aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* * mainproc.c (check_sig_and_print): Use two different preferred keyserverDavid Shaw2003-08-265-2/+28
| | | | | | | | | | | | | displays - one if the key is not present (to tell the user where to get the key), the other if it is present (to tell the user where the key can be refreshed). * packet.h, parse-packet.c (parse_signature): Set flag if a preferred keyserver is present. * keylist.c (list_keyblock_print): Show keyserver url in listings with list-option show-keyserver-url.
* * NEWS: Note %g and %p, the "tru" --with-colons record, and the REVKEYSIGDavid Shaw2003-08-263-3/+41
| | | | | | | | --status-fd tag. * README: Add a note about the SunOS symbol underscore problem and how to fix it. Note problem with gcc < 2.96 and non-gnu as.
* * gnupg.spec.in: Rework much of the spec to use %-macros throughout. FixDavid Shaw2003-08-262-35/+59
| | | | | | | | | to work properly with RPM 4.1 (all files in buildroot must be packaged). Package and install info files. Tweak the English description. Do not install gpgv and gpgsplit setuid root. Make sure that install-info is called in such a way that doesn't bork the RPM install if it cannot complete (necessary for some upgrade scenarios).
* * gpg.sgml: Document --list-options (show-photos, show-policy-url,David Shaw2003-08-262-14/+94
| | | | | | | show-notation, show-keyring) and --verify-options (show-photos, show-policy-url, show-notation). Deprecate --show-photos, --show-policy-url, --show-notation, and --show-keyring.
* * Makefile.am: Use NETLIBS instead of EGDLIBS.David Shaw2003-08-254-2/+8
|
* * configure.ac: Check for getaddrinfo. Don't bother to check for EGD libsDavid Shaw2003-08-252-3/+7
| | | | | since we need to have the netlibs regardless because of the agent socket.
* * http.c (connect_server): Try and use getaddrinfo if it is available.David Shaw2003-08-252-51/+81
| | | | | | Try for IPv6 via getaddrinfo() or a IPv6-ized gethostbyname(). Suggested by Jun-ichiro itojun Hagino.
* * mainproc.c (check_sig_and_print): Get the uid validity before printingDavid Shaw2003-08-243-4/+17
| | | | | | | | any sig results to avoid munging the output with trustdb warnings. * g10.c (main): Don't include --show-keyring in --help as it is deprecated.
* * random.c (getfnc_gather_random): Don't check NAME_OF_DEV_RANDOM twice.David Shaw2003-08-212-1/+6
| | | | | Use NAME_OF_DEV_URANDOM.
* * gpgv.c: Remove extra semicolon (typo).David Shaw2003-08-217-69/+120
| | | | | | | | | | | | | | | | | | * options.skel: Note that keyserver.pgp.com isn't synchronized, and explain the roundrobin a bit better. * sig-check.c (check_key_signature2), import.c (import_one, import_revoke_cert, chk_self_sigs, delete_inv_parts, collapse_uids, merge_blocks): Make much quieter during import of slightly munged, but recoverable, keys. Use log_error for unrecoverable import failures. * keyring.c (keyring_rebuild_cache): Comment. * sign.c (mk_notation_and_policy): Making a v3 signature with notations or policy urls is an error, not an info (i.e. increment the errorcount). Don't print the notation or policy url to stdout since it can be mixed into the output stream when piping and munge the stream.
* * packet.h, sig-check.c (signature_check2, do_check, do_check_messages):David Shaw2003-08-138-60/+88
| | | | | | | | | | | | | | | | | | | Provide a signing-key-is-revoked flag. Change all callers. * status.h, status.c (get_status_string): New REVKEYSIG status tag for a good signature from a revoked key. * mainproc.c (do_check_sig, check_sig_and_print): Use it here. * import.c (import_revoke_cert, merge_blocks, merge_sigs): Compare actual signatures on import rather than using keyid or class matching. This does not change actual behavior with a key, but does mean that all sigs are imported whether they will be used or not. * parse-packet.c (parse_signature): Don't give "signature packet without xxxx" warnings for experimental pk algorithms. An experimental algorithm may not have a notion of (for example) a keyid (i.e. PGP's x.509 stuff).
