aboutsummaryrefslogtreecommitdiffstats
path: root/sm (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Silence gcc warning.Marcus Brinkmann2012-01-031-1/+1
| | | | * sm/call-dirmngr.c (get_cached_cert): Make sure buflen is initialized.
* gpgsm: Add new validation model "steed".Werner Koch2011-12-077-25/+94
| | | | | | | | | | | | | | | | | | | | * sm/gpgsm.h (VALIDATE_FLAG_STEED): New. * sm/gpgsm.c (gpgsm_parse_validation_model): Add model "steed". * sm/server.c (option_handler): Allow validation model "steed". * sm/certlist.c (gpgsm_cert_has_well_known_private_key): New. * sm/certchain.c (do_validate_chain): Handle the well-known-private-key attribute. Support the "steed" model. (gpgsm_validate_chain): Ditto. * sm/verify.c (gpgsm_verify): Return "steed" in the trust status line. * sm/keylist.c (list_cert_colon): Print the new 'w' flag. -- This is the first part of changes to implement the STEED proposal as described at http://g10code.com/steed.html . The idea for X.509 is not to use plain self-signed certificates but certificates signed by a dummy CA (i.e. one for which the private key is known). Having a single CA as an indication for the use of STEED might help other X.509 implementations to implement STEED.
* gpgsm: Allow specification of an AuthorityKeyIdentifier.Werner Koch2011-12-061-0/+56
| | | | | | | * sm/certreqgen.c (pAUTHKEYID): New. (read_parameters): Add keyword Authority-Key-Id. (proc_parameters): Check its value. (create_request): Insert an Authority-Key-Id.
* gpgsm: Allow arbitrary extensions for cert creation.Werner Koch2011-12-062-2/+183
| | | | | | | | * sm/certreqgen.c (pSUBJKEYID, pEXTENSION): New. (read_parameters): Add new keywords. (proc_parameters): Check values of new keywords. (create_request): Add SubjectKeyId and extensions. (parse_parameter_usage): Support "cert" and the encrypt alias "encr".
* gpgsm: Fix storing of the serial numberWerner Koch2011-12-061-1/+1
| | | | * sm/certreqgen.c (create_request): Fix hex-bin conversion.
* Generate the ChangeLog from commit logs.Werner Koch2011-12-012-1/+13
| | | | | | | | | | | | | * scripts/gitlog-to-changelog: New script. Taken from gnulib. * scripts/git-log-fix: New file. * scripts/git-log-footer: New file. * doc/HACKING: Describe the ChangeLog policy * ChangeLog: New file. * Makefile.am (EXTRA_DIST): Add new files. (gen-ChangeLog): New. (dist-hook): Run gen-ChangeLog. Rename all ChangeLog files to ChangeLog-2011.
* Add a flag parameter to dotlock_create.Werner Koch2011-09-282-2/+2
| | | | This allows us to extend this function in the future.
* Renamed the lock functions.Werner Koch2011-09-232-7/+7
| | | | Also cleaned up the dotlock code for easier readability.
* Replace gcry_md_start_debug by gcry_md_debug.Werner Koch2011-09-205-6/+14
| | | | | This is to allow building with Libgcrypt master (1.6) which has some cleanups in the API/ABI.
* Fixed set but unused variable bugsWerner Koch2011-08-103-5/+6
|
* Try to get the only-valid-if-cert-valid cert from the dirmngr first.Werner Koch2011-07-212-15/+97
| | | | | | | | | This should always work because the dirmngr asked us to validate the given certificate. This should make OCSP configuration easier because there is less requirement to install all certificates for Dirmngr and gpgsm. CAUTION: This code has not yet been tested.
* Fix size_t vs int issues.Marcus Brinkmann2011-06-012-1/+5
|
* Fix regression in gpg's mail address parsing.Werner Koch2011-04-258-9/+20
| | | | | | Since 2009-12-08 gpg was not able to find email addresses indicated by a leading '<'. This happened when I merged the user id classification code of gpgsm and gpg.
* Support pkcs#12 import of PBES2 encoded data.Werner Koch2011-03-102-68/+297
| | | | | | | This is so that we read compatible with gnutls's certtool. Only AES-128 is supported. The latest Libgcrypt from git is required. Fixes bug#1321.
* Prepare for 1.5.0beta2gnupg-2.1.0beta2Werner Koch2011-03-081-3/+6
|
* Fix faulty gcc warningsWerner Koch2011-03-032-5/+9
|
* Move parameter file description to the manual.Werner Koch2011-03-011-121/+14
|
* Support X.509 certificate creation.Werner Koch2011-03-016-80/+607
| | | | | | | | | | | | | | | | | | | | | | | | | Using "gpgsm --genkey" allows the creation of a self-signed certificate via a new prompt. Using "gpgsm --genkey --batch" should allow the creation of arbitrary certificates controlled by a parameter file. An example parameter file is Key-Type: RSA Key-Length: 1024 Key-Grip: 2C50DC6101C10C9C643E315FE3EADCCBC24F4BEA Key-Usage: sign, encrypt Serial: random Name-DN: CN=some test key Name-Email: [email protected] Name-Email: [email protected] Hash-Algo: SHA384 not-after: 2038-01-16 12:44 This creates a self-signed X.509 certificate using the key given by the keygrip and using SHA-384 as hash algorithm. The keyword signing-key can be used to sign the certificate with a different key. See sm/certreggen.c for details.
