security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2024-12-23 10:29:58 +01:00
Code Activity
gnupg/NEWS

4248 lines
141 KiB
Plaintext
Raw Normal View History

Release 2.2.17
2019-07-09 14:33:53 +02:00
Noteworthy changes in version 2.2.17 (2019-07-09)
Post release updates --
2019-05-28 17:40:16 +02:00
-------------------------------------------------
gpg: Add "self-sigs-only" and "import-clean" to the keyserver options. * g10/gpg.c (main): Change default. -- Due to the DoS attack on the keyeservers we do not anymore default to import key signatures. That makes the keyserver unsuable for getting keys for the WoT but it still allows to retriev keys - even if that takes long to download the large keyblocks. To revert to the old behavior add keyserver-optiions no-self-sigs-only,no-import-clean to gpg.conf. GnuPG-bug-id: 4607 Signed-off-by: Werner Koch <wk@gnupg.org> (cherry picked from commit 23c978640812d123eaffd4108744bdfcf48f7c93)
2019-07-04 15:45:39 +02:00
* gpg: Ignore all key-signatures received from keyservers. This
change is required to mitigate a DoS due to keys flooded with
faked key-signatures. The old behaviour can be achieved by adding
keyserver-options no-self-sigs-only,no-import-clean
to your gpg.conf. [#4607]
* gpg: If an imported keyblocks is too large to be stored in the
keybox (pubring.kbx) do not error out but fallback to an import
using the options "self-sigs-only,import-clean". [#4591]
* gpg: New command --locate-external-key which can be used to
refresh keys from the Web Key Directory or via other methods
configured with --auto-key-locate.
* gpg: New import option "self-sigs-only".
Prepare NEWS for the next release -- Signed-off-by: Werner Koch <wk@gnupg.org>
2019-07-05 15:45:13 +02:00
* gpg: In --auto-key-retrieve prefer WKD over keyservers. [#4595]
dirmngr: Support the new WKD draft with the openpgpkey subdomain. * dirmngr/server.c (proc_wkd_get): Implement new openpgpkey subdomain method. -- Signed-off-by: Werner Koch <wk@gnupg.org> (cherry picked from commit 914fa3be22bf8848a97a7dd405a040d6ef31e2fd)
2019-07-03 15:29:41 +02:00
* dirmngr: Support the "openpgpkey" subdomain feature from
draft-koch-openpgp-webkey-service-07. [#4590].
Prepare NEWS for the next release -- Signed-off-by: Werner Koch <wk@gnupg.org>
2019-07-05 15:45:13 +02:00
* dirmngr: Add an exception for the "openpgpkey" subdomain to the
CSRF protection. [#4603]
* dirmngr: Fix endless loop due to http errors 503 and 504. [#4600]
* dirmngr: Fix TLS bug during redirection of HKP requests. [#4566]
* gpgconf: Fix a race condition when killing components. [#4577]
gpg: Add "self-sigs-only" and "import-clean" to the keyserver options. * g10/gpg.c (main): Change default. -- Due to the DoS attack on the keyeservers we do not anymore default to import key signatures. That makes the keyserver unsuable for getting keys for the WoT but it still allows to retriev keys - even if that takes long to download the large keyblocks. To revert to the old behavior add keyserver-optiions no-self-sigs-only,no-import-clean to gpg.conf. GnuPG-bug-id: 4607 Signed-off-by: Werner Koch <wk@gnupg.org> (cherry picked from commit 23c978640812d123eaffd4108744bdfcf48f7c93)
2019-07-04 15:45:39 +02:00
Release-info: https://dev.gnupg.org/T4606
Release 2.2.17
2019-07-09 14:33:53 +02:00
See-also: gnupg-announce/2019q3/000439.html
gpg: Add "self-sigs-only" and "import-clean" to the keyserver options. * g10/gpg.c (main): Change default. -- Due to the DoS attack on the keyeservers we do not anymore default to import key signatures. That makes the keyserver unsuable for getting keys for the WoT but it still allows to retriev keys - even if that takes long to download the large keyblocks. To revert to the old behavior add keyserver-optiions no-self-sigs-only,no-import-clean to gpg.conf. GnuPG-bug-id: 4607 Signed-off-by: Werner Koch <wk@gnupg.org> (cherry picked from commit 23c978640812d123eaffd4108744bdfcf48f7c93)
2019-07-04 15:45:39 +02:00
Post release updates --
2019-05-28 17:40:16 +02:00
Release GnuPG 2.2.16 Signed-off-by: Werner Koch <wk@gnupg.org>
2019-05-28 17:01:00 +02:00
Noteworthy changes in version 2.2.16 (2019-05-28)
Post release updates --
2019-03-26 15:10:38 +01:00
-------------------------------------------------
Prepare NEWS for the release --
2019-05-27 19:59:56 +02:00
* gpg,gpgsm: Fix deadlock on Windows due to a keybox sharing
violation. [#4505]
* gpg: Allow deletion of subkeys with --delete-key. This finally
makes the bang-suffix work as expected for that command. [#4457]
* gpg: Replace SHA-1 by SHA-256 in self-signatures when updating
them with --quick-set-expire or --quick-set-primary-uid. [#4508]
* gpg: Improve the photo image viewer selection. [#4334]
* gpg: Fix decryption with --use-embedded-filename. [#4500]
* gpg: Remove hints on using the --keyserver option. [#4512]
* gpg: Fix export of certain secret keys with comments. [#4490]
* gpg: Reject too long user-ids in --quick-gen-key. [#4532]
* gpg: Fix a double free in the best key selection code. [#4462]
* gpg: Fix the key generation dialog for switching back from EdDSA
to ECDSA.
* gpg: Use AES-192 with SHA-384 to comply with RFC-6637.
* gpg: Use only the addrspec from the Signer's UID subpacket to
mitigate a problem with another implementation.
* gpg: Skip invalid packets during a keyring listing and sync
diagnostics with the output.
* gpgsm: Avoid confusing diagnostic when signing with the default
key. [#4535]
* agent: Do not delete any secret key in --dry-run mode.
* agent: Fix failures on 64 bit big-endian boxes related to URIs in
a keyfile. [#4501]
* agent: Stop scdaemon after a reload with disable-scdaemon newly
configured. [#4326]
* dirmngr: Improve caching algorithm for WKD domains.
Release GnuPG 2.2.16 Signed-off-by: Werner Koch <wk@gnupg.org>
2019-05-28 17:01:00 +02:00
* dirmngr: Support other hash algorithms than SHA-1 for OCSP. [#3966]
Prepare NEWS for the release --
2019-05-27 19:59:56 +02:00
* gpgconf: Make --homedir work for --launch. [#4496]
* gpgconf: Before --launch check for a valid config file. [#4497]
* wkd: Do not import more than 5 keys from one WKD address.
* wkd: Accept keys which are stored in armored format in the
directory.
* The installer for Windows now comes with signed binaries.
Release-info: https://dev.gnupg.org/T4509
Release GnuPG 2.2.16 Signed-off-by: Werner Koch <wk@gnupg.org>
2019-05-28 17:01:00 +02:00
See-also: gnupg-announce/2019q2/000438.html
Prepare NEWS for the release --
2019-05-27 19:59:56 +02:00
Release 2.2.15
2019-03-26 14:27:25 +01:00
Noteworthy changes in version 2.2.15 (2019-03-26)
Post release updates --
2019-03-19 12:10:18 +01:00
-------------------------------------------------
Release 2.2.15
2019-03-26 14:27:25 +01:00
* sm: Fix --logger-fd and --status-fd on Windows for non-standard
file descriptors.
