aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* minor changes to make make distcheck happyWerner Koch2003-07-318-9/+30
|
* Remove leftover cruftWerner Koch2003-07-291-1/+1
|
* *** empty log message ***Werner Koch2003-07-291-1/+1
|
* * gpgsm.c (main): Add secmem features and set the random seed file.Werner Koch2003-07-295-46/+47
| | | | | | | | | | | | (gpgsm_exit): Update the random seed file and enable debug output. * g10.c (main): Add secmem features and set the random seed file. (g10_exit): Update the random seed file. * parse-packet.c (parse_signature,read_protected_v3_mpi) (parse_key): Fixed use of mpi_set_opaque. * keygen.c (gen_card_key): Ditto.
* Adjusted for use with current libgcrypt (1.1.42).Werner Koch2003-07-289-26/+31
|
* * options.h, g10.c (main, add_keyserver_url): AddDavid Shaw2003-07-244-6/+83
| | | | | | | | | --sig-preferred-keyserver to implant a "where to get my key" subpacket into a signature. * sign.c (mk_notation_and_policy): Rename to mk_notation_policy_etc and add preferred keyserver support for signatures.
* * app-openpgp.c (do_learn_status): Print more status information.Werner Koch2003-07-243-7/+59
| | | | | | | (app_select_openpgp): Store the card version. (store_fpr): Add argument card_version and fix DOs for old cards. (app_openpgp_storekey): Likewise.
* * command.c (cmd_pkauth): New.Werner Koch2003-07-2310-82/+668
| | | | | | | | | (cmd_setdata): Check whether data was given at all to avoid passing 0 to malloc. * app.c (app_auth): New. * app-openpgp.c (do_auth): New.
* * keygen.c (do_add_key_flags): Don't set the certify flag for subkeys.David Shaw2003-07-219-29/+129
| | | | | | | | | | | | | | | | | | (ask_algo): Provide key flags for DSA, Elgamal_e, and Elgamal subkeys. (generate_keypair): Provide key flags for the default DSA/Elgamal keys. * sig-check.c (signature_check, signature_check2, check_key_signature, check_key_signature2): Allow passing NULLs for unused parameters in the x2 form of each function to avoid the need for dummy variables. getkey.c, mainproc.c: Change all callers. * trustdb.h, trustdb.c (read_trust_options): New. Returns items from the trustdb version record. * keylist.c (public_key_list): Use it here for the new "tru" record. * gpgv.c (read_trust_options): Stub.
* * keyedit.c (show_key_with_all_names): Use list-option show-validity inDavid Shaw2003-07-202-0/+13
| | | | | --edit-key interface as well.
* * options.h, g10.c (main), mainproc.c (check_sig_and_print): AddDavid Shaw2003-07-204-24/+58
| | | | | | verify-options "show-validity" and "show-long-keyid" to show trustdb validity and long keyids during (file) signature verification.
* * packet.h, main.h, sig-check.c (signature_check2, check_key_signature2,David Shaw2003-07-207-26/+81
| | | | | | | | | | | do_check): If ret_pk is set, fill in the pk used to verify the signature. Change all callers in getkey.c, mainproc.c, and sig-check.c. * keylist.c (list_keyblock_colon): Use the ret_pk from above to put the fingerprint of the signing key in "sig" records during a --with-colons --check-sigs. This requires --no-sig-cache as well since we don't cache fingerprints.
* * Makefile.am: Add sc-copykeys program.Werner Koch2003-07-165-10/+1028
| | | | | | | | | * sc-copykeys.c: New. * app-openpgp.c (app_openpgp_storekey): New. (app_openpgp_cardinfo): New. (count_bits): New. (store_fpr): And use it here to get the actual length in bit.
* * simple-pwquery.c, simple-pwquery.h: New; moved from ../agent.Werner Koch2003-07-164-1/+566
| | | | | * Makefile.am (libsimple_pwquery_a_LIBADD): New.
* * simple-pwquery.c, simple-pwquery.h: Moved to ../common.Werner Koch2003-07-163-5/+11
| | | | | | * Makefile.am (gpg_protect_tool_LDADD): Add simple-pwquery.o. Removed it from xx_SOURCES.
