aboutsummaryrefslogtreecommitdiffstats
path: root/sm/gpgsm.c (follow)
Commit message (Collapse)AuthorAgeFilesLines
* gpgsm: Add new validation model "steed".Werner Koch2011-12-071-0/+2
| | | | | | | | | | | | | | | | | | | | * sm/gpgsm.h (VALIDATE_FLAG_STEED): New. * sm/gpgsm.c (gpgsm_parse_validation_model): Add model "steed". * sm/server.c (option_handler): Allow validation model "steed". * sm/certlist.c (gpgsm_cert_has_well_known_private_key): New. * sm/certchain.c (do_validate_chain): Handle the well-known-private-key attribute. Support the "steed" model. (gpgsm_validate_chain): Ditto. * sm/verify.c (gpgsm_verify): Return "steed" in the trust status line. * sm/keylist.c (list_cert_colon): Print the new 'w' flag. -- This is the first part of changes to implement the STEED proposal as described at http://g10code.com/steed.html . The idea for X.509 is not to use plain self-signed certificates but certificates signed by a dummy CA (i.e. one for which the private key is known). Having a single CA as an indication for the use of STEED might help other X.509 implementations to implement STEED.
* Add a flag parameter to dotlock_create.Werner Koch2011-09-281-1/+1
| | | | This allows us to extend this function in the future.
* Renamed the lock functions.Werner Koch2011-09-231-1/+1
| | | | Also cleaned up the dotlock code for easier readability.
* Fixed set but unused variable bugsWerner Koch2011-08-101-3/+0
|
* Nuked almost all trailing white space.post-nuke-of-trailing-wsWerner Koch2011-02-041-130/+130
| | | | | | | | We better do this once and for all instead of cluttering all future commits with diffs of trailing white spaces. In the majority of cases blank or single lines are affected and thus this change won't disturb a git blame too much. For future commits the pre-commit scripts checks that this won't happen again.
* s/AES/AES128/ in diagnostics and --list-configWerner Koch2010-12-021-1/+1
|
* Add new option --with-keygripWerner Koch2010-10-081-0/+6
|
* Exporting secret keys via gpg-agent is now basically supported.Werner Koch2010-10-011-1/+1
| | | | | | A couple of forward ported changes. Doc updates.
* Fix regression in logging.Werner Koch2010-08-181-26/+26
| | | | | | Add a registry key to enable catch-all remote debugging for W32. Replace more stdio stuff by estream.
* Auto-start dirmngr.Werner Koch2010-08-161-10/+2
|
* Implement export of pkcs#12 objects using a direct agent connection.Werner Koch2010-06-211-43/+3
|
* Whole lot of changes to support CE.Werner Koch2010-04-141-6/+11
|
* Minor cleanupsWerner Koch2010-03-291-1/+0
|
* More changes for CE. gpgsm does now build and run a keylisting.Werner Koch2010-03-241-1/+3
|
* More chnages to use estream. Add a way to replace the standardWerner Koch2010-03-221-1/+1
| | | | | descriptors.
* Use a custom log handler for libassuan.Werner Koch2010-03-111-2/+2
|
* Removed almost al dup calls.Werner Koch2010-03-081-8/+7
|
* Replace use stdio by estream functions.Werner Koch2010-03-081-17/+14
|
* Add option --cert-extension.Werner Koch2009-12-101-1/+7
|
* support numeric debug levels.Werner Koch2009-12-031-7/+29
|
* More stuff for the audit-log.Werner Koch2009-12-021-9/+16
|
* Add gpgconf related dummy options default_pubkey_algo.Werner Koch2009-11-231-0/+5
| | | | | | Add option --skip-hidden-recipients Comment updates.
