gpgme/src, branch wk-masterGnuPG Made Easy.http://git.bktus.com/gpgfrontend/gpgme/atom?h=wk-master2023-09-20T10:05:41Zcore: Check STATUS_FAILURE in export operations.2023-09-20T10:05:41ZWerner Kochwk@gnupg.org2023-09-20T10:05:41Zurn:sha1:e35400bd696c34e558ec796252e550dd855831e6
* src/export.c (op_data_t): Add failure_code.
(export_status_handler): Set it.
(gpgme_op_export_ext, gpgme_op_export_keys): Also check the failure
code.
--
That is just in case we missed an error code. For example with older
gpg versions (e.g. 2.3.8) and exporting to a keyserver.
New mode to list a v5 fingerprint for v4 packets.2023-09-04T15:03:52ZWerner Kochwk@gnupg.org2023-09-04T15:03:01Zurn:sha1:e36b2d1bce4bb6281e18f53d06d7831e6d6f5a09
* src/gpgme.h.in (GPGME_KEYLIST_MODE_WITH_V5FPR): New.
(struct _gpgme_subkey): Add field v5fpr.
* src/engine-gpg.c (gpg_keylist_build_options): Pass new option to
gpg.
* src/key.c (gpgme_key_unref): Free new field.
* src/keylist.c (op_data_t): Parse and add "fp2" line.
* tests/run-keylist.c (show_usage): Add option --v5fpr.
* src/keylist.c (op_data_t): Add field failure_code.
(keylist_status_handler): Handle special value.
(gpgme_op_keylist_end): Return an error if a FAILURE line has been
seen.
--
Note that the failure code part has been added to better diagnose
problems if a wrong gpg version is used. If verything works right we
should not get this because we check that the gnupg version sis either
>= 2.4.4 or less than 2.3 and >= 2.2.42.
Note further that the v5fpr field may also be used to get the SHA-256
fingerprint of X.509 certificates (even without passing the new mode
flag).
GnuPG-bug-id: 6705
Support GPGME_ENCRYPT_ALWAYS_TRUST also for S/MIME.2023-08-31T10:02:02ZWerner Kochwk@gnupg.org2023-08-31T10:02:02Zurn:sha1:d75b2a91517397261c2508dba058611f803c0733
* src/engine-gpgsm.c (gpgsm_encrypt): Send the always-trust options.
* tests/run-encrypt.c: Add option --always-trust.
--
Note that the run-encrypt test tool used to assume always-trust for
OpenPGP since 1.7.0 This bug has also been fixed by introducing the
explicit option.
GnuPG-bug-id: 6559
core: Use offline mode for all operations of gpgsm engine2023-08-14T10:24:00ZIngo Klöckerdev@ingo-kloecker.de2023-08-14T10:23:07Zurn:sha1:bc98f01c8599f612dd1035b08f827b0657d94984
* src/engine-backend.h (keylist, keylist_ext): Remove engine_flags.
* src/engine-gpg.c (gpg_keylist, gpg_keylist_ext): Ditto.
* src/engine.c, src/engine.h (_gpgme_engine_op_keylist): Ditto.
(_gpgme_engine_op_keylist_ext): Ditto.
* src/engine.h (GPGME_ENGINE_FLAG_OFFLINE): Remove.
* src/engine-gpgsm.c (struct engine_gpgsm): New field flags with offline
flag.
(have_gpgsm_version): New.
(gpg_set_engine_flags): Set the offline flag.
(start): Send OPTION "offline".
(gpgsm_keylist, gpgsm_keylist_ext): Remove engine_flags. Remove
sending of OPTION "offline".
* src/keylist.c (gpgme_op_keylist_start, gpgme_op_keylist_ext_start):
Remove setting of offline flag.
--
GnuPG-bug-id: 6648
core: Store engine's version string in gpgsm engine2023-08-14T10:23:55ZIngo Klöckerdev@ingo-kloecker.de2023-08-14T09:39:27Zurn:sha1:d72811a2c09411f8fdc821eb78d16ce8fbd5a184
* src/engine-gpgsm.c (struct engine_gpgsm): Add field 'version'.