* * Makefile.am: Add --no-permission-warning to avoid spurious warning whenDavid Shaw2003-07-102-2/+6
| | | | | importing demo keys.
* * configure.ac: configure.ac: Check for sigset_t and struct sigaction.David Shaw2003-07-102-1/+9
| | | | | | This is for Forte c89 on Solaris which seems to define only the function call half of the two pairs by default.
* * parse-packet.c (parse_signature): No need to reserve 8 bytes for theDavid Shaw2003-07-1017-69/+237
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | unhashed signature cache any longer. * misc.c (pct_expando): Add two new expandos - signer's fingerprint (%g), and signer's primary fingerprint (%p). * Makefile.am: Include W32LIBS where appropriate. * g10.c (main): Add --rfc2440 alias for --openpgp since in a few months, they won't be the same thing. * keyserver.c (parse_keyserver_uri): Accept "http" as an alias for "hkp", since it is occasionally written that way. (keyserver_spawn): Use ascii_isspace to avoid locale issues. * keygen.c (ask_user_id): Make --allow-freeform-uid apply to the email field as well as the name field, and allow mixing fields when it is set. * options.skel: Use subkeys.pgp.net as the default keyserver. * trustdb.c (validate_one_keyblock): Certifications on revoked or expired uids do not count in the web of trust. * signal.c (init_one_signal, pause_on_sigusr, do_block): Only use sigprocmask() if we have sigset_t, and only use sigaction() if we have struct sigaction. This is for Forte c89 on Solaris which seems to define only the function call half of the two pairs by default. (pause_on_sigusr): Typo. (do_block): If we can't use sigprocmask() and sigset_t, try to get the number of signals from NSIG as well as MAXSIG, and if we can't, fail with an explanation. * signal.c, tdbio.c: Comment out the transaction code. It was not used in this version, and was causing some build problems on quasi-posix platforms (Solaris and Forte c89). * keylist.c (list_keyblock_colon): Don't include validity values when listing secret keys since they can be incorrect and/or misleading. This is a temporary kludge, and will be handled properly in 1.9/2.0. * mainproc.c (check_sig_and_print): Only show the "key available from" preferred keyserver line if the key is not currently present. * keyedit.c (sign_uids): Do not sign expired uids without --expert (same behavior as revoked uids). Do not allow signing a user ID without a self-signature. --expert overrides. Add additional prompt to the signature level question. (menu_expire): When changing expiration dates, don't replace selfsigs on revoked uids since this would effectively unrevoke them. There is also no point in replacing expired selfsigs. This is bug #181 * g10.c (add_notation_data): Make sure that only ascii is passed to iscntrl. Noted by Christian Biere. * getkey.c (classify_user_id2): Replaced isspace by spacep * keygen.c (ask_user_id): Ditto. (get_parameter_algo): Ditto. * keyedit.c (keyedit_menu): Ditto. * tdbdump.c (import_ownertrust): Ditto. s/isxdigit/hexdigitp/. * revoke.c (ask_revocation_reason): * keyserver.c (keyserver_spawn): Dito.
* * DETAILS: Document the --attribute-fd data.David Shaw2003-07-103-26/+99
| | | | | | | | | | * gpg.sgml: Document --set-notation. Explain why it is not possible to disable permission warnings in the gpg.conf file about the homedir. Add pointer in --ignore-time-conflict to see --ignore-valid from, and vice versa. Warning not to try and parse --list-keys in scripts. Document the signature flags (1-3/L/R/P/N/X), Document expandos %g and %p. Note the default --personal-digest-preferences are "H2".
* * Makefile.am: Use W32LIBS where appropriate.David Shaw2003-07-104-4/+12
|
* * iobuf.c (check_special_filename): Replaced is isdigit by digitpDavid Shaw2003-07-104-9/+21
| | | | | | | | | to avoid passing negative values and potential locale problems. Problem noted by Christian Biere. * strgutil.c (strlwr,strcasecmp,strncasecmp): Make sure we don't pass a negative value. * miscutil.c (scan_isodatestr): Ditto.
