aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* * convert-from-106: Move to the tools directory.David Shaw2003-02-232-52/+4
|
* * sign.c (sign_file): Do not push textmode filter onto an unopened IOBUFDavid Shaw2003-02-226-17/+101
| | | | | | | | | | | | | (segfault). Noted by Marcus Brinkmann. Push and reinitialize textmode filter for each file in a multiple file list. * packet.h, getkey.c (fixup_uidnode), keyedit.c (show_prefs): Set and show the keyserver no-modify flag. * keygen.c (add_keyserver_modify): New. (keygen_upd_std_prefs): Call it here. (keygen_set_std_prefs): Accept "ks-modify" and "no-ks-modify" as prefs to set and unset keyserver modify flag.
* * ttyio.c (tty_print_utf8_string, tty_print_utf8_string2): Use 0 toDavid Shaw2003-02-222-3/+10
| | | | | | indicate a string with no maximum size. This prevents early truncation of strings that contain control chars which are expanded into \xXX form.
* * configure.ac: Add --disable-idea for IDEA. Note that disabling IDEADavid Shaw2003-02-222-29/+40
| | | | | | | disables both the real IDEA and the possibility of using the IDEA loadable module. Remove the --disable-dynload option since it is no longer meaningful (it is only used if idea-stub is used).
* * g10.c (main): Accept "s1" in addition to "idea" to match the otherDavid Shaw2003-02-224-1/+17
| | | | | | | | ciphers. * main.h, misc.c (idea_cipher_warn): We don't need this if IDEA has been disabled.
* * configure.ac: Add --disable-xxx options for CAST5, BLOWFISH, AES (all),David Shaw2003-02-212-13/+107
| | | | | | TWOFISH, TIGER192, SHA256, and SHA384/512. Add a --enable-minimal that disables all of them as well as --disable-exec.
* * keygen.c (keygen_set_std_prefs): Don't put AES or CAST5 in default prefsDavid Shaw2003-02-212-4/+22
| | | | | if they are disabled.
* * cipher.c (setup_cipher_table): #ifdef all optional ciphers.David Shaw2003-02-213-4/+22
| | | | | * md.c (load_digest_module): #ifdef all optional digests.
* * g10.c (main): Use 3DES instead of CAST5 if we don't have CAST5 support.David Shaw2003-02-212-19/+38
| | | | | | Use 3DES for the s2k cipher in --openpgp mode. (print_mds): #ifdef all of the optional digest algorithms.
* * keydb.h, getkey.c (classify_user_id, classify_user_id2): Make 'exact' aDavid Shaw2003-02-127-34/+127
| | | | | | | | | | | | | | | | | | per-desc item. Merge into one function since 'force_exact' is no longer needed. (key_byname): Use new classify_user_id function, and new exact flag in KEYDB_SEARCH_DESC. * keyring.h, keyring.c (keyring_search): Return an optional index to show which KEYDB_SEARCH_DESC was the matching one. * keydb.h, keydb.c (keydb_search): Rename to keydb_search2, and pass the optional index to keyring_search. Add a macro version of keydb_search that calls this new function. * export.c (do_export_stream): If the keyid! syntax is used, export only that specified key. If the key in question is a subkey, export the primary plus that subkey only.
* * exec.c (set_exec_path): Add debugging line.David Shaw2003-02-123-61/+110
| | | | | | | | | * g10.c (print_hex, print_mds): Print long hash strings a lot neater. This assumes at least an 80-character display, as there are a few other similar assumptions here and there. Users who need unformatted hashes can still use with-colons. Check that SHA384 and 512 are available before using them as they are no longer always available.
* * Makefile.am: Use a local copy of libexecdir along with @PACKAGE@ asDavid Shaw2003-02-122-1/+8
| | | | | GNUPG_LIBEXECDIR so it can be easily overridden at make time.
* * configure.ac: Do not set GNUPG_LIBEXECDIR in ./configure, so thatDavid Shaw2003-02-122-18/+33
| | | | | | makefiles can override it. Verify that we have a 64-bit type before building tiger.c or sha512.c. Add uint64_t as a possible 64-bit type.
* * Makefile.am, md.c (load_digest_module): Only build in SHA384/512 andDavid Shaw2003-02-123-6/+14
| | | | | TIGER if specifically enabled by the 64-bit type check in configure.
* * types.h: Try and use uint64_t for a 64-bit type.David Shaw2003-02-122-0/+11
|
* * Makefile.am: Use a local copy of libexecdir along with @PACKAGE@ so itDavid Shaw2003-02-122-1/+6
| | | | | can be easily overridden at make time.
* * armor.c (parse_hash_header, armor_filter): Accept the new SHAs in theDavid Shaw2003-02-043-19/+51
| | | | | | | | armor Hash: header. * g10.c (print_hex): Print long hash strings a little neater. (print_mds): Add the new SHAs to the hash list.
