aboutsummaryrefslogtreecommitdiffstats
path: root/sm (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* * verify.c (gpgsm_verify): Detect certs-only message.Werner Koch2002-03-1211-41/+120
|
* * server.c (cmd_listkeys, cmd_listsecretkeys): Divert toNEWPG-0-3-2Werner Koch2002-03-063-25/+119
| | | | | | (do_listkeys): new. Add pattern parsing. * keylist.c (gpgsm_list_keys): Handle selection pattern.
* sm/Werner Koch2002-03-065-3/+126
| | | | | | | | | | | | | | | | | * gpgsm.c: New command --learn-card * call-agent.c (learn_cb,gpgsm_agent_learn): New. * gpgsm.c (main): Print error messages for non-implemented commands. agent/ * learncard.c: New. * divert-scd.c (ask_for_card): The serial number is binary so convert it to hex here. * findkey.c (agent_write_private_key): New. * genkey.c (store_key): And use it here. scd/ * pkdecrypt.c (agent_pkdecrypt): Changed the way the diversion is done. * divert-scd.c (divert_pkdecrypt): Changed interface and implemented it.
* Decryption using a Cryptoflex card does now work.Werner Koch2002-03-063-2/+16
|
* * gpgsm.c, gpgsm.h: Add local_user.Werner Koch2002-03-059-55/+96
| | | | | | | | | | | * sign.c (gpgsm_get_default_cert): New. (get_default_signer): Use the new function if local_user is not set otherwise used that value. * encrypt.c (get_default_recipient): Removed. (gpgsm_encrypt): Use gpgsm_get_default_cert. * verify.c (gpgsm_verify): Better error text for a bad signature found by comparing the hashs.
* Minor fixes; about to release 0.3.1NEWPG-0-3-1Werner Koch2002-03-041-1/+1
|
* Changes needed to support smartcards. Well, only _support_. There isWerner Koch2002-02-284-14/+20
| | | | | no real code yet.
* * server.c (option_handler): Allow to use -2 for "send all certsWerner Koch2002-02-259-6/+69
| | | | | | | except the root cert". * sign.c (add_certificate_list): Implement it here. * certpath.c (gpgsm_is_root_cert): New.
* * certpath.c (check_cert_policy): New.Werner Koch2002-02-195-11/+278
| | | | | | | | (gpgsm_validate_path): And call it from here. * gpgsm.c (main): New options --policy-file, --disable-policy-checks and --enable-policy-checks. * gpgsm.h (opt): Added policy_file, no_policy_checks.
* * certpath.c (gpgsm_validate_path): Ask the agent to add theWerner Koch2002-02-184-15/+77
| | | | | | certificate into the trusted list. * call-agent.c (gpgsm_agent_marktrusted): New.
* Set version numbers add a commentNEWPG-0-3-0Werner Koch2002-02-071-0/+1
|
* * certlist.c (gpgsm_add_to_certlist): Check that the specifiedWerner Koch2002-02-079-21/+78
| | | | | | | | | | | | | | | | name identifies a certificate unambiguously. (gpgsm_find_cert): Ditto. * server.c (cmd_listkeys): Check that the data stream is available. (cmd_listsecretkeys): Ditto. (has_option): New. (cmd_sign): Fix ambiguousity in option recognition. * gpgsm.c (main): Enable --logger-fd. * encrypt.c (gpgsm_encrypt): Increased buffer size for better performance. * call-agent.c (gpgsm_agent_pksign): Check the S-Exp received from the agent. * keylist.c (list_cert_colon): Filter out control characters.
* * decrypt.c (gpgsm_decrypt): Bail out after an decryption error.Werner Koch2002-02-063-45/+45
| | | | | | | | * server.c (reset_notify): Close input and output FDs. (cmd_encrypt,cmd_decrypt,cmd_verify,cmd_sign.cmd_import) (cmd_genkey): Close the FDs and release the recipient list even in the error case.
* 2002-02-01 Marcus Brinkmann <[email protected]>Marcus Brinkmann2002-02-012-4/+5
| | | | | * sign.c (gpgsm_sign): Do not release certificate twice.
* * call-agent.c (gpgsm_agent_havekey): New.Werner Koch2002-01-296-14/+89
| | | | | | | | | | | * keylist.c (list_cert_colon): New arg HAVE_SECRET, print "crs" when we know that the secret key is available. (gpgsm_list_keys): New arg MODE, check whether a secret key is available. Changed all callers. * gpgsm.c (main): New command --list-secret-keys. * server.c (cmd_listsecretkeys): New. (cmd_listkeys): Return secret keys with "crs" record.