* About to release the first 1.9 version.V1-9-0Werner Koch2003-08-051-0/+2
|
* Cleanups, fixes and PC/SC supportWerner Koch2003-08-051-0/+14
|
* * options.h, g10.c (main), keylist.c (list_keyblock_print), keyedit.cDavid Shaw2003-08-035-2/+16
| | | | | | (print_and_check_one_sig): New "show-sig-expire" list-option to show signature expiration dates (if any).
* minor changes to make make distcheck happyWerner Koch2003-07-318-9/+30
|
* Remove leftover cruftWerner Koch2003-07-291-1/+1
|
* *** empty log message ***Werner Koch2003-07-291-1/+1
|
* * gpgsm.c (main): Add secmem features and set the random seed file.Werner Koch2003-07-295-46/+47
| | | | | | | | | | | | (gpgsm_exit): Update the random seed file and enable debug output. * g10.c (main): Add secmem features and set the random seed file. (g10_exit): Update the random seed file. * parse-packet.c (parse_signature,read_protected_v3_mpi) (parse_key): Fixed use of mpi_set_opaque. * keygen.c (gen_card_key): Ditto.
* Adjusted for use with current libgcrypt (1.1.42).Werner Koch2003-07-289-26/+31
|
* * options.h, g10.c (main, add_keyserver_url): AddDavid Shaw2003-07-244-6/+83
| | | | | | | | | --sig-preferred-keyserver to implant a "where to get my key" subpacket into a signature. * sign.c (mk_notation_and_policy): Rename to mk_notation_policy_etc and add preferred keyserver support for signatures.
* * app-openpgp.c (do_learn_status): Print more status information.Werner Koch2003-07-243-7/+59
| | | | | | | (app_select_openpgp): Store the card version. (store_fpr): Add argument card_version and fix DOs for old cards. (app_openpgp_storekey): Likewise.
* * command.c (cmd_pkauth): New.Werner Koch2003-07-2310-82/+668
| | | | | | | | | (cmd_setdata): Check whether data was given at all to avoid passing 0 to malloc. * app.c (app_auth): New. * app-openpgp.c (do_auth): New.
* * keygen.c (do_add_key_flags): Don't set the certify flag for subkeys.David Shaw2003-07-219-29/+129
| | | | | | | | | | | | | | | | | | (ask_algo): Provide key flags for DSA, Elgamal_e, and Elgamal subkeys. (generate_keypair): Provide key flags for the default DSA/Elgamal keys. * sig-check.c (signature_check, signature_check2, check_key_signature, check_key_signature2): Allow passing NULLs for unused parameters in the x2 form of each function to avoid the need for dummy variables. getkey.c, mainproc.c: Change all callers. * trustdb.h, trustdb.c (read_trust_options): New. Returns items from the trustdb version record. * keylist.c (public_key_list): Use it here for the new "tru" record. * gpgv.c (read_trust_options): Stub.
* * keyedit.c (show_key_with_all_names): Use list-option show-validity inDavid Shaw2003-07-202-0/+13
| | | | | --edit-key interface as well.
* * options.h, g10.c (main), mainproc.c (check_sig_and_print): AddDavid Shaw2003-07-204-24/+58
| | | | | | verify-options "show-validity" and "show-long-keyid" to show trustdb validity and long keyids during (file) signature verification.
* * packet.h, main.h, sig-check.c (signature_check2, check_key_signature2,David Shaw2003-07-207-26/+81
| | | | | | | | | | | do_check): If ret_pk is set, fill in the pk used to verify the signature. Change all callers in getkey.c, mainproc.c, and sig-check.c. * keylist.c (list_keyblock_colon): Use the ret_pk from above to put the fingerprint of the signing key in "sig" records during a --with-colons --check-sigs. This requires --no-sig-cache as well since we don't cache fingerprints.
* * Makefile.am: Add sc-copykeys program.Werner Koch2003-07-165-10/+1028
| | | | | | | | | * sc-copykeys.c: New. * app-openpgp.c (app_openpgp_storekey): New. (app_openpgp_cardinfo): New. (count_bits): New. (store_fpr): And use it here to get the actual length in bit.
