aboutsummaryrefslogtreecommitdiffstats
path: root/sm/verify.c (unfollow)
Commit message (Collapse)AuthorFilesLines
2007-03-19Allow export to work on systems without funopen/fopencookie.Werner Koch1-1/+1
2006-11-14sm/Werner Koch1-11/+14
* server.c (skip_options): Skip leading spaces. (has_option): Honor "--". (cmd_export): Add option --data to do an inline export. Skip all options. * certdump.c (gpgsm_fpr_and_name_for_status): New. * verify.c (gpgsm_verify): Use it to print correct status messages. doc/ * gpgsm.texi (GPGSM EXPORT): Document changes.
2006-09-06The big Assuan error code removal.Werner Koch1-1/+1
2006-06-20Updated FSF's address.Werner Koch1-1/+2
2005-11-13Added qualified signature features.Werner Koch1-2/+8
2005-07-27Removed directories which are only used by the 1.9 branchWerner Koch1-550/+0
2004-06-06* configure.ac: Require libksba 0.9.7.Werner Koch1-47/+34
* certreqgen.c (get_parameter_uint, create_request): Create an extension for key usage when requested. * gpgsm.c (main): Install emergency_cleanup also as an atexit handler. * verify.c (gpgsm_verify): Removed the separate error code handling for KSBA. We use shared error codes anyway. * export.c (export_p12): Removed debugging code. * encrypt.c (gpgsm_encrypt): Put the session key in to secure memory.
2004-04-05* verify.c (gpgsm_verify): Print STATUS_NEWSIG for each signature.Werner Koch1-1/+4
* certchain.c (gpgsm_validate_chain) <gpgsm_cert_use_cer_p>: Do not just warn if a cert is not suitable; bail out immediately. * call-dirmngr.c (isvalid_status_cb): New. (unhexify_fpr): New. Taken from ../g10/call-agent.c (gpgsm_dirmngr_isvalid): Add new arg CTRL, changed caller to pass it thru. Detect need to check the respondert cert and do that. * certchain.c (gpgsm_validate_chain): Add new arg FLAGS. Changed all callers.
2004-02-17* gpgsm.c: New option --with-md5-fingerprint.Werner Koch1-1/+1
* keylist.c (list_cert_std): Print MD5 fpr. * gpgsm.c: New options --with-validation. * server.c (option_handler): New option "with-validation". * keylist.c (list_cert_std, list_internal_keys): New args CTRL and WITH_VALIDATION. Changed callers to set it. (list_external_cb, list_external_keys): Pass CTRL to the callback. (list_cert_colon): Add arg CTRL. Check validation if requested. * certchain.c (unknown_criticals, allowed_ca, check_cert_policy) (gpgsm_validate_chain): New args LISTMODE and FP. (do_list): New helper for info output. (find_up): New arg FIND_NEXT. (gpgsm_validate_chain): After a bad signature try again with other CA certificates. * import.c (print_imported_status): New arg NEW_CERT. Print additional STATUS_IMPORT_OK becuase that is what gpgme expects. (check_and_store): Always call above function after import. * server.c (get_status_string): Added STATUS_IMPORT_OK.
2004-02-13* encrypt.c (init_dek): Check for too weak algorithms.Werner Koch1-1/+1
* import.c (parse_p12, popen_protect_tool): New. * base64.c (gpgsm_create_reader): New arg ALLOW_MULTI_PEM. Changed all callers. (base64_reader_cb): Handle it here. (gpgsm_reader_eof_seen): New. (base64_reader_cb): Set a flag for EOF. (simple_reader_cb): Ditto.
2003-12-17Replaced deprecated type names.Werner Koch1-8/+8
* certdump.c (gpgsm_print_serial): Cleaned up cast use in strtoul. (gpgsm_dump_serial): Ditto. * decrypt.c (gpgsm_decrypt): Replaced ERR by RC.
2003-12-01* gpgsm.c, gpgsm.h: New options --{enable,disable}-ocsp.Werner Koch1-1/+2
(gpgsm_init_default_ctrl): Set USE_OCSP to the default value. * certchain.c (gpgsm_validate_chain): Handle USE_OCSP. * call-dirmngr.c (gpgsm_dirmngr_isvalid): Add arg USE_OCSP and proceed accordingly.
2003-11-18* verify.c (gpgsm_verify): Fixed for changes API of gcry_md_info.Werner Koch1-1/+6
* certchain.c (unknown_criticals): Fixed an error code test.
2003-11-12Mainly changes to adjust for the changed KSBA API.Werner Koch1-15/+16
2003-10-31* verify.c (strtimestamp_r, gpgsm_verify):Werner Koch1-19/+12
* sign.c (gpgsm_sign): * keylist.c (print_time, list_cert_std, list_cert_colon): * certdump.c (gpgsm_print_time, gpgsm_dump_time, gpgsm_dump_cert): * certchain.c (gpgsm_validate_chain): Changed to use ksba_isotime_t.