* * certreqgen.c (create_request): Store the email address in the req.Werner Koch2002-01-282-1/+31
| | | | | | | | Note, that I have not yet achieved to generate a cert with the subjectAltName using OpenSSL. It seems that openssl requires the email address to be part of the subject DN (subjectAltName=email:copy) but this is something we don't want to do.
* * gpgsm.c (main): Disable core dumps.Werner Koch2002-01-257-10/+235
| | | | | | | | | | | | | * sign.c (add_certificate_list): New. (gpgsm_sign): Add the certificates to the CMS object. * certpath.c (gpgsm_walk_cert_chain): New. * gpgsm.h (server_control_s): Add included_certs. * gpgsm.c: Add option --include-certs. (gpgsm_init_default_ctrl): New. (main): Call it. * server.c (gpgsm_server): Ditto. (option_handler): Support --include-certs.
* * certpath.c (gpgsm_validate_path): Print the DN of a missing issuer.Werner Koch2002-01-235-15/+75
| | | | | | * certdump.c (gpgsm_dump_string): New. (print_dn): Replaced by above.
* * certpath.c (unknown_criticals): New.Werner Koch2002-01-223-18/+235
| | | | | | | (allowed_ca): New. (gpgsm_validate_path): Check validity, CA attribute, path length and unknown critical extensions.
* * gpgsm.c: Add option --enable-crl-checks.Werner Koch2002-01-214-45/+105
| | | | | | * call-agent.c (start_agent): Implemented socket based access. * call-dirmngr.c (start_dirmngr): Ditto.
* * server.c (option_handler): New.Werner Koch2002-01-202-0/+17
| | | | | (gpgsm_server): Register it with assuan.
* * server.c (gpgsm_server): Use assuan_deinit_server and setupWerner Koch2002-01-194-2/+16
| | | | | | | | | assuan logging if enabled. * call-agent.c (inq_ciphertext_cb): Don't show the session key in an Assuan log file. * gpgsm.c (my_strusage): Take bugreport address from configure.ac
* * import.c (gpgsm_import): Just do a basic cert check beforeWerner Koch2002-01-1511-80/+352
| | | | | | | | | | | | | | | | storing it. * certpath.c (gpgsm_basic_cert_check): New. * keydb.c (keydb_store_cert): New. * import.c (store_cert): Removed and change all caller to use the new function. * verify.c (store_cert): Ditto. * certlist.c (gpgsm_add_to_certlist): Validate the path * certpath.c (gpgsm_validate_path): Check the trust list. * call-agent.c (gpgsm_agent_istrusted): New.
* * call-dirmngr.c (inq_certificate): Changed for new interface semantic.Werner Koch2002-01-144-17/+77
| | | | | | | | | * certlist.c (gpgsm_find_cert): New. DirMngr should now work. Remember that there is a --disable-crl-check option in gpgsm to be used when there is a problem with the dirmngr communication or you want to do faster tests.
* * fingerprint.c (gpgsm_get_certid): Print the serialand not theWerner Koch2002-01-132-1/+6
| | | | | hash after the dot.
* * call-dirmngr.c: New.Werner Koch2002-01-119-13/+343
| | | | | | | * certpath.c (gpgsm_validate_path): Check the CRL here. * fingerprint.c (gpgsm_get_certid): New. * gpgsm.c: New options --dirmngr-program and --disable-crl-checks.
* * base64.c (gpgsm_create_writer): Allow to set the object nameWerner Koch2002-01-1011-56/+802
| | | | | | | | * server.c (cmd_genkey): New. * certreqgen.c: New. The parameter handling code has been taken from gnupg/g10/keygen.c version 1.0.6. * call-agent.c (gpgsm_agent_genkey): New.
* * verify.c (gpgsm_verify): Implemented non-detached signatureWerner Koch2001-12-205-17/+59
| | | | | | | verification. Add OUT_FP arg, initialize a writer and changed all callers. * server.c (cmd_verify): Pass an out_fp if one has been set.
* * base64.c (base64_reader_cb): Try to detect an S/MIME body part.Werner Koch2001-12-208-83/+101
| | | | | | | | | | | | | | * certdump.c (print_sexp): Renamed to gpgsm_dump_serial, made global. (print_time): Renamed to gpgsm_dump_time, made global. (gpgsm_dump_serial): Take a real S-Expression as argument and print the first item. * keylist.c (list_cert_colon): Ditto. * keydb.c (keydb_search_issuer_sn): Ditto. * decrypt.c (print_integer_sexp): Removed and made callers use gpgsm_dump_serial. * verify.c (print_time): Removed, made callers use gpgsm_dump_time.
