed the way the diversion is done. * divert-scd.c (divert_pkdecrypt): Changed interface and implemented it.
* * gpgsm.c, gpgsm.h: Add local_user.Werner Koch2002-03-051-0/+1
| | | | | | | | | | | * sign.c (gpgsm_get_default_cert): New. (get_default_signer): Use the new function if local_user is not set otherwise used that value. * encrypt.c (get_default_recipient): Removed. (gpgsm_encrypt): Use gpgsm_get_default_cert. * verify.c (gpgsm_verify): Better error text for a bad signature found by comparing the hashs.
* Minor fixes; about to release 0.3.1NEWPG-0-3-1Werner Koch2002-03-041-1/+1
|
* * server.c (option_handler): Allow to use -2 for "send all certsWerner Koch2002-02-251-1/+1
| | | | | | | except the root cert". * sign.c (add_certificate_list): Implement it here. * certpath.c (gpgsm_is_root_cert): New.
* * certpath.c (check_cert_policy): New.Werner Koch2002-02-191-4/+27
| | | | | | | | (gpgsm_validate_path): And call it from here. * gpgsm.c (main): New options --policy-file, --disable-policy-checks and --enable-policy-checks. * gpgsm.h (opt): Added policy_file, no_policy_checks.
* * certlist.c (gpgsm_add_to_certlist): Check that the specifiedWerner Koch2002-02-071-3/+3
| | | | | | | | | | | | | | | | name identifies a certificate unambiguously. (gpgsm_find_cert): Ditto. * server.c (cmd_listkeys): Check that the data stream is available. (cmd_listsecretkeys): Ditto. (has_option): New. (cmd_sign): Fix ambiguousity in option recognition. * gpgsm.c (main): Enable --logger-fd. * encrypt.c (gpgsm_encrypt): Increased buffer size for better performance. * call-agent.c (gpgsm_agent_pksign): Check the S-Exp received from the agent. * keylist.c (list_cert_colon): Filter out control characters.
* * call-agent.c (gpgsm_agent_havekey): New.Werner Koch2002-01-291-4/+5
| | | | | | | | | | | * keylist.c (list_cert_colon): New arg HAVE_SECRET, print "crs" when we know that the secret key is available. (gpgsm_list_keys): New arg MODE, check whether a secret key is available. Changed all callers. * gpgsm.c (main): New command --list-secret-keys. * server.c (cmd_listsecretkeys): New. (cmd_listkeys): Return secret keys with "crs" record.
* * gpgsm.c (main): Disable core dumps.Werner Koch2002-01-251-3/+25
| | | | | | | | | | | | | * sign.c (add_certificate_list): New. (gpgsm_sign): Add the certificates to the CMS object. * certpath.c (gpgsm_walk_cert_chain): New. * gpgsm.h (server_control_s): Add included_certs. * gpgsm.c: Add option --include-certs. (gpgsm_init_default_ctrl): New. (main): Call it. * server.c (gpgsm_server): Ditto. (option_handler): Support --include-certs.
* * gpgsm.c: Add option --enable-crl-checks.Werner Koch2002-01-211-15/+20
| | | | | | * call-agent.c (start_agent): Implemented socket based access. * call-dirmngr.c (start_dirmngr): Ditto.
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-20 11:17:56 +0000