aboutsummaryrefslogtreecommitdiffstats
path: root/sm (unfollow)
Commit message (Collapse)AuthorFilesLines
2012-01-03Silence gcc warning.Marcus Brinkmann1-1/+1
* sm/call-dirmngr.c (get_cached_cert): Make sure buflen is initialized.
2011-12-07gpgsm: Add new validation model "steed".Werner Koch7-25/+94
* sm/gpgsm.h (VALIDATE_FLAG_STEED): New. * sm/gpgsm.c (gpgsm_parse_validation_model): Add model "steed". * sm/server.c (option_handler): Allow validation model "steed". * sm/certlist.c (gpgsm_cert_has_well_known_private_key): New. * sm/certchain.c (do_validate_chain): Handle the well-known-private-key attribute. Support the "steed" model. (gpgsm_validate_chain): Ditto. * sm/verify.c (gpgsm_verify): Return "steed" in the trust status line. * sm/keylist.c (list_cert_colon): Print the new 'w' flag. -- This is the first part of changes to implement the STEED proposal as described at http://g10code.com/steed.html . The idea for X.509 is not to use plain self-signed certificates but certificates signed by a dummy CA (i.e. one for which the private key is known). Having a single CA as an indication for the use of STEED might help other X.509 implementations to implement STEED.
2011-12-06gpgsm: Allow specification of an AuthorityKeyIdentifier.Werner Koch1-0/+56
* sm/certreqgen.c (pAUTHKEYID): New. (read_parameters): Add keyword Authority-Key-Id. (proc_parameters): Check its value. (create_request): Insert an Authority-Key-Id.
2011-12-06gpgsm: Allow arbitrary extensions for cert creation.Werner Koch2-2/+183
* sm/certreqgen.c (pSUBJKEYID, pEXTENSION): New. (read_parameters): Add new keywords. (proc_parameters): Check values of new keywords. (create_request): Add SubjectKeyId and extensions. (parse_parameter_usage): Support "cert" and the encrypt alias "encr".
2011-12-06gpgsm: Fix storing of the serial numberWerner Koch1-1/+1
* sm/certreqgen.c (create_request): Fix hex-bin conversion.
2011-12-02Generate the ChangeLog from commit logs.Werner Koch2-1/+13
* scripts/gitlog-to-changelog: New script. Taken from gnulib. * scripts/git-log-fix: New file. * scripts/git-log-footer: New file. * doc/HACKING: Describe the ChangeLog policy * ChangeLog: New file. * Makefile.am (EXTRA_DIST): Add new files. (gen-ChangeLog): New. (dist-hook): Run gen-ChangeLog. Rename all ChangeLog files to ChangeLog-2011.
2011-12-01Generate the ChangeLog from commit logs.Werner Koch2-1/+13
* scripts/gitlog-to-changelog: New script. Taken from gnulib. * scripts/git-log-fix: New file. * scripts/git-log-footer: New file. * doc/HACKING: Describe the ChangeLog policy * ChangeLog: New file. * Makefile.am (EXTRA_DIST): Add new files. (gen-ChangeLog): New. (dist-hook): Run gen-ChangeLog. Rename all ChangeLog files to ChangeLog-2011.
2011-09-28Add a flag parameter to dotlock_create.Werner Koch2-2/+2
This allows us to extend this function in the future.
2011-09-23Renamed the lock functions.Werner Koch2-7/+7
Also cleaned up the dotlock code for easier readability.
2011-09-20Replace gcry_md_start_debug by gcry_md_debug.Werner Koch5-6/+14
This is to allow building with Libgcrypt master (1.6) which has some cleanups in the API/ABI.
2011-08-10Fixed set but unused variable bugsWerner Koch3-5/+6
2011-07-21Try to get the only-valid-if-cert-valid cert from the dirmngr first.Werner Koch2-15/+97
This should always work because the dirmngr asked us to validate the given certificate. This should make OCSP configuration easier because there is less requirement to install all certificates for Dirmngr and gpgsm. CAUTION: This code has not yet been tested.
2011-06-01Fix size_t vs int issues.Marcus Brinkmann2-1/+5
2011-04-25Fix regression in gpg's mail address parsing.Werner Koch8-9/+20
Since 2009-12-08 gpg was not able to find email addresses indicated by a leading '<'. This happened when I merged the user id classification code of gpgsm and gpg.
2011-03-10Support pkcs#12 import of PBES2 encoded data.Werner Koch2-68/+297
This is so that we read compatible with gnutls's certtool. Only AES-128 is supported. The latest Libgcrypt from git is required. Fixes bug#1321.
