aboutsummaryrefslogtreecommitdiffstats
path: root/NEWS (follow)
Commit message (Collapse)AuthorAgeFilesLines
* doc: Update NEWSWerner Koch2025-03-251-0/+19
| | | | --
* Post release updatesWerner Koch2025-03-071-0/+4
| | | | --
* Release 2.5.5gnupg-2.5.5Werner Koch2025-03-071-2/+9
|
* speedo: Do not build gpgme anymore.Werner Koch2025-02-211-0/+3
| | | | | | | | | | | * build-aux/speedo.mk: Remove support gpgme. * build-aux/speedo/w32/inst.nsi: Ditto. * build-aux/speedo/w32/wixlib.wxs: Remove the gpgme components. -- GPGME is either already availabale on Unix platforms or can be installed on Widnows with gpg4win. GnuPG itself does not require gpgme.
* gpg: Fix a verification DoS due to a malicious subkey in the keyring.Werner Koch2025-02-211-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * g10/getkey.c (get_pubkey): Factor code out to ... (get_pubkey_bykid): new. Add feature to return the keyblock. (get_pubkey_for_sig): Add arg r_keyblock to return the used keyblock. Request a signing usage. (get_pubkeyblock_for_sig): Remove. (finish_lookup): Improve debug output. * g10/sig-check.c (check_signature): Add arg r_keyblock and pass it down. * g10/mainproc.c (do_check_sig): Ditto. (check_sig_and_print): Use the keyblock returned by do_check_sig to show further information instead of looking it up again with get_pubkeyblock_for_sig. Also re-check the signature after the import of an included keyblock. -- The problem here is that it is possible to import a key from someone who added a signature subkey from another public key and thus inhibits that a good signature good be verified. Such a malicious key signature subkey must have been created w/o the mandatory backsig which bind a signature subkey to its primary key. For encryption subkeys this is not an issue because the existence of a decryption private key is all you need to decrypt something and then it does not matter if the public subkey or its binding signature has been put below another primary key; in fact we do the latter for ADSKs. GnuPG-bug-id: 7527
* Post release updatesWerner Koch2025-02-121-0/+8
| | | | --
* Release 2.5.4gnupg-2.5.4Werner Koch2025-02-121-2/+10
|
* Update NEWSWerner Koch2025-02-071-0/+18
| | | | --
* Post release updatesWerner Koch2025-01-091-0/+8
| | | | --
* Release 2.5.3gnupg-2.5.3Werner Koch2025-01-091-2/+2
|
* Remove the default keyserver.Werner Koch2025-01-081-0/+1
|
* doc: One typo fix.Werner Koch2025-01-081-0/+5
| | | | | -- GnuPG-bug-id: 7479
* Update README and copyright years.Werner Koch2025-01-081-0/+13
| | | | --
* gpg: Silence expired trusted-key diagnostics in quiet mode.Werner Koch2024-12-051-0/+4
| | | | | | | * g10/trustdb.c (validate_keys): Take care of --quiet. -- GnuPG-bug-id: 7351
* Post release updatesWerner Koch2024-12-051-0/+4
| | | | --
* Release 2.5.2gnupg-2.5.2Werner Koch2024-12-051-2/+70
|
* gpg: For composite algos add the algo string to the colons listings.Werner Koch2024-11-141-0/+3
| | | | | | | | * g10/keylist.c (list_keyblock_colon): Put the algo string into the curve field for Kyber. -- GnuPG-bug-id: 6638
* gpg: Add option to create Kyber with --full-gen-key.Werner Koch2024-11-131-0/+2
| | | | | | | | | | | | * g10/keygen.c (PQC_STD_KEY_PARAM_PRI, PQC_STD_KEY_PARAM_SUB): New. (PQC_STD_KEY_PARAM): Construct from above. (gen_kyber): Allow short curve names. (ask_algo): Add Entry for ecc+kyber. (ask_kyber_variant): New. (generate_keypair): Generate ECC primary and Kyber sub. -- GnuPG-bug-id: 6638
* dirmngr: Print a brief list of URLs with LISTCRLS.Werner Koch2024-10-141-0/+2
| | | | | | | | | | * dirmngr/crlcache.c (crl_cache_list): Print a summary of URLs. * sm/call-dirmngr.c (gpgsm_dirmngr_run_command): Print a notice to stdout if the dirmngr has been disabled. -- GnuPG-bug-id: 7337
* Post release updatesWerner Koch2024-09-121-0/+8
| | | | --
* Release 2.5.1gnupg-2.5.1Werner Koch2024-09-121-1/+31
|
* gpgsm: New option --assert-signerWerner Koch2024-09-111-1/+7
| | | | | | | | | | | | | | | * sm/gpgsm.c (oAssertSigner, oNoop): New. (opts): Add option --assert-signer. (assert_signer_true): New var. (main): Set new option. (gpgsm_exit): Handle assert_signer_true. * sm/gpgsm.h (opt): Add field assert_signer_list. * sm/verify.c (is_x509_fingerprint): New. (check_assert_signer_list): New. (gpgsm_verify): Handle option. -- GnuPG-bug-id: 7286
* gpg: New option --proc-all-sigsWerner Koch2024-08-231-0/+2
| | | | | | | | | | | | * g10/options.h (flags): Add proc_all_sigs. * g10/mainproc.c (proc_tree): Do not stop signature checking if this new option is used. * g10/gpg.c (oProcAllSigs): New. (opts): Add "proc-all-sigs". (main): Set it. -- GnuPG-bug-id: 7261
* speedo: Set PREFIX for bzip2 build also for Unix.Werner Koch2024-07-081-0/+3
| | | | | | | | | | | | -- bzip2 is a make-only package and thus we can't set the prefix with configure. We need to set PREFIX here so that the install target: if ( test ! -d $(PREFIX)/lib ) ; then mkdir -p $(PREFIX)/lib;fi [...] does not try to install to the default PREFIX /usr/local/lib.