* sm: Allow decryption even if expired keys are configured. [#4431]
* agent: Change command KEYINFO to print ssh fingerprints with other
hash algos.
* dirmngr: Fix build problems on Solaris due to the use of reserved
symbol names. [#4420]
* wkd: New commands --print-wkd-hash and --print-wkd-url for
gpg-wks-client.
Release-info: https://dev.gnupg.org/T4434
See-also: gnupg-announce/2019q1/000436.html
Release 2.2.14
2019-03-19 11:35:37 +01:00
Noteworthy changes in version 2.2.14 (2019-03-19)
Post release updates --
2019-02-12 18:37:40 +01:00
-------------------------------------------------
Release 2.2.14
2019-03-19 11:35:37 +01:00
* gpg: Allow import of PGP desktop exported secret keys. Also avoid
importing secret keys if the secret keyblock is not valid. [#4392]
* gpg: Do not error out on version 5 keys in the local keyring.
* gpg: Make invalid primary key algo obvious in key listings.
* sm: Do not mark a certificate in a key listing as de-vs compliant
if its use for a signature will not be possible.
* sm: Fix certificate creation with key on card.
* sm: Create rsa3072 bit certificates by default.
* sm: Print Yubikey attestation extensions with --dump-cert.
* agent: Fix cancellation handling for scdaemon.
* agent: Support --mode=ssh option for CLEAR_PASSPHRASE. [#4340]
* scd: Fix flushing of the CA-FPR DOs in app-openpgp.
* scd: Avoid a conflict error with the "undefined" app.
* dirmngr: Add CSRF protection exception for protonmail.
* dirmngr: Fix build problems with gcc 9 in libdns.
Prepare NEWS for the release --
2019-05-27 19:59:56 +02:00
* gpgconf: New option --show-socket for use with --launch.
Release 2.2.14
2019-03-19 11:35:37 +01:00
* gpgtar: Make option -C work for archive creation.
Release-info: https://dev.gnupg.org/T4412
See-also: gnupg-announce/2019q1/000435.html
Post release updates --
2019-02-12 18:37:40 +01:00
Release 2.2.13
2019-02-12 16:06:31 +01:00
Noteworthy changes in version 2.2.13 (2019-02-12)
Post release updates --
2018-12-14 15:45:35 +01:00
-------------------------------------------------
Release 2.2.13
2019-02-12 16:06:31 +01:00
* gpg: Implement key lookup via keygrip (using the & prefix).
* gpg: Allow generating Ed25519 key from existing key.
* gpg: Emit an ERROR status line if no key was found with -k.
* gpg: Stop early when trying to create a primary Elgamal key. [#4329]
* gpgsm: Print the card's key algorithms along with their keygrips
in interactive key generation.
* agent: Clear bogus pinentry cache in the error case. [#4348]
* scd: Support "acknowledge button" feature.
* scd: Fix for USB INTERRUPT transfer. [#4308]
* wks: Do no use compression for the the encrypted challenge and
response.
Release-info: https://dev.gnupg.org/T4290
See-also: gnupg-announce/2019q1/000434.html
Post release updates --
2018-12-14 15:45:35 +01:00
Release 2.2.12
2018-12-14 15:02:44 +01:00
Noteworthy changes in version 2.2.12 (2018-12-14)
Post release updates. --
2018-11-06 11:42:26 +01:00
-------------------------------------------------
Release 2.2.12
2018-12-14 15:02:44 +01:00
* tools: New commands --install-key and --remove-key for
gpg-wks-client. This allows to prepare a Web Key Directory on a
local file system for later upload to a web server.
* gpg: New --list-option "show-only-fpr-mbox". This makes the use
of the new gpg-wks-client --install-key command easier on Windows.
* gpg: Improve processing speed when --skip-verify is used.
* gpg: Fix a bug where a LF was accidentally written to the console.
dirmngr: Support the new WKD draft with the openpgpkey subdomain. * dirmngr/server.c (proc_wkd_get): Implement new openpgpkey subdomain method. -- Signed-off-by: Werner Koch <wk@gnupg.org> (cherry picked from commit 914fa3be22bf8848a97a7dd405a040d6ef31e2fd)
2019-07-03 15:29:41 +02:00
* gpg: --card-status now shows whether a card has the new KDF
Release 2.2.12
2018-12-14 15:02:44 +01:00
feature enabled.
* agent: New runtime option --s2k-calibration=MSEC. New configure
option --with-agent-s2k-calibration=MSEC. [#3399]
* dirmngr: Try another keyserver from the pool on receiving a 502,
503, or 504 error. [#4175]
* dirmngr: Avoid possible CSRF attacks via http redirects. A HTTP
query will not anymore follow a 3xx redirect unless the Location
header gives the same host. If the host is different only the
host and port is taken from the Location header and the original
path and query parts are kept.
* dirmngr: New command FLUSHCRL to flush all CRLS from disk and
memory. [#3967]
* New simplified Chinese translation (zh_CN).
Release-info: https://dev.gnupg.org/T4289
See-also: gnupg-announce/2018q4/000433.html
Post release updates. --
2018-11-06 11:42:26 +01:00
Release 2.1.11 Signed-off-by: Werner Koch <wk@gnupg.org>
2018-11-06 11:08:02 +01:00
Noteworthy changes in version 2.2.11 (2018-11-06)
Post release updates. --
2018-08-30 15:34:38 +02:00
-------------------------------------------------
Release 2.1.11 Signed-off-by: Werner Koch <wk@gnupg.org>
2018-11-06 11:08:02 +01:00
* gpgsm: Fix CRL loading when intermediate certicates are not yet
trusted.
* gpgsm: Fix an error message about the digest algo. [#4219]
* gpg: Fix a wrong warning due to new sign usage check introduced
with 2.2.9. [#4014]
* gpg: Print the "data source" even for an unsuccessful keyserver
query.
* gpg: Do not store the TOFU trust model in the trustdb. This
allows to enable or disable a TOFO model without triggering a
trustdb rebuild. [#4134]
* scd: Fix cases of "Bad PIN" after using "forcesig". [#4177]
* agent: Fix possible hang in the ssh handler. [#4221]
* dirmngr: Tack the unmodified mail address to a WKD request. See
commit a2bd4a64e5b057f291a60a9499f881dd47745e2f for details.
* dirmngr: Tweak diagnostic about missing LDAP server file.
* dirmngr: In verbose mode print the OCSP responder id.
* dirmngr: Fix parsing of the LDAP port. [#4230]
* wks: Add option --directory/-C to the server. Always build the
server on Unix systems.
* wks: Add option --with-colons to the client. Support sites which
use the policy file instead of the submission-address file.
* Fix EBADF when gpg et al. are called by broken CGI scripts.
* Fix some minor memory leaks and bugs.
Release-info: https://dev.gnupg.org/T4233
See-also: gnupg-announce/2018q4/000432.html
Post release updates. --
2018-08-30 15:34:38 +02:00
Release 2.2.10
2018-08-30 14:25:14 +02:00
Noteworthy changes in version 2.2.10 (2018-08-30)
Post release updates --
2018-07-12 16:31:34 +02:00
-------------------------------------------------
Release 2.1.11 Signed-off-by: Werner Koch <wk@gnupg.org>
2018-11-06 11:08:02 +01:00
* gpg: Refresh expired keys originating from the WKD. [#2917]
Release 2.2.10
2018-08-30 14:25:14 +02:00
Release 2.1.11 Signed-off-by: Werner Koch <wk@gnupg.org>
2018-11-06 11:08:02 +01:00
* gpg: Use a 256 KiB limit for a WKD imported key.