* * sha256.c, sha512.c: New.David Shaw2003-02-046-2/+792
| | | | | | * Makefile.am, algorithms.h, md.c (load_digest_module, string_to_digest_algo): Add read-only support for the new SHAs.
* * cipher.h: Add constants for new SHAs.David Shaw2003-02-042-0/+7
|
* * NEWS: Add notes about disabled keys, trustdb tweaks, and "revuid".David Shaw2003-02-022-1/+18
|
* * keyedit.c (menu_revuid): Properly handle a nonselfsigned uid on a v4 keyDavid Shaw2003-02-023-16/+17
| | | | | | | (treat as a v4 revocation). * import.c (print_import_check): Do not re-utf8 convert user IDs.
* * gpgkeys_mailto.in: Fix regexp to work properly if the "keyid" is not aDavid Shaw2003-01-292-4/+9
| | | | | keyid, but rather a text string from the user ID.
* * DETAILS: Document trust depth, value, and regexp.David Shaw2003-01-272-2/+10
|
* * mainproc.c (list_node): Show signature expiration date in with-colonsDavid Shaw2003-01-273-7/+35
| | | | | | | | sig records. * keylist.c (list_keyblock_colon), mainproc.c (list_node): Show trust sig information in with-colons sig records.
* * g10.c (add_group): Trim whitespace after a group name so it does notDavid Shaw2003-01-165-7/+26
| | | | | | | | | | | | | | | | matter where the user puts the = sign. * options.skel: Comment out the first three lines in case someone manually copies the skel file to their homedir. * sign.c (clearsign_file): Only use pgp2mode with v3 keys and MD5. This matches what we do when decoding such messages and prevents creating a message (v3+RIPEMD/160) that we can't verify. * sig-check.c (signature_check2): Use G10ERR_GENERAL as the error for signature digest conflict. BAD_SIGN implies that a signature was checked and we may try and print out a user ID for a key that doesn't exist.
* * trustdb.c (init_trustdb, get_validity): Don't use a changed trust modelDavid Shaw2003-01-153-3/+13
| | | | | | | | to indicate a dirty trustdb, and never auto-rebuild a dirty trustdb with the "always" trust model. * g10.c (add_group): Last commit missed the \t ;)
* * gpg.sgml: Minor language tweaks, spell check, copyright date,David Shaw2003-01-153-18/+28
| | | | | | | | etc. * DETAILS: Note that user IDs/UATs fill in creation and expiration date. Document namehash.
* * packet.h, parse-packet.c (setup_user_id), free-packet.c (free_user_id),David Shaw2003-01-148-39/+65
| | | | | | | | | | | | keydb.h, keyid.c (namehash_from_uid): New function to rmd160-hash the contents of a user ID packet and cache it in the uid object. * keylist.c (list_keyblock_colon): Use namehash in field 8 of uids. Show dates for creation (selfsig date), and expiration in fields 6 and 7. * trustdb.c (get_validity, get_validity_counts, update_validity): Use new namehash function rather than hashing it locally.
* * g10.c (add_group): Fixed group parsing to allow more than oneWerner Koch2003-01-142-2/+10
| | | | | delimiter in a row and also allow tab as delimiter.
* * tdbio.c (tdbio_set_dbname): Fix assertion failure withDavid Shaw2003-01-122-3/+17
| | | | | non-fully-qualified trustdb names.
* * trustdb.c (get_validity_info, get_ownertrust_info, trust_letter):David Shaw2003-01-114-48/+98
| | | | | | | | | | | | | | | | Simplify by returning a ? for error directly. * keyedit.c (show_key_with_all_names): Use get_validity_string and get_ownertrust_string to show full word versions of trust (i.e. "full" instead of 'f'). * trustdb.h, trustdb.c (get_ownertrust_string, get_validity_string): Same as get_ownertrust_info, and get_validity_info, except returns a full string. * trustdb.c (get_ownertrust_with_min): New. Same as 'get_ownertrust' but takes the min_ownertrust value into account.
* * armor.c (armor_filter): Comment about PGP's end of line tab problem.David Shaw2003-01-1110-58/+65
| | | | | | | | | | | | | | | * trustdb.h, trustdb.c (trust_letter): Make static. (get_ownertrust_info, get_validity_info): Don't mask the trust level twice. * trustdb.h, gpgv.c, trustdb.c (get_validity, get_validity_info), keylist.c (list_keyblock_colon), keyedit.c (show_key_with_all_names_colon, menu_revuid): Pass a user ID in rather than a namehash, so we only have to do the hashing in one place. * packet.h, pkclist.c (build_pk_list), free-packet.c (release_public_key_parts): Remove unused namehash element for public keys.
