aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* * cipher.h: Add constants for new SHAs.David Shaw2003-02-042-0/+7
|
* * NEWS: Add notes about disabled keys, trustdb tweaks, and "revuid".David Shaw2003-02-022-1/+18
|
* * keyedit.c (menu_revuid): Properly handle a nonselfsigned uid on a v4 keyDavid Shaw2003-02-023-16/+17
| | | | | | | (treat as a v4 revocation). * import.c (print_import_check): Do not re-utf8 convert user IDs.
* * gpgkeys_mailto.in: Fix regexp to work properly if the "keyid" is not aDavid Shaw2003-01-292-4/+9
| | | | | keyid, but rather a text string from the user ID.
* * DETAILS: Document trust depth, value, and regexp.David Shaw2003-01-272-2/+10
|
* * mainproc.c (list_node): Show signature expiration date in with-colonsDavid Shaw2003-01-273-7/+35
| | | | | | | | sig records. * keylist.c (list_keyblock_colon), mainproc.c (list_node): Show trust sig information in with-colons sig records.
* * g10.c (add_group): Trim whitespace after a group name so it does notDavid Shaw2003-01-165-7/+26
| | | | | | | | | | | | | | | | matter where the user puts the = sign. * options.skel: Comment out the first three lines in case someone manually copies the skel file to their homedir. * sign.c (clearsign_file): Only use pgp2mode with v3 keys and MD5. This matches what we do when decoding such messages and prevents creating a message (v3+RIPEMD/160) that we can't verify. * sig-check.c (signature_check2): Use G10ERR_GENERAL as the error for signature digest conflict. BAD_SIGN implies that a signature was checked and we may try and print out a user ID for a key that doesn't exist.
* * trustdb.c (init_trustdb, get_validity): Don't use a changed trust modelDavid Shaw2003-01-153-3/+13
| | | | | | | | to indicate a dirty trustdb, and never auto-rebuild a dirty trustdb with the "always" trust model. * g10.c (add_group): Last commit missed the \t ;)
* * gpg.sgml: Minor language tweaks, spell check, copyright date,David Shaw2003-01-153-18/+28
| | | | | | | | etc. * DETAILS: Note that user IDs/UATs fill in creation and expiration date. Document namehash.
* * packet.h, parse-packet.c (setup_user_id), free-packet.c (free_user_id),David Shaw2003-01-148-39/+65
| | | | | | | | | | | | keydb.h, keyid.c (namehash_from_uid): New function to rmd160-hash the contents of a user ID packet and cache it in the uid object. * keylist.c (list_keyblock_colon): Use namehash in field 8 of uids. Show dates for creation (selfsig date), and expiration in fields 6 and 7. * trustdb.c (get_validity, get_validity_counts, update_validity): Use new namehash function rather than hashing it locally.
* * g10.c (add_group): Fixed group parsing to allow more than oneWerner Koch2003-01-142-2/+10
| | | | | delimiter in a row and also allow tab as delimiter.
* * tdbio.c (tdbio_set_dbname): Fix assertion failure withDavid Shaw2003-01-122-3/+17
| | | | | non-fully-qualified trustdb names.
* * trustdb.c (get_validity_info, get_ownertrust_info, trust_letter):David Shaw2003-01-114-48/+98
| | | | | | | | | | | | | | | | Simplify by returning a ? for error directly. * keyedit.c (show_key_with_all_names): Use get_validity_string and get_ownertrust_string to show full word versions of trust (i.e. "full" instead of 'f'). * trustdb.h, trustdb.c (get_ownertrust_string, get_validity_string): Same as get_ownertrust_info, and get_validity_info, except returns a full string. * trustdb.c (get_ownertrust_with_min): New. Same as 'get_ownertrust' but takes the min_ownertrust value into account.