Release 2.2.10
2018-08-30 14:25:14 +02:00
Release 2.1.11 Signed-off-by: Werner Koch <wk@gnupg.org>
2018-11-06 11:08:02 +01:00
* gpg: New option --known-notation. [#4060]
Release 2.2.10
2018-08-30 14:25:14 +02:00
Release 2.1.11 Signed-off-by: Werner Koch <wk@gnupg.org>
2018-11-06 11:08:02 +01:00
* scd: Add support for the Trustica Cryptoucan reader.
Release 2.2.10
2018-08-30 14:25:14 +02:00
Release 2.1.11 Signed-off-by: Werner Koch <wk@gnupg.org>
2018-11-06 11:08:02 +01:00
* agent: Speed up starting during on-demand launching. [#3490]
Release 2.2.10
2018-08-30 14:25:14 +02:00
Release 2.1.11 Signed-off-by: Werner Koch <wk@gnupg.org>
2018-11-06 11:08:02 +01:00
* dirmngr: Validate SRV records in WKD queries.
Release 2.2.10
2018-08-30 14:25:14 +02:00
Release-info: https://dev.gnupg.org/T4112
See-also: gnupg-announce/2018q3/000428.html
Post release updates --
2018-07-12 16:31:34 +02:00
Release 2.2.9
2018-07-12 14:47:03 +02:00
Noteworthy changes in version 2.2.9 (2018-07-12)
Post release updates --
2018-06-08 12:47:19 +02:00
------------------------------------------------
Release 2.2.9
2018-07-12 14:47:03 +02:00
* dirmngr: Fix recursive resolver mode and other bugs in the libdns
code. [#3374,#3803,#3610]
* dirmngr: When using libgpg-error 1.32 or later a GnuPG build with
NTBTLS support (e.g. the standard Windows installer) does not
anymore block for dozens of seconds before returning data.
* gpg: Fix bug in --show-keys which actually imported revocation
certificates. [#4017]
* gpg: Ignore too long user-ID and comment packets. [#4022]
* gpg: Fix crash due to bad German translation. Improved printf
format compile time check.
* gpg: Handle missing ISSUER sub packet gracefully in the presence of
the new ISSUER_FPR. [#4046]
* gpg: Allow decryption using several passphrases in most cases.
[#3795,#4050]
* gpg: Command --show-keys now enables the list options
show-unusable-uids, show-unusable-subkeys, show-notations and
show-policy-urls by default.
* gpg: Command --show-keys now prints revocation certificates. [#4018]
* gpg: Add revocation reason to the "rev" and "rvs" records of the
option --with-colons. [#1173]
* gpg: Export option export-clean does now remove certain expired
subkeys; export-minimal removes all expired subkeys. [#3622]
* gpg: New "usage" property for the drop-subkey filters. [#4019]
Release-info: https://dev.gnupg.org/T4036
See-also: gnupg-announce/2018q3/000427.html
Post release updates --
2018-06-08 12:47:19 +02:00
Release 2.2.8 Signed-off-by: Werner Koch <wk@gnupg.org>
2018-06-08 11:53:00 +02:00
Noteworthy changes in version 2.2.8 (2018-06-08)
Post release updates --
2018-05-02 22:02:40 +02:00
------------------------------------------------
Release 2.2.8 Signed-off-by: Werner Koch <wk@gnupg.org>
2018-06-08 11:53:00 +02:00
* gpg: Decryption of messages not using the MDC mode will now lead
to a hard failure even if a legacy cipher algorithm was used. The
option --ignore-mdc-error can be used to turn this failure into a
warning. Take care: Never use that option unconditionally or
without a prior warning.
* gpg: The MDC encryption mode is now always used regardless of the
cipher algorithm or any preferences. For testing --rfc2440 can be
used to create a message without an MDC.
* gpg: Sanitize the diagnostic output of the original file name in
verbose mode. [#4012,CVE-2018-12020]
* gpg: Detect suspicious multiple plaintext packets in a more
reliable way. [#4000]
* gpg: Fix the duplicate key signature detection code. [#3994]
* gpg: The options --no-mdc-warn, --force-mdc, --no-force-mdc,
--disable-mdc and --no-disable-mdc have no more effect.
doc: Mention new command --show-keys in the 2.2.7 NEWS. --
2018-06-11 08:56:04 +02:00
* gpg: New command --show-keys.
Release 2.2.8 Signed-off-by: Werner Koch <wk@gnupg.org>
2018-06-08 11:53:00 +02:00
* agent: Add DBUS_SESSION_BUS_ADDRESS and a few other envvars to the
list of startup environment variables. [#3947]
doc: Mention new command --show-keys in the 2.2.7 NEWS. --
2018-06-11 08:56:04 +02:00
See-also: gnupg-announce/2018q2/000425.html
Post release updates --
2018-05-02 22:02:40 +02:00
Release 2.2.7 Signed-off-by: Werner Koch <wk@gnupg.org>
2018-05-02 20:58:19 +02:00
Noteworthy changes in version 2.2.7 (2018-05-02)
Post release updates --
2018-04-09 22:25:37 +02:00
------------------------------------------------
gpg: New option --no-symkey-cache. * g10/gpg.c (oNoSymkeyCache): New. (opts): Add that option. (main): Set var. * g10/options.h (struct opt): New field no_symkey_cache. * g10/passphrase.c (passphrase_to_dek): Implement that feature. Signed-off-by: Werner Koch <wk@gnupg.org>
2018-04-11 20:35:40 +02:00
* gpg: New option --no-symkey-cache to disable the passphrase cache
for symmetrical en- and decryption.
gpg: Extend the ERRSIG status line with a fingerprint. * g10/mainproc.c (issuer_fpr_raw): New. (issuer_fpr_string): Re-implement using issuer_fpr_rtaw. (check_sig_and_print): Don't free ISSUER_FPR. Use ISSUER_FPR_RAW. Use write_status_printf. Extend ERRSIG status. -- Modern OpenPGP implementations put the ISSUER_FPR into the signature to make it easier to discover the, public needed to check the signature. This is also useful in error messages and thus we add it. Signed-off-by: Werner Koch <wk@gnupg.org>
2018-04-12 16:41:05 +02:00
* gpg: The ERRSIG status now prints the fingerprint if that is part
of the signature.
doc: Update NEWS and add an example to gpg.texi. --
2018-04-23 09:23:41 +02:00
* gpg: Relax emitting of FAILURE status lines
* gpg: Add a status flag to "sig" lines printed with --list-sigs.
Release 2.2.7 Signed-off-by: Werner Koch <wk@gnupg.org>
2018-05-02 20:58:19 +02:00
* gpg: Fix "Too many open files" when using --multifile. [#3951]
doc: Update NEWS and add an example to gpg.texi. --
2018-04-23 09:23:41 +02:00
Release 2.2.7 Signed-off-by: Werner Koch <wk@gnupg.org>
2018-05-02 20:58:19 +02:00
* ssh: Return an error for unknown ssh-agent flags. [#3880]
doc: Update NEWS and add an example to gpg.texi. --
2018-04-23 09:23:41 +02:00
* dirmngr: Fix a regression since 2.1.16 which caused corrupted CRL
caches under Windows. [#2448,#3923]
dirmngr: Fix handling of CNAMEed keyserver pools. * dirmngr/ks-engine-hkp.c (map_host): Don't use the cname for HTTPHOST. * dirmngr/server.c (make_keyserver_item): Map keys.gnupg.net. -- For a description of the problem see the comment in make_keyserver_item. GnuPG-bug-id: 3755 Signed-off-by: Werner Koch <wk@gnupg.org>
2018-04-26 12:28:53 +02:00
* dirmngr: Fix a CNAME problem with pools and TLS. Also use a fixed
mapping of keys.gnupg.net to sks-keyservers.net. [#3755]
dirmngr: Lower the dead host resurrection time to 1.5h * dirmngr/ks-engine-hkp.c (RESURRECT_INTERVAL): Decrease. (INITIAL_HOSTTABLE_SIZE): Increase because the old values was likely for development. Signed-off-by: Werner Koch <wk@gnupg.org>
2018-04-26 12:39:59 +02:00
* dirmngr: Try resurrecting dead hosts earlier (from 3 to 1.5 hours).