2003-08-05This commit was manufactured by cvs2svn to create branchRepo Admin1-0/+550
'GNUPG-1-9-BRANCH'.
2003-06-27Key generation and signing using the OpenPGP card does rudimentary work.Werner Koch1-25/+25
2003-06-05A small step for GnuPG but a huge leap for error codes.Werner Koch1-4/+14
(Sorry, it does not build currently - I need to check it in to avoid duplicate work.)
2003-06-03Make use of libgpg-errorWerner Koch1-11/+11
2003-01-09Updated from latest NewPG projectWerner Koch1-0/+30
2002-10-19This commit was manufactured by cvs2svn to create branchRepo Admin1-510/+0
'GNUPG-1-9-BRANCH'.
2002-08-20* gpgsm.c (main): Use the log file only in server mode.Werner Koch1-13/+22
* import.c (print_imported_summary): New. (check_and_store): Update the counters, take new argument. (import_one): Factored out core of gpgsm_import. (gpgsm_import): Print counters. (gpgsm_import_files): New. * gpgsm.c (main): Use the new function for import.
2002-08-16Made it compile.Werner Koch1-1/+1
2002-08-16* call-agent.c (learn_cb): Special treatment when the issuerWerner Koch1-3/+3
certificate is missing.
2002-08-10* keylist.c (list_cert_colon): Print the short fingerprint in theWerner Koch1-7/+23
key ID field. * fingerprint.c (gpgsm_get_short_fingerprint): New. * verify.c (gpgsm_verify): Print more verbose info for a good signature.
2002-08-09* gpgsm.c (emergency_cleanup): New.Werner Koch1-3/+7
(main): Initialize the signal handler. * sign.c (gpgsm_sign): Reset the hash context for subsequent signers and release it at the end.
2002-07-02* verify.c (gpgsm_verify): Extend the STATUS_BADSIG line withWerner Koch1-2/+10
the fingerprint.
2002-07-02* keydb.c (keydb_store_cert): Add optional ar EXISTED and changedWerner Koch1-1/+1
all callers. * call-agent.c (learn_cb): Print info message only for real imports. * import.c (gpgsm_import): Moved duplicated code to ... (check_and_store): new function. Added magic to import the entire chain. Print status only for real imports and moved printing code to .. (print_imported_status): New.
2002-06-20* certlist.c (gpgsm_add_to_certlist): Fixed locating of aWerner Koch1-2/+9
certificate with the required key usage. * gpgsm.c (main): Fixed a segv when using --outfile without an argument. * keylist.c (print_capabilities): Also check for non-repudiation and data encipherment. * certlist.c (cert_usage_p): Test for signing and encryption was swapped. Add a case for certification usage, handle non-repudiation and data encipherment. (gpgsm_cert_use_cert_p): New. (gpgsm_add_to_certlist): Added a CTRL argument and changed all callers to pass it. * certpath.c (gpgsm_validate_path): Use it here to print a status message. Added a CTRL argument and changed all callers to pass it. * decrypt.c (gpgsm_decrypt): Print a status message for wrong key usage. * verify.c (gpgsm_verify): Ditto. * keydb.c (classify_user_id): Allow a colon delimited fingerprint.
2002-06-19* call-agent.c (learn_cb): Use log_info instead of log_error onWerner Koch1-1/+1
successful import. * keydb.c (keydb_set_ephemeral): New. (keydb_store_cert): New are ephemeral, changed all callers. * keylist.c (list_external_cb): Store cert as ephemeral. * export.c (gpgsm_export): Kludge to export epehmeral certificates. * gpgsm.c (main): New command --list-external-keys.
2002-06-12* sign.c (hash_and_copy_data): New.Werner Koch1-6/+25
(gpgsm_sign): Implemented normal (non-detached) signatures. * gpgsm.c (main): Ditto. * certpath.c (gpgsm_validate_path): Special error handling for no policy match. * configure.ac (NEED_LIBKSBA_VERSION): We need 0.4.3 now.
2002-05-03* certpath.c (gpgsm_validate_path): Added EXPTIME arg and changedWerner Koch1-26/+41
all callers. * verify.c (gpgsm_verify): Tweaked usage of log_debug and log_error. Return EXPSIG status and add expiretime to VALIDSIG.
2002-04-12* certlist.c (cert_usable_p): New.Werner Koch1-0/+1
(gpgsm_cert_use_sign_p,gpgsm_cert_use_encrypt_p): New. (gpgsm_cert_use_verify_p,gpgsm_cert_use_decrypt_p): New. (gpgsm_add_to_certlist): Check the key usage. * sign.c (gpgsm_sign): Ditto. * verify.c (gpgsm_verify): Print a message wehn an unsuitable certificate was used. * decrypt.c (gpgsm_decrypt): Ditto * keylist.c (print_capabilities): Determine values from the cert.