* * types.h: Prefer using uint64_t when creating a 64-bit unsigned type.David Shaw2003-07-103-5/+27
| | | | | | | | | | | | This avoids a warning on compilers that support but complain about unsigned long long. * util.h (ascii_isspace): New variation on isspace() that is immune from locale changes. * util.h: Make sure that only ascii is passed to isfoo functions. (From Werner on stable branch).
* * THANKS: Updates from stable.David Shaw2003-07-104-4/+20
| | | | | | | | | * configure.ac: Include wsock32 in W32LIBS. This is different from NETLIBS so we don't need to force other platforms to pull in the netlibs when they aren't actually needed. * NEWS: Note portability changes.
* Minor changes to make make dist work correctly.Werner Koch2003-07-043-1/+9
|
* * app-openpgp.c (do_setattr): Add setting of the URL.Werner Koch2003-07-0311-36/+206
| | | | | | (app_select_openpgp): Dump card data only in very verbose mode. (do_decipher): New.
* * app-openpgp.c (store_fpr): Fixed fingerprint calculation.Werner Koch2003-07-015-16/+120
| | | | | | | | * keygen.c (gen_card_key): Obviously we should use the creation date received from SCDAEMON, so that the fingerprints will match. * sign.c (do_sign): Pass the serialno to the sign code. * keyid.c (serialno_and_fpr_from_sk): New.
* Key generation and signing using the OpenPGP card does rudimentary work.Werner Koch2003-06-2750-449/+1535
|
* Finished the bulk of changes for gnupg 1.9. This included switchingWerner Koch2003-06-1812-14/+3594
| | | | | | | | | | | to libgcrypt functions, using shared error codes from libgpg-error, replacing the old functions we used to have in ../util by those in ../jnlib and ../common, renaming the malloc functions and a couple of types. Note, that not all changes are listed below becuause they are too similar and done at far too many places. As of today the code builds using the current libgcrypt from CVS but it is very unlikely that it actually works.
* * parse-packet.c (parse): Disallow old style partial length forWerner Koch2003-06-102-2/+27
| | | | | all key material packets to avoid possible corruption of keyrings.
* * import.c (import_keys_internal): Invalidate the cache so thatWerner Koch2003-06-081-1/+1
| | | | | | the file descriptor gets closed. Fixes bug reported by Juan F. Codagnone.
* * import.c (import_keys_internal): Invalidate the cache so thatWerner Koch2003-06-082-0/+8
| | | | | | the file descriptor gets closed. Fixes bug reported by Juan F. Codagnone.
* A small step for GnuPG but a huge leap for error codes.Werner Koch2003-06-0521-307/+272
| | | | | | (Sorry, it does not build currently - I need to check it in to avoid duplicate work.)
* * options.skel: Use new hkp://subkeys.pgp.net as sample keyserver sinceDavid Shaw2003-06-058-14/+86
| | | | | | | | | | | | | | | | they at least handle subkeys correctly. * options.h, g10.c (main), main.h, keylist.c (show_keyserver_url), mainproc.c (check_sig_and_print), parse-packet.c (dump_sig_subpkt, parse_one_sig_subpkt, can_handle_critical): Add read-only support for preferred keyserver subpackets. They're basically policy URLs with a different name. Add a verify-option "show-preferred-keyserver" to turn them on and off (on by default, as per stable branch). * g10.c (main): Add "--set-notation" as alias to "--notation-data" this is to make things consistent with --set-policy-url meaning both sigs and certs.
* Update error handling to match gpg-error in CVS.Marcus Brinkmann2003-06-0416-124/+119
|
* Inadvertently left out of the 2003-06-01 checkinDavid Shaw2003-06-042-2/+10
|
* Fix small typo in comment.Marcus Brinkmann2003-06-031-1/+1
|
* * scdaemon.h: Include gpg-error.h and errno.hWerner Koch2003-06-037-10/+1266
| | | | | | * card.c (map_sc_err): Use unknown for the error source. * Makefile.am: Link with libgpg-error
* Make use of libgpg-errorWerner Koch2003-06-0358-684/+1110
|
* * options.h, g10.c (main), keylist.c (list_keyblock_print): AddDavid Shaw2003-06-035-34/+122
| | | | | | | | | | "show-validity" and "show-long-keyid" list-options. * gpgv.c (get_validity, trust_value_to_string): Stubs. * g10.c (main): Use SAFE_VERSION instead of VERSION in the version-specific gpg.conf file so it can be overridden on RISCOS.