* * armor.c (armor_filter): Comment about PGP's end of line tab problem.David Shaw2003-01-1110-58/+65
| | | | | | | | | | | | | | | * trustdb.h, trustdb.c (trust_letter): Make static. (get_ownertrust_info, get_validity_info): Don't mask the trust level twice. * trustdb.h, gpgv.c, trustdb.c (get_validity, get_validity_info), keylist.c (list_keyblock_colon), keyedit.c (show_key_with_all_names_colon, menu_revuid): Pass a user ID in rather than a namehash, so we only have to do the hashing in one place. * packet.h, pkclist.c (build_pk_list), free-packet.c (release_public_key_parts): Remove unused namehash element for public keys.
* Updated from latest NewPG projectWerner Koch2003-01-0913-129/+266
|
* Updated from latest NewPG projectWerner Koch2003-01-0928-175/+902
|
* * keygen.c (keygen_set_std_prefs): Warn when setting an IDEA preferenceDavid Shaw2003-01-072-1/+12
| | | | | when IDEA is not available.
* * trustdb.c (get_validity_info): 'd' for disabled is not a validity valueDavid Shaw2003-01-072-2/+3
| | | | | any more.
* * gpgkeys_hkp.c (get_key): Use options=mr when getting a key so keyserverDavid Shaw2003-01-062-1/+7
| | | | | doesn't attach the HTML header which we will just have to discard.
* * packet.h, tdbio.h, tdbio.c (tdbio_read_record, tdbio_write_record),David Shaw2003-01-065-93/+178
| | | | | | | | | | | | trustdb.c (update_validity): Store temporary full & marginal counts in the trustdb. (clear_validity, get_validity_counts): Return and clear temp counts. (store_validation_status): Keep track of which keyids have been stored. (validate_one_keyblock, validate_key_list): Use per-uid copies of the full & marginal counts so they can be recalled for multiple levels. (validate_keys): Only use unused keys for each new round. (reset_unconnected_keys): Rename to reset_trust_records, and only skip specifically excluded records.
* * DETAILS: Document disabled flag in capabilities field.David Shaw2003-01-062-3/+10
|
* * keylist.c (print_capabilities): Show 'D' for disabled keys inDavid Shaw2003-01-063-3/+21
| | | | | | | capabilities section. * trustdb.c (is_disabled): Remove incorrect comment.
* * import.c (import_one): Only do the work to create the status display forDavid Shaw2003-01-034-10/+27
| | | | | | | | | | | interactive import if status is enabled. * keyring.c (keyring_search): skipfnc didn't work properly with non-keyid searches. Noted by Stefan Bellon. * getkey.c (merge_selfsigs_main): Remove some unused code and make sure that the pk selfsigversion member accounts for 1F direct sigs.
* * keydb.c (keydb_add_resource): Don't assume that try_make_homedirWerner Koch2003-01-023-15/+46
| | | | | | | | terminates but check again for the existence of the directory and continue then. * openfile.c (copy_options_file): Print a warning if the skeleton file has active options.
* * getkey.c (merge_selfsigs_main), main.h, sig-check.cDavid Shaw2002-12-294-13/+29
| | | | | | | | (check_key_signature2): Pass the ultimately trusted pk directly to check_key_signature2 to avoid going through the key selection mechanism. This prevents a deadly embrace when two keys without selfsigs each sign the other.
* * keyserver.c (keyserver_refresh): Don't print the "refreshing..." line ifDavid Shaw2002-12-273-7/+26
| | | | | | | | there are no keys to refresh or if there is no keyserver set. * getkey.c (merge_selfsigs_main): Any valid user ID should make a key valid, not just the last one. This also fixes Debian bug #174276.
* * gpg.sgml: Clarify --no-permission-warning to note that the permissionDavid Shaw2002-12-272-3/+18
| | | | | | | | warnings are not intended to be the be-all and end-all in security checks. Add note to --group that when used on the command line, it may be necessary to quote the argument so it is not treated as multiple arguments. Noted by Stefan Bellon.
* * NEWS: Add note about convert-from-106 script.David Shaw2002-12-272-0/+8
|
* fixed type problemStefan Bellon2002-12-272-1/+5
|
* * keyedit.c (keyedit_menu, menu_revuid): Add "revuid" feature to revoke aDavid Shaw2002-12-272-7/+146
| | | | | | user ID. This is the same as issuing a revocation for the self-signature, but a much simpler interface to do it.