Release 2.2.7 Signed-off-by: Werner Koch <wk@gnupg.org>
2018-05-02 20:58:19 +02:00
* dirmngr: Fallback to CRL if no default OCSP responder is configured.
* dirmngr: Implement CRL fetching via https. Here a redirection to
http is explictly allowed.
* dirmngr: Make LDAP searching and CRL fetching work under Windows.
This stopped working with 2.1. [#3937]
* agent,dirmngr: New sub-command "getenv" for "getinfo" to ease
debugging.
doc: Fix URL in NEWS. --
2018-05-13 13:21:57 +02:00
See-also: gnupg-announce/2018q2/000424.html
Release 2.2.7 Signed-off-by: Werner Koch <wk@gnupg.org>
2018-05-02 20:58:19 +02:00
Post release updates --
2018-04-09 22:25:37 +02:00
Release 2.2.6
2018-04-09 21:21:38 +02:00
Noteworthy changes in version 2.2.6 (2018-04-09)
Post release updates. --
2018-02-22 16:10:20 +01:00
------------------------------------------------
Release 2.2.6
2018-04-09 21:21:38 +02:00
* gpg,gpgsm: New option --request-origin to pretend requests coming
from a browser or a remote site.
* gpg: Fix race condition on trustdb.gpg updates due to too early
released lock. [#3839]
* gpg: Emit FAILURE status lines in almost all cases. [#3872]
* gpg: Implement --dry-run for --passwd to make checking a key's
passphrase straightforward.
* gpg: Make sure to only accept a certification capable key for key
signatures. [#3844]
* gpg: Better user interaction in --card-edit for the factory-reset
sub-command.
* gpg: Improve changing key attributes in --card-edit by adding an
explicit "key-attr" sub-command. [#3781]
* gpg: Print the keygrips in the --card-status.
* scd: Support KDF DO setup. [#3823]
* scd: Fix some issues with PC/SC on Windows. [#3825]
* scd: Fix suspend/resume handling in the CCID driver.
* agent: Evict cached passphrases also via a timer. [#3829]
* agent: Use separate passphrase caches depending on the request
origin. [#3858]
* ssh: Support signature flags. [#3880]
* dirmngr: Handle failures related to missing IPv6 support
gracefully. [#3331]
* Fix corner cases related to specified home directory with
drive letter on Windows. [#3720]
* Allow the use of UNC directory names as homedir. [#3818]
doc: Update NEWS and add an example to gpg.texi. --
2018-04-23 09:23:41 +02:00
See-also: gnupg-announce/2018q2/000421.html
Post release updates. --
2018-02-22 16:10:20 +01:00
Release 2.2.5 Signed-off-by: Werner Koch <wk@gnupg.org>
2018-02-22 15:32:36 +01:00
Noteworthy changes in version 2.2.5 (2018-02-22)
Post release updates --
2017-12-20 10:13:54 +01:00
------------------------------------------------
Release 2.2.5 Signed-off-by: Werner Koch <wk@gnupg.org>
2018-02-22 15:32:36 +01:00
* gpg: Allow the use of the "cv25519" and "ed25519" short names in
addition to the canonical curve names in --batch --gen-key.
* gpg: Make sure to print all secret keys with option --list-only
and --decrypt. [#3718]
* gpg: Fix the use of future-default with --quick-add-key for
signing keys. [#3747]
* gpg: Select a secret key by checking availability under gpg-agent.
[#1967]
* gpg: Fix reversed prompt texts for --only-sign-text-ids. [#3787]
* gpg,gpgsm: Fix detection of bogus keybox blobs on 32 bit systems.
[#3770]
* gpgsm: Fix regression since 2.1 in --export-secret-key-raw which
got $d mod (q-1)$ wrong. Note that most tools automatically fixup
that parameter anyway.
* ssh: Fix a regression in getting the client'd PID on *BSD and
macOS.
* scd: Support the KDF Data Object of the OpenPGP card 3.3. [#3152]
* scd: Fix a regression in the internal CCID driver for certain card
readers. [#3508]
* scd: Fix a problem on NetBSD killing scdaemon on gpg-agent
shutdown. [#3778]
* dirmngr: Improve returned error description on failure of DNS
resolving. [#3756]
* wks: Implement command --install-key for gpg-wks-server.
* Add option STATIC=1 to the Speedo build system to allow a build
with statically linked versions of the core GnuPG libraries. Also
use --enable-wks-tools by default by Speedo builds for Unix.
doc: Update NEWS and add an example to gpg.texi. --
2018-04-23 09:23:41 +02:00
See-also: gnupg-announce/2018q1/000420.html
Post release updates --
2017-12-20 10:13:54 +01:00
Release 2.2.4
2017-12-20 08:31:22 +01:00
Noteworthy changes in version 2.2.4 (2017-12-20)
Post release updates --
2017-11-20 13:35:36 +01:00
------------------------------------------------
Release 2.2.4
2017-12-20 08:31:22 +01:00
* gpg: Change default preferences to prefer SHA512.
* gpg: Print a warning when more than 150 MiB are encrypted using a
cipher with 64 bit block size.
* gpg: Print a warning if the MDC feature has not been used for a
message.
* gpg: Fix regular expression of domain addresses in trust
signatures. [#2923]
* agent: New option --auto-expand-secmem to help with high numbers
of concurrent connections. Requires libgcrypt 1.8.2 for having
an effect. [#3530]
* dirmngr: Cache responses of WKD queries.
* gpgconf: Add option --status-fd.
* wks: Add commands --check and --remove-key to gpg-wks-server.
* Increase the backlog parameter of the daemons to 64 and add
option --listen-backlog.
* New configure option --enable-run-gnupg-user-socket to first try a
socket directory which is not removed by systemd at session end.
Release 2.2.5 Signed-off-by: Werner Koch <wk@gnupg.org>
2018-02-22 15:32:36 +01:00
See-also: gnupg-announce/2017q4/000419.html
Post release updates --
2017-11-20 13:35:36 +01:00
Release 2.2.3
2017-11-20 12:39:16 +01:00
Noteworthy changes in version 2.2.3 (2017-11-20)
Post release updates. --
2017-11-07 11:04:44 +01:00
------------------------------------------------
Release 2.2.3
2017-11-20 12:39:16 +01:00
* gpgsm: Fix initial keybox creation on Windows. [#3507]
* dirmngr: Fix crash in case of a CRL loading error. [#3510]
* Fix the name of the Windows registry key. [Git#4f5afaf1fd]
* gpgtar: Fix wrong behaviour of --set-filename. [#3500]
* gpg: Silence AKL retrieval messages. [#3504]
* agent: Use clock or clock_gettime for calibration. [#3056]
* agent: Improve robustness of the shutdown pending
state. [Git#7ffedfab89]
Release 2.2.4
2017-12-20 08:31:22 +01:00
See-also: gnupg-announce/2017q4/000417.html
Post release updates. --
2017-11-07 11:04:44 +01:00
Release 2.2.2 Signed-off-by: Werner Koch <wk@gnupg.org>
2017-11-07 10:23:01 +01:00
Noteworthy changes in version 2.2.2 (2017-11-07)
Post release updates --
2017-09-19 08:34:36 +02:00
------------------------------------------------
Release 2.2.2 Signed-off-by: Werner Koch <wk@gnupg.org>
2017-11-07 10:23:01 +01:00
* gpg: Avoid duplicate key imports by concurrently running gpg
processes. [#3446]
* gpg: Fix creating on-disk subkey with on-card primary key. [#3280]
* gpg: Fix validity retrieval for multiple keyrings. [Debian#878812]
* gpg: Fix --dry-run and import option show-only for secret keys.
