2002-03-06 09:01:12 +00:00
|
|
|
2002-03-06 Werner Koch <wk@gnupg.org>
|
|
|
|
|
|
2002-03-06 14:16:37 +00:00
|
|
|
* gpgsm.c: New command --learn-card
|
|
|
|
|
* call-agent.c (learn_cb,gpgsm_agent_learn): New.
|
|
|
|
|
|
|
|
|
|
* gpgsm.c (main): Print error messages for non-implemented commands.
|
|
|
|
|
|
2002-03-06 09:01:12 +00:00
|
|
|
* base64.c (base64_reader_cb): Use case insensitive compare of the
|
|
|
|
|
Content-Type string to detect plain base-64.
|
|
|
|
|
|
2002-03-05 15:56:46 +00:00
|
|
|
2002-03-05 Werner Koch <wk@gnupg.org>
|
|
|
|
|
|
|
|
|
|
* gpgsm.c, gpgsm.h: Add local_user.
|
|
|
|
|
* sign.c (gpgsm_get_default_cert): New.
|
|
|
|
|
(get_default_signer): Use the new function if local_user is not
|
|
|
|
|
set otherwise used that value.
|
|
|
|
|
* encrypt.c (get_default_recipient): Removed.
|
|
|
|
|
(gpgsm_encrypt): Use gpgsm_get_default_cert.
|
|
|
|
|
|
|
|
|
|
* verify.c (gpgsm_verify): Better error text for a bad signature
|
|
|
|
|
found by comparing the hashs.
|
|
|
|
|
|
2002-02-28 11:07:59 +00:00
|
|
|
2002-02-27 Werner Koch <wk@gnupg.org>
|
|
|
|
|
|
|
|
|
|
* call-dirmngr.c, call-agent.c: Add 2 more arguments to all uses
|
|
|
|
|
of assuan_transact.
|
|
|
|
|
|
2002-02-25 18:18:40 +00:00
|
|
|
2002-02-25 Werner Koch <wk@gnupg.org>
|
|
|
|
|
|
|
|
|
|
* server.c (option_handler): Allow to use -2 for "send all certs
|
|
|
|
|
except the root cert".
|
|
|
|
|
* sign.c (add_certificate_list): Implement it here.
|
|
|
|
|
* certpath.c (gpgsm_is_root_cert): New.
|
|
|
|
|
|
2002-02-19 17:39:05 +00:00
|
|
|
2002-02-19 Werner Koch <wk@gnupg.org>
|
|
|
|
|
|
|
|
|
|
* certpath.c (check_cert_policy): New.
|
|
|
|
|
(gpgsm_validate_path): And call it from here.
|
|
|
|
|
* gpgsm.c (main): New options --policy-file,
|
|
|
|
|
--disable-policy-checks and --enable-policy-checks.
|
|
|
|
|
* gpgsm.h (opt): Added policy_file, no_policy_checks.
|
|
|
|
|
|
2002-02-18 20:47:29 +00:00
|
|
|
2002-02-18 Werner Koch <wk@gnupg.org>
|
|
|
|
|
|
|
|
|
|
* certpath.c (gpgsm_validate_path): Ask the agent to add the
|
|
|
|
|
certificate into the trusted list.
|
|
|
|
|
* call-agent.c (gpgsm_agent_marktrusted): New.
|
|
|
|
|
|
2002-02-07 18:43:22 +00:00
|
|
|
2002-02-07 Werner Koch <wk@gnupg.org>
|
|
|
|
|
|
|
|
|
|
* certlist.c (gpgsm_add_to_certlist): Check that the specified
|
|
|
|
|
name identifies a certificate unambiguously.
|
|
|
|
|
(gpgsm_find_cert): Ditto.
|
|
|
|
|
|
|
|
|
|
* server.c (cmd_listkeys): Check that the data stream is available.
|
|
|
|
|
(cmd_listsecretkeys): Ditto.
|
|
|
|
|
(has_option): New.
|
|
|
|
|
(cmd_sign): Fix ambiguousity in option recognition.
|
|
|
|
|
|
|
|
|
|
* gpgsm.c (main): Enable --logger-fd.
|
|
|
|
|
|
|
|
|
|
* encrypt.c (gpgsm_encrypt): Increased buffer size for better
|
|
|
|
|
performance.
|
|
|
|
|
|
|
|
|
|
* call-agent.c (gpgsm_agent_pksign): Check the S-Exp received from
|
|
|
|
|
the agent.
|
|
|
|
|
|
|
|
|
|
* keylist.c (list_cert_colon): Filter out control characters.
