aboutsummaryrefslogtreecommitdiffstats
path: root/sm (follow)
Commit message (Collapse)AuthorAgeFilesLines
* * gpgsm.c (main): New command --list-sigsNEWPG-0-3-7Werner Koch2002-06-045-5/+480
| | | | | | | * keylist.c (list_cert_std): New. Use it whenever colon mode is not used. (list_cert_chain): New.
* * gpgsm.c (main): Don't print the "go ahead" message for anWerner Koch2002-05-312-1/+6
| | | | | invalid command.
* * import.c (gpgsm_import): Add error messages.Werner Koch2002-05-232-1/+19
|
* * keylist.c (list_internal_keys): Renamed from gpgsm_list_keys.Werner Koch2002-05-216-25/+342
| | | | | | | | | | | (list_external_keys): New. (gpgsm_list_keys): Dispatcher for above. * call-dirmngr.c (lookup_cb,pattern_from_strlist) (gpgsm_dirmngr_lookup): New. * server.c (option_handler): Handle new option --list-mode. (do_listkeys): Handle options and actually use the mode argument. (get_status_string): New code TRUNCATED.
* * import.c (gpgsm_import): Try to identify the type of input andWerner Koch2002-05-212-17/+88
| | | | | | | | | | handle certs-only messages. * maperror.c (map_gcry_err): Add libgcrypt's new S-expression errors. (map_ksba_err): Add a few mappings. * configure.ac: We now require libgcrypt 1.1.7 and libksba 0.4.2.
* sm/Werner Koch2002-05-145-6/+24
| | | | | | | | | | | | | | * gpgsm.c: New option --faked-system-time * sign.c (gpgsm_sign): And use it here. * certpath.c (gpgsm_validate_path): Ditto. common/ * gettime.c: New. agent/ * cache.c (housekeeping, agent_put_cache): Use our time() wrapper. / * doc/: New * configure.ac, Makefile.am: Added doc/
* * certpath.c (gpgsm_validate_path): Added EXPTIME arg and changedWerner Koch2002-05-037-40/+96
| | | | | | | all callers. * verify.c (gpgsm_verify): Tweaked usage of log_debug and log_error. Return EXPSIG status and add expiretime to VALIDSIG.
* Debug message cleanups.Werner Koch2002-04-275-7/+18
|
* * call-agent.c (start_agent): Make copies of old locales and checkWerner Koch2002-04-252-6/+29
| | | | | | | for setlocale. * configure.ac: Check for setlocale.
* 2002-04-25 Marcus Brinkmann <[email protected]>Marcus Brinkmann2002-04-242-17/+30
| | | | | | * call-agent.c (start_agent): Fix error handling logic so the locale is always correctly reset.
* 2002-04-25 Marcus Brinkmann <[email protected]>Marcus Brinkmann2002-04-244-10/+57
| | | | | | | | * server.c (option_handler): Accept display, ttyname, ttytype, lc_ctype and lc_messages options. * gpgsm.c (main): Allocate memory for these options. * gpgsm.h (struct opt): Make corresponding members non-const.
* 2002-04-24 Marcus Brinkmann <[email protected]>Marcus Brinkmann2002-04-244-4/+129
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * configure.ac: Check for locale.h. agent/ 2002-04-24 Marcus Brinkmann <[email protected]> * agent.h (struct opt): Add members display, ttyname, ttytype, lc_ctype, and lc_messages. * gpg-agent.c (enum cmd_and_opt_values): Add oDisplay, oTTYname, oTTYtype, oLCctype, and LCmessages. (main): Handle these options. * command.c (option_handler): New function. (register_commands): Register option handler. * query.c (start_pinentry): Pass the various display and tty options to the pinentry. sm/ 2002-04-24 Marcus Brinkmann <[email protected]> * gpgsm.h (struct opt): New members display, ttyname, ttytype, lc_ctype, lc_messages. * gpgsm.c (enum cmd_and_opt_values): New members oDisplay, oTTYname, oTTYtype, oLCctype, oLCmessages. (opts): New entries for these options. (main): Handle these new options. * call-agent.c (start_agent): Set the various display and tty parameter after resetting.
* * certreqgen.c (gpgsm_genkey): Write status output on success.Werner Koch2002-04-182-0/+5
|
* released 0.3.5NEWPG-0-3-5Werner Koch2002-04-151-1/+1
|
* * gpgsm.c (main): Check ksba version.Werner Koch2002-04-152-2/+9
|
* * certpath.c (find_up): New to use the authorithKeyIdentifier.Werner Koch2002-04-153-8/+67
| | | | | Use it in all other functions to locate the signing cert..
