| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
| |
the skipfnc to include a pointer to the user ID that matched.
* getkey.c (skip_disabled): Rename to skip_unusable, and add checks for
expired or revoked user IDs.
|
|
|
|
|
|
|
| |
* options.h, g10.c (main), armor.c (armor_filter): Allow using --comment
multiple times to get multiple Comment: header lines. --no-comments resets
list.
|
|
|
|
|
|
| |
* http.c [WIN32]: Define MB_CUR_MAX.
(connect_server): use unsigned long since W32 does not have in_addr_t.
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
don't support it yet (--sign, --clearsign, --detach-sign, --symmetric, and
--store).
* g10.c (main): Add --multifile as an alias to turn --encrypt into
--encrypt-files (plus --verify-files, --decrypt-files).
* encode.c (use_mdc), g10.c (main): Use RFC1991 and RFC2440 directly to
check for MDC usability. Do not set the force_mdc or disable_mdc flags
since there is no point any longer.
|
| |
|
| |
|
|
|
|
|
| |
with uint64_t.
|
|
|
|
|
| |
it might not be compiled in).
|
|
|
|
|
| |
pkclist.c (algo_available): Drop TIGER/192 support.
|
|
|
|
|
|
| |
* algorithms.h, Makefile.am, md.c (load_digest_module,
string_to_digest_algo), tiger.c: Drop TIGER/192 support.
|
|
|
|
|
| |
toggle to see a secret key. Reported by Maxim Britov.
|
|
|
|
|
|
| |
--show-photos, --show-policy-url, --show-notation, and --show-keyring, and
getting the signer's fingerprint in sig records.
|
| |
|
|
|
|
|
| |
sake of short and simple commands.
|
|
|
|
|
|
|
|
|
| |
(mk_notation_policy_etc): Clarify a few strings. It's a "preferred
keyserver URL".
* g10.c (main): Use "keyserver-url" instead of "preferred-keyserver" for
the sake of short and simple commands.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
adding a keyserver URL.
* keyedit.c (keyedit_menu, menu_set_keyserver_url): New command to set
preferred keyserver to specified (or all) user IDs.
* build-packet.c (build_sig_subpkt): Set preferred keyserver flag while
building a preferred keyserver subpacket.
* keylist.c (show_policy_url): Policy URLs might be UTF8.
* keyedit.c (menu_addrevoker): Fix leaking a few bytes.
|
|
|
|
|
|
| |
show-validity, show-long-keyid, and show-sig-expire), and verify-options
(show-preferred-keyserver, show-validity, show-long-keyid).
|
|
|
|
|
| |
main --edit-key display.
|
|
|
|
|
| |
--edit-key "check" function.
|
| |
|
|
|
|
|
|
| |
* DETAILS: Document "tru" trust record. Document REVKEYSIG status tag.
Removed paragraph on gdbm usage. Note that pipemode is deprecated.
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
| |
* g10.c (main): Disable use-agent if passphrase-fd is given later.
Suggested by Kurt Garloff.
* exec.c, g10.c, gpgv.c, passphrase.c, photoid.c: s/__MINGW32__/_WIN32/ to
help building on native Windows compilers. Requested by Brian Gladman.
From Werner on stable branch.
|
|
|
|
|
|
| |
Windows compilers. Requested by Brian Gladman. From Werner on stable
branch.
|
|
|
|
|
| |
compilers. Requested by Brian Gladman. From Werner on stable branch.
|
|
|
|
|
|
|
|
|
| |
ttyio.c, w32reg.c: s/__MINGW32__/_WIN32/ to help building on native
Windows compilers. Requested by Brian Gladman. From Werner on stable
branch.
* http.c (connect_server): Oops - forgot to freeaddrinfo().
|
|
|
|
|
|
| |
* keyedit.c (change_passphrase): When responding 'no' to the blank
passphrase question, re-prompt for a new passphrase. This is bug #202.