|
|
|
|
|
|
2002-02-06 14:52:03 +00:00
|
|
|
2002-02-06 Werner Koch <wk@gnupg.org>
|
|
|
|
|
|
|
|
|
|
* decrypt.c (gpgsm_decrypt): Bail out after an decryption error.
|
|
|
|
|
|
|
|
|
|
* server.c (reset_notify): Close input and output FDs.
|
|
|
|
|
(cmd_encrypt,cmd_decrypt,cmd_verify,cmd_sign.cmd_import)
|
|
|
|
|
(cmd_genkey): Close the FDs and release the recipient list even in
|
|
|
|
|
the error case.
|
|
|
|
|
|
2002-02-01 18:08:32 +00:00
|
|
|
2002-02-01 Marcus Brinkmann <marcus@g10code.de>
|
|
|
|
|
|
|
|
|
|
* sign.c (gpgsm_sign): Do not release certificate twice.
|
|
|
|
|
|
2002-01-29 10:05:24 +00:00
|
|
|
2002-01-29 Werner Koch <wk@gnupg.org>
|
|
|
|
|
|
|
|
|
|
* call-agent.c (gpgsm_agent_havekey): New.
|
|
|
|
|
* keylist.c (list_cert_colon): New arg HAVE_SECRET, print "crs"
|
|
|
|
|
when we know that the secret key is available.
|
|
|
|
|
(gpgsm_list_keys): New arg MODE, check whether a secret key is
|
|
|
|
|
available. Changed all callers.
|
|
|
|
|
* gpgsm.c (main): New command --list-secret-keys.
|
|
|
|
|
* server.c (cmd_listsecretkeys): New.
|
|
|
|
|
(cmd_listkeys): Return secret keys with "crs" record.
|
|
|
|
|
|
2002-01-28 14:23:18 +00:00
|
|
|
2002-01-28 Werner Koch <wk@gnupg.org>
|
|
|
|
|
|
|
|
|
|
* certreqgen.c (create_request): Store the email address in the req.
|
|
|
|
|
|
2002-01-25 16:41:13 +00:00
|
|
|
2002-01-25 Werner Koch <wk@gnupg.org>
|
|
|
|
|
|
|
|
|
|
* gpgsm.c (main): Disable core dumps.
|
|
|
|
|
|
|
|
|
|
* sign.c (add_certificate_list): New.
|
|
|
|
|
(gpgsm_sign): Add the certificates to the CMS object.
|
|
|
|
|
* certpath.c (gpgsm_walk_cert_chain): New.
|
|
|
|
|
* gpgsm.h (server_control_s): Add included_certs.
|
|
|
|
|
* gpgsm.c: Add option --include-certs.
|
|
|
|
|
(gpgsm_init_default_ctrl): New.
|
|
|
|
|
(main): Call it.
|
|
|
|
|
* server.c (gpgsm_server): Ditto.
|
|
|
|
|
(option_handler): Support --include-certs.
|
|
|
|
|
|
2002-01-23 13:40:38 +00:00
|
|
|
2002-01-23 Werner Koch <wk@gnupg.org>
|
|
|
|
|
|
|
|
|
|
* certpath.c (gpgsm_validate_path): Print the DN of a missing issuer.
|
|
|
|
|
* certdump.c (gpgsm_dump_string): New.
|
|
|
|
|
(print_dn): Replaced by above.
|
|
|
|
|
|
2002-01-22 13:32:48 +00:00
|
|
|
2002-01-22 Werner Koch <wk@gnupg.org>
|
|
|
|
|
|
|
|
|
|
* certpath.c (unknown_criticals): New.
|
|
|
|
|
(allowed_ca): New.
|
|
|
|
|
(gpgsm_validate_path): Check validity, CA attribute, path length
|
|
|
|
|
and unknown critical extensions.
|
|
|
|
|
|
2002-01-21 12:03:38 +00:00
|
|
|
2002-01-21 Werner Koch <wk@gnupg.org>
|
|
|
|
|
|
|
|
|
|
* gpgsm.c: Add option --enable-crl-checks.
|
|
|
|
|
|
|
|
|
|
* call-agent.c (start_agent): Implemented socket based access.
|
|
|
|
|
* call-dirmngr.c (start_dirmngr): Ditto.
|
|
|
|
|
|
2002-01-20 16:49:46 +00:00
|
|
|
2002-01-20 Werner Koch <wk@gnupg.org>
|
|
|
|
|
|
|
|
|
|
* server.c (option_handler): New.
|
|
|
|
|
(gpgsm_server): Register it with assuan.
