aboutsummaryrefslogtreecommitdiffstats
path: root/sm (unfollow)
Commit message (Collapse)AuthorFilesLines
2002-04-15 released 0.3.5NEWPG-0-3-5Werner Koch1-1/+1
2002-04-15* gpgsm.c (main): Check ksba version.Werner Koch2-2/+9
2002-04-15* certpath.c (find_up): New to use the authorithKeyIdentifier.Werner Koch3-8/+67
Use it in all other functions to locate the signing cert..
2002-04-12* certlist.c (cert_usable_p): New.Werner Koch7-8/+148
(gpgsm_cert_use_sign_p,gpgsm_cert_use_encrypt_p): New. (gpgsm_cert_use_verify_p,gpgsm_cert_use_decrypt_p): New. (gpgsm_add_to_certlist): Check the key usage. * sign.c (gpgsm_sign): Ditto. * verify.c (gpgsm_verify): Print a message wehn an unsuitable certificate was used. * decrypt.c (gpgsm_decrypt): Ditto * keylist.c (print_capabilities): Determine values from the cert.
2002-03-28* certpath.c (gpgsm_walk_cert_chain): Be a bit more silent onWerner Koch3-2/+10
common errors.
2002-03-28* keylist.c (list_cert_colon): Fixed listing of crt record; theWerner Koch2-4/+31
issuer is not at the right place. Print a chainingID.
2002-03-21* export.c: New.Werner Koch6-8/+304
* gpgsm.c: Add command --export. * server.c (cmd_export): New.
2002-03-18Doc fixes, moved some fizmes to TODO, fixed minor bugs.Werner Koch5-9/+5
2002-03-13* decrypt.c (gpgsm_decrypt): Allow multiple recipients.Werner Koch4-14/+33
2002-03-12* verify.c (gpgsm_verify): Detect certs-only message.Werner Koch11-41/+120
2002-03-06* server.c (cmd_listkeys, cmd_listsecretkeys): Divert toNEWPG-0-3-2Werner Koch3-25/+119
(do_listkeys): new. Add pattern parsing. * keylist.c (gpgsm_list_keys): Handle selection pattern.
2002-03-06sm/Werner Koch5-3/+126
* gpgsm.c: New command --learn-card * call-agent.c (learn_cb,gpgsm_agent_learn): New. * gpgsm.c (main): Print error messages for non-implemented commands. agent/ * learncard.c: New. * divert-scd.c (ask_for_card): The serial number is binary so convert it to hex here. * findkey.c (agent_write_private_key): New. * genkey.c (store_key): And use it here. scd/ * pkdecrypt.c (agent_pkdecrypt): Changed the way the diversion is done. * divert-scd.c (divert_pkdecrypt): Changed interface and implemented it.
2002-03-06Decryption using a Cryptoflex card does now work.Werner Koch3-2/+16
2002-03-05* gpgsm.c, gpgsm.h: Add local_user.Werner Koch9-55/+96
* sign.c (gpgsm_get_default_cert): New. (get_default_signer): Use the new function if local_user is not set otherwise used that value. * encrypt.c (get_default_recipient): Removed. (gpgsm_encrypt): Use gpgsm_get_default_cert. * verify.c (gpgsm_verify): Better error text for a bad signature found by comparing the hashs.
2002-03-04Minor fixes; about to release 0.3.1NEWPG-0-3-1Werner Koch1-1/+1
2002-02-28Changes needed to support smartcards. Well, only _support_. There isWerner Koch4-14/+20
no real code yet.
2002-02-25* server.c (option_handler): Allow to use -2 for "send all certsWerner Koch9-6/+69
except the root cert". * sign.c (add_certificate_list): Implement it here. * certpath.c (gpgsm_is_root_cert): New.
2002-02-19* certpath.c (check_cert_policy): New.Werner Koch5-11/+278
(gpgsm_validate_path): And call it from here. * gpgsm.c (main): New options --policy-file, --disable-policy-checks and --enable-policy-checks. * gpgsm.h (opt): Added policy_file, no_policy_checks.
2002-02-18* certpath.c (gpgsm_validate_path): Ask the agent to add theWerner Koch4-15/+77
certificate into the trusted list. * call-agent.c (gpgsm_agent_marktrusted): New.
