aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* scd: Support VASCO DIGIPASS 920 in the ccid-driver.ccid_driver_improvementNIIBE Yutaka2012-01-051-2/+6
| | | | | * scd/ccid-driver.c (VENDOR_VASCO, VASCO_920): New. (ccid_transceive_secure): Maximum is 15 for VASCO DIGIPASS 920.
* Fix pinpad entry in ccid-driver.NIIBE Yutaka2012-01-051-7/+4
| | | | | * scd/ccid-driver.c (ccid_transceive_secure): Let it have three messages, always. Fixe bMsgIndex1-3.
* Support keypad_modify method by ccid-driver.NIIBE Yutaka2011-12-052-24/+58
| | | | | | | | * apdu.c (ccid_keypad_operation): Rename from ccid_keypad_verify. (open_ccid_reader): Use ccid_keypad_operation for verify and modify. * ccid-driver.c (ccid_transceive_secure): Support CHANGE_REFERENCE_DATA: 0x24.
* Support extended APDU exchange level somehow.NIIBE Yutaka2011-12-051-4/+47
| | | | | * ccid-driver.c (ccid_transceive_apdu_level): Permit sending packet where apdulen <= 289. Support receiving packets in a chain.
* Support the Cherry ST-2000 card reader.Werner Koch2011-12-022-10/+25
| | | | | | | | * scd/ccid-driver.c (SCM_SCR331, SCM_SCR331DI, SCM_SCR335) (SCM_SCR3320, SCM_SPR532, CHERRY_ST2000): New constants. (parse_ccid_descriptor): Use them. (scan_or_find_usb_device, ccid_transceive_secure): Handle Cherry ST-2000. Suggested by Matthias-Christian Ott.
* Avoid possible double free in export.c.Werner Koch2011-12-021-1/+1
| | | | | * g10/export.c (transfer_format_to_openpgp): Avoid possible double free of LIST. Reported by NIIBE Yutaka.
* Fix pinpad input support for passphrase modification.NIIBE Yutaka2011-12-024-194/+89
| | | | | | | | | | | | | | | | | | | | | * apdu.c (pcsc_keypad_verify): Have dummy Lc field with value 0. (pcsc_keypad_modify): Likewise. (pcsc_keypad_modify): It's only for ISO7816_CHANGE_REFERENCE_DATA. bConfirmPIN value is determined by the parameter p0. * app-openpgp.c (do_change_pin): The flag use_keypad should be 0 when reset_mode is on, or resetcode is on. use_keypad only makes sense for iso7816_change_reference_data_kp. * iso7816.h (iso7816_put_data_kp): Remove. (iso7816_reset_retry_counter_kp): Remove. (iso7816_reset_retry_counter_with_rc_kp): Remove. (iso7816_change_reference_data_kp): Add an argument: IS_EXCHANGE. * iso7816.c (iso7816_put_data_kp): Remove. (iso7816_reset_retry_counter_kp): Remove. (iso7816_reset_retry_counter_with_rc_kp): Remove. (iso7816_change_reference_data_kp): Add an argument: IS_EXCHANGE.
* Add hook to check the commit log syntax.Werner Koch2011-12-012-0/+134
| | | | * autogen.sh: Install commit-msg hook for git.
* Generate the ChangeLog from commit logs.Werner Koch2011-12-0144-1440/+2102
| | | | | | | | | | | | | * scripts/gitlog-to-changelog: New script. Taken from gnulib. * scripts/git-log-fix: New file. * scripts/git-log-footer: New file. * doc/HACKING: Describe the ChangeLog policy * ChangeLog: New file. * Makefile.am (EXTRA_DIST): Add new files. (gen-ChangeLog): New. (dist-hook): Run gen-ChangeLog. Rename all ChangeLog files to ChangeLog-2011.
* Fix pinpad input supportNIIBE Yutaka2011-12-012-17/+56
|
* Rewrite dns-cert.c to not use the gpg-only iobuf stuff.Werner Koch2011-11-307-109/+186
| | | | | | | | | | | | | * common/dns-cert.c: Remove iobuf.h. (get_dns_cert): Rename to _get_dns_cert. Remove MAX_SIZE arg. Change iobuf arg to a estream-t. Rewrite function to make use of estream instead of iobuf. Require all parameters. Return an gpg_error_t error instead of the type. Add arg ERRSOURCE. * common/dns-cert.h (get_dns_cert): New macro to pass the error source to _gpg_dns_cert. * common/t-dns-cert.c (main): Adjust for changes in get_dns_cert. * g10/keyserver.c (keyserver_import_cert): Ditto. * doc/gpg.texi (GPG Configuration Options): Remove max-cert-size.