* * simple-pwquery.c, simple-pwquery.h: New; moved from ../agent.Werner Koch2003-07-164-1/+566
| | | | | * Makefile.am (libsimple_pwquery_a_LIBADD): New.
* * simple-pwquery.c, simple-pwquery.h: Moved to ../common.Werner Koch2003-07-163-5/+11
| | | | | | * Makefile.am (gpg_protect_tool_LDADD): Add simple-pwquery.o. Removed it from xx_SOURCES.
* * Makefile.am: Add --no-permission-warning to avoid spurious warning whenDavid Shaw2003-07-102-2/+6
| | | | | importing demo keys.
* * configure.ac: configure.ac: Check for sigset_t and struct sigaction.David Shaw2003-07-102-1/+9
| | | | | | This is for Forte c89 on Solaris which seems to define only the function call half of the two pairs by default.
* * parse-packet.c (parse_signature): No need to reserve 8 bytes for theDavid Shaw2003-07-1017-69/+237
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | unhashed signature cache any longer. * misc.c (pct_expando): Add two new expandos - signer's fingerprint (%g), and signer's primary fingerprint (%p). * Makefile.am: Include W32LIBS where appropriate. * g10.c (main): Add --rfc2440 alias for --openpgp since in a few months, they won't be the same thing. * keyserver.c (parse_keyserver_uri): Accept "http" as an alias for "hkp", since it is occasionally written that way. (keyserver_spawn): Use ascii_isspace to avoid locale issues. * keygen.c (ask_user_id): Make --allow-freeform-uid apply to the email field as well as the name field, and allow mixing fields when it is set. * options.skel: Use subkeys.pgp.net as the default keyserver. * trustdb.c (validate_one_keyblock): Certifications on revoked or expired uids do not count in the web of trust. * signal.c (init_one_signal, pause_on_sigusr, do_block): Only use sigprocmask() if we have sigset_t, and only use sigaction() if we have struct sigaction. This is for Forte c89 on Solaris which seems to define only the function call half of the two pairs by default. (pause_on_sigusr): Typo. (do_block): If we can't use sigprocmask() and sigset_t, try to get the number of signals from NSIG as well as MAXSIG, and if we can't, fail with an explanation. * signal.c, tdbio.c: Comment out the transaction code. It was not used in this version, and was causing some build problems on quasi-posix platforms (Solaris and Forte c89). * keylist.c (list_keyblock_colon): Don't include validity values when listing secret keys since they can be incorrect and/or misleading. This is a temporary kludge, and will be handled properly in 1.9/2.0. * mainproc.c (check_sig_and_print): Only show the "key available from" preferred keyserver line if the key is not currently present. * keyedit.c (sign_uids): Do not sign expired uids without --expert (same behavior as revoked uids). Do not allow signing a user ID without a self-signature. --expert overrides. Add additional prompt to the signature level question. (menu_expire): When changing expiration dates, don't replace selfsigs on revoked uids since this would effectively unrevoke them. There is also no point in replacing expired selfsigs. This is bug #181 * g10.c (add_notation_data): Make sure that only ascii is passed to iscntrl. Noted by Christian Biere. * getkey.c (classify_user_id2): Replaced isspace by spacep * keygen.c (ask_user_id): Ditto. (get_parameter_algo): Ditto. * keyedit.c (keyedit_menu): Ditto. * tdbdump.c (import_ownertrust): Ditto. s/isxdigit/hexdigitp/. * revoke.c (ask_revocation_reason): * keyserver.c (keyserver_spawn): Dito.
* * DETAILS: Document the --attribute-fd data.David Shaw2003-07-103-26/+99
| | | | | | | | | | * gpg.sgml: Document --set-notation. Explain why it is not possible to disable permission warnings in the gpg.conf file about the homedir. Add pointer in --ignore-time-conflict to see --ignore-valid from, and vice versa. Warning not to try and parse --list-keys in scripts. Document the signature flags (1-3/L/R/P/N/X), Document expandos %g and %p. Note the default --personal-digest-preferences are "H2".