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
displays - one if the key is not present (to tell the user where to get
the key), the other if it is present (to tell the user where the key can
be refreshed).
* packet.h, parse-packet.c (parse_signature): Set flag if a preferred
keyserver is present.
* keylist.c (list_keyblock_print): Show keyserver url in listings with
list-option show-keyserver-url.
|
|
|
|
|
|
|
|
| |
--status-fd tag.
* README: Add a note about the SunOS symbol underscore problem and how to
fix it. Note problem with gcc < 2.96 and non-gnu as.
|
|
|
|
|
|
|
|
|
| |
to work properly with RPM 4.1 (all files in buildroot must be packaged).
Package and install info files. Tweak the English description. Do not
install gpgv and gpgsplit setuid root. Make sure that install-info is
called in such a way that doesn't bork the RPM install if it cannot
complete (necessary for some upgrade scenarios).
|
|
|
|
|
|
|
| |
show-notation, show-keyring) and --verify-options (show-photos,
show-policy-url, show-notation). Deprecate --show-photos,
--show-policy-url, --show-notation, and --show-keyring.
|
| |
|
|
|
|
|
| |
since we need to have the netlibs regardless because of the agent socket.
|
|
|
|
|
|
| |
Try for IPv6 via getaddrinfo() or a IPv6-ized gethostbyname(). Suggested
by Jun-ichiro itojun Hagino.
|
|
|
|
|
|
|
|
| |
any sig results to avoid munging the output with trustdb warnings.
* g10.c (main): Don't include --show-keyring in --help as it is
deprecated.
|
|
|
|
|
| |
Use NAME_OF_DEV_URANDOM.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* options.skel: Note that keyserver.pgp.com isn't synchronized, and
explain the roundrobin a bit better.
* sig-check.c (check_key_signature2), import.c (import_one,
import_revoke_cert, chk_self_sigs, delete_inv_parts, collapse_uids,
merge_blocks): Make much quieter during import of slightly munged, but
recoverable, keys. Use log_error for unrecoverable import failures.
* keyring.c (keyring_rebuild_cache): Comment.
* sign.c (mk_notation_and_policy): Making a v3 signature with notations or
policy urls is an error, not an info (i.e. increment the errorcount).
Don't print the notation or policy url to stdout since it can be mixed
into the output stream when piping and munge the stream.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Provide a signing-key-is-revoked flag. Change all callers.
* status.h, status.c (get_status_string): New REVKEYSIG status tag for a
good signature from a revoked key.
* mainproc.c (do_check_sig, check_sig_and_print): Use it here.
* import.c (import_revoke_cert, merge_blocks, merge_sigs): Compare actual
signatures on import rather than using keyid or class matching. This does
not change actual behavior with a key, but does mean that all sigs are
imported whether they will be used or not.
* parse-packet.c (parse_signature): Don't give "signature packet without
xxxx" warnings for experimental pk algorithms. An experimental algorithm
may not have a notion of (for example) a keyid (i.e. PGP's x.509 stuff).
|
| |
|
| |
|
|
|
|
|
|
| |
(print_and_check_one_sig): New "show-sig-expire" list-option to show
signature expiration dates (if any).
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
(gpgsm_exit): Update the random seed file and enable debug output.
* g10.c (main): Add secmem features and set the random seed file.
(g10_exit): Update the random seed file.
* parse-packet.c (parse_signature,read_protected_v3_mpi)
(parse_key): Fixed use of mpi_set_opaque.
* keygen.c (gen_card_key): Ditto.
|
| |
|
|
|
|
|
|
|
|
|
| |
--sig-preferred-keyserver to implant a "where to get my key" subpacket
into a signature.
* sign.c (mk_notation_and_policy): Rename to mk_notation_policy_etc and
add preferred keyserver support for signatures.
|
|
|
|
|
|
|
| |
(app_select_openpgp): Store the card version.
(store_fpr): Add argument card_version and fix DOs for old cards.
(app_openpgp_storekey): Likewise.
|