|
|
|
|
|
|
2002-01-19 18:21:14 +00:00
|
|
|
2002-01-19 Werner Koch <wk@gnupg.org>
|
|
|
|
|
|
|
|
|
|
* server.c (gpgsm_server): Use assuan_deinit_server and setup
|
|
|
|
|
assuan logging if enabled.
|
|
|
|
|
* call-agent.c (inq_ciphertext_cb): Don't show the session key in
|
|
|
|
|
an Assuan log file.
|
|
|
|
|
|
|
|
|
|
* gpgsm.c (my_strusage): Take bugreport address from configure.ac
|
|
|
|
|
|
2002-01-15 13:02:47 +00:00
|
|
|
2002-01-15 Werner Koch <wk@gnupg.org>
|
|
|
|
|
|
|
|
|
|
* import.c (gpgsm_import): Just do a basic cert check before
|
|
|
|
|
storing it.
|
|
|
|
|
* certpath.c (gpgsm_basic_cert_check): New.
|
|
|
|
|
|
|
|
|
|
* keydb.c (keydb_store_cert): New.
|
|
|
|
|
* import.c (store_cert): Removed and change all caller to use
|
|
|
|
|
the new function.
|
|
|
|
|
* verify.c (store_cert): Ditto.
|
|
|
|
|
|
|
|
|
|
* certlist.c (gpgsm_add_to_certlist): Validate the path
|
|
|
|
|
|
|
|
|
|
* certpath.c (gpgsm_validate_path): Check the trust list.
|
|
|
|
|
* call-agent.c (gpgsm_agent_istrusted): New.
|
|
|
|
|
|
2002-01-14 12:15:30 +00:00
|
|
|
2002-01-14 Werner Koch <wk@gnupg.org>
|
|
|
|
|
|
|
|
|
|
* call-dirmngr.c (inq_certificate): Changed for new interface semantic.
|
|
|
|
|
* certlist.c (gpgsm_find_cert): New.
|
|
|
|
|
|
2002-01-13 10:43:21 +00:00
|
|
|
2002-01-13 Werner Koch <wk@gnupg.org>
|
|
|
|
|
|
2002-01-14 12:15:30 +00:00
|
|
|
* fingerprint.c (gpgsm_get_certid): Print the serial and not the
|
2002-01-13 10:43:21 +00:00
|
|
|
hash after the dot.
|
|
|
|
|
|
2002-01-11 17:07:51 +00:00
|
|
|
2002-01-11 Werner Koch <wk@gnupg.org>
|
|
|
|
|
|
|
|
|
|
* call-dirmngr.c: New.
|
|
|
|
|
* certpath.c (gpgsm_validate_path): Check the CRL here.
|
|
|
|
|
* fingerprint.c (gpgsm_get_certid): New.
|
|
|
|
|
* gpgsm.c: New options --dirmngr-program and --disable-crl-checks.
|
|
|
|
|
|
2002-01-10 19:47:20 +00:00
|
|
|
2002-01-10 Werner Koch <wk@gnupg.org>
|
|
|
|
|
|
|
|
|
|
* base64.c (gpgsm_create_writer): Allow to set the object name
|
|
|
|
|
|
|
|
|
|
2002-01-08 Werner Koch <wk@gnupg.org>
|
|
|
|
|
|
|
|
|
|
* keydb.c (spacep): Removed because it is now in util.c
|
|
|
|
|
|
|
|
|
|
* server.c (cmd_genkey): New.
|
|
|
|
|
* certreqgen.c: New. The parameter handling code has been taken
|
|
|
|
|
from gnupg/g10/keygen.c version 1.0.6.
|
|
|
|
|
* call-agent.c (gpgsm_agent_genkey): New.
|
|
|
|
|
|
|
|
|
|
2002-01-02 Werner Koch <wk@gnupg.org>
|
|
|
|
|
|
|
|
|
|
* server.c (rc_to_assuan_status): Removed and changed all callers
|
|
|
|
|
to use map_to_assuan_status.
|
|
|
|
|
|
2001-12-20 13:25:08 +00:00
|
|
|
2001-12-20 Werner Koch <wk@gnupg.org>
|
|
|
|
|
|
2001-12-20 16:51:06 +00:00
|
|
|
* verify.c (gpgsm_verify): Implemented non-detached signature
|
|
|
|
|
verification. Add OUT_FP arg, initialize a writer and changed all
|
|
|
|
|
callers.
|
|
|
|
|
* server.c (cmd_verify): Pass an out_fp if one has been set.
|
|
|
|
|
|
2001-12-20 13:25:08 +00:00
|
|
|
* base64.c (base64_reader_cb): Try to detect an S/MIME body part.