(gpgsm_new): Copy version string.
(gpgsm_release): Free VERSION.
--
GnuPG-bug-id: 6648
core: Prevent wrong plaintext when verifying clearsigned signature2023-07-28T14:15:12ZIngo Klöckerdev@ingo-kloecker.de2023-07-28T14:15:12Zurn:sha1:a9b28c79e92f6194ea52c7d33213f2a0dc9bd013
* src/engine-gpg.c (gpg_verify): Use a separate pipe instead of stdout
for reading the plaintext.
* tests/gpg/t-support.h (PGM): Define if undefined.
(print_data): Undefine BUF_SIZE.
(check_data): New.
* tests/gpg/t-verify.c (clearsigned_plus_key_block): New.
(main): Add test.
--
Reading the plaintext from stdout is a bad idea because gpg can also
print other stuff on stdout, e.g. the keys contained in a public key
block. This is fixed by reading the plaintext via a special pipe.
GnuPG-bug-id: 6622
core: Return bad data error instead of general error on unexpected data2023-07-28T12:18:21ZIngo Klöckerdev@ingo-kloecker.de2023-07-28T12:18:05Zurn:sha1:777cf7f2d17331cfe127129c750121970fcad58f
* src/verify.c (_gpgme_verify_status_handler): Return GPG_ERR_BAD_DATA
instead of GPG_ERR_GENERAL.
--
This gives users trying to decrypt and/or verify for example a public
key block a more useful error.
GnuPG-bug-id: 6617
core: Support reading the archive to decrypt/verify directly from a file2023-06-21T12:38:50ZIngo Klöckerdev@ingo-kloecker.de2023-06-21T12:20:52Zurn:sha1:1a9f192ab450288aea7a889527e78afd2c067b59
* src/engine-gpg.c (add_file_name_arg_or_data): New.
(gpg_decrypt): Use add_file_name_arg_or_data instead of add_data for the
ciphertext.
(gpg_verify): Use add_file_name_arg_or_data instead of add_data for the
signature and the signed text.
* tests/run-decrypt.c (show_usage): New option --direct-file-io.
(main): Parse new option. If option is given, then don't open input
file, create simple data object instead of data object from stream and
set input file name on input data.
* tests/run-verify.c (show_usage): New option --direct-file-io.
(main): Parse new option. If option is given, then don't open input
files, create simple data objects instead of data objects from stream
and set input file names on input data objects.
--
This change makes it possible to tell gpg (and gpgtar) to read the
input (i.e. the signed/encrypted data or the signature or the created
archive) directly from the files with given file names instead of from
streams piped through GpgME's Data IO.
GnuPG-bug-id: 6530
core: Support writing the sign/encrypt output directly to a file2023-06-19T16:08:47ZIngo Klöckerdev@ingo-kloecker.de2023-06-19T14:31:17Zurn:sha1:c38b6200396f703917e4c66aca068f90cfbad325
* src/engine-gpg.c (gpg_encrypt): Pass output file name to gpg if output
has file name set.
(gpg_encrypt_sign): Ditto.
(gpg_sign): Ditto.
* tests/run-encrypt.c (show_usage): New option --output.
(main): Parse new option. Set file name on output if --output is given.
Do not print output if --output is given.
* tests/run-sign.c (show_usage): New option --output.
(main): Parse new option. Set file name on output if --output is given.
Do not print output if --output is given.
--
This change makes it possible to tell gpg (and gpgtar) to write the
output (i.e. the signed/encrypted data or the signature or the created
archive) directly to a file with given file name instead of piping
the output back to gpgme.
GnuPG-bug-id: 6530
core: Send a input-size-hint for gpgsm.2023-06-15T11:00:01ZWerner Kochwk@gnupg.org2023-06-15T11:00:01Zurn:sha1:91bbb1e482da783b4d1b9d5f663a1a0af77fc0a4
* src/engine-gpgsm.c (send_input_size_hint): New.
(gpgsm_decrypt): Send hint.
(gpgsm_encrypt): Send hint.
(gpgsm_sign): Send hint.
(gpgsm_verify): Send hint.
--
GnuPG-bug-id: 6534