aboutsummaryrefslogtreecommitdiffstats
path: root/sm/gpgsm.h (unfollow)
Commit message (Collapse)AuthorFilesLines
2014-11-28Add option --no-autostart.Werner Koch1-0/+1
* g10/gpg.c: Add option --no-autostart. * sm/gpgsm.c: Ditto. * g10/options.h (opt): Add field autostart. * sm/gpgsm.h (opt): Ditto. * g10/call-agent.c (start_agent): Print note if agent was not autostarted. * sm/call-agent.c (start_agent): Ditto. * g10/call-dirmngr.c (create_context): Likewise. * sm/call-dirmngr.c (start_dirmngr_ext): Ditto. Signed-off-by: Werner Koch <[email protected]>
2014-08-14sm: Create homedir and lock empty keybox creation.Werner Koch1-0/+1
* sm/gpgsm.h (opt): Add field "no_homedir_creation". * sm/gpgsm.c (main): Set it if --no-options is used. * sm/keydb.c (try_make_homedir): New. Similar to the one from g10/openfile.c. (maybe_create_keybox): New. Similar to the one from g10/keydb.c. (keydb_add_resource): Replace some code by maybe_create_keybox.
2014-06-03Add new option --with-secret.Werner Koch1-0/+1
* g10/gpg.c: Add option --with-secret. * g10/options.h (struct opt): Add field with_secret. * g10/keylist.c (public_key_list): Pass opt.with_secret to list_all and list_one. (list_all, list_one): Add arg mark_secret. (list_keyblock_colon): Add arg has_secret. * sm/gpgsm.c: Add option --with-secret. * sm/server.c (option_handler): Add option "with-secret". * sm/gpgsm.h (server_control_s): Add field with_secret. * sm/keylist.c (list_cert_colon): Take care of with_secret. Also move the token string from the wrong field 14 to 15. -- This option is useful for key managers which need to know whether a key has a secret key. This change allows to collect this information in one pass.
2014-06-03gpgsm: New commands --export-secret-key-{p8,raw}Werner Koch1-1/+2
* sm/gpgsm.c: Add new commands. * sm/minip12.c (build_key_sequence): Add arg mode. (p12_raw_build): New. * sm/export.c (export_p12): Add arg rawmode. Call p12_raw_build. (gpgsm_p12_export): Ditto. (print_short_info): Print the keygrip.
2011-12-07gpgsm: Add new validation model "steed".Werner Koch1-2/+5
* sm/gpgsm.h (VALIDATE_FLAG_STEED): New. * sm/gpgsm.c (gpgsm_parse_validation_model): Add model "steed". * sm/server.c (option_handler): Allow validation model "steed". * sm/certlist.c (gpgsm_cert_has_well_known_private_key): New. * sm/certchain.c (do_validate_chain): Handle the well-known-private-key attribute. Support the "steed" model. (gpgsm_validate_chain): Ditto. * sm/verify.c (gpgsm_verify): Return "steed" in the trust status line. * sm/keylist.c (list_cert_colon): Print the new 'w' flag. -- This is the first part of changes to implement the STEED proposal as described at http://g10code.com/steed.html . The idea for X.509 is not to use plain self-signed certificates but certificates signed by a dummy CA (i.e. one for which the private key is known). Having a single CA as an indication for the use of STEED might help other X.509 implementations to implement STEED.
2011-03-01Support X.509 certificate creation.Werner Koch1-0/+4
Using "gpgsm --genkey" allows the creation of a self-signed certificate via a new prompt. Using "gpgsm --genkey --batch" should allow the creation of arbitrary certificates controlled by a parameter file. An example parameter file is Key-Type: RSA Key-Length: 1024 Key-Grip: 2C50DC6101C10C9C643E315FE3EADCCBC24F4BEA Key-Usage: sign, encrypt Serial: random Name-DN: CN=some test key Name-Email: [email protected] Name-Email: [email protected] Hash-Algo: SHA384 not-after: 2038-01-16 12:44 This creates a self-signed X.509 certificate using the key given by the keygrip and using SHA-384 as hash algorithm. The keyword signing-key can be used to sign the certificate with a different key. See sm/certreggen.c for details.
2011-02-04Nuked almost all trailing white space.post-nuke-of-trailing-wsWerner Koch1-7/+7
We better do this once and for all instead of cluttering all future commits with diffs of trailing white spaces. In the majority of cases blank or single lines are affected and thus this change won't disturb a git blame too much. For future commits the pre-commit scripts checks that this won't happen again.
2010-11-26Remove superfluous parameter.Werner Koch1-1/+1
Make self-check interval larger
2010-10-08Add new option --with-keygripWerner Koch1-0/+2
2010-08-16Auto-start dirmngr.Werner Koch1-1/+0
2010-06-21Implement export of pkcs#12 objects using a direct agent connection.Werner Koch1-2/+6
2010-06-17Avoid using the protect-tool to import pkcs#12.Werner Koch1-0/+6
2010-03-10Merged jnlib into common.Werner Koch1-1/+0
2010-03-08Removed almost al dup calls.Werner Koch1-3/+3
2010-03-08Replace use stdio by estream functions.Werner Koch1-6/+8
2009-12-10Add option --cert-extension.Werner Koch1-1/+6
2009-07-07Impleemned gpgsm's IMPORT --re-import feature.Werner Koch1-1/+1
Typo fix.