* Nuked almost all trailing white space.post-nuke-of-trailing-wsWerner Koch2011-02-0427-947/+916
| | | | | | | | We better do this once and for all instead of cluttering all future commits with diffs of trailing white spaces. In the majority of cases blank or single lines are affected and thus this change won't disturb a git blame too much. For future commits the pre-commit scripts checks that this won't happen again.
* s/AES/AES128/ in diagnostics and --list-configWerner Koch2010-12-022-2/+2
|
* Remove superfluous parameter.Werner Koch2010-11-269-78/+51
| | | | | Make self-check interval larger
* Change stack size for Wince.Werner Koch2010-11-232-0/+5
| | | | | | Allow for a longer agent atartup under wince. Print gpg output via estream.
* Re-implemented GPG's --passwd command and improved it.Werner Koch2010-10-261-0/+2
|
* Add new option --with-keygripWerner Koch2010-10-084-0/+24
|
* Don't set SSH_AGENTPID_INFO.Werner Koch2010-10-051-1/+1
| | | | | | Doc fixes. Allow TCP and local sockets in watchgnupg.
* Exporting secret keys via gpg-agent is now basically supported.Werner Koch2010-10-015-9/+26
| | | | | | A couple of forward ported changes. Doc updates.
* Fix regression in logging.Werner Koch2010-08-182-26/+28
| | | | | | Add a registry key to enable catch-all remote debugging for W32. Replace more stdio stuff by estream.
* Auto-start dirmngr.Werner Koch2010-08-165-145/+31
|
* Implement export of pkcs#12 objects using a direct agent connection.Werner Koch2010-06-218-297/+321
|
* Avoid using the protect-tool to import pkcs#12.Werner Koch2010-06-177-209/+2892
|
* common/Marcus Brinkmann2010-06-102-0/+13
| | | | | | | | | | | | | 2010-06-11 Marcus Brinkmann <[email protected]> * sysutils.c (translate_sys2libc_fd): Revert last change. (translate_sys2libc_fd_int): Revert last change. sm/ 2010-06-11 Marcus Brinkmann <[email protected]> * server.c (cmd_message) [HAVE_W32CE_SYSTEM]: Finish pipe.
* 2010-06-10 Marcus Brinkmann <[email protected]>Marcus Brinkmann2010-06-101-0/+5
| | | | | | * server.c (SERVER_STDIN, SERVER_STDOUT): New macros. (gpgsm_server): Use them with assuan_fdopen.
* common/Marcus Brinkmann2010-06-101-2/+9
| | | | | | | | | | | | | 2010-06-10 Marcus Brinkmann <[email protected]> * estream.c (_es_get_std_stream): Fix cut&paste bug. sm/ 2010-06-10 Marcus Brinkmann <[email protected]> * server.c (SERVER_STDIN, SERVER_STDOUT): New macros. (gpgsm_server): Use them with assuan_fdopen.
* Merged Dirmngr with GnuPG.Werner Koch2010-06-092-2/+4
| | | | | A few code changes to support dirmngr.
* Decryption and signi via agent is now implemented.Werner Koch2010-04-231-1/+1
|
* 2010-04-23 Marcus Brinkmann <[email protected]>Marcus Brinkmann2010-04-232-2/+7
| | | | | | * certreqgen.c (read_parameters): Use ascii_isspace instead of spacep to stop at newline, too.
* Whole lot of changes to support CE.Werner Koch2010-04-144-35/+62
|
* Minor cleanupsWerner Koch2010-03-291-1/+0
|
* More changes for CE. gpgsm does now build and run a keylisting.Werner Koch2010-03-248-37/+55
|
* More chnages to use estream. Add a way to replace the standardWerner Koch2010-03-222-2/+2
| | | | | descriptors.
* Finished the bulk of changes to use estream in most places instead ofWerner Koch2010-03-152-1/+3
| | | | | stdio.
* Use a custom log handler for libassuan.Werner Koch2010-03-113-5/+9
|
* Merged jnlib into common.Werner Koch2010-03-103-3/+7
|
* Removed almost al dup calls.Werner Koch2010-03-087-46/+47
|
* Replace use stdio by estream functions.Werner Koch2010-03-0811-199/+229
|
* Various changes to eventually support openpgp keys in pgp-agent.Werner Koch2010-02-021-1/+1
| | | | | | Comment fixes. Minor chnages in preparation of a W32CE port.
* Implement --faked-systrem-time for gpg.Werner Koch2009-12-171-3/+3
| | | | | Typo and comment fixes.
* add new gpgsm server command PASSWDWerner Koch2009-12-142-1/+39
|
* Add option --cert-extension.Werner Koch2009-12-104-3/+35
|
* Unification of the search descriptor usage.Werner Koch2009-12-089-292/+21
|
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-12 02:59:48 +0000