* * certlist.c (cert_usable_p): New.Werner Koch2002-04-127-8/+148
| | | | | | | | | | | | (gpgsm_cert_use_sign_p,gpgsm_cert_use_encrypt_p): New. (gpgsm_cert_use_verify_p,gpgsm_cert_use_decrypt_p): New. (gpgsm_add_to_certlist): Check the key usage. * sign.c (gpgsm_sign): Ditto. * verify.c (gpgsm_verify): Print a message wehn an unsuitable certificate was used. * decrypt.c (gpgsm_decrypt): Ditto * keylist.c (print_capabilities): Determine values from the cert.
* * certpath.c (gpgsm_walk_cert_chain): Be a bit more silent onWerner Koch2002-03-283-2/+10
| | | | | common errors.
* * keylist.c (list_cert_colon): Fixed listing of crt record; theWerner Koch2002-03-282-4/+31
| | | | | issuer is not at the right place. Print a chainingID.
* * export.c: New.Werner Koch2002-03-216-8/+304
| | | | | | * gpgsm.c: Add command --export. * server.c (cmd_export): New.
* Doc fixes, moved some fizmes to TODO, fixed minor bugs.Werner Koch2002-03-185-9/+5
|
* * decrypt.c (gpgsm_decrypt): Allow multiple recipients.Werner Koch2002-03-134-14/+33
|
* * verify.c (gpgsm_verify): Detect certs-only message.Werner Koch2002-03-1211-41/+120
|
* * server.c (cmd_listkeys, cmd_listsecretkeys): Divert toNEWPG-0-3-2Werner Koch2002-03-063-25/+119
| | | | | | (do_listkeys): new. Add pattern parsing. * keylist.c (gpgsm_list_keys): Handle selection pattern.
* sm/Werner Koch2002-03-065-3/+126
| | | | | | | | | | | | | | | | | * gpgsm.c: New command --learn-card * call-agent.c (learn_cb,gpgsm_agent_learn): New. * gpgsm.c (main): Print error messages for non-implemented commands. agent/ * learncard.c: New. * divert-scd.c (ask_for_card): The serial number is binary so convert it to hex here. * findkey.c (agent_write_private_key): New. * genkey.c (store_key): And use it here. scd/ * pkdecrypt.c (agent_pkdecrypt): Changed the way the diversion is done. * divert-scd.c (divert_pkdecrypt): Changed interface and implemented it.
* Decryption using a Cryptoflex card does now work.Werner Koch2002-03-063-2/+16
|
* * gpgsm.c, gpgsm.h: Add local_user.Werner Koch2002-03-059-55/+96
| | | | | | | | | | | * sign.c (gpgsm_get_default_cert): New. (get_default_signer): Use the new function if local_user is not set otherwise used that value. * encrypt.c (get_default_recipient): Removed. (gpgsm_encrypt): Use gpgsm_get_default_cert. * verify.c (gpgsm_verify): Better error text for a bad signature found by comparing the hashs.
* Minor fixes; about to release 0.3.1NEWPG-0-3-1Werner Koch2002-03-041-1/+1
|
* Changes needed to support smartcards. Well, only _support_. There isWerner Koch2002-02-284-14/+20
| | | | | no real code yet.
* * server.c (option_handler): Allow to use -2 for "send all certsWerner Koch2002-02-259-6/+69
| | | | | | | except the root cert". * sign.c (add_certificate_list): Implement it here. * certpath.c (gpgsm_is_root_cert): New.
* * certpath.c (check_cert_policy): New.Werner Koch2002-02-195-11/+278
| | | | | | | | (gpgsm_validate_path): And call it from here. * gpgsm.c (main): New options --policy-file, --disable-policy-checks and --enable-policy-checks. * gpgsm.h (opt): Added policy_file, no_policy_checks.
* * certpath.c (gpgsm_validate_path): Ask the agent to add theWerner Koch2002-02-184-15/+77
| | | | | | certificate into the trusted list. * call-agent.c (gpgsm_agent_marktrusted): New.
* Set version numbers add a commentNEWPG-0-3-0Werner Koch2002-02-071-0/+1
|
* * certlist.c (gpgsm_add_to_certlist): Check that the specifiedWerner Koch2002-02-079-21/+78
| | | | | | | | | | | | | | | | name identifies a certificate unambiguously. (gpgsm_find_cert): Ditto. * server.c (cmd_listkeys): Check that the data stream is available. (cmd_listsecretkeys): Ditto. (has_option): New. (cmd_sign): Fix ambiguousity in option recognition. * gpgsm.c (main): Enable --logger-fd. * encrypt.c (gpgsm_encrypt): Increased buffer size for better performance. * call-agent.c (gpgsm_agent_pksign): Check the S-Exp received from the agent. * keylist.c (list_cert_colon): Filter out control characters.
* * decrypt.c (gpgsm_decrypt): Bail out after an decryption error.Werner Koch2002-02-063-45/+45
| | | | | | | | * server.c (reset_notify): Close input and output FDs. (cmd_encrypt,cmd_decrypt,cmd_verify,cmd_sign.cmd_import) (cmd_genkey): Close the FDs and release the recipient list even in the error case.