|
|
|
|
|
|
|
|
|
|
* certdump.c (print_sexp): Renamed to gpgsm_dump_serial, made
|
|
|
|
|
global.
|
|
|
|
|
(print_time): Renamed to gpgsm_dump_time, made global.
|
|
|
|
|
(gpgsm_dump_serial): Take a real S-Expression as argument and
|
|
|
|
|
print the first item.
|
|
|
|
|
* keylist.c (list_cert_colon): Ditto.
|
|
|
|
|
* keydb.c (keydb_search_issuer_sn): Ditto.
|
|
|
|
|
* decrypt.c (print_integer_sexp): Removed and made callers
|
|
|
|
|
use gpgsm_dump_serial.
|
|
|
|
|
* verify.c (print_time): Removed, made callers use gpgsm_dump_time.
|
|
|
|
|
|
2001-12-19 00:18:11 +00:00
|
|
|
2001-12-19 Marcus Brinkmann <marcus@g10code.de>
|
|
|
|
|
|
|
|
|
|
* call-agent.c (start_agent): Add new argument to assuan_pipe_connect.
|
|
|
|
|
|
2001-12-18 17:37:48 +00:00
|
|
|
2001-12-18 Werner Koch <wk@gnupg.org>
|
|
|
|
|
|
|
|
|
|
* verify.c (print_integer_sexp): Renamed from print_integer and
|
|
|
|
|
print the serial number according to the S-Exp rules.
|
|
|
|
|
* decrypt.c (print_integer_sexp): Ditto.
|
|
|
|
|
|
|
|
|
|
2001-12-17 Werner Koch <wk@gnupg.org>
|
|
|
|
|
|
|
|
|
|
* keylist.c (list_cert_colon): Changed for new return value of
|
|
|
|
|
get_serial.
|
|
|
|
|
* keydb.c (keydb_search_issuer_sn): Ditto.
|
|
|
|
|
* certcheck.c (gpgsm_check_cert_sig): Likewise for other S-Exp
|
|
|
|
|
returingin functions.
|
|
|
|
|
* fingerprint.c (gpgsm_get_keygrip): Ditto.
|
|
|
|
|
* encrypt.c (encrypt_dek): Ditto
|
|
|
|
|
* certcheck.c (gpgsm_check_cms_signature): Ditto
|
|
|
|
|
* decrypt.c (prepare_decryption): Ditto.
|
|
|
|
|
* call-agent.c (gpgsm_agent_pkdecrypt): Removed arg ciphertextlen,
|
|
|
|
|
use KsbaSexp type and calculate the length.
|
|
|
|
|
|
|
|
|
|
* certdump.c (print_sexp): Remaned from print_integer, changed caller.
|
|
|
|
|
|
|
|
|
|
* Makefile.am: Use the LIBGCRYPT and LIBKSBA variables.
|
|
|
|
|
|
|
|
|
|
* fingerprint.c (gpgsm_get_keygrip): Use the new
|
|
|
|
|
gcry_pk_get_keygrip to calculate the grip - note the algorithm and
|
|
|
|
|
therefore the grip values changed.
|
|
|
|
|
|
2001-12-15 12:36:39 +00:00
|
|
|
2001-12-15 Werner Koch <wk@gnupg.org>
|
|
|
|
|
|
2001-12-18 17:37:48 +00:00
|
|
|
* certcheck.c (gpgsm_check_cms_signature): Removed the faked-key
|
|
|
|
|
kludge.
|
|
|
|
|
(gpgsm_create_cms_signature): Removed the commented fake key
|
|
|
|
|
code. This makes the function pretty simple.
|
|
|
|
|
|
2001-12-15 16:19:24 +00:00
|
|
|
* gpgsm.c (main): Renamed the default key database to "keyring.kbx".
|
|
|
|
|
|
2001-12-15 12:36:39 +00:00
|
|
|
* decrypt.c (gpgsm_decrypt): Write STATUS_DECRYPTION_*.
|
|
|
|
|
* sign.c (gpgsm_sign): Write a STATUS_SIG_CREATED.
|
|
|
|
|
|
2001-12-14 13:35:34 +00:00
|
|
|
2001-12-14 Werner Koch <wk@gnupg.org>
|
|
|
|
|
|
2001-12-14 20:48:26 +00:00
|
|
|
* keylist.c (list_cert_colon): Kludge to show an email address
|
|
|
|
|
encoded in the subject's DN.
|
|
|
|
|
|
2001-12-14 19:36:33 +00:00
|
|
|
* verify.c (gpgsm_verify): Add hash debug helpers
|
|
|
|
|
* sign.c (gpgsm_sign): Ditto.