* gpg: Print "sec" or "sbb" for secret keys with import option
import-show. [#3431]
* gpg: Make import less verbose. [#3397]
* gpg: Add alias "Key-Grip" for parameter "Keygrip" and new
parameter "Subkey-Grip" to unattended key generation. [#3478]
* gpg: Improve "factory-reset" command for OpenPGP cards. [#3286]
* gpg: Ease switching Gnuk tokens into ECC mode by using the magic
keysize value 25519.
* gpgsm: Fix --with-colon listing in crt records for fields > 12.
* gpgsm: Do not expect X.509 keyids to be unique. [#1644]
* agent: Fix stucked Pinentry when using --max-passphrase-days. [#3190]
* agent: New option --s2k-count. [#3276 (workaround)]
* dirmngr: Do not follow https-to-http redirects. [#3436]
* dirmngr: Reduce default LDAP timeout from 100 to 15 seconds. [#3487]
* gpgconf: Ignore non-installed components for commands
--apply-profile and --apply-defaults. [#3313]
* Add configure option --enable-werror. [#2423]
Release 2.2.3
2017-11-20 12:39:16 +01:00
See-also: gnupg-announce/2017q4/000416.html
Post release updates --
2017-09-19 08:34:36 +02:00
Release 2.2.1
2017-09-19 08:13:44 +02:00
Noteworthy changes in version 2.2.1 (2017-09-19)
Post release updates --
2017-08-28 11:57:17 +02:00
------------------------------------------------
Release 2.2.1
2017-09-19 08:13:44 +02:00
* gpg: Fix formatting of the user id in batch mode key generation
if only "name-email" is given.
* gpgv: Fix annoying "not suitable for" warnings.
* wks: Convey only the newest user id to the provider. This is the
case if different names are used with the same addr-spec.
* wks: Create a complying user id for provider policy mailbox-only.
* wks: Add workaround for posteo.de.
* scd: Fix the use of large ECC keys with an OpenPGP card.
* dirmngr: Use system provided root certificates if no specific HKP
certificates are configured. If build with GNUTLS, this was
already the case.
Release 2.2.2 Signed-off-by: Werner Koch <wk@gnupg.org>
2017-11-07 10:23:01 +01:00
See-also: gnupg-announce/2017q3/000415.html
Post release updates --
2017-08-28 11:57:17 +02:00
Release 2.2.0
2017-08-28 11:18:26 +02:00
Noteworthy changes in version 2.2.0 (2017-08-28)
------------------------------------------------
This is the new long term stable branch. This branch will only see
bug fixes and no new features.
* gpg: Reverted change in 2.1.23 so that --no-auto-key-retrieve is
again the default.
* Fixed a few minor bugs.
Post release updates --
2017-08-09 16:58:47 +02:00
Release 2.2.1
2017-09-19 08:13:44 +02:00
See-also: gnupg-announce/2017q3/000413.html
Post release updates --
2017-08-09 16:58:47 +02:00
Release 2.1.23 Signed-off-by: Werner Koch <wk@gnupg.org>
2017-08-09 15:52:48 +02:00
Noteworthy changes in version 2.1.23 (2017-08-09)
Post release updates --
2017-07-28 20:10:16 +02:00
-------------------------------------------------
Release 2.1.23 Signed-off-by: Werner Koch <wk@gnupg.org>
2017-08-09 15:52:48 +02:00
* gpg: "gpg" is now installed as "gpg" and not anymore as "gpg2".
If needed, the new configure option --enable-gpg-is-gpg2 can be
used to revert this.
* gpg: Options --auto-key-retrieve and --auto-key-locate "local,wkd"
are now used by default. Note: this enables keyserver and Web Key
Directory operators to notice when a signature from a locally
non-available key is being verified for the first time or when
you intend to encrypt to a mail address without having the key
locally. This new behaviour will eventually make key discovery
much easier and mostly automatic. Disable this by adding
no-auto-key-retrieve
auto-key-locate local
to your gpg.conf.
* agent: Option --no-grab is now the default. The new option --grab
allows to revert this.
* gpg: New import option "show-only".
* gpg: New option --disable-dirmngr to entirely disable network
access for gpg.
* gpg,gpgsm: Tweaked DE-VS compliance behaviour.
* New configure flag --enable-all-tests to run more extensive tests
during "make check".
* gpgsm: The keygrip is now always printed in colon mode as
documented in the man page.
* Fixed connection timeout problem under Windows.
Release 2.2.0
2017-08-28 11:18:26 +02:00
See-also: gnupg-announce/2017q3/000412.html
Post release updates --
2017-07-28 20:10:16 +02:00
Release 2.1.22
2017-07-28 18:59:04 +02:00
Noteworthy changes in version 2.1.22 (2017-07-28)
Post release updates --
2017-05-15 17:21:58 +02:00
-------------------------------------------------
Release 2.1.22
2017-07-28 18:59:04 +02:00
* gpg: Extend command --quick-set-expire to allow for setting the
expiration time of subkeys.
* gpg: By default try to repair keys during import. New sub-option
no-repair-keys for --import-options.
* gpg,gpgsm: Improved checking and reporting of DE-VS compliance.
* gpg: New options --key-origin and --with-key-origin. Store the
time of the last key update from keyservers, WKD, or DANE.
* agent: New option --ssh-fingerprint-digest.
* dimngr: Lower timeouts on keyserver connection attempts and made
it configurable.
* dirmngr: Tor will now automatically be detected and used. The
option --no-use-tor disables Tor detection.
* dirmngr: Now detects a changed /etc/resolv.conf.
* agent,dirmngr: Initiate shutdown on removal of the GnuPG home
directory.
* gpg: Avoid caching passphrase for failed symmetric encryption.
* agent: Support for unprotected ssh keys.
* dirmngr: Fixed name resolving on systems using only v6
nameservers.
* dirmngr: Allow the use of TLS over http proxies.
* w32: Change directory of the daemons after startup.
* wks: New man pages for client and server.
* Many other bug fixes.
Release 2.1.23 Signed-off-by: Werner Koch <wk@gnupg.org>
2017-08-09 15:52:48 +02:00
See-also: gnupg-announce/2017q3/000411.html
Post release updates --
2017-05-15 17:21:58 +02:00
Release 2.1.21 Signed-off-by: Werner Koch <wk@gnupg.org>
2017-05-15 16:11:09 +02:00
Noteworthy changes in version 2.1.21 (2017-05-15)
Post release updates. --
2017-04-03 21:54:53 +02:00
-------------------------------------------------
Release 2.1.21 Signed-off-by: Werner Koch <wk@gnupg.org>
2017-05-15 16:11:09 +02:00
* gpg,gpgsm: Fix corruption of old style keyring.gpg files. This
bug was introduced with version 2.1.20. Note that the default
pubring.kbx format was not affected.