* Updated from latest NewPG projectWerner Koch2003-01-0913-129/+266
|
* Updated from latest NewPG projectWerner Koch2003-01-0928-175/+902
|
* * keygen.c (keygen_set_std_prefs): Warn when setting an IDEA preferenceDavid Shaw2003-01-072-1/+12
| | | | | when IDEA is not available.
* * trustdb.c (get_validity_info): 'd' for disabled is not a validity valueDavid Shaw2003-01-072-2/+3
| | | | | any more.
* * gpgkeys_hkp.c (get_key): Use options=mr when getting a key so keyserverDavid Shaw2003-01-062-1/+7
| | | | | doesn't attach the HTML header which we will just have to discard.
* * packet.h, tdbio.h, tdbio.c (tdbio_read_record, tdbio_write_record),David Shaw2003-01-065-93/+178
| | | | | | | | | | | | trustdb.c (update_validity): Store temporary full & marginal counts in the trustdb. (clear_validity, get_validity_counts): Return and clear temp counts. (store_validation_status): Keep track of which keyids have been stored. (validate_one_keyblock, validate_key_list): Use per-uid copies of the full & marginal counts so they can be recalled for multiple levels. (validate_keys): Only use unused keys for each new round. (reset_unconnected_keys): Rename to reset_trust_records, and only skip specifically excluded records.
* * DETAILS: Document disabled flag in capabilities field.David Shaw2003-01-062-3/+10
|
* * keylist.c (print_capabilities): Show 'D' for disabled keys inDavid Shaw2003-01-063-3/+21
| | | | | | | capabilities section. * trustdb.c (is_disabled): Remove incorrect comment.
* * import.c (import_one): Only do the work to create the status display forDavid Shaw2003-01-034-10/+27
| | | | | | | | | | | interactive import if status is enabled. * keyring.c (keyring_search): skipfnc didn't work properly with non-keyid searches. Noted by Stefan Bellon. * getkey.c (merge_selfsigs_main): Remove some unused code and make sure that the pk selfsigversion member accounts for 1F direct sigs.
* * keydb.c (keydb_add_resource): Don't assume that try_make_homedirWerner Koch2003-01-023-15/+46
| | | | | | | | terminates but check again for the existence of the directory and continue then. * openfile.c (copy_options_file): Print a warning if the skeleton file has active options.
* * getkey.c (merge_selfsigs_main), main.h, sig-check.cDavid Shaw2002-12-294-13/+29
| | | | | | | | (check_key_signature2): Pass the ultimately trusted pk directly to check_key_signature2 to avoid going through the key selection mechanism. This prevents a deadly embrace when two keys without selfsigs each sign the other.
* * keyserver.c (keyserver_refresh): Don't print the "refreshing..." line ifDavid Shaw2002-12-273-7/+26
| | | | | | | | there are no keys to refresh or if there is no keyserver set. * getkey.c (merge_selfsigs_main): Any valid user ID should make a key valid, not just the last one. This also fixes Debian bug #174276.
* * gpg.sgml: Clarify --no-permission-warning to note that the permissionDavid Shaw2002-12-272-3/+18
| | | | | | | | warnings are not intended to be the be-all and end-all in security checks. Add note to --group that when used on the command line, it may be necessary to quote the argument so it is not treated as multiple arguments. Noted by Stefan Bellon.
* * NEWS: Add note about convert-from-106 script.David Shaw2002-12-272-0/+8
|
* fixed type problemStefan Bellon2002-12-272-1/+5
|
* * keyedit.c (keyedit_menu, menu_revuid): Add "revuid" feature to revoke aDavid Shaw2002-12-272-7/+146
| | | | | | user ID. This is the same as issuing a revocation for the self-signature, but a much simpler interface to do it.
* * keydb.h, getkey.c (key_byname): Flag to enable or disable includingDavid Shaw2002-12-2610-16/+110
| | | | | | | | | | | | | | | | | | | | | | | | | | disabled keys. Keys specified via keyid (i.e. 0x...) are always included. * getkey.c (get_pubkey_byname, get_seckey_byname2, get_seckey_bynames), keyedit.c (keyedit_menu, menu_addrevoker): Include disabled keys in these functions. * pkclist.c (build_pk_list): Do not include disabled keys for -r or the key prompt. Do include disabled keys for the default key and --encrypt-to. * trustdb.h, trustdb.c (is_disabled): New skipfnc for skipping disabled keys. * gpgv.c (is_disabled): Stub. * keygen.c (keygen_add_key_expire): Properly handle updating a key expiration to a no-expiration value. * keyedit.c (enable_disable_key): Comment. * import.c (import_one): When in interactive mode and --verbose, don't repeat some key information twice.
* * iobuf.c (iobuf_flush): Only print debug info if debugging is on.David Shaw2002-12-262-1/+6
|