* * common/estream.c (es_fopenmem_init): New.Werner Koch2011-11-302-3/+39
| | | | * common/estream.h (es_fopenmem_init): New.
* Add parameter checks and extend documentation of estream.Werner Koch2011-11-302-10/+35
| | | | | * estream.c (func_mem_create): Don't set FUNC_REALLOC if GROW is not set. Require FUNC_REALLOC if DATA is NULL and FUNC_FREE is given.
* dns-cert.c: Use constants for better readability.Werner Koch2011-11-302-8/+25
|
* Actually increase buffer size of t-dns-cert.c.Werner Koch2011-11-301-1/+1
|
* Re-indented dns-cert.cWerner Koch2011-11-301-121/+122
|
* Increase the default buffer size for DNS certificates.Werner Koch2011-11-303-2/+9
| | | | | * common/t-dns-cert.c (main): Increase MAX_SIZE to 64k. * g10/keyserver.c (DEFAULT_MAX_CERT_SIZE): Increase from 16k to 64k.
* Use separate test module for dns-cert.c.Werner Koch2011-11-305-62/+103
| | | | | * dns-cert.c (get_dns_cert): Factor test code out to ... * t-dns-cert.c: new file.
* Merge branch 'master' of git+ssh://playfair.gnupg.org/git/gnupgNIIBE Yutaka2011-11-294-1/+45
|\
| * Make sure HOME et al have no unsafe characters.Werner Koch2011-11-294-1/+45
| |
* | PC/SC pinpad support (pinpad input for modify pass phrase with resetcode, by ↵NIIBE Yutaka2011-11-296-73/+139
| | | | | | | | admin).
* | PC/SC pinpad support (pinpad input for modify pass phrase).NIIBE Yutaka2011-11-296-51/+196
|/
* Add build script to build all components in one run.Werner Koch2011-11-282-0/+54
| | | | | | | | Run this script in the parent directory of the working copies. It does a VPATH build in ~/tmp/gpg-tmp/b in the right order and installs everything below ~/tmp/gpg-tmp/. Based on a script by Jim Meyering.
* accept --with-libgpg-error-prefix as well as --with-gpg-error-prefixJim Meyering2011-11-282-2/+17
| | | | * m4/gpg-error.m4: Update from git master.
* Improve ssh card key diagnostic message.Werner Koch2011-11-282-2/+10
| | | | | | | * command-ssh.c (card_key_available): Change wording of no key diagnostic. (ssh_handler_request_identities): Do not call card_key_available if the scdaemon is disabled.
* PC/SC pinpad support.NIIBE Yutaka2011-11-289-25/+460
| | | | | | | | | | | | | | | | | | | | | | | | Before this change, it is layered like following: iso7816_verify iso7816_verify_kp apdu_send_simple, apdu_send_simple_kp ... After this change, it will be layered like: iso7816_verify iso7816_verify_kp apdu_send_simple apdu_keypad_verify ... and apdu_send_simple_kp will be deprecated. For PC/SC API, we use: SCardControl API to compose CCID PC_to_RDR_Secure message SCardTransmit API to compose CCID PC_to_RDR_XfrBlock message Considering the support of PC/SC, we have nothing to share between _kp version of iso7816_* and no _kp version.
* Merge branch 'master' of git+ssh://playfair.gnupg.org/git/gnupgWerner Koch2011-11-240-0/+0
|\
| * Make HKP kyeserver engine work again.Werner Koch2011-11-246-11/+20
| | | | | | | | | | | | | | | | | | | | | | | | | | We had some debug code here which prevented it from working. The host selection code still needs a review! * ks-engine-http.c (ks_http_help): Do not print help for hkp. * ks-engine-hkp.c (ks_hkp_help): Print help only for hkp. (send_request): Remove test code. (map_host): Use xtrymalloc. * certcache.c (classify_pattern): Remove unused variable and make explicit substring search work.