* gpg,dirmngr: Removed the skeleton config file support. The
system's standard methods for providing default configuration
files should be used instead.
Change license of some files to LGPLv2.1. * COPYING.LIB: Rename to COPYING.LGPL3. * COPYING.LGPL21: New. * COPYING.GPL2: New. * Makefile.am: Distribute them. * AUTHORS: Update license pointers. Add BSI as copyright holder. * common/compliance.c, common/compliance.h: Add BSI copyright notice. Break overlong lines. * dirmngr/loadswdb.c: Add BSI copyright notices. * dirmngr/server.c: Ditto. * tools/call-dirmngr.c: Change license to LGPLv2.1. Add BSI copyright notice. * tools/call-dirmngr.h: Ditto. * tools/gpg-wks-client.c: Ditto. * tools/gpg-wks-server.c: Ditto. * tools/gpg-wks.h: Ditto. * tools/mime-maker.c: Ditto. * tools/mime-maker.h: Ditto. * tools/mime-parser.c: Ditto. * tools/mime-parser.h: Ditto. * tools/send-mail.c: Ditto. * tools/send-mail.h: Ditto. * tools/wks-receive.c: Ditto. * tools/wks-util.c: Ditto. * tools/rfc822parse.c, tools/rfc822parse.h: Change license to LGPLv2.1. -- For better deployment it seems to be better to make the Web Key Directory code more easily available. Some code was been developed under contract of the BSI. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-06-19 12:37:52 +02:00
* w32: The Windows installer now allows installation of GnuPG
without Administrator permissions.
Release 2.1.21 Signed-off-by: Werner Koch <wk@gnupg.org>
2017-05-15 16:11:09 +02:00
* gpg: Fixed import filter property match bug.
* scd: Removed Linux support for Cardman 4040 PCMCIA reader.
* scd: Fixed some corner case bugs in resume/suspend handling.
* Many minor bug fixes and code cleanup.
Release 2.1.23 Signed-off-by: Werner Koch <wk@gnupg.org>
2017-08-09 15:52:48 +02:00
See-also: gnupg-announce/2017q2/000405.html
Post release updates. --
2017-04-03 21:54:53 +02:00
Release 2.1.20 Signed-off-by: Werner Koch <wk@gnupg.org>
2017-04-03 20:59:47 +02:00
Noteworthy changes in version 2.1.20 (2017-04-03)
Post release updates. --
2017-03-01 19:26:16 +01:00
-------------------------------------------------
Post release updates. --
2017-04-03 21:54:53 +02:00
* gpg: New properties 'expired', 'revoked', and 'disabled' for the
Release 2.1.20 Signed-off-by: Werner Koch <wk@gnupg.org>
2017-04-03 20:59:47 +02:00
import and export filters.
* gpg: New command --quick-set-primary-uid.
* gpg: New compliance field for the --with-colon key listing.
* gpg: Changed the key parser to generalize the processing of local
meta data packets.
* gpg: Fixed assertion failure in the TOFU trust model.
* gpg: Fixed exporting of zero length user ID packets.
* scd: Improved support for multiple readers.
* scd: Fixed timeout handling for key generation.
* agent: New option --enable-extended-key-format.
* dirmngr: Do not add a keyserver to a new dirmngr.conf. Dirmngr
uses a default keyserver.
* dimngr: Do not treat TLS warning alerts as severe error when
building with GNUTLS.
* dirmngr: Actually take /etc/hosts in account.
* wks: Fixed client problems on Windows. Published keys are now set
to world-readable.
* tests: Fixed creation of temporary directories.
* A socket directory for a non standard GNUGHOME is now created on
the fly under /run/user. Thus "gpgconf --create-socketdir" is now
optional. The use of "gpgconf --remove-socketdir" to clean up
obsolete socket directories is however recommended to avoid
cluttering /run/user with useless directories.
* Fixed build problems on some platforms.
Release 2.1.23 Signed-off-by: Werner Koch <wk@gnupg.org>
2017-08-09 15:52:48 +02:00
See-also: gnupg-announce/2017q2/000404.html
Release 2.1.20 Signed-off-by: Werner Koch <wk@gnupg.org>
2017-04-03 20:59:47 +02:00
Post release updates. --
2017-03-01 19:26:16 +01:00
Release 2.1.19 Signed-off-by: Werner Koch <wk@gnupg.org>
2017-03-01 18:40:33 +01:00
Noteworthy changes in version 2.1.19 (2017-03-01)
Post release updates --
2017-01-23 22:24:20 +01:00
-------------------------------------------------
Release 2.1.19 Signed-off-by: Werner Koch <wk@gnupg.org>
2017-03-01 18:40:33 +01:00
* gpg: Print a warning if Tor mode is requested but the Tor daemon
is not running.
* gpg: New status code DECRYPTION_KEY to print the actual private
key used for decryption.
* gpgv: New options --log-file and --debug.
* gpg-agent: Revamp the prompts to ask for card PINs.
* scd: Support for multiple card readers.
scd: Remove --debug-disable-ticker option. * scd/scdaemon.c (ticker_disabled): Remove. (handle_tick, need_tick): Remove. (handle_connections): Don't check ticker_disabled. -- Now, removal of device/card is only done by the function scd_update_reader_status_file, it should be called if needed. Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
2017-01-31 15:29:08 +09:00
* scd: Removed option --debug-disable-ticker. Ticker is used
only when it is required to watch removal of device/card.
Release 2.1.19 Signed-off-by: Werner Koch <wk@gnupg.org>
2017-03-01 18:40:33 +01:00
* scd: Improved detection of card inserting and removal.
* dirmngr: New option --disable-ipv4.
* dirmngr: New option --no-use-tor to explicitly disable the use of
Tor.
* dirmngr: The option --allow-version-check is now required even if
the option --use-tor is also used.
* dirmngr: Handle a missing nsswitch.conf gracefully.
* dirmngr: Avoid PTR lookups for keyserver pools. The are only done
for the debug command "keyserver --hosttable".
* dirmngr: Rework the internal certificate cache to support classes
of certificates. Load system provided certificates on startup.
Add options --tls, --no-crl, and --systrust to the "VALIDATE"
command.
* dirmngr: Add support for the ntbtls library.
* wks: Create mails with a "WKS-Phase" header. Fix detection of
Draft-2 mode.
* The Windows installer is now build with limited TLS support.
* Many other bug fixes and new regression tests.
Release 2.1.20 Signed-off-by: Werner Koch <wk@gnupg.org>
2017-04-03 20:59:47 +02:00
See-also: gnupg-announce/2017q1/000402.html
Post release updates --
2017-01-23 22:24:20 +01:00
Release 2.1.18 Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-23 19:26:37 +01:00
Noteworthy changes in version 2.1.18 (2017-01-23)
Post release updates. --
2016-12-20 12:07:23 +01:00
-------------------------------------------------
Release 2.1.18 Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-23 19:26:37 +01:00
* gpg: Remove bogus subkey signature while cleaning a key (with
export-clean, import-clean, or --edit-key's sub-command clean)
* gpg: Allow freezing the clock with --faked-system-time.
* gpg: New --export-option flag "backup", new --import-option flag
"restore".
* gpg-agent: Fixed long delay due to a regression in the progress
callback code.
* scd: Lots of code cleanup and internal changes.
* scd: Improved the internal CCID driver.
* dirmngr: Fixed problem with the DNS glue code (removal of the
trailing dot in domain names).
