aboutsummaryrefslogtreecommitdiffstats
path: root/sm (unfollow)
Commit message (Collapse)AuthorFilesLines
2002-03-04Minor fixes; about to release 0.3.1NEWPG-0-3-1Werner Koch1-1/+1
2002-02-28Changes needed to support smartcards. Well, only _support_. There isWerner Koch4-14/+20
no real code yet.
2002-02-25* server.c (option_handler): Allow to use -2 for "send all certsWerner Koch9-6/+69
except the root cert". * sign.c (add_certificate_list): Implement it here. * certpath.c (gpgsm_is_root_cert): New.
2002-02-19* certpath.c (check_cert_policy): New.Werner Koch5-11/+278
(gpgsm_validate_path): And call it from here. * gpgsm.c (main): New options --policy-file, --disable-policy-checks and --enable-policy-checks. * gpgsm.h (opt): Added policy_file, no_policy_checks.
2002-02-18* certpath.c (gpgsm_validate_path): Ask the agent to add theWerner Koch4-15/+77
certificate into the trusted list. * call-agent.c (gpgsm_agent_marktrusted): New.
2002-02-07Set version numbers add a commentNEWPG-0-3-0Werner Koch1-0/+1
2002-02-07* certlist.c (gpgsm_add_to_certlist): Check that the specifiedWerner Koch9-21/+78
name identifies a certificate unambiguously. (gpgsm_find_cert): Ditto. * server.c (cmd_listkeys): Check that the data stream is available. (cmd_listsecretkeys): Ditto. (has_option): New. (cmd_sign): Fix ambiguousity in option recognition. * gpgsm.c (main): Enable --logger-fd. * encrypt.c (gpgsm_encrypt): Increased buffer size for better performance. * call-agent.c (gpgsm_agent_pksign): Check the S-Exp received from the agent. * keylist.c (list_cert_colon): Filter out control characters.
2002-02-06* decrypt.c (gpgsm_decrypt): Bail out after an decryption error.Werner Koch3-45/+45
* server.c (reset_notify): Close input and output FDs. (cmd_encrypt,cmd_decrypt,cmd_verify,cmd_sign.cmd_import) (cmd_genkey): Close the FDs and release the recipient list even in the error case.
2002-02-012002-02-01 Marcus Brinkmann <[email protected]>Marcus Brinkmann2-4/+5
* sign.c (gpgsm_sign): Do not release certificate twice.
2002-01-29* call-agent.c (gpgsm_agent_havekey): New.Werner Koch6-14/+89
* keylist.c (list_cert_colon): New arg HAVE_SECRET, print "crs" when we know that the secret key is available. (gpgsm_list_keys): New arg MODE, check whether a secret key is available. Changed all callers. * gpgsm.c (main): New command --list-secret-keys. * server.c (cmd_listsecretkeys): New. (cmd_listkeys): Return secret keys with "crs" record.
2002-01-28* certreqgen.c (create_request): Store the email address in the req.Werner Koch2-1/+31
Note, that I have not yet achieved to generate a cert with the subjectAltName using OpenSSL. It seems that openssl requires the email address to be part of the subject DN (subjectAltName=email:copy) but this is something we don't want to do.
2002-01-25* gpgsm.c (main): Disable core dumps.Werner Koch7-10/+235
* sign.c (add_certificate_list): New. (gpgsm_sign): Add the certificates to the CMS object. * certpath.c (gpgsm_walk_cert_chain): New. * gpgsm.h (server_control_s): Add included_certs. * gpgsm.c: Add option --include-certs. (gpgsm_init_default_ctrl): New. (main): Call it. * server.c (gpgsm_server): Ditto. (option_handler): Support --include-certs.
2002-01-23* certpath.c (gpgsm_validate_path): Print the DN of a missing issuer.Werner Koch5-15/+75
* certdump.c (gpgsm_dump_string): New. (print_dn): Replaced by above.
2002-01-22* certpath.c (unknown_criticals): New.Werner Koch3-18/+235
(allowed_ca): New. (gpgsm_validate_path): Check validity, CA attribute, path length and unknown critical extensions.
