Support for various warnings about expiring encryption certificates.

Support for checking encryption certificate paths.

Needs GPGME support.

1 files changed, 36 insertions, 0 deletions

diff --git a/gpgmeplug/gpgmeplug.c b/gpgmeplug/gpgmeplug.c
index 8fb11aeb..a923d41e 100644
--- a/gpgmeplug/gpgmeplug.c
+++ b/gpgmeplug/gpgmeplug.c
@@ -632,6 +632,17 @@ bool receiverCertificateExpiryNearWarning()
   return config.receiverCertificateExpiryNearWarning;
 }
 
+
+int receiverCertificateDaysLeftToExpiry( const char* certificate )
+{
+    /* PENDING(g10)
+       Please return the number of days that are left until the
+       certificate specified in the parameter certificate expires.
+    */
+    return 10; // dummy that triggers a warning in the MUA
+}
+
+
 void setReceiverCertificateExpiryNearWarningInterval( int interval )
 {
   config.receiverCertificateExpiryNearWarningInterval = interval;
@@ -652,6 +663,18 @@ bool certificateInChainExpiryNearWarning()
   return config.certificateInChainExpiryNearWarning;
 }
 
+
+int certificateInChainDaysLeftToExpiry( const char* certificate )
+{
+    /* PENDING(g10)
+       Please return the number of days that are left until the
+       the first certificate in the chain of the specified certificate
+       expires.
+    */
+    return 10; // dummy that triggers a warning in the MUA
+}
+
+
 void setCertificateInChainExpiryNearWarningInterval( int interval )
 {
   config.certificateInChainExpiryNearWarningInterval = interval;
@@ -1169,6 +1192,19 @@ bool encryptMessage( const char* cleartext,
     }
   }
 
+  // PENDING(g10) Implement this
+  // Possible values: RSA = 1, SHA1 = 2, TripleDES = 3
+  //gpgme_set_encryption_algorithm( ctx, config.encryptionAlgorithm );
+
+
+  // PENDING(g10) Implement this
+  // gpgme_set_encryption_check_certificate_path(
+  // config.checkCertificatePath )
+
+  // PENDING(g10) Implement this
+  // gpgme_set_encryption_check_certificate_path_to_root(
+  // config.checkEncryptionCertificatePathToRoot )
+
 
   err = gpgme_op_encrypt (ctx, rset, gPlaintext, gCiphertext );
   if( err )