* * keydb.h, getkey.c (key_byname): Flag to enable or disable includingDavid Shaw2002-12-2610-16/+110
| | | | | | | | | | | | | | | | | | | | | | | | | | disabled keys. Keys specified via keyid (i.e. 0x...) are always included. * getkey.c (get_pubkey_byname, get_seckey_byname2, get_seckey_bynames), keyedit.c (keyedit_menu, menu_addrevoker): Include disabled keys in these functions. * pkclist.c (build_pk_list): Do not include disabled keys for -r or the key prompt. Do include disabled keys for the default key and --encrypt-to. * trustdb.h, trustdb.c (is_disabled): New skipfnc for skipping disabled keys. * gpgv.c (is_disabled): Stub. * keygen.c (keygen_add_key_expire): Properly handle updating a key expiration to a no-expiration value. * keyedit.c (enable_disable_key): Comment. * import.c (import_one): When in interactive mode and --verbose, don't repeat some key information twice.
* * iobuf.c (iobuf_flush): Only print debug info if debugging is on.David Shaw2002-12-262-1/+6
|
* Simple script to create samplekeys.asc. CVS only.Werner Koch2002-12-231-0/+12
|
* * samplekeys.asc: Updated.Werner Koch2002-12-232-616/+745
|
* 2002-12-22 Timo Schulz <[email protected]>Timo Schulz2002-12-224-0/+38
| | | | | | | | | | * import.c (print_import_check): New. (import_one): Use it here. Use merge_keys_and_selfsig in the interactive mode to avoid wrong key information. * status.h: Add new status code. * status.c: Ditto.
* * pkclist.c (do_we_trust): Tweak language to refer to the "namedDavid Shaw2002-12-136-25/+59
| | | | | | | | | | | | | | | | | | | | user" rather than "owner". Noted by Stefan Bellon. * trustdb.h, trustdb.c (trustdb_pending_check): New function to check if the trustdb needs a check. * import.c (import_keys_internal): Used here so we don't rebuild the trustdb if it is still clean. (import_one, chk_self_sigs): Only mark trustdb dirty if the key that is being imported has any sigs other than self-sigs. Suggested by Adrian von Bidder. * options.skel: Include the required '=' sign in the sample 'group' option. Noted by Stefan Bellon. * import.c (chk_self_sigs): Don't try and check a subkey as if it was a signature.
* * tdbio.c (tdbio_read_record, tdbio_write_record): Compact theDavid Shaw2002-12-115-15/+46
| | | | | | | | | | | | | | | RECTYPE_TRUST records a bit. * g10.c (main): Comment out --list-trust-path until it can be implemented. * import.c (import_one): Warn when importing an Elgamal primary that this may take some time (to verify self-sigs). (chk_self_sigs): Try and cache all self-sigs so the keyblock is written to the keyring with a good rich cache. * keygen.c (ask_algo): Make the Elgamal sign+encrypt warning stronger, and remove the RSA sign+encrypt warning.
* * gpg.sgml: Clarify include-revoked and include-disabled so they matchDavid Shaw2002-12-112-15/+54
| | | | | | | | | | what the program actually does. Noted by Dick Gevers. * gpg.sgml: Document %-expandos for policy URLs and notations. * gpg.sgml: Document --pgp8. Clarify that --pgp6 and --pgp7 disable --throw-keyid.
* fixed typoStefan Bellon2002-12-062-1/+6
|
* * gpg.sgml: Document --no-mangle-dos-filenames.Werner Koch2002-12-053-0/+21
|
* * g10.c: New options --[no-]mangle-dos-filenames.Werner Koch2002-12-054-70/+97
| | | | | | | * options.h (opt): Added mangle-dos-filenames. * openfile.c (open_outfile) [USE_ONLY_8DOT3]: Truncate the filename only when this option is set; this is the default.