|
|
|
|
|
|
|
|
|
|
* base64.c (base64_reader_cb): Reset the linelen when we need to
|
|
|
|
|
skip the line and adjusted test; I somehow forgot about DeMorgan.
|
|
|
|
|
|
|
|
|
|
* server.c (cmd_encrypt,cmd_decrypt,cmd_sign,cmd_verify)
|
|
|
|
|
(cmd_import): Close the FDs on success.
|
|
|
|
|
(close_message_fd): New.
|
|
|
|
|
(input_notify): Setting autodetect_encoding to 0 after initializing
|
|
|
|
|
it to 0 is pretty pointless. Easy to fix.
|
|
|
|
|
|
2001-12-14 15:40:20 +00:00
|
|
|
* gpgsm.c (main): New option --debug-wait n, so that it is
|
|
|
|
|
possible to attach gdb when used in server mode.
|
|
|
|
|
|
2001-12-14 13:35:34 +00:00
|
|
|
* sign.c (get_default_signer): Use keydb_classify_name here.
|
|
|
|
|
|
2001-12-13 23:20:02 +00:00
|
|
|
2001-12-14 Marcus Brinkmann <marcus@g10code.de>
|
|
|
|
|
|
|
|
|
|
* call-agent.c (LINELENGTH): Removed.
|
|
|
|
|
(gpgsm_agent_pksign): Use ASSUAN_LINELENGTH, not LINELENGTH.
|
|
|
|
|
(gpgsm_agent_pkdecrypt): Likewise.
|
|
|
|
|
|
2001-12-13 13:11:40 +00:00
|
|
|
2001-12-13 Werner Koch <wk@gnupg.org>
|
|
|
|
|
|
|
|
|
|
* keylist.c (list_cert_colon): Print alternative names of subject
|
|
|
|
|
and a few other values.
|
|
|
|
|
|
2001-12-12 11:57:28 +00:00
|
|
|
2001-12-12 Werner Koch <wk@gnupg.org>
|
|
|
|
|
|
|
|
|
|
* gpgsm.c (main): New options --assume-{armor,base64,binary}.
|
|
|
|
|
* base64.c (base64_reader_cb): Fixed non-autodetection mode.
|
|
|
|
|
|
2001-12-05 23:48:01 +00:00
|
|
|
2001-12-04 Werner Koch <wk@gnupg.org>
|
|
|
|
|
|
|
|
|
|
* call-agent.c (read_from_agent): Check for inquire responses.
|
|
|
|
|
(request_reply): Handle them using a new callback arg, changed all
|
|
|
|
|
callers.
|
|
|
|
|
(gpgsm_agent_pkdecrypt): New.
|
|
|
|
|
|
2001-11-27 17:40:09 +00:00
|
|
|
2001-11-27 Werner Koch <wk@gnupg.org>
|
|
|
|
|
|
|
|
|
|
* base64.c: New. Changed all other functions to use this instead
|
|
|
|
|
of direct creation of ksba_reader/writer.
|
|
|
|
|
* gpgsm.c (main): Set ctrl.auto_encoding unless --no-armor is used.
|
|
|
|
|
|
2001-11-26 13:08:36 +00:00
|
|
|
2001-11-26 Werner Koch <wk@gnupg.org>
|
|
|
|
|
|
2001-11-26 17:54:49 +00:00
|
|
|
* gpgsm.c: New option --agent-program
|
|
|
|
|
* call-agent.c (start_agent): Allow to override the default path
|
|
|
|
|
to the agent.
|
|
|
|
|
|
2001-11-26 13:08:36 +00:00
|
|
|
* keydb.c (keydb_add_resource): Create keybox
|
|
|
|
|
|
|
|
|
|
* keylist.c (gpgsm_list_keys): Fixed non-server keylisting.
|
|
|
|
|
|
|
|
|
|
* server.c (rc_to_assuan_status): New. Use it for all commands.
|
|
|
|
|
|
|
|
|
|
|
2002-01-10 19:47:20 +00:00
|
|
|
Copyright 2001, 2002 Free Software Foundation, Inc.
|
2001-11-26 13:08:36 +00:00
|
|
|
|
|
|
|
|
This file is free software; as a special exception the author gives
|
|
|
|
|
unlimited permission to copy and/or distribute it, with or without
|
|
|
|
|
modifications, as long as this notice is preserved.
|
|
|
|
|
|
|
|
|
|
This file is distributed in the hope that it will be useful, but
|
|
|
|
|
WITHOUT ANY WARRANTY, to the extent permitted by law; without even the
|
|
|
|
|
implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
|