* Post release updatesWerner Koch2024-07-051-0/+4
| | | | --
* Release 2.5.0gnupg-2.5.0Werner Koch2024-07-051-1/+4
|
* gpg: Print a warning if the (draft) Kyber algorithm is used.Werner Koch2024-07-051-1/+52
| | | | * g10/keygen.c (do_generate_keypair): Check for draf Kyber stuff.
* Merge branch 'STABLE-BRANCH-2-4' into masterWerner Koch2024-05-161-3/+20
|\ | | | | | | | | | | | | | | | | | | -- Fixed conflicts in: NEWS g10/call-agent.c g10/options.h kbx/kbxutil.c tools/gpgconf.c
| * Update NEWSWerner Koch2024-05-151-0/+16
| | | | | | | | --
* | Merge branch 'STABLE-BRANCH-2-4'Werner Koch2024-03-121-7/+53
|\| | | | | | | | | | | | | | | -- Resolved conflicts: NEWS common/exechelp-w32.c configure.ac
| * Post release updatesWerner Koch2024-03-071-0/+7
| | | | | | | | --
| * Release 2.4.5gnupg-2.4.5Werner Koch2024-03-071-1/+39
| |
| * doc: Fix spelling errors found by lintian.Werner Koch2024-01-291-7/+7
| | | | | | | | | | | | -- Reported-by: Andreas Metzler <[email protected]>
* | Merge branch 'STABLE-BRANCH-2-4'Werner Koch2024-01-261-3/+104
|\| | | | | | | | | | | | | | | -- Fixed conflicts: NEWS configure.ac doc/gpg.texi
| * Post release updatesWerner Koch2024-01-251-0/+7
| | | | | | | | --
| * Release 2.4.4gnupg-2.4.4Werner Koch2024-01-251-2/+9
| |
| * Prepare the NEWSWerner Koch2024-01-121-2/+93
| | | | | | | | --
| * common,w32: Remove duplicated backslashes when setting the homedir.Werner Koch2024-01-091-0/+3
| | | | | | | | | | | | | | | | | | | | | | | | * common/homedir.c (copy_dir_with_fixup) [W32]: Fold double backslashes. -- This is in general no problem but when we hash or compare the directory to test whether tit is the standard home directory, we may use a different socket file and thus a second instance of a daemon. GnuPG-bug-id: 6833
* | Merge branch 'STABLE-BRANCH-2-4'Werner Koch2023-12-221-1/+3
|\| | | | | | | | | | | | | | | | | | | -- Fixed conflicts in NEWS g10/encrypt.c sm/encrypt.c sm/sign.c
| * gpgsm: Support ECDSA in de-vs mode.Werner Koch2023-11-081-0/+2
| | | | | | | | | | | | | | | | | | | | | | * common/compliance.h (PK_ALGO_FLAG_ECC18): New. * common/compliance.c (gnupg_pk_is_allowed): Implement. * sm/decrypt.c (gpgsm_decrypt): Pass new flag. * sm/sign.c (gpgsm_sign): Ditto. * sm/verify.c (gpgsm_verify): Ditto. -- GnuPG-bug-id: 6802
* | Merge branch 'STABLE-BRANCH-2-4'Werner Koch2023-11-071-0/+7
|\| | | | | | | | | | | | | * common/b64dec.c (b64decode): Move to ... * common/miscellaneous.c: here. * common/t-b64.c: Re-inroduce and keep only the b64decode test code.
| * w32: Use utf8 for the asctimestamp function.Werner Koch2023-10-271-0/+2
| | | | | | | | | | | | | | | | * common/gettime.c (asctimestamp) [W32]: Use ".UTF8" for the locale. -- This has been suggested by the reporter of GnuPG-bug-id: 6741
| * dirmngr: Allow conf files to disable default keyservers.Werner Koch2023-09-061-0/+3
| | | | | | | | | | | | | | | | * dirmngr/server.c (ensure_keyserver): Detect special value "none" (cmd_keyserver): Ignore "none" and "hkp://none". -- GnuPG-bug-id: 6708
* | Merge branch 'STABLE-BRANCH-2-4' into masterWerner Koch2023-07-041-0/+66
|\|
| * Post release updatesWerner Koch2023-07-041-0/+6
| | | | | | | | --
| * Release 2.4.3gnupg-2.4.3Werner Koch2023-07-041-2/+5
| |
| * Prepare NEWS for the next releaseWerner Koch2023-06-301-1/+39
| | | | | | | | --
| * Post release updatesWerner Koch2023-05-301-0/+6
| | | | | | | | --
| * Release 2.4.2gnupg-2.4.2Werner Koch2023-05-301-2/+3
| |
| * Prepare the NEWS for the next releaseWerner Koch2023-05-261-0/+22
| | | | | | | | --
generated by cgit v1.2.3 (git 2.25.1) at 2025-04-27 00:01:48 +0000