2009-07-07Reworked passing of envars to Pinentry.Werner Koch1-6/+5
2009-07-02Create a pkcs#10 request directly from a card.Werner Koch1-0/+2
Deprecate gpgsm-gencert.sh script.
2009-03-26Signing using Netkey 3 cards does now work.Werner Koch1-2/+3
2009-03-25Print NO_SECKEY status line in gpgsm.Werner Koch1-2/+3
This fixes bug#1020.
2009-03-18Add server option with-ephemeral-keys.Werner Koch1-3/+2
Extend SCD LEARN command.
2009-03-06New gpg-agent command to list key information.Werner Koch1-0/+2
Gpgsm does now print the S/N of cards. Consider ephemeral keys during listing an export.
2008-10-28fixed a bug in the prompt formatter.Werner Koch1-0/+1
2008-10-21Help dirmngr to use supplied trust anchors.Werner Koch1-1/+1
2008-09-30Add gpgsm server command GETINFO agent-check.Werner Koch1-0/+1
Fix tests.
2008-08-082008-08-08 Marcus Brinkmann <[email protected]>Marcus Brinkmann1-2/+0
* gpgsm.h (struct server_control_s): Remove member dirmngr_seen. * call-dirmngr.c (dirmngr2_ctx, dirmngr_ctx_locked) (dirmngr2_ctx_locked): New global variables. (prepare_dirmngr): Don't check dirmngr_seen anymore. (start_dirmngr): Move bunch of code to ... (start_dirmngr_ext): ... this new function. (release_dirmngr, start_dirmngr2, release_dirmngr2): New functions. (gpgsm_dirmngr_isvalid): Call release_dirmngr. (gpgsm_dirmngr_lookup): Call release_dirmngr. If dirmngr_ctx is locked, use dirmngr2_locked. (gpgsm_dirmngr_run_command): Call release_dirmngr.
2008-06-26Start support of TCOS 3 cards.Werner Koch1-0/+2
Support restriction attribute. Fix utf-8 printing problems. Use AES by default.
2008-06-12sm/Marcus Brinkmann1-0/+14
2008-06-12 Marcus Brinkmann <[email protected]> * gpgsm.h (struct keyserver_spec): New struct. (opt): Add member keyserver. * gpgsm.c (keyserver_list_free, parse_keyserver_line): New functions. (main): Implement --keyserver option. * call-dirmngr.c (prepare_dirmngr): Send LDAPSERVER commands. tools/ 2008-06-12 Marcus Brinkmann <[email protected]> * gpgconf-comp.c (gc_options_gpgsm): Add option keyserver.
2008-02-19Improve certificate chain construction.Werner Koch1-0/+1
Extend PKITS framework
2008-02-14Poems for AllowSetForegroundWindow (W32)Werner Koch1-0/+2
2008-02-13Always search missing certifcates using a running Dirmngr's cache.Werner Koch1-3/+4
2007-12-13Allow verification of some broken S-TRUST generated signatures.Werner Koch1-0/+3
2007-12-12Support DSA2.Werner Koch1-0/+4
Support Camellia for testing. More audit stuff.
2007-11-19Started to implement the audit log feature.Werner Koch1-1/+8
Pass PINENTRY_USER_DATA and XAUTHORITY to Pinentry. Improved support for the quality bar. Minor internal restructuring. Translation fixes.
2007-08-23Add new features to kbxutil.Werner Koch1-1/+2
Fixed bug 829 (can't encrypt if duplicated certs are in the keybox)
2007-08-22Updated estream.Werner Koch1-1/+1
More changes for Windows.
2007-08-10Implemented the chain model for X.509 validation.Werner Koch1-3/+14
2007-07-04Changed to GPLv3.Werner Koch1-4/+2
Removed intl/.
2007-06-21Implemented the --gen-key command as we can't use the gpgsm-gencert.sh under ↵Werner Koch1-2/+5
Windows.
2007-03-20Allow setting of the passphrase encoding of pkcs#12 files.Werner Koch1-0/+4
New option --p12-charset.
2007-03-19Allow export to work on systems without funopen/fopencookie.Werner Koch1-2/+3
2007-03-19Changes to let the key listing use estream to help systems withoutWerner Koch1-4/+6
funopen.
2006-11-14sm/Werner Koch1-0/+2
* server.c (skip_options): Skip leading spaces. (has_option): Honor "--". (cmd_export): Add option --data to do an inline export. Skip all options. * certdump.c (gpgsm_fpr_and_name_for_status): New. * verify.c (gpgsm_verify): Use it to print correct status messages. doc/ * gpgsm.texi (GPGSM EXPORT): Document changes.
2006-10-11Allow pkcs#10 creation directkly from a smart cardWerner Koch1-1/+4
2006-10-02Fix for bug 537Werner Koch1-4/+4
2006-09-25New "relax" option for trustlist.txtWerner Koch1-1/+12
2006-09-06The big Assuan error code removal.Werner Koch1-15/+17
2006-06-27Various smaller changesWerner Koch1-0/+2
2006-06-20Updated FSF's address.Werner Koch1-1/+2
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-15 15:50:49 +0000