2002-01-21* gpgsm.c: Add option --enable-crl-checks.Werner Koch4-45/+105
* call-agent.c (start_agent): Implemented socket based access. * call-dirmngr.c (start_dirmngr): Ditto.
2002-01-20* server.c (option_handler): New.Werner Koch2-0/+17
(gpgsm_server): Register it with assuan.
2002-01-19* server.c (gpgsm_server): Use assuan_deinit_server and setupWerner Koch4-2/+16
assuan logging if enabled. * call-agent.c (inq_ciphertext_cb): Don't show the session key in an Assuan log file. * gpgsm.c (my_strusage): Take bugreport address from configure.ac
2002-01-15* import.c (gpgsm_import): Just do a basic cert check beforeWerner Koch11-80/+352
storing it. * certpath.c (gpgsm_basic_cert_check): New. * keydb.c (keydb_store_cert): New. * import.c (store_cert): Removed and change all caller to use the new function. * verify.c (store_cert): Ditto. * certlist.c (gpgsm_add_to_certlist): Validate the path * certpath.c (gpgsm_validate_path): Check the trust list. * call-agent.c (gpgsm_agent_istrusted): New.
2002-01-14* call-dirmngr.c (inq_certificate): Changed for new interface semantic.Werner Koch4-17/+77
* certlist.c (gpgsm_find_cert): New. DirMngr should now work. Remember that there is a --disable-crl-check option in gpgsm to be used when there is a problem with the dirmngr communication or you want to do faster tests.
2002-01-13* fingerprint.c (gpgsm_get_certid): Print the serialand not theWerner Koch2-1/+6
hash after the dot.
2002-01-11* call-dirmngr.c: New.Werner Koch9-13/+343
* certpath.c (gpgsm_validate_path): Check the CRL here. * fingerprint.c (gpgsm_get_certid): New. * gpgsm.c: New options --dirmngr-program and --disable-crl-checks.
2002-01-10* base64.c (gpgsm_create_writer): Allow to set the object nameWerner Koch11-56/+802
* server.c (cmd_genkey): New. * certreqgen.c: New. The parameter handling code has been taken from gnupg/g10/keygen.c version 1.0.6. * call-agent.c (gpgsm_agent_genkey): New.
2001-12-20* verify.c (gpgsm_verify): Implemented non-detached signatureWerner Koch5-17/+59
verification. Add OUT_FP arg, initialize a writer and changed all callers. * server.c (cmd_verify): Pass an out_fp if one has been set.
2001-12-20* base64.c (base64_reader_cb): Try to detect an S/MIME body part.Werner Koch8-83/+101
* certdump.c (print_sexp): Renamed to gpgsm_dump_serial, made global. (print_time): Renamed to gpgsm_dump_time, made global. (gpgsm_dump_serial): Take a real S-Expression as argument and print the first item. * keylist.c (list_cert_colon): Ditto. * keydb.c (keydb_search_issuer_sn): Ditto. * decrypt.c (print_integer_sexp): Removed and made callers use gpgsm_dump_serial. * verify.c (print_time): Removed, made callers use gpgsm_dump_time.
2001-12-19assuan/Marcus Brinkmann2-1/+5
2001-12-14 Marcus Brinkmann <[email protected]> * assuan-buffer.c (_assuan_read_line): New variable ATTICLEN, use it to save the length of the attic line. Rediddle the code a bit to make it more clear what happens. agent/ 2001-12-19 Marcus Brinkmann <[email protected]> * query.c (start_pinentry): Add new argument to assuan_pipe_connect. sm/ 2001-12-19 Marcus Brinkmann <[email protected]> * call-agent.c (start_agent): Add new argument to assuan_pipe_connect.
2001-12-18* Makefile.am (AM_CPPFLAGS): Add flags for libksbaNEWPG-0-0-0Werner Koch1-2/+2
* Makefile.am (AM_CPPFLAGS): Include flags for gcrypt and ksba * Makefile.am: Use LIBGCRYPT macros
2001-12-18Changes to be used with the new libksba interface.Werner Koch12-172/+175
libgcrypt-1.1.5 is required (cvs or tarball)
2001-12-15* gpgsm.c (main): Renamed the default key database to "keyring.kbx".Werner Koch2-1/+3
2001-12-15* decrypt.c (gpgsm_decrypt): Write STATUS_DECRYPTION_*.Werner Koch5-6/+50
* sign.c (gpgsm_sign): Write a STATUS_SIG_CREATED.
