aboutsummaryrefslogtreecommitdiffstats
path: root/sm/gpgsm.h (unfollow)
Commit message (Collapse)AuthorFilesLines
2011-12-07gpgsm: Add new validation model "steed".Werner Koch1-2/+5
* sm/gpgsm.h (VALIDATE_FLAG_STEED): New. * sm/gpgsm.c (gpgsm_parse_validation_model): Add model "steed". * sm/server.c (option_handler): Allow validation model "steed". * sm/certlist.c (gpgsm_cert_has_well_known_private_key): New. * sm/certchain.c (do_validate_chain): Handle the well-known-private-key attribute. Support the "steed" model. (gpgsm_validate_chain): Ditto. * sm/verify.c (gpgsm_verify): Return "steed" in the trust status line. * sm/keylist.c (list_cert_colon): Print the new 'w' flag. -- This is the first part of changes to implement the STEED proposal as described at http://g10code.com/steed.html . The idea for X.509 is not to use plain self-signed certificates but certificates signed by a dummy CA (i.e. one for which the private key is known). Having a single CA as an indication for the use of STEED might help other X.509 implementations to implement STEED.
2011-03-01Support X.509 certificate creation.Werner Koch1-0/+4
Using "gpgsm --genkey" allows the creation of a self-signed certificate via a new prompt. Using "gpgsm --genkey --batch" should allow the creation of arbitrary certificates controlled by a parameter file. An example parameter file is Key-Type: RSA Key-Length: 1024 Key-Grip: 2C50DC6101C10C9C643E315FE3EADCCBC24F4BEA Key-Usage: sign, encrypt Serial: random Name-DN: CN=some test key Name-Email: [email protected] Name-Email: [email protected] Hash-Algo: SHA384 not-after: 2038-01-16 12:44 This creates a self-signed X.509 certificate using the key given by the keygrip and using SHA-384 as hash algorithm. The keyword signing-key can be used to sign the certificate with a different key. See sm/certreggen.c for details.
2011-02-04Nuked almost all trailing white space.post-nuke-of-trailing-wsWerner Koch1-7/+7
We better do this once and for all instead of cluttering all future commits with diffs of trailing white spaces. In the majority of cases blank or single lines are affected and thus this change won't disturb a git blame too much. For future commits the pre-commit scripts checks that this won't happen again.
2010-11-26Remove superfluous parameter.Werner Koch1-1/+1
Make self-check interval larger
2010-10-08Add new option --with-keygripWerner Koch1-0/+2
2010-08-16Auto-start dirmngr.Werner Koch1-1/+0
2010-06-21Implement export of pkcs#12 objects using a direct agent connection.Werner Koch1-2/+6
2010-06-17Avoid using the protect-tool to import pkcs#12.Werner Koch1-0/+6
2010-03-10Merged jnlib into common.Werner Koch1-1/+0
2010-03-08Removed almost al dup calls.Werner Koch1-3/+3
2010-03-08Replace use stdio by estream functions.Werner Koch1-6/+8
2009-12-10Add option --cert-extension.Werner Koch1-1/+6
2009-07-07Impleemned gpgsm's IMPORT --re-import feature.Werner Koch1-1/+1
Typo fix.
2009-07-07Reworked passing of envars to Pinentry.Werner Koch1-6/+5
2009-07-02Create a pkcs#10 request directly from a card.Werner Koch1-0/+2
Deprecate gpgsm-gencert.sh script.
2009-03-26Signing using Netkey 3 cards does now work.Werner Koch1-2/+3
2009-03-25Print NO_SECKEY status line in gpgsm.Werner Koch1-2/+3
This fixes bug#1020.
2009-03-18Add server option with-ephemeral-keys.Werner Koch1-3/+2
Extend SCD LEARN command.
2009-03-06New gpg-agent command to list key information.Werner Koch1-0/+2
Gpgsm does now print the S/N of cards. Consider ephemeral keys during listing an export.
2008-10-28fixed a bug in the prompt formatter.Werner Koch1-0/+1
2008-10-21Help dirmngr to use supplied trust anchors.Werner Koch1-1/+1
2008-09-30Add gpgsm server command GETINFO agent-check.Werner Koch1-0/+1
Fix tests.