* [g13] Add RECIPEINT and CREATE command.Werner Koch2009-10-191-5/+20
| | | | | [sm] Chnage --include-certs default
* Some changes to suport g13.Werner Koch2009-09-301-3/+0
|
* 2009-09-23 Marcus Brinkmann <[email protected]>Marcus Brinkmann2009-09-231-3/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * configure.ac (NEED_LIBASSUAN_API, NEED_LIBASSUAN_VERSION): Update to new API (2, 1.1.0). agent/ 2009-09-23 Marcus Brinkmann <[email protected]> * gpg-agent.c (parse_rereadable_options): Don't set global assuan log file (there ain't one anymore). (main): Update to new API. (check_own_socket_pid_cb): Return gpg_error_t instead of int. (check_own_socket_thread, check_for_running_agent): Create assuan context before connecting to server. * command.c: Include "scdaemon.h" before <assuan.h> because of GPG_ERR_SOURCE_DEFAULT check. (write_and_clear_outbuf): Use gpg_error_t instead of assuan_error_t. (cmd_geteventcounter, cmd_istrusted, cmd_listtrusted) (cmd_marktrusted, cmd_havekey, cmd_sigkey, cmd_setkeydesc) (cmd_sethash, cmd_pksign, cmd_pkdecrypt, cmd_genkey, cmd_readkey) (cmd_keyinfo, cmd_get_passphrase, cmd_clear_passphrase) (cmd_get_confirmation, cmd_learn, cmd_passwd) (cmd_preset_passphrase, cmd_scd, cmd_getval, cmd_putval) (cmd_updatestartuptty, cmd_killagent, cmd_reloadagent) (cmd_getinfo, option_handler): Return gpg_error_t instead of int. (post_cmd_notify): Change type of ERR to gpg_error_t from int. (io_monitor): Add hook argument. Use symbols for constants. (register_commands): Change return type of HANDLER to gpg_error_t. (start_command_handler): Allocate assuan context before starting server. * call-pinentry.c: Include "scdaemon.h" before <assuan.h> because of GPG_ERR_SOURCE_DEFAULT check. (unlock_pinentry): Call assuan_release instead of assuan_disconnect. (getinfo_pid_cb, getpin_cb): Return gpg_error_t instead of int. (start_pinentry): Allocate assuan context before connecting to server. * call-scd.c (membuf_data_cb, learn_status_cb, get_serialno_cb) (membuf_data_cb, inq_needpin, card_getattr_cb, pass_status_thru) (pass_data_thru): Change return type to gpg_error_t. (start_scd): Allocate assuan context before connecting to server. common/ 2009-09-23 Marcus Brinkmann <[email protected]> * asshelp.c (start_new_gpg_agent): Allocate assuan context before starting server. g10/ 2009-09-23 Marcus Brinkmann <[email protected]> * call-agent.c: Include "scdaemon.h" before <assuan.h> because of GPG_ERR_SOURCE_DEFAULT check. (learn_status_cb, dummy_data_cb, get_serialno_cb, default_inq_cb) (learn_status_cb, inq_writecert_parms, inq_writekey_parms) (scd_genkey_cb, membuf_data_cb): Return gpg_error_t instead of int. * gpg.c: Include "scdaemon.h" before <assuan.h> because of GPG_ERR_SOURCE_DEFAULT check. (main): Update to new Assuan API. * server.c: Include "scdaemon.h" before <assuan.h> because of GPG_ERR_SOURCE_DEFAULT check. (option_handler, cmd_recipient, cmd_signer, cmd_encrypt) (cmd_decrypt, cmd_verify, cmd_sign, cmd_import, cmd_export) (cmd_delkeys, cmd_message, do_listkeys, cmd_listkeys) (cmd_listsecretkeys, cmd_genkey, cmd_getinfo): Return gpg_error_t instead of int. (register_commands): Allocate assuan context before starting server. (gpg_server): Allocate assuan_context before starting server. scd/ 2009-09-23 Marcus Brinkmann <[email protected]> * command.c: Include "scdaemon.h" before <assuan.h> because of GPG_ERR_SOURCE_DEFAULT check. (option_handler, open_card, cmd_serialno, cmd_lean, cmd_readcert) (cmd_readkey, cmd_setdata, cmd_pksign, cmd_pkauth, cmd_pkdecrypt) (cmd_getattr, cmd_setattr, cmd_writecert, cmd_writekey) (cmd_genkey, cmd_random, cmd_passwd, cmd_checkpin, cmd_lock) (cmd_unlock, cmd_getinfo, cmd_restart, cmd_disconnect, cmd_apdu) (cmd_killscd): Return gpg_error_t instead of int. (scd_command_handler): Allocate assuan context before starting server. * scdaemon.c (main): Update to new Assuan API. sm/ 2009-09-23 Marcus Brinkmann <[email protected]> * gpgsm.c (main): Update to new assuan API. * server.c: Include "gpgsm.h" before <assuan.h> due to check for GPG_ERR_SOURCE_DEFAULT and assuan.h now including gpg-error.h. (option_handler, cmd_recipient, cmd_signer, cmd_encrypt) (cmd_decrypt, cmd_verify, cmd_sign, cmd_import, cmd_export) (cmd_delkeys, cmd_message, cmd_listkeys, cmd_dumpkeys) (cmd_listsecretkeys, cmd_dumpsecretkeys, cmd_genkey) (cmd_getauditlog, cmd_getinfo): Return gpg_error_t instead of int. (register_commands): Same for member HANDLER in table. (gpgsm_server): Allocate assuan context before starting server. * sm/call-dirmngr.c: * call-dirmngr.c (prepare_dirmngr): Check for CTX and error before setting LDAPSERVER. (start_dirmngr_ext): Allocate assuan context before starting server. (inq_certificate, isvalid_status_cb, lookup_cb, lookup_status_cb) (run_command_cb, run_command_inq_cb, run_command_status_cb): Return gpg_error_t instead of int. tools/ 2009-09-23 Marcus Brinkmann <[email protected]> * gpg-connect-agent.c (getinfo_pid_cb, read_and_print_response) (main): Update to new Assuan API.