2002-02-07Set version numbers add a commentNEWPG-0-3-0Werner Koch1-0/+1
2002-02-07* certlist.c (gpgsm_add_to_certlist): Check that the specifiedWerner Koch9-21/+78
name identifies a certificate unambiguously. (gpgsm_find_cert): Ditto. * server.c (cmd_listkeys): Check that the data stream is available. (cmd_listsecretkeys): Ditto. (has_option): New. (cmd_sign): Fix ambiguousity in option recognition. * gpgsm.c (main): Enable --logger-fd. * encrypt.c (gpgsm_encrypt): Increased buffer size for better performance. * call-agent.c (gpgsm_agent_pksign): Check the S-Exp received from the agent. * keylist.c (list_cert_colon): Filter out control characters.
2002-02-06* decrypt.c (gpgsm_decrypt): Bail out after an decryption error.Werner Koch3-45/+45
* server.c (reset_notify): Close input and output FDs. (cmd_encrypt,cmd_decrypt,cmd_verify,cmd_sign.cmd_import) (cmd_genkey): Close the FDs and release the recipient list even in the error case.
2002-02-012002-02-01 Marcus Brinkmann <[email protected]>Marcus Brinkmann2-4/+5
* sign.c (gpgsm_sign): Do not release certificate twice.
2002-01-29* call-agent.c (gpgsm_agent_havekey): New.Werner Koch6-14/+89
* keylist.c (list_cert_colon): New arg HAVE_SECRET, print "crs" when we know that the secret key is available. (gpgsm_list_keys): New arg MODE, check whether a secret key is available. Changed all callers. * gpgsm.c (main): New command --list-secret-keys. * server.c (cmd_listsecretkeys): New. (cmd_listkeys): Return secret keys with "crs" record.
2002-01-28* certreqgen.c (create_request): Store the email address in the req.Werner Koch2-1/+31
Note, that I have not yet achieved to generate a cert with the subjectAltName using OpenSSL. It seems that openssl requires the email address to be part of the subject DN (subjectAltName=email:copy) but this is something we don't want to do.
2002-01-25* gpgsm.c (main): Disable core dumps.Werner Koch7-10/+235
* sign.c (add_certificate_list): New. (gpgsm_sign): Add the certificates to the CMS object. * certpath.c (gpgsm_walk_cert_chain): New. * gpgsm.h (server_control_s): Add included_certs. * gpgsm.c: Add option --include-certs. (gpgsm_init_default_ctrl): New. (main): Call it. * server.c (gpgsm_server): Ditto. (option_handler): Support --include-certs.
2002-01-23* certpath.c (gpgsm_validate_path): Print the DN of a missing issuer.Werner Koch5-15/+75
* certdump.c (gpgsm_dump_string): New. (print_dn): Replaced by above.
2002-01-22* certpath.c (unknown_criticals): New.Werner Koch3-18/+235
(allowed_ca): New. (gpgsm_validate_path): Check validity, CA attribute, path length and unknown critical extensions.
2002-01-21* gpgsm.c: Add option --enable-crl-checks.Werner Koch4-45/+105
* call-agent.c (start_agent): Implemented socket based access. * call-dirmngr.c (start_dirmngr): Ditto.
2002-01-20* server.c (option_handler): New.Werner Koch2-0/+17
(gpgsm_server): Register it with assuan.
2002-01-19* server.c (gpgsm_server): Use assuan_deinit_server and setupWerner Koch4-2/+16
assuan logging if enabled. * call-agent.c (inq_ciphertext_cb): Don't show the session key in an Assuan log file. * gpgsm.c (my_strusage): Take bugreport address from configure.ac
2002-01-15* import.c (gpgsm_import): Just do a basic cert check beforeWerner Koch11-80/+352
storing it. * certpath.c (gpgsm_basic_cert_check): New. * keydb.c (keydb_store_cert): New. * import.c (store_cert): Removed and change all caller to use the new function. * verify.c (store_cert): Ditto. * certlist.c (gpgsm_add_to_certlist): Validate the path * certpath.c (gpgsm_validate_path): Check the trust list. * call-agent.c (gpgsm_agent_istrusted): New.
2002-01-14* call-dirmngr.c (inq_certificate): Changed for new interface semantic.Werner Koch4-17/+77
* certlist.c (gpgsm_find_cert): New. DirMngr should now work. Remember that there is a --disable-crl-check option in gpgsm to be used when there is a problem with the dirmngr communication or you want to do faster tests.