* assuan/Marcus Brinkmann2001-12-192-1/+5
| | | | | | | | | | | | | | | | | | | 2001-12-14 Marcus Brinkmann <[email protected]> * assuan-buffer.c (_assuan_read_line): New variable ATTICLEN, use it to save the length of the attic line. Rediddle the code a bit to make it more clear what happens. agent/ 2001-12-19 Marcus Brinkmann <[email protected]> * query.c (start_pinentry): Add new argument to assuan_pipe_connect. sm/ 2001-12-19 Marcus Brinkmann <[email protected]> * call-agent.c (start_agent): Add new argument to assuan_pipe_connect.
* * Makefile.am (AM_CPPFLAGS): Add flags for libksbaNEWPG-0-0-0Werner Koch2001-12-181-2/+2
| | | | | | * Makefile.am (AM_CPPFLAGS): Include flags for gcrypt and ksba * Makefile.am: Use LIBGCRYPT macros
* Changes to be used with the new libksba interface.Werner Koch2001-12-1812-172/+175
| | | | | libgcrypt-1.1.5 is required (cvs or tarball)
* * gpgsm.c (main): Renamed the default key database to "keyring.kbx".Werner Koch2001-12-152-1/+3
|
* * decrypt.c (gpgsm_decrypt): Write STATUS_DECRYPTION_*.Werner Koch2001-12-155-6/+50
| | | | | * sign.c (gpgsm_sign): Write a STATUS_SIG_CREATED.
* * keylist.c (list_cert_colon): Kludge to show an email addressWerner Koch2001-12-143-1/+55
| | | | | encoded in the subject's DN.
* * verify.c (gpgsm_verify): Add hash debug helpersWerner Koch2001-12-145-3/+73
| | | | | | | | | | | | | | * sign.c (gpgsm_sign): Ditto. * base64.c (base64_reader_cb): Reset the linelen when we need to skip the line and adjusted test; I somehow forgot about DeMorgan. * server.c (cmd_encrypt,cmd_decrypt,cmd_sign,cmd_verify) (cmd_import): Close the FDs on success. (close_message_fd): New. (input_notify): Setting autodetect_encoding to 0 after initializing it to 0 is pretty pointless. Easy to fix.
* * gpgsm.c (main): New option --debug-wait n, so that it isWerner Koch2001-12-143-17/+23
| | | | | possible to attach gdb when used in server mode.
* * util.h (digitp, hexdigitp): New ctype like macros.Werner Koch2001-12-141-1/+1
| | | | | | | | (atoi_1,atoi_2,atoi_4,xtoi_1,xtoi_2): New. * command.c: Removed the conversion macros as they are now in ../common/util.h.
* * sign.c (get_default_signer): Use keydb_classify_name here.Werner Koch2001-12-143-2/+13
|
* Fixed test keyWerner Koch2001-12-141-1/+1
|
* Fixed test keyWerner Koch2001-12-142-2/+2
|
* * keylist.c (list_cert_colon): Print alternative names of subjectWerner Koch2001-12-142-2/+6
| | | | | and a few other values.
* assuan/Marcus Brinkmann2001-12-132-4/+8
| | | | | | | | | | | | | | | | | | | | | 2001-12-14 Marcus Brinkmann <[email protected]> * assuan-defs.h (LINELENGTH): Define as ASSUAN_LINELENGTH. assuan.h: Define ASSUAN_LINELENGTH. agent/ 2001-12-14 Marcus Brinkmann <[email protected]> * query.c (LINELENGTH): Removed. (agent_askpin): Use ASSUAN_LINELENGTH, not LINELENGTH. sm/ 2001-12-14 Marcus Brinkmann <[email protected]> * call-agent.c (LINELENGTH): Removed. (gpgsm_agent_pksign): Use ASSUAN_LINELENGTH, not LINELENGTH. (gpgsm_agent_pkdecrypt): Likewise.
* * keylist.c (list_cert_colon): Print alternative names of subjectWerner Koch2001-12-136-29/+65
| | | | | and a few other values.
* Now that the DN encoding works more correct, we have to update theWerner Koch2001-12-131-1/+1
| | | | | default key.
* Made decryption work in --server mode, allow output of plain base64,Werner Koch2001-12-134-35/+76
| | | | | | allow --armor and --base64 arguments for INPUT and OUTPUT, new global option --base64, cleaned up the help page.
* * gpgsm.c (main): New options --assume-{armor,base64,binary}.Werner Koch2001-12-123-5/+65
| | | | | * base64.c (base64_reader_cb): Fixed non-autodetection mode.
* Implemented encryption in server mode.Werner Koch2001-12-1111-59/+485
| | | | | | Allow to specify a recipient on the commandline There is still a default hardwired recipient if none has been set.
* --encrypt does now work for a hardwired key.Werner Koch2001-12-103-106/+424
|
* Decryption does now workWerner Koch2001-12-064-31/+292
|