2011-03-08Prepare for 1.5.0beta2gnupg-2.1.0beta2Werner Koch1-3/+6
2011-03-03Fix faulty gcc warningsWerner Koch2-5/+9
2011-03-01Move parameter file description to the manual.Werner Koch1-121/+14
2011-03-01Support X.509 certificate creation.Werner Koch6-80/+607
Using "gpgsm --genkey" allows the creation of a self-signed certificate via a new prompt. Using "gpgsm --genkey --batch" should allow the creation of arbitrary certificates controlled by a parameter file. An example parameter file is Key-Type: RSA Key-Length: 1024 Key-Grip: 2C50DC6101C10C9C643E315FE3EADCCBC24F4BEA Key-Usage: sign, encrypt Serial: random Name-DN: CN=some test key Name-Email: [email protected] Name-Email: [email protected] Hash-Algo: SHA384 not-after: 2038-01-16 12:44 This creates a self-signed X.509 certificate using the key given by the keygrip and using SHA-384 as hash algorithm. The keyword signing-key can be used to sign the certificate with a different key. See sm/certreggen.c for details.
2011-02-04Nuked almost all trailing white space.post-nuke-of-trailing-wsWerner Koch27-947/+916
We better do this once and for all instead of cluttering all future commits with diffs of trailing white spaces. In the majority of cases blank or single lines are affected and thus this change won't disturb a git blame too much. For future commits the pre-commit scripts checks that this won't happen again.
2010-12-02s/AES/AES128/ in diagnostics and --list-configWerner Koch2-2/+2
2010-11-26Remove superfluous parameter.Werner Koch9-78/+51
Make self-check interval larger
2010-11-23Change stack size for Wince.Werner Koch2-0/+5
Allow for a longer agent atartup under wince. Print gpg output via estream.
2010-10-26Re-implemented GPG's --passwd command and improved it.Werner Koch1-0/+2
2010-10-08Add new option --with-keygripWerner Koch4-0/+24
2010-10-05Don't set SSH_AGENTPID_INFO.Werner Koch1-1/+1
Doc fixes. Allow TCP and local sockets in watchgnupg.
2010-10-01Exporting secret keys via gpg-agent is now basically supported.Werner Koch5-9/+26
A couple of forward ported changes. Doc updates.
2010-08-18Fix regression in logging.Werner Koch2-26/+28
Add a registry key to enable catch-all remote debugging for W32. Replace more stdio stuff by estream.
2010-08-16Auto-start dirmngr.Werner Koch5-145/+31
2010-06-21Implement export of pkcs#12 objects using a direct agent connection.Werner Koch8-297/+321
2010-06-17Avoid using the protect-tool to import pkcs#12.Werner Koch7-209/+2892
2010-06-10common/Marcus Brinkmann2-0/+13
2010-06-11 Marcus Brinkmann <[email protected]> * sysutils.c (translate_sys2libc_fd): Revert last change. (translate_sys2libc_fd_int): Revert last change. sm/ 2010-06-11 Marcus Brinkmann <[email protected]> * server.c (cmd_message) [HAVE_W32CE_SYSTEM]: Finish pipe.
2010-06-102010-06-10 Marcus Brinkmann <[email protected]>Marcus Brinkmann1-0/+5
* server.c (SERVER_STDIN, SERVER_STDOUT): New macros. (gpgsm_server): Use them with assuan_fdopen.
2010-06-10common/Marcus Brinkmann1-2/+9
2010-06-10 Marcus Brinkmann <[email protected]> * estream.c (_es_get_std_stream): Fix cut&paste bug. sm/ 2010-06-10 Marcus Brinkmann <[email protected]> * server.c (SERVER_STDIN, SERVER_STDOUT): New macros. (gpgsm_server): Use them with assuan_fdopen.
2010-06-09Merged Dirmngr with GnuPG.Werner Koch2-2/+4
A few code changes to support dirmngr.
2010-04-23Decryption and signi via agent is now implemented.Werner Koch1-1/+1
2010-04-232010-04-23 Marcus Brinkmann <[email protected]>Marcus Brinkmann2-2/+7
* certreqgen.c (read_parameters): Use ascii_isspace instead of spacep to stop at newline, too.
2010-04-14Whole lot of changes to support CE.Werner Koch4-35/+62
2010-03-29Minor cleanupsWerner Koch1-1/+0
2010-03-24More changes for CE. gpgsm does now build and run a keylisting.Werner Koch8-37/+55
2010-03-22More chnages to use estream. Add a way to replace the standardWerner Koch2-2/+2
descriptors.
2010-03-15Finished the bulk of changes to use estream in most places instead ofWerner Koch2-1/+3
stdio.
2010-03-11Use a custom log handler for libassuan.Werner Koch3-5/+9
2010-03-10Merged jnlib into common.Werner Koch3-3/+7
2010-03-08Removed almost al dup calls.Werner Koch7-46/+47
2010-03-08Replace use stdio by estream functions.Werner Koch11-199/+229
2010-02-02Various changes to eventually support openpgp keys in pgp-agent.Werner Koch1-1/+1
Comment fixes. Minor chnages in preparation of a W32CE port.
2009-12-17Implement --faked-systrem-time for gpg.Werner Koch1-3/+3
Typo and comment fixes.
2009-12-14add new gpgsm server command PASSWDWerner Koch2-1/+39
2009-12-10Add option --cert-extension.Werner Koch4-3/+35
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-15 08:12:42 +0000