* * Makefile.am: Use W32LIBS where appropriate.David Shaw2003-07-104-4/+12
|
* * iobuf.c (check_special_filename): Replaced is isdigit by digitpDavid Shaw2003-07-104-9/+21
| | | | | | | | | to avoid passing negative values and potential locale problems. Problem noted by Christian Biere. * strgutil.c (strlwr,strcasecmp,strncasecmp): Make sure we don't pass a negative value. * miscutil.c (scan_isodatestr): Ditto.
* * types.h: Prefer using uint64_t when creating a 64-bit unsigned type.David Shaw2003-07-103-5/+27
| | | | | | | | | | | | This avoids a warning on compilers that support but complain about unsigned long long. * util.h (ascii_isspace): New variation on isspace() that is immune from locale changes. * util.h: Make sure that only ascii is passed to isfoo functions. (From Werner on stable branch).
* * THANKS: Updates from stable.David Shaw2003-07-104-4/+20
| | | | | | | | | * configure.ac: Include wsock32 in W32LIBS. This is different from NETLIBS so we don't need to force other platforms to pull in the netlibs when they aren't actually needed. * NEWS: Note portability changes.
* Minor changes to make make dist work correctly.Werner Koch2003-07-043-1/+9
|
* * app-openpgp.c (do_setattr): Add setting of the URL.Werner Koch2003-07-0311-36/+206
| | | | | | (app_select_openpgp): Dump card data only in very verbose mode. (do_decipher): New.
* * app-openpgp.c (store_fpr): Fixed fingerprint calculation.Werner Koch2003-07-015-16/+120
| | | | | | | | * keygen.c (gen_card_key): Obviously we should use the creation date received from SCDAEMON, so that the fingerprints will match. * sign.c (do_sign): Pass the serialno to the sign code. * keyid.c (serialno_and_fpr_from_sk): New.
* Key generation and signing using the OpenPGP card does rudimentary work.Werner Koch2003-06-2750-449/+1535
|
* Finished the bulk of changes for gnupg 1.9. This included switchingWerner Koch2003-06-1812-14/+3594
| | | | | | | | | | | to libgcrypt functions, using shared error codes from libgpg-error, replacing the old functions we used to have in ../util by those in ../jnlib and ../common, renaming the malloc functions and a couple of types. Note, that not all changes are listed below becuause they are too similar and done at far too many places. As of today the code builds using the current libgcrypt from CVS but it is very unlikely that it actually works.
* * parse-packet.c (parse): Disallow old style partial length forWerner Koch2003-06-102-2/+27
| | | | | all key material packets to avoid possible corruption of keyrings.
* * import.c (import_keys_internal): Invalidate the cache so thatWerner Koch2003-06-081-1/+1
| | | | | | the file descriptor gets closed. Fixes bug reported by Juan F. Codagnone.
* * import.c (import_keys_internal): Invalidate the cache so thatWerner Koch2003-06-082-0/+8
| | | | | | the file descriptor gets closed. Fixes bug reported by Juan F. Codagnone.
* A small step for GnuPG but a huge leap for error codes.Werner Koch2003-06-0521-307/+272
| | | | | | (Sorry, it does not build currently - I need to check it in to avoid duplicate work.)
* * options.skel: Use new hkp://subkeys.pgp.net as sample keyserver sinceDavid Shaw2003-06-058-14/+86
| | | | | | | | | | | | | | | | they at least handle subkeys correctly. * options.h, g10.c (main), main.h, keylist.c (show_keyserver_url), mainproc.c (check_sig_and_print), parse-packet.c (dump_sig_subpkt, parse_one_sig_subpkt, can_handle_critical): Add read-only support for preferred keyserver subpackets. They're basically policy URLs with a different name. Add a verify-option "show-preferred-keyserver" to turn them on and off (on by default, as per stable branch). * g10.c (main): Add "--set-notation" as alias to "--notation-data" this is to make things consistent with --set-policy-url meaning both sigs and certs.
* Update error handling to match gpg-error in CVS.Marcus Brinkmann2003-06-0416-124/+119
|
* Inadvertently left out of the 2003-06-01 checkinDavid Shaw2003-06-042-2/+10
|
* Fix small typo in comment.Marcus Brinkmann2003-06-031-1/+1
|
generated by cgit v1.2.3 (git 2.25.1) at 2025-05-11 06:56:49 +0000