* 2002-02-01 Marcus Brinkmann <[email protected]>Marcus Brinkmann2002-02-012-4/+5
| | | | | * sign.c (gpgsm_sign): Do not release certificate twice.
* * call-agent.c (gpgsm_agent_havekey): New.Werner Koch2002-01-296-14/+89
| | | | | | | | | | | * keylist.c (list_cert_colon): New arg HAVE_SECRET, print "crs" when we know that the secret key is available. (gpgsm_list_keys): New arg MODE, check whether a secret key is available. Changed all callers. * gpgsm.c (main): New command --list-secret-keys. * server.c (cmd_listsecretkeys): New. (cmd_listkeys): Return secret keys with "crs" record.
* * certreqgen.c (create_request): Store the email address in the req.Werner Koch2002-01-282-1/+31
| | | | | | | | Note, that I have not yet achieved to generate a cert with the subjectAltName using OpenSSL. It seems that openssl requires the email address to be part of the subject DN (subjectAltName=email:copy) but this is something we don't want to do.
* * gpgsm.c (main): Disable core dumps.Werner Koch2002-01-257-10/+235
| | | | | | | | | | | | | * sign.c (add_certificate_list): New. (gpgsm_sign): Add the certificates to the CMS object. * certpath.c (gpgsm_walk_cert_chain): New. * gpgsm.h (server_control_s): Add included_certs. * gpgsm.c: Add option --include-certs. (gpgsm_init_default_ctrl): New. (main): Call it. * server.c (gpgsm_server): Ditto. (option_handler): Support --include-certs.
* * certpath.c (gpgsm_validate_path): Print the DN of a missing issuer.Werner Koch2002-01-235-15/+75
| | | | | | * certdump.c (gpgsm_dump_string): New. (print_dn): Replaced by above.
* * certpath.c (unknown_criticals): New.Werner Koch2002-01-223-18/+235
| | | | | | | (allowed_ca): New. (gpgsm_validate_path): Check validity, CA attribute, path length and unknown critical extensions.
* * gpgsm.c: Add option --enable-crl-checks.Werner Koch2002-01-214-45/+105
| | | | | | * call-agent.c (start_agent): Implemented socket based access. * call-dirmngr.c (start_dirmngr): Ditto.
* * server.c (option_handler): New.Werner Koch2002-01-202-0/+17
| | | | | (gpgsm_server): Register it with assuan.
* * server.c (gpgsm_server): Use assuan_deinit_server and setupWerner Koch2002-01-194-2/+16
| | | | | | | | | assuan logging if enabled. * call-agent.c (inq_ciphertext_cb): Don't show the session key in an Assuan log file. * gpgsm.c (my_strusage): Take bugreport address from configure.ac
* * import.c (gpgsm_import): Just do a basic cert check beforeWerner Koch2002-01-1511-80/+352
| | | | | | | | | | | | | | | | storing it. * certpath.c (gpgsm_basic_cert_check): New. * keydb.c (keydb_store_cert): New. * import.c (store_cert): Removed and change all caller to use the new function. * verify.c (store_cert): Ditto. * certlist.c (gpgsm_add_to_certlist): Validate the path * certpath.c (gpgsm_validate_path): Check the trust list. * call-agent.c (gpgsm_agent_istrusted): New.
* * call-dirmngr.c (inq_certificate): Changed for new interface semantic.Werner Koch2002-01-144-17/+77
| | | | | | | | | * certlist.c (gpgsm_find_cert): New. DirMngr should now work. Remember that there is a --disable-crl-check option in gpgsm to be used when there is a problem with the dirmngr communication or you want to do faster tests.
* * fingerprint.c (gpgsm_get_certid): Print the serialand not theWerner Koch2002-01-132-1/+6
| | | | | hash after the dot.
* * call-dirmngr.c: New.Werner Koch2002-01-119-13/+343
| | | | | | | * certpath.c (gpgsm_validate_path): Check the CRL here. * fingerprint.c (gpgsm_get_certid): New. * gpgsm.c: New options --dirmngr-program and --disable-crl-checks.
* * base64.c (gpgsm_create_writer): Allow to set the object nameWerner Koch2002-01-1011-56/+802
| | | | | | | | * server.c (cmd_genkey): New. * certreqgen.c: New. The parameter handling code has been taken from gnupg/g10/keygen.c version 1.0.6. * call-agent.c (gpgsm_agent_genkey): New.
* * verify.c (gpgsm_verify): Implemented non-detached signatureWerner Koch2001-12-205-17/+59
| | | | | | | verification. Add OUT_FP arg, initialize a writer and changed all callers. * server.c (cmd_verify): Pass an out_fp if one has been set.