2002-01-13* fingerprint.c (gpgsm_get_certid): Print the serialand not theWerner Koch2-1/+6
hash after the dot.
2002-01-11* call-dirmngr.c: New.Werner Koch9-13/+343
* certpath.c (gpgsm_validate_path): Check the CRL here. * fingerprint.c (gpgsm_get_certid): New. * gpgsm.c: New options --dirmngr-program and --disable-crl-checks.
2002-01-10* base64.c (gpgsm_create_writer): Allow to set the object nameWerner Koch11-56/+802
* server.c (cmd_genkey): New. * certreqgen.c: New. The parameter handling code has been taken from gnupg/g10/keygen.c version 1.0.6. * call-agent.c (gpgsm_agent_genkey): New.
2001-12-20* verify.c (gpgsm_verify): Implemented non-detached signatureWerner Koch5-17/+59
verification. Add OUT_FP arg, initialize a writer and changed all callers. * server.c (cmd_verify): Pass an out_fp if one has been set.
2001-12-20* base64.c (base64_reader_cb): Try to detect an S/MIME body part.Werner Koch8-83/+101
* certdump.c (print_sexp): Renamed to gpgsm_dump_serial, made global. (print_time): Renamed to gpgsm_dump_time, made global. (gpgsm_dump_serial): Take a real S-Expression as argument and print the first item. * keylist.c (list_cert_colon): Ditto. * keydb.c (keydb_search_issuer_sn): Ditto. * decrypt.c (print_integer_sexp): Removed and made callers use gpgsm_dump_serial. * verify.c (print_time): Removed, made callers use gpgsm_dump_time.
2001-12-19assuan/Marcus Brinkmann2-1/+5
2001-12-14 Marcus Brinkmann <[email protected]> * assuan-buffer.c (_assuan_read_line): New variable ATTICLEN, use it to save the length of the attic line. Rediddle the code a bit to make it more clear what happens. agent/ 2001-12-19 Marcus Brinkmann <[email protected]> * query.c (start_pinentry): Add new argument to assuan_pipe_connect. sm/ 2001-12-19 Marcus Brinkmann <[email protected]> * call-agent.c (start_agent): Add new argument to assuan_pipe_connect.
2001-12-18* Makefile.am (AM_CPPFLAGS): Add flags for libksbaNEWPG-0-0-0Werner Koch1-2/+2
* Makefile.am (AM_CPPFLAGS): Include flags for gcrypt and ksba * Makefile.am: Use LIBGCRYPT macros
2001-12-18Changes to be used with the new libksba interface.Werner Koch12-172/+175
libgcrypt-1.1.5 is required (cvs or tarball)
2001-12-15* gpgsm.c (main): Renamed the default key database to "keyring.kbx".Werner Koch2-1/+3
2001-12-15* decrypt.c (gpgsm_decrypt): Write STATUS_DECRYPTION_*.Werner Koch5-6/+50
* sign.c (gpgsm_sign): Write a STATUS_SIG_CREATED.
2001-12-14* keylist.c (list_cert_colon): Kludge to show an email addressWerner Koch3-1/+55
encoded in the subject's DN.
2001-12-14* verify.c (gpgsm_verify): Add hash debug helpersWerner Koch5-3/+73
* sign.c (gpgsm_sign): Ditto. * base64.c (base64_reader_cb): Reset the linelen when we need to skip the line and adjusted test; I somehow forgot about DeMorgan. * server.c (cmd_encrypt,cmd_decrypt,cmd_sign,cmd_verify) (cmd_import): Close the FDs on success. (close_message_fd): New. (input_notify): Setting autodetect_encoding to 0 after initializing it to 0 is pretty pointless. Easy to fix.
2001-12-14* gpgsm.c (main): New option --debug-wait n, so that it isWerner Koch3-17/+23
possible to attach gdb when used in server mode.
2001-12-14* util.h (digitp, hexdigitp): New ctype like macros.Werner Koch1-1/+1
(atoi_1,atoi_2,atoi_4,xtoi_1,xtoi_2): New. * command.c: Removed the conversion macros as they are now in ../common/util.h.
2001-12-14* sign.c (get_default_signer): Use keydb_classify_name here.Werner Koch3-2/+13
2001-12-14Fixed test keyWerner Koch1-1/+1
2001-12-14Fixed test keyWerner Koch2-2/+2