* * configure.ac: Define SAFE_VERSION so that RISCOS can override it andDavid Shaw2003-06-032-0/+8
| | | | | remove invalid chars.
* * g10.c (main), keylist.c (show_policy_url, show_notation), mainproc.cDavid Shaw2003-06-015-58/+103
| | | | | | | | | | | | | (check_sig_and_print): Emulate the old policy and notation behavior (display by default). Send to status-fd whether it is displayed on the screen or not. * g10.c (main): Since we now have some options in devel that won't work in a stable branch gpg.conf file, try for a version-specific gpg.conf-VERSION file before falling back to gpg.conf. * main.h, options.h: Move various option flags to options.h.
* * mainproc.c (check_sig_and_print), main.h, keylist.c (show_policy,David Shaw2003-05-319-93/+157
| | | | | | | | | | | | | | | | | show_notation): Collapse the old print_notation_data into show_policy() and show_notation() so there is only one function to print notations and policy URLs. * options.h, main.h, g10.c (main), keyedit.c (print_and_check_one_sig), keylist.c (list_one, list_keyblock_print), pkclist.c (do_edit_ownertrust), sign.c (mk_notation_and_policy): New "list-options" and "verify-options" commands. These replace the existing --show-photos/--no-show-photos, --show-notation/--no-show-notation, --show-policy-url/--no-show-policy-url, and --show-keyring options. The new method is more flexible since a user can specify (for example) showing photos during sig verification, but not in key listings. The old options are emulated.
* * main.h, misc.c (parse_options): New general option line parser. Fix theDavid Shaw2003-05-315-72/+60
| | | | | | | | | bug in the old version that did not handle report syntax errors after a valid entry. * import.c (parse_import_options), export.c (parse_export_options): Call it here instead of duplicating the code.
* * keylist.c (list_one): Don't show the keyring filename when inDavid Shaw2003-05-318-27/+116
| | | | | | | | | | | | | | | | | | | | | | --with-colons mode. Actually translate "Keyring" string. * mainproc.c (proc_tree): We can't currently handle multiple signatures of different classes or digests (we'd pretty much have to run a different hash context for each), but if they are all the same, make an exception. This is Debian bug #194292. * sig-check.c (check_key_signature2): Make string translatable. * packet.h, getkey.c (fixup_uidnode): Mark real primary uids differently than assumed primaries. * keyedit.c (no_primary_warning): Use the differently marked primaries here in a new function to warn when an --edit-key command might rearrange the self-sig dates enough to change which uid is primary. (menu_expire, menu_set_preferences): Use no_primary_warning() here. * Makefile.am: Use @DLLIBS@ for -ldl.
* * gpgkeys_hkp.c, gpgkeys_ldap.c: #include <getopt.h> if it is available.David Shaw2003-05-314-5/+24
| | | | | | | | | | Also include extern references for optarg and optind since there is no guarantee that any header file will include them. Standards? We don't need no stinkin' standards * Makefile.am: Use @GETOPT@ to pull in libiberty on those platforms that need it.
* * Makefile.am: Some cleanup, and use DLLIBS for -ldl.David Shaw2003-05-312-20/+12
|
* * srv.h, srv.c: Include windows.h with MINGW32.David Shaw2003-05-313-1/+13
|
* * configure.ac: Put wsock32 in NETLIBS. Put zlib in ZLIBS. Put dl inDavid Shaw2003-05-313-25/+26
| | | | | | | DLLIBS. Check for getopt.h if available. Look for getopt() in libiberty if libc doesn't have it. Enable GPGKEYS_HKP after AC_PROG_CC so that any needed extension (i.e. ".exe") is defined.
* Bumbed version number after releaseWerner Koch2003-05-272-1/+5
|
* About to release 1.3.2V1-3-2Werner Koch2003-05-279-1051/+1771
|