* dirmngr: Make sure that Tor is actually enabled after changing the
conf file and sending SIGHUP or "gpgconf --reload dirmngr".
* dirmngr: Fixed Tor access to IPv6 addresses. Note that current
versions of Tor may require that the flag "IPv6Traffic" is used
with the option "SocksPort" in torrc to actually allow IPv6
traffic.
* dirmngr: Fixed HKP for literally given IPv6 addresses.
* dirmngr: Enabled reverse DNS lookups via Tor.
* dirmngr: Added experimental SRV record lookup for WKD.
See commit 88dc3af3d4ae1afe1d5e136bc4c38bc4e7d4cd10 for details.
* dirmngr: For HKP use "pgpkey-hkps" and "pgpkey-hkp" in SRV record
lookups. Avoid SRV record lookup when a port is explicitly
specified. This fixes a regression from the 1.4 and 2.0 behavior.
* dirmngr: Gracefully handle a missing /etc/nsswitch.conf. Ignore
negation terms (e.g. "[!UNAVAIL=return]" instead of bailing out.
* dirmngr: Better debug output for flags "dns" and "network".
* dirmngr: On reload mark all known HKP servers alive.
* gpgconf: Allow keyword "all" for --launch, --kill, and --reload.
* tools: gpg-wks-client now ignores a missing policy file on the
server.
* Avoid unnecessary ambiguity error message in the option parsing.
* Further improvements of the regression test suite.
* Fixed building with --disable-libdns configure option.
* Fixed a crash running the tests on 32 bit architectures.
* Fixed spurious failures on BSD system in the spawn functions.
This affected for example gpg-wks-client and gpgconf.
Update NEWS with link to release announcement. --
2017-01-23 22:56:50 +01:00
See-also: gnupg-announce/2017q1/000401.html
Post release updates. --
2016-12-20 12:07:23 +01:00
doc: Update NEWS --
2016-12-20 10:55:31 +01:00
Noteworthy changes in version 2.1.17 (2016-12-20)
Post release updates. --
2016-11-18 21:50:34 +01:00
-------------------------------------------------
doc: Update NEWS --
2016-12-20 10:55:31 +01:00
* gpg: By default new keys expire after 2 years.
* gpg: New command --quick-set-expire to conveniently change the
expiration date of keys.
* gpg: Option and command names have been changed for easier
comprehension. The old names are still available as aliases.
* gpg: Improved the TOFU trust model.
gpg: New option --default-new-key-algo. * common/openpgp-oid.c (openpgp_is_curve_supported): Add optional arg R_ALGO and change all callers. * common/util.h (GPG_ERR_UNKNOWN_FLAG): New error code. * g10/options.h (struct opt): Add field DEF_NEW_KEY_ALGO. * g10/gpg.c (oDefaultNewKeyAlgo): New enum. (opts): New option "--default-new-key-algo". (main): Set the option. * g10/keygen.c: Remove DEFAULT_STD_ FUTURE_STD_ constants and replace them by ... (DEFAULT_STD_KEY_PARAM, FUTURE_STD_KEY_PARAM): new string constants. (get_keysize_range): Remove arg R_DEF and return that value instead. Change all callers. (gen_rsa): Use get_keysize_range instead of the removed DEFAULT_STD_KEYSIZE. (parse_key_parameter_part): New function. (parse_key_parameter_string): New function. (quick_generate_keypair): Refactor using parse_key_parameter_string. (generate_keypair): Ditto. (parse_algo_usage_expire): Ditto. -- This new option is intended to be used in the forthcoming --set-profile command of gpgconf. It allows to provide a gpg configuration with custom defaults for a new key using the simple commands which use the default algorithm set. Signed-off-by: Werner Koch <wk@gnupg.org>
2016-12-02 19:43:36 +01:00
* gpg: New option --default-new-key-algo.
doc: Update NEWS --
2016-12-20 10:55:31 +01:00
* scd: Support OpenPGP card V3 for RSA.
* dirmngr: Support for the ADNS library has been removed. Instead
William Ahern's Libdns is now source included and used on all
platforms. This enables Tor support on all platforms. The new
option --standard-resolver can be used to disable this code at
runtime. In case of build problems the new configure option
--disable-libdns can be used to build without Libdns.
* dirmngr: Lazily launch ldap reaper thread.
* tools: New options --check and --status-fd for gpg-wks-client.
* The UTF-8 byte order mark is now skipped when reading conf files.
* Fixed many bugs and regressions.
* Major improvements to the test suite. For example it is possible
to run the external test suite of GPGME.
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2016q4/000400.html
Post release updates. --
2016-11-18 21:50:34 +01:00
Release 2.1.16
2016-11-18 16:52:04 +01:00
Noteworthy changes in version 2.1.16 (2016-11-18)
Post release updates. --
2016-08-18 18:23:28 +02:00
-------------------------------------------------
Release 2.1.16
2016-11-18 16:52:04 +01:00
* gpg: New algorithm for selecting the best ranked public key when
using a mail address with -r, -R, or --locate-key.
* gpg: New option --with-tofu-info to print a new "tfs" record in
colon formatted key listings.
* gpg: New option --compliance as an alternative way to specify
options like --rfc2440, --rfc4880, et al.
* gpg: Many changes to the TOFU implementation.
* gpg: Improve usability of --quick-gen-key.
* gpg: In --verbose mode print a diagnostic when a pinentry is
launched.
* gpg: Remove code which warns for old versions of gnome-keyring.
* gpg: New option --override-session-key-fd.
* gpg: Option --output does now work with --verify.
* gpgv: New option --output to allow saving the verified data.
* gpgv: New option --enable-special-filenames.
* agent, dirmngr: New --supervised mode for use by systemd and alike.
* agent: By default listen on all available sockets using standard
names.
* agent: Invoke scdaemon with --homedir.
* dirmngr: On Linux now detects the removal of its own socket and
terminates.
* scd: Support ECC key generation.
* scd: Support more card readers.
* dirmngr: New option --allow-version-check to download a software
version database in the background.
* dirmngr: Use system provided CAs if no --hkp-cacert is given.
* dirmngr: Use a default keyserver if none is explicitly set
* gpgconf: New command --query-swdb to check software versions
against an copy of an online database.
* gpgconf: Print the socket directory with --list-dirs.
* tools: The WKS tools now support draft version -02.
* tools: Always build gpg-wks-client and install under libexec.
* tools: New option --supported for gpg-wks-client.
* The log-file option now accepts a value "socket://" to log to the
socket named "S.log" in the standard socket directory.
* Provide fake pinentries for use by tests cases of downstream
developers.
* Fixed many bugs and regressions.
* Many changes and improvements for the test suite.
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2016q4/000398.html
Post release updates. --
2016-08-18 18:23:28 +02:00
Update NEWS. --
2016-08-18 16:58:19 +02:00
Noteworthy changes in version 2.1.15 (2016-08-18)
Post release updates --
2016-07-14 17:07:27 +02:00
-------------------------------------------------
Update NEWS. --
2016-08-18 16:58:19 +02:00
* gpg: Remove the --tofu-db-format option and support for the split
TOFU database.
* gpg: Add option --sender to prepare for coming features.
* gpg: Add option --input-size-hint to help progress indicators.
* gpg: Extend the PROGRESS status line with the counted unit.
* gpg: Avoid publishing the GnuPG version by default with --armor.
* gpg: Properly ignore legacy keys in the keyring cache.
* gpg: Always print fingerprint records in --with-colons mode.
* gpg: Make sure that keygrips are printed for each subkey in
--with-colons mode.
* gpg: New import filter "drop-sig".