* Improved detection of bad/invalid signer keys.Werner Koch2009-08-061-23/+4
|
* Make bug reporting address easier changeable.Werner Koch2009-07-211-2/+2
|
* Reworked passing of envars to Pinentry.Werner Koch2009-07-071-7/+35
|
* Alow batch ode for gpgsm --gen-key.Werner Koch2009-07-011-4/+54
| | | | | Allow CSR generation using an existing key with gpgsm.
* New gpgsm server option no-encrypt-to.Werner Koch2009-05-181-6/+0
| | | | | | Add caching for symkey encryption. Minor cleanups.
* Signing using Netkey 3 cards does now work.Werner Koch2009-03-261-8/+6
|
* Add server option with-ephemeral-keys.Werner Koch2009-03-181-1/+1
| | | | | Extend SCD LEARN command.
* Remove duplicated code.Werner Koch2009-03-161-1/+1
|
* Fix bug#998.Werner Koch2009-02-091-2/+2
|
* fix a gpgconf default. Cosmetic changes.Werner Koch2008-12-101-6/+9
|
* Minor fixes.Werner Koch2008-12-091-1/+1
|
* Print library versions according to GNU standards.Werner Koch2008-11-181-51/+32
|
* Cleaned up unused gpgsm and gpg options.Werner Koch2008-11-131-289/+210
|
* Marked all unused args on non-W32 platforms.Werner Koch2008-10-201-0/+2
|
* Add --delete-keys as alias for --delete-key.Werner Koch2008-10-131-1/+2
|
* Remove hacks which are not anymore needed since we now require Libgcrypt 1.4Werner Koch2008-09-291-5/+1
|
* Start support of TCOS 3 cards.Werner Koch2008-06-261-1/+1
| | | | | | | Support restriction attribute. Fix utf-8 printing problems. Use AES by default.
* sm/Marcus Brinkmann2008-06-121-33/+131
| | | | | | | | | | | | | | | | 2008-06-12 Marcus Brinkmann <[email protected]> * gpgsm.h (struct keyserver_spec): New struct. (opt): Add member keyserver. * gpgsm.c (keyserver_list_free, parse_keyserver_line): New functions. (main): Implement --keyserver option. * call-dirmngr.c (prepare_dirmngr): Send LDAPSERVER commands. tools/ 2008-06-12 Marcus Brinkmann <[email protected]> * gpgconf-comp.c (gc_options_gpgsm): Add option keyserver.
* Fix --output option used when with --export-secret-kety-p12.Werner Koch2008-05-201-1/+1
|
* Updated German translation.Werner Koch2008-05-091-1/+1
| | | | | Fix in gpgconf for W32.
* Improve certificate chain construction.Werner Koch2008-02-191-4/+11
| | | | | Extend PKITS framework
* Allow verification of some broken S-TRUST generated signatures.Werner Koch2007-12-131-0/+13
|
* Support DSA2.Werner Koch2007-12-121-16/+31
| | | | | | Support Camellia for testing. More audit stuff.
* More code for the audit log.Werner Koch2007-12-061-1/+1
|
* Try to make sure that the standard descriptors are connected when callingWerner Koch2007-12-031-0/+1
| | | | | gpgsm.
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-15 23:33:38 +0000