* * main.h, keyedit.c, keygen.c: Back out previous (2002-12-01) change.David Shaw2002-12-047-78/+104
| | | | | | | | | | | | | | | | | | | | | | | | Minimal isn't always best. * sign.c (update_keysig_packet): Use the current time rather then a modification of the original signature time. Make sure that this doesn't cause a time warp. * keygen.c (keygen_add_key_expire): Properly handle a key expiration date in the past (use a duration of 0). * keyedit.c (menu_expire): Use update_keysig_packet so any sig subpackets are maintained during the update. * build-packet.c (build_sig_subpkt): Mark sig expired or unexpired when the sig expiration subpacket is added. (build_sig_subpkt_from_sig): Handle making an expiration subpacket from a sig that has already expired (use a duration of 0). * packet.h, sign.c (update_keysig_packet), keyedit.c (menu_set_primary_uid, menu_set_preferences): Add ability to issue 0x18 subkey binding sigs to update_keysig_packet and change all callers.
* * trustdb.c (validate_keys): Show trust parameters when building trustdb,David Shaw2002-12-043-27/+42
| | | | | | | | | and make sure that the version record update was successful. (init_trustdb): If the current parameters aren't what was used for building the trustdb, the trustdb is invalid. * tbio.c (tdbio_db_matches_options): Update to work with new trustdbs.
* * tdbio.h, tdbio.c (tdbio_read_record, tdbio_write_record): Store trustDavid Shaw2002-12-045-9/+51
| | | | | | | | | | | | model in the trustdb version record. (tdbio_update_version_record): New function to update version record values during a trustdb check or update. (tdbio_dump_record): Show trust model in dump. * trustdb.c (validate_keys): Call tdbio_update_version_record on success so that the correct options are stored in the trustdb. * options.h: rearrange trust models so that CLASSIC is 0 and OPENPGP is 1.
* * options.h, g10.c (main), encode.c (write_pubkey_enc_from_list),David Shaw2002-12-0310-37/+74
| | | | | | | | | | | | | | | pkclist.c (algo_available), revoke.c (gen_revoke): Add --pgp8 mode. This is basically identical to --pgp7 in all ways except that signing subkeys, v4 data sigs (including expiration), and SK comments are allowed. * getkey.c (finish_lookup): Comment. * main.h, keylist.c (reorder_keyblock), keyedit.c (keyedit_menu): Reorder user ID display in the --edit-key menu to match that of the --list-keys display. * g10.c (add_notation_data): Fix initialization.
* Marked unused slots in the trustdb.Werner Koch2002-12-031-4/+4
|
* * gpg.sgml: Point out that if the user absolutely must, it's better to useDavid Shaw2002-12-012-0/+15
| | | | | | | | | --pgpX than forcing an algorithm manually. Better still not to use anything, of course. CVS: ---------------------------------------------------------------------- gpg.sgml CVS: ----------------------------------------------------------------------
* * distfiles, gnupg.spec.in: Include convert-from-106.David Shaw2002-12-014-1/+68
| | | | | | | * convert-from-106: Script to automate the 1.0.6->later conversion. It marks all secret keys as ultimately trusted, adds the signature caches, and checks the trustdb.
* * keyedit.c (menu_expire): Don't lose key flags when changing theDavid Shaw2002-12-015-20/+71
| | | | | | | | | | | | | | expiration date of a subkey. This is not the most optimal solution, but it is minimal change on the stable branch. * main.h, keygen.c (do_copy_key_flags): New function to copy key flags, if any, from one sig to another. (do_add_key_expire): New function to add key expiration to a sig. (keygen_copy_flags_add_expire): New version of keygen_add_key_expire that also copies key flags. (keygen_add_key_flags_and_expire): Use do_add_key_expire. * import.c (fix_hkp_corruption): Comment.
* * NEWS: Add notes about notation names and '@', the --trust-model option,David Shaw2002-11-262-0/+36
| | | | | | | default algorithms from --personal-xxxx, --primary-keyring, changes with --s2k-digest-algo, the new anonymous recipient improvements, and non-optimized memory wiping.
generated by cgit v1.2.3 (git 2.25.1) at 2025-05-10 01:25:23 +0000