2008-08-082008-08-08 Marcus Brinkmann <[email protected]>Marcus Brinkmann1-2/+0
* gpgsm.h (struct server_control_s): Remove member dirmngr_seen. * call-dirmngr.c (dirmngr2_ctx, dirmngr_ctx_locked) (dirmngr2_ctx_locked): New global variables. (prepare_dirmngr): Don't check dirmngr_seen anymore. (start_dirmngr): Move bunch of code to ... (start_dirmngr_ext): ... this new function. (release_dirmngr, start_dirmngr2, release_dirmngr2): New functions. (gpgsm_dirmngr_isvalid): Call release_dirmngr. (gpgsm_dirmngr_lookup): Call release_dirmngr. If dirmngr_ctx is locked, use dirmngr2_locked. (gpgsm_dirmngr_run_command): Call release_dirmngr.
2008-06-26Start support of TCOS 3 cards.Werner Koch1-0/+2
Support restriction attribute. Fix utf-8 printing problems. Use AES by default.
2008-06-12sm/Marcus Brinkmann1-0/+14
2008-06-12 Marcus Brinkmann <[email protected]> * gpgsm.h (struct keyserver_spec): New struct. (opt): Add member keyserver. * gpgsm.c (keyserver_list_free, parse_keyserver_line): New functions. (main): Implement --keyserver option. * call-dirmngr.c (prepare_dirmngr): Send LDAPSERVER commands. tools/ 2008-06-12 Marcus Brinkmann <[email protected]> * gpgconf-comp.c (gc_options_gpgsm): Add option keyserver.
2008-02-19Improve certificate chain construction.Werner Koch1-0/+1
Extend PKITS framework
2008-02-14Poems for AllowSetForegroundWindow (W32)Werner Koch1-0/+2
2008-02-13Always search missing certifcates using a running Dirmngr's cache.Werner Koch1-3/+4
2007-12-13Allow verification of some broken S-TRUST generated signatures.Werner Koch1-0/+3
2007-12-12Support DSA2.Werner Koch1-0/+4
Support Camellia for testing. More audit stuff.
2007-11-19Started to implement the audit log feature.Werner Koch1-1/+8
Pass PINENTRY_USER_DATA and XAUTHORITY to Pinentry. Improved support for the quality bar. Minor internal restructuring. Translation fixes.
2007-08-23Add new features to kbxutil.Werner Koch1-1/+2
Fixed bug 829 (can't encrypt if duplicated certs are in the keybox)
2007-08-22Updated estream.Werner Koch1-1/+1
More changes for Windows.
2007-08-10Implemented the chain model for X.509 validation.Werner Koch1-3/+14
2007-07-04Changed to GPLv3.Werner Koch1-4/+2
Removed intl/.
2007-06-21Implemented the --gen-key command as we can't use the gpgsm-gencert.sh under ↵Werner Koch1-2/+5
Windows.
2007-03-20Allow setting of the passphrase encoding of pkcs#12 files.Werner Koch1-0/+4
New option --p12-charset.
2007-03-19Allow export to work on systems without funopen/fopencookie.Werner Koch1-2/+3
2007-03-19Changes to let the key listing use estream to help systems withoutWerner Koch1-4/+6
funopen.
2006-11-14sm/Werner Koch1-0/+2
* server.c (skip_options): Skip leading spaces. (has_option): Honor "--". (cmd_export): Add option --data to do an inline export. Skip all options. * certdump.c (gpgsm_fpr_and_name_for_status): New. * verify.c (gpgsm_verify): Use it to print correct status messages. doc/ * gpgsm.texi (GPGSM EXPORT): Document changes.
2006-10-11Allow pkcs#10 creation directkly from a smart cardWerner Koch1-1/+4
2006-10-02Fix for bug 537Werner Koch1-4/+4
2006-09-25New "relax" option for trustlist.txtWerner Koch1-1/+12
2006-09-06The big Assuan error code removal.Werner Koch1-15/+17
2006-06-27Various smaller changesWerner Koch1-0/+2
2006-06-20Updated FSF's address.Werner Koch1-1/+2
2006-03-21Add Kludge for RegTP sillyness.Werner Koch1-1/+2
2005-11-23Print a note that the software has not been approved for qualified signatures.Werner Koch1-0/+8
2005-11-13Added qualified signature features.Werner Koch1-0/+5
2005-07-27Removed directories which are only used by the 1.9 branchWerner Koch1-274/+0
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-13 11:09:00 +0000