2002-03-12* verify.c (gpgsm_verify): Detect certs-only message.Werner Koch1-6/+11
2002-03-05* gpgsm.c, gpgsm.h: Add local_user.Werner Koch1-4/+2
* sign.c (gpgsm_get_default_cert): New. (get_default_signer): Use the new function if local_user is not set otherwise used that value. * encrypt.c (get_default_recipient): Removed. (gpgsm_encrypt): Use gpgsm_get_default_cert. * verify.c (gpgsm_verify): Better error text for a bad signature found by comparing the hashs.
2002-02-07* certlist.c (gpgsm_add_to_certlist): Check that the specifiedWerner Koch1-1/+1
name identifies a certificate unambiguously. (gpgsm_find_cert): Ditto. * server.c (cmd_listkeys): Check that the data stream is available. (cmd_listsecretkeys): Ditto. (has_option): New. (cmd_sign): Fix ambiguousity in option recognition. * gpgsm.c (main): Enable --logger-fd. * encrypt.c (gpgsm_encrypt): Increased buffer size for better performance. * call-agent.c (gpgsm_agent_pksign): Check the S-Exp received from the agent. * keylist.c (list_cert_colon): Filter out control characters.
2002-01-15* import.c (gpgsm_import): Just do a basic cert check beforeWerner Koch1-30/+5
storing it. * certpath.c (gpgsm_basic_cert_check): New. * keydb.c (keydb_store_cert): New. * import.c (store_cert): Removed and change all caller to use the new function. * verify.c (store_cert): Ditto. * certlist.c (gpgsm_add_to_certlist): Validate the path * certpath.c (gpgsm_validate_path): Check the trust list. * call-agent.c (gpgsm_agent_istrusted): New.
2001-12-20* verify.c (gpgsm_verify): Implemented non-detached signatureWerner Koch1-12/+37
verification. Add OUT_FP arg, initialize a writer and changed all callers. * server.c (cmd_verify): Pass an out_fp if one has been set.
2001-12-20* base64.c (base64_reader_cb): Try to detect an S/MIME body part.Werner Koch1-46/+3
* certdump.c (print_sexp): Renamed to gpgsm_dump_serial, made global. (print_time): Renamed to gpgsm_dump_time, made global. (gpgsm_dump_serial): Take a real S-Expression as argument and print the first item. * keylist.c (list_cert_colon): Ditto. * keydb.c (keydb_search_issuer_sn): Ditto. * decrypt.c (print_integer_sexp): Removed and made callers use gpgsm_dump_serial. * verify.c (print_time): Removed, made callers use gpgsm_dump_time.
2001-12-18Changes to be used with the new libksba interface.Werner Koch1-7/+14
libgcrypt-1.1.5 is required (cvs or tarball)
2001-12-14* verify.c (gpgsm_verify): Add hash debug helpersWerner Koch1-0/+5
* sign.c (gpgsm_sign): Ditto. * base64.c (base64_reader_cb): Reset the linelen when we need to skip the line and adjusted test; I somehow forgot about DeMorgan. * server.c (cmd_encrypt,cmd_decrypt,cmd_sign,cmd_verify) (cmd_import): Close the FDs on success. (close_message_fd): New. (input_notify): Setting autodetect_encoding to 0 after initializing it to 0 is pretty pointless. Easy to fix.
2001-12-11Implemented encryption in server mode.Werner Koch1-1/+1
Allow to specify a recipient on the commandline There is still a default hardwired recipient if none has been set.
2001-12-10--encrypt does now work for a hardwired key.Werner Koch1-1/+1
2001-11-27* base64.c: New. Changed all other functions to use this insteadWerner Koch1-66/+16
of direct creation of ksba_reader/writer. * gpgsm.c (main): Set ctrl.auto_encoding unless --no-armor is used. This way we can feed PEM encoded stuff to --verify.
2001-11-26* keydb.c (keydb_add_resource): Create keyboxWerner Koch1-0/+34
* keylist.c (gpgsm_list_keys): Fixed non-server keylisting. * server.c (rc_to_assuan_status): New. Use it for all commands.
2001-11-25The agent does now work and read the secret keys from the directoryWerner Koch1-1/+0
~/.gnupg-test/private-keys-v1.d/<keygrip-as-20-byte-hex-number>. I will post a sample key to gpa-dev.
2001-11-24Added new directory common to enable sharing of some code and errorWerner Koch1-12/+12
numbers between gpg, gpgsm and gpg-agent. Move some files and code to there.
2001-11-24Signing does now work. There is no secret key management yet, so youWerner Koch1-2/+6
should set GPGSM_FAKE_KEY=1 before you try to verify a signature created by gpgsm --sign or the SIGN server command.
2001-11-23Just a Backup. We can now write out a basic signature which in turnWerner Koch1-1/+1
exhibits a bug in --verify.
2001-11-20Map Libksba's OIDs to Libgcrypt digest algo numbers.Werner Koch1-11/+17
The latest Libgcrypt CVS version is needed.
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-15 09:25:28 +0000