aboutsummaryrefslogtreecommitdiffstats
path: root/sm (follow)
Commit message (Collapse)AuthorAgeFilesLines
* * misc.c (setup_pinentry_env): New.Werner Koch2004-04-135-2/+46
| | | | | | * import.c (popen_protect_tool): Call it. * export.c (popen_protect_tool): Call it.
* (gpgsm_decrypt): Return GPG_ERR_NO_DATA if it is not aWerner Koch2004-04-082-0/+10
| | | | | encrypted message.
* * gpgsm.c: New option --force-crl-refresh.Werner Koch2004-04-075-2/+26
| | | | | * call-dirmngr.c (gpgsm_dirmngr_isvalid): Pass option to dirmngr.
* * configure.ac: Require libgcrypt 1.1.94.Werner Koch2004-04-063-14/+14
| | | | | | | | | | Introduce PACKAGE_GT and set it to gnupg2. * gpg-agent.c (main): Use new libgcrypt thread library register scheme. * Makevars (DOMAIN): Init from PACKAGE_GT
* Add STATUS_NEWSIGWerner Koch2004-04-062-0/+2
|
* * verify.c (gpgsm_verify): Print STATUS_NEWSIG for each signature.Werner Koch2004-04-058-22/+159
| | | | | | | | | | | | | * certchain.c (gpgsm_validate_chain) <gpgsm_cert_use_cer_p>: Do not just warn if a cert is not suitable; bail out immediately. * call-dirmngr.c (isvalid_status_cb): New. (unhexify_fpr): New. Taken from ../g10/call-agent.c (gpgsm_dirmngr_isvalid): Add new arg CTRL, changed caller to pass it thru. Detect need to check the respondert cert and do that. * certchain.c (gpgsm_validate_chain): Add new arg FLAGS. Changed all callers.
* (gpgsm_sign): Include a short list of capabilities.Werner Koch2004-03-242-0/+23
|
* * gpg-agent.c (main) <gpgconf>: Fixed default value quoting.Werner Koch2004-03-172-2/+6
| | | | | | * scdaemon.c (main) <gpgconf>: Fixed default value quoting. * gpgsm.c (main) <gpgconf>: Fixed default value quoting.
* (main): Implemented --gpgconf-list.Werner Koch2004-03-163-16/+49
|
* (list_cert_colon): Hack to set the expired flag.Werner Koch2004-03-154-10/+33
|
* still preparing for a releaseV1-9-6Werner Koch2004-03-061-2/+2
|
* Preparing for a releaseWerner Koch2004-03-066-167/+152
|
* (gpgsm_export): Make sure that we don't export moreWerner Koch2004-03-032-3/+16
| | | | | than one certificate.
* (create_duptable, destroy_duptable)Werner Koch2004-03-022-35/+149
| | | | | | (insert_duptable): New. (gpgsm_export): Avoid duplicates.
* (compare_certs): New.Werner Koch2004-02-262-4/+46
| | | | | | (gpgsm_validate_chain): Fixed infinite certificate checks after bad signatures.
* (list_cert_colon): Print the fingerprint as theWerner Koch2004-02-242-2/+13
| | | | | cert-id for root certificates.
* * keylist.c (list_internal_keys): Return error codes.Werner Koch2004-02-216-16/+56
| | | | | | | | | (list_external_keys, gpgsm_list_keys): Ditto. * server.c (do_listkeys): Ditto. * gpgsm.c (main): Display a key description for --passwd. * call-agent.c (gpgsm_agent_passwd): New arg DESC.
* * gpgsm.c (main): New option --debug-ignore-expiration.Werner Koch2004-02-206-16/+149
| | | | | | | * certchain.c (gpgsm_validate_chain): Use it here. * certlist.c (cert_usage_p): Apply extKeyUsage.
* * protect-tool.c: New options --have-cert and --prompt.Werner Koch2004-02-195-2/+388
| | | | | | | | | | | | | | | | | | | | (export_p12_file): Read a certificate from STDIN and pass it to p12_build. Detect a keygrip and construct the filename in that case. Unprotcet a key if needed. Print error messages for key formats we can't handle. (release_passphrase): New. (get_passphrase): New arg PROMPTNO. Return the allocated string. Changed all callers. * minip12.c: Revamped the build part. (p12_build): New args CERT and CERTLEN. * simple-pwquery.c (agent_open): Don't mangle INFOSTR. * export.c (export_p12, popen_protect_tool) (gpgsm_p12_export): New. * gpgsm.c (main): New command --export-secret-key-p12.
* * gpgsm.c (set_debug): Set the new --debug-level flags.Werner Koch2004-02-184-50/+143
| | | | | | | | | | (main): New option --gpgconf-list. (main): Do not setup -u and -r keys when not required. (main): Setup the used character set. * keydb.c (keydb_add_resource): Print a hint to start the gpg-agent.