* | Make HKP keyserver engine work again.Werner Koch2011-11-246-11/+20
|/ | | | | | | | | | | | | We had some debug code here which prevented it from working. The host selection code still needs a review! * ks-engine-http.c (ks_http_help): Do not print help for hkp. * ks-engine-hkp.c (ks_hkp_help): Print help only for hkp. (send_request): Remove test code. (map_host): Use xtrymalloc. * certcache.c (classify_pattern): Remove unused variable and make explicit substring search work.
* Updated the German translation.Werner Koch2011-11-241-27/+29
| | | | * po/de.po: Update.
* Don't print anonymous recipient messages in quiet mode.Werner Koch2011-11-222-3/+10
| | | | This is bug#1378.
* Allow creating subkeys using an existing keyWerner Koch2011-11-068-63/+246
| | | | | | This works by specifying the keygrip instead of an algorithm (section number 13) and requires that the option -expert has been used. It will be easy to extend this to the primary key.
* typo fixesWerner Koch2011-11-021-2/+2
|
* Allow distribution of dotlock.* also under a modified BSD licenseWerner Koch2011-10-243-0/+77
|
* Typo fix and remove of some colloquial termsWerner Koch2011-10-181-15/+16
|
* Put more options into the options indexWerner Koch2011-10-125-676/+833
| | | | Also removed the single letter options from the index.
* Extend yat2m to allow indented tables.Werner Koch2011-10-122-35/+72
| | | | | | Current makeinfo versions allow to indent the texinfo source. However yat2m had no support for this. With this patch it is now possible to use a simple indentation style while keeping man pages readable.
* Change JNLIB license to LGPLv3+ or GPLv2+.Werner Koch2011-09-3030-205/+527
| | | | This is to allow the use of this code with code under GPLv2(only).
* Add prefix macro for dotlock functions.Werner Koch2011-09-303-8/+45
| | | | Also fixed a type in the GLIB version.
* Add dotlock_get_fd and dotlock_set_fd.Werner Koch2011-09-293-2/+37
|
* Make dotlock.c thread-safe on pthread systems.Werner Koch2011-09-292-25/+81
| | | | This is achieved by passing the define DOTLOCK_USE_PTHREAD.
* Add a flag parameter to dotlock_create.Werner Koch2011-09-2815-24/+37
| | | | This allows us to extend this function in the future.
* Allow arbitrary timeouts with dotlock.Werner Koch2011-09-282-37/+87
|
* Improved the dotlock module.Werner Koch2011-09-274-43/+529
| | | | | | | - It is now more portable and may be used outside of GnuPG - vfat file systems are now supported. - The use of link(2) is more robust. - Wrote extensive documentation.
* Remove check for gcry_kdf_deriveWerner Koch2011-09-272-24/+13
| | | | | This is not anymore required because we require Libgcrypt 1.5.0 which features this function.
* Renamed the lock functions.Werner Koch2011-09-2316-376/+541
| | | | Also cleaned up the dotlock code for easier readability.
* Remove support for RISCOS from dotlock.cWerner Koch2011-09-221-58/+7
|
* Allow NULL for free_public_key.Werner Koch2011-09-208-34/+36
|
* tests: avoid use of freed pointerJim Meyering2011-09-202-1/+10
| | | | | | | | | | | | | | | | [spotted by coverity] This is only in tests/, but easy to fix, so... I've included extra context so you can see how var->value would be used in the following atoi call. >From cf9ae83fd2da8d7a289b048ef0feed4096f6d263 Mon Sep 17 00:00:00 2001 From: Jim Meyering <[email protected]> Date: Tue, 20 Sep 2011 16:32:59 +0200 Subject: [PATCH] avoid use of free'd pointer * asschk.c (set_type_var): Set var->value to NULL after freeing it, to avoid subsequent use of freed pointer.
* avoid use of freed pointerJim Meyering2011-09-202-1/+11
| | | | | | | | | | | | | Without this patch, pk2 would be freed twice. >From 2a18a4b757e0896e738fefbbaa8ff8c23a9edf89 Mon Sep 17 00:00:00 2001 From: Jim Meyering <[email protected]> Date: Tue, 20 Sep 2011 16:20:39 +0200 Subject: [PATCH] avoid use of freed pointer If we free pk2 at the top of the for-loop, set it to NULL so that we don't free it again just before returning. * revoke.c (gen_desig_revoke): Don't use pk2 after freeing it.