2001-12-14* keylist.c (list_cert_colon): Kludge to show an email addressWerner Koch3-1/+55
encoded in the subject's DN.
2001-12-14* verify.c (gpgsm_verify): Add hash debug helpersWerner Koch5-3/+73
* sign.c (gpgsm_sign): Ditto. * base64.c (base64_reader_cb): Reset the linelen when we need to skip the line and adjusted test; I somehow forgot about DeMorgan. * server.c (cmd_encrypt,cmd_decrypt,cmd_sign,cmd_verify) (cmd_import): Close the FDs on success. (close_message_fd): New. (input_notify): Setting autodetect_encoding to 0 after initializing it to 0 is pretty pointless. Easy to fix.
2001-12-14* gpgsm.c (main): New option --debug-wait n, so that it isWerner Koch3-17/+23
possible to attach gdb when used in server mode.
2001-12-14* util.h (digitp, hexdigitp): New ctype like macros.Werner Koch1-1/+1
(atoi_1,atoi_2,atoi_4,xtoi_1,xtoi_2): New. * command.c: Removed the conversion macros as they are now in ../common/util.h.
2001-12-14* sign.c (get_default_signer): Use keydb_classify_name here.Werner Koch3-2/+13
2001-12-14Fixed test keyWerner Koch1-1/+1
2001-12-14Fixed test keyWerner Koch2-2/+2
2001-12-14* keylist.c (list_cert_colon): Print alternative names of subjectWerner Koch2-2/+6
and a few other values.
2001-12-13assuan/Marcus Brinkmann2-4/+8
2001-12-14 Marcus Brinkmann <[email protected]> * assuan-defs.h (LINELENGTH): Define as ASSUAN_LINELENGTH. assuan.h: Define ASSUAN_LINELENGTH. agent/ 2001-12-14 Marcus Brinkmann <[email protected]> * query.c (LINELENGTH): Removed. (agent_askpin): Use ASSUAN_LINELENGTH, not LINELENGTH. sm/ 2001-12-14 Marcus Brinkmann <[email protected]> * call-agent.c (LINELENGTH): Removed. (gpgsm_agent_pksign): Use ASSUAN_LINELENGTH, not LINELENGTH. (gpgsm_agent_pkdecrypt): Likewise.
2001-12-13* keylist.c (list_cert_colon): Print alternative names of subjectWerner Koch6-29/+65
and a few other values.
2001-12-13Now that the DN encoding works more correct, we have to update theWerner Koch1-1/+1
default key.
2001-12-13Made decryption work in --server mode, allow output of plain base64,Werner Koch4-35/+76
allow --armor and --base64 arguments for INPUT and OUTPUT, new global option --base64, cleaned up the help page.
2001-12-12* gpgsm.c (main): New options --assume-{armor,base64,binary}.Werner Koch3-5/+65
* base64.c (base64_reader_cb): Fixed non-autodetection mode.
2001-12-11Implemented encryption in server mode.Werner Koch11-59/+485
Allow to specify a recipient on the commandline There is still a default hardwired recipient if none has been set.
2001-12-10--encrypt does now work for a hardwired key.Werner Koch3-106/+424
2001-12-06Decryption does now workWerner Koch4-31/+292
2001-12-05Started with decryption stuffWerner Koch9-367/+372
2001-11-27--armor does now produce PEM format.Werner Koch5-12/+188
2001-11-27* base64.c: New. Changed all other functions to use this insteadWerner Koch10-331/+782
of direct creation of ksba_reader/writer. * gpgsm.c (main): Set ctrl.auto_encoding unless --no-armor is used. This way we can feed PEM encoded stuff to --verify.
2001-11-26* gpgsm.c: New option --agent-programWerner Koch4-5/+21
* call-agent.c (start_agent): Allow to override the default path to the agent.
2001-11-26* keydb.c (keydb_add_resource): Create keyboxWerner Koch7-149/+247
* keylist.c (gpgsm_list_keys): Fixed non-server keylisting. * server.c (rc_to_assuan_status): New. Use it for all commands.