* * gpgsm.c: Fixed value parsing for --with-validation.Werner Koch2004-02-174-4/+9
| | | | | | * call-agent.c (start_agent): Ignore an empty GPG_AGENT_INFO. * call-dirmngr.c (start_dirmngr): Likewise for DIRMNGR_INFO.
* * gpgsm.c: New option --with-md5-fingerprint.Werner Koch2004-02-1711-153/+315
| | | | | | | | | | | | | | | | | | | | | | | * keylist.c (list_cert_std): Print MD5 fpr. * gpgsm.c: New options --with-validation. * server.c (option_handler): New option "with-validation". * keylist.c (list_cert_std, list_internal_keys): New args CTRL and WITH_VALIDATION. Changed callers to set it. (list_external_cb, list_external_keys): Pass CTRL to the callback. (list_cert_colon): Add arg CTRL. Check validation if requested. * certchain.c (unknown_criticals, allowed_ca, check_cert_policy) (gpgsm_validate_chain): New args LISTMODE and FP. (do_list): New helper for info output. (find_up): New arg FIND_NEXT. (gpgsm_validate_chain): After a bad signature try again with other CA certificates. * import.c (print_imported_status): New arg NEW_CERT. Print additional STATUS_IMPORT_OK becuase that is what gpgme expects. (check_and_store): Always call above function after import. * server.c (get_status_string): Added STATUS_IMPORT_OK.
* * certcheck.c (gpgsm_create_cms_signature): Format a descriptionWerner Koch2004-02-137-13/+236
| | | | | | | | | | | | for use by the pinentry. * decrypt.c (gpgsm_decrypt): Ditto. Free HEXKEYGRIP. * certdump.c (format_name_cookie, format_name_writer) (gpgsm_format_name): New. (gpgsm_format_serial): New. (gpgsm_format_keydesc): New. * call-agent.c (gpgsm_agent_pksign): New arg DESC. (gpgsm_agent_pkdecrypt): Ditto.
* * encrypt.c (init_dek): Check for too weak algorithms.Werner Koch2004-02-138-68/+457
| | | | | | | | | | | | * import.c (parse_p12, popen_protect_tool): New. * base64.c (gpgsm_create_reader): New arg ALLOW_MULTI_PEM. Changed all callers. (base64_reader_cb): Handle it here. (gpgsm_reader_eof_seen): New. (base64_reader_cb): Set a flag for EOF. (simple_reader_cb): Ditto.
* * Makefile.am (AM_CPPFLAGS): Pass directory constants via -D; thisWerner Koch2004-02-123-6/+12
| | | | | will allow to override directory names at make time.
* Fixed a build bug (straw letter in sm/import.c) and updated the documentation.Werner Koch2004-02-041-1/+1
|
* * import.c (check_and_store): Import certificates even withWerner Koch2004-02-032-4/+17
| | | | | | missing issuer's cert. Fixed an "depending on the verbose setting" bug.
* * keybox.h (keybox_flag_t): New.Werner Koch2004-02-026-23/+209
| | | | | | | | | | | | | | | | | | | | | * keybox-search.c (get_flag_from_image, keybox_get_flags): New. (_keybox_get_flag_location): New. * certchain.c (gpgsm_validate_chain): Mark revoked certs in the keybox. * keylist.c (list_cert_colon): New arg VALIDITY; use it to print a revoked flag. (list_internal_keys): Retrieve validity flag. (list_external_cb): Pass 0 as validity flag. * keydb.c (keydb_get_flags, keydb_set_flags): New. (keydb_set_cert_flags): New. (lock_all): Return a proper error code. (keydb_lock): New. (keydb_delete): Don't lock but check that it has been locked. (keydb_update_keyblock): Ditto. * delete.c (delete_one): Take a lock.
* (check_cert_policy): Fixed read error checking.V1-9-4Werner Koch2004-01-302-6/+16
| | | | | | (check_cert_policy): With no critical policies issue only a warning if the policy file does not exists.
* * configure.ac: Require libksba 0.9.3 due to another bug fix there.Werner Koch2004-01-302-0/+12
| | | | | | | | | * sign.c (add_certificate_list): Decrement N for the first cert. * Makefile.am (sbin_SCRIPTS): New, to install addgnupghome. (EXTRA_DIST): Added rfc822parse.c rfc822parse.h gpgparsemail.c which might be useful for debugging.
* (parse_dn_part): Map common OIDs to human readableWerner Koch2004-01-292-9/+48
| | | | | | labels. Make sure that a value won't get truncated if it includes a Nul.
* (gpgsm_validate_chain): Changed the message printedWerner Koch2004-01-282-2/+7
| | | | | for an untrusted root certificate.
* (parse_dn_part): Pretty print the nameDistinguisher OID.Werner Koch2004-01-272-22/+41
| | | | | | | | (print_dn_part): Do not delimit multiple RDNs by " + ". Handle multi-valued RDNs in a special way, i.e. in the order specified by the certificate. (print_dn_parts): Simplified.
* * sign.c (gpgsm_sign): Print an error message on all failures.Werner Koch2004-01-163-1/+11
| | | | | * decrypt.c (gpgsm_decrypt): Ditto.
* * server.c (gpgsm_server): Add arg DEFAULT_RECPLIST.Werner Koch2003-12-176-85/+196
| | | | | | | | | | | | | | | (cmd_encrypt): Add all enrypt-to marked certs to the list. * encrypt.c (gpgsm_encrypt): Check that real recipients are available. * gpgsm.c (main): Make the --encrypt-to and --no-encrypt-to options work. Pass the list of recients to gpgsm_server. * gpgsm.h (certlist_s): Add field IS_ENCRYPT_TO. (opt): Add NO_ENCRYPT_TO. * certlist.c (gpgsm_add_to_certlist): New arg IS_ENCRYPT_TO. Changed all callers and ignore duplicate entries. (is_cert_in_certlist): New. (gpgsm_add_cert_to_certlist): New.
* Replaced deprecated type names.Werner Koch2003-12-1722-203/+203
| | | | | | | | * certdump.c (gpgsm_print_serial): Cleaned up cast use in strtoul. (gpgsm_dump_serial): Ditto. * decrypt.c (gpgsm_decrypt): Replaced ERR by RC.
* * gpgsm.c (main): Set the prefixes for assuan logging.Werner Koch2003-12-164-6/+30
| | | | | | | | | * sign.c (gpgsm_sign): Add validation checks for the default certificate. * gpgsm.c: Add -k as alias for --list-keys and -K for --list-secret-keys.
* * encrypt.c (init_dek): Use gry_create_nonce for the IV; there isWerner Koch2003-12-165-6/+12
| | | | | | not need for real strong random here and it even better protect the random bits used for the key.
* * gpgsm.c, gpgsm.h: New options --{enable,disable}-ocsp.Werner Koch2003-12-016-12/+59
| | | | | | | | (gpgsm_init_default_ctrl): Set USE_OCSP to the default value. * certchain.c (gpgsm_validate_chain): Handle USE_OCSP. * call-dirmngr.c (gpgsm_dirmngr_isvalid): Add arg USE_OCSP and proceed accordingly.
* * verify.c (gpgsm_verify): Fixed for changes API of gcry_md_info.Werner Koch2003-11-183-2/+13
| | | | | * certchain.c (unknown_criticals): Fixed an error code test.
* Mainly changes to adjust for the changed KSBA API.Werner Koch2003-11-1217-154/+146
|
* The Changelog was not yet ready, so again:Werner Koch2003-10-311-9/+5
| | | | | | | | | | * certchain.c (gpgsm_validate_chain): Changed to use ksba_isotime_t. * verify.c (strtimestamp_r, gpgsm_verify): Ditto. * sign.c (gpgsm_sign): Ditto. * keylist.c (print_time, list_cert_std, list_cert_colon): Ditto. * certdump.c (gpgsm_print_time, gpgsm_dump_time, gpgsm_dump_cert): Ditto.
* * verify.c (strtimestamp_r, gpgsm_verify):Werner Koch2003-10-318-84/+79
| | | | | | | | | | | * sign.c (gpgsm_sign): * keylist.c (print_time, list_cert_std, list_cert_colon): * certdump.c (gpgsm_print_time, gpgsm_dump_time, gpgsm_dump_cert): * certchain.c (gpgsm_validate_chain): Changed to use ksba_isotime_t.
* (read_parameters): Fixed faulty of !spacep().Werner Koch2003-10-252-1/+5
|
* 2003-08-20 Marcus Brinkmann <[email protected]>Marcus Brinkmann2003-08-202-2/+9
| | | | | | | * encrypt.c (encode_session_key): Allocate enough space. Cast key byte to unsigned char to prevent sign extension. (encrypt_dek): Check return value before error.
* 2003-08-14 Timo Schulz <[email protected]>Timo Schulz2003-08-142-78/+23
| | | | | * encrypt.c (encode_session_key): Use new Libgcrypt interface.
* This commit was manufactured by cvs2svn to create branchRepo Admin2003-08-0522-0/+12742
| | | | 'GNUPG-1-9-BRANCH'.
* This commit was manufactured by cvs2svn to create branchRepo Admin2003-06-051-0/+624
| | | | 'GNUPG-1-9-BRANCH'.
* This commit was manufactured by cvs2svn to create branchRepo Admin2002-10-1923-13044/+0
| | | | 'GNUPG-1-9-BRANCH'.
* * certcheck.c (gpgsm_check_cert_sig): Add cert hash debugging.NEWPG-0-9-2Werner Koch2002-09-193-3/+35
| | | | | | * certchain.c (find_up): Print info when the cert was not found by the autorithyKeyIdentifier.
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-14 23:53:13 +0000