* gpgsm: Fix a bug in the machine-readable key listing.
* gpg,gpgsm: Block signals during keyring updates to limits the
effects of a Ctrl-C at the wrong time.
* g13: Add command --umount and other fixes for dm-crypt.
* agent: Fix regression in SIGTERM handling.
* agent: Cleanup of the ssh-agent code.
* agent: Allow import of overly long keys.
* scd: Fix problems with card removal.
* dirmngr: Remove all code for running as a system service.
* tools: Make gpg-wks-client conforming to the specs.
* tests: Improve the output of the new regression test tool.
* tests: Distribute the standalone test runner.
* tests: Run each test in a clean environment.
* Spelling and grammar fixes.
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2016q3/000396.html
Post release updates --
2016-07-14 17:07:27 +02:00
Release 2.1.14
2016-07-14 16:00:06 +02:00
Noteworthy changes in version 2.1.14 (2016-07-14)
Post release updates --
2016-06-16 18:10:08 +02:00
-------------------------------------------------
Release 2.1.14
2016-07-14 16:00:06 +02:00
* gpg: Removed options --print-dane-records and --print-pka-records.
The new export options "export-pka" and "export-dane" can instead
be used with the export command.
* gpg: New options --import-filter and --export-filter.
* gpg: New import options "import-show" and "import-export".
* gpg: New option --no-keyring.
* gpg: New command --quick-revuid.
* gpg: New options -f/--recipient-file and -F/--hidden-recipient-file
to directly specify encryption keys.
* gpg: New option --mimemode to indicate that the content is a MIME
part. Does only enable --textmode right now.
* gpg: New option --rfc4880bis to allow experiments with proposed
changes to the current OpenPGP specs.
* gpg: Fix regression in the "fetch" sub-command of --card-edit.
* gpg: Fix regression since 2.1 in option --try-all-secrets.
* gpgv: Change default options for extra security.
* gpgsm: No more root certificates are installed by default.
* agent: "updatestartuptty" does now affect more environment
variables.
* scd: The option --homedir does now work with scdaemon.
* scd: Support some more GEMPlus card readers.
* gpgtar: Fix handling of '-' as file name.
* gpgtar: New commands --create and --extract.
* gpgconf: Tweak for --list-dirs to better support shell scripts.
* tools: Add programs gpg-wks-client and gpg-wks-server to implement
a Web Key Service. The configure option --enable-wks-tools is
required to build them; they should be considered Beta software.
* tests: Complete rework of the openpgp part of the test suite. The
test scripts have been changed from Bourne shell scripts to Scheme
programs. A customized scheme interpreter (gpgscm) is included.
This change was triggered by the need to run the test suite on
non-Unix platforms.
* The rendering of the man pages has been improved.
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2016q3/000393.html
Post release updates --
2016-06-16 18:10:08 +02:00
Release 2.1.13
2016-06-16 17:21:01 +02:00
Noteworthy changes in version 2.1.13 (2016-06-16)
Post release updates. --
2016-05-04 16:49:19 +02:00
-------------------------------------------------
Release 2.1.13
2016-06-16 17:21:01 +02:00
* gpg: New command --quick-addkey. Extend the --quick-gen-key
command.
* gpg: New --keyid-format "none" which is now also the default.
* gpg: New option --with-subkey-fingerprint.
* gpg: Include Signer's UID subpacket in signatures if the secret key
has been specified using a mail address and the new option
--disable-signer-uid is not used.
* gpg: Allow unattended deletion of a secret key.
* gpg: Allow export of non-passphrase protected secret keys.
* gpg: New status lines KEY_CONSIDERED and NOTATION_FLAGS.
* gpg: Change status line TOFU_STATS_LONG to use '~' as
a non-breaking-space character.
* gpg: Speedup key listings in Tofu mode.
* gpg: Make sure that the current and total values of a PROGRESS
status line are small enough.
* gpgsm: Allow the use of AES192 and SERPENT ciphers.
* dirmngr: Adjust WKD lookup to current specs.
* dirmngr: Fallback to LDAP v3 if v2 is is not supported.
* gpgconf: New commands --create-socketdir and --remove-socketdir,
new option --homedir.
* If a /run/user/$UID directory exists, that directory is now used
for IPC sockets instead of the GNUPGHOME directory. This fixes
problems with NFS and too long socket names and thus avoids the
need for redirection files.
* The Speedo build systems now uses the new versions.gnupg.org server
to retrieve the default package versions.
* Fix detection of libusb on FreeBSD.
* Speedup fd closing after a fork.
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2016q2/000390.html
Post release updates. --
2016-05-04 16:49:19 +02:00
Release 2.1.12
2016-05-04 15:59:11 +02:00
Noteworthy changes in version 2.1.12 (2016-05-04)
Post release updates --
2016-01-26 14:14:24 +01:00
-------------------------------------------------
Release 2.1.12
2016-05-04 15:59:11 +02:00
* gpg: New --edit-key sub-command "change-usage" for testing
purposes.
* gpg: Out of order key-signatures are now systematically detected
and fixed by --edit-key.
* gpg: Improved detection of non-armored messages.
* gpg: Removed the extra prompt needed to create Curve25519 keys.
* gpg: Improved user ID selection for --quick-sign-key.
* gpg: Use the root CAs provided by the system with --fetch-key.
* gpg: Add support for the experimental Web Key Directory key
location service.
* gpg: Improve formatting of Tofu messages and emit new Tofu specific
status lines.
* gpgsm: Add option --pinentry-mode to support a loopback pinentry.
* gpgsm: A new pubring.kbx is now created with the header blob so
that gpg can detect that the keybox format needs to be used.
* agent: Add read support for the new private key protection format
openpgp-s2k-ocb-aes.
* agent: Add read support for the new extended private key format.
* agent: Default to --allow-loopback-pinentry and add option
--no-allow-loopback-pinentry.
* scd: Changed to use the new libusb 1.0 API for the internal CCID
driver.
* dirmngr: The dirmngr-client does now auto-detect the PEM format.
* g13: Add experimental support for dm-crypt.
* w32: Tofu support is now available with the Speedo build method.
* w32: Removed the need for libiconv.dll.
* The man pages for gpg and gpgv are now installed under the correct
name (gpg2 or gpg - depending on a configure option).
* Lots of internal cleanups and bug fixes.
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2016q2/000387.html
Post release updates --
2016-01-26 14:14:24 +01:00
Release 2.1.11
2016-01-26 13:49:59 +01:00
Noteworthy changes in version 2.1.11 (2016-01-26)
Post release updates. --
2015-12-04 12:00:05 +01:00
-------------------------------------------------
Release 2.1.11
2016-01-26 13:49:59 +01:00
* gpg: New command --export-ssh-key to replace the gpgkey2ssh tool.
* gpg: Allow to generate mail address only keys with --gen-key.
* gpg: "--list-options show-usage" is now the default.
* gpg: Make lookup of DNS CERT records holding an URL work.
* gpg: Emit PROGRESS status lines during key generation.
gpg: Don't check for ambiguous keys. * g10/gpg.c (struct result): Move from here... * g10/keydb.h (struct pubkey): ... to here. Update users. * g10/gpg.c (check_user_ids): Move from here... * g10/getkey.c (get_pubkeys): ... to here. Update users. Use get_pubkey_byname to look up the keys (this also prunes invalid keys). (pubkey_free): New function. (pubkeys_free): New function. * g10/gpg.c (main): Don't check for ambiguous key specifications. -- Signed-off-by: Neal H. Walfield <neal@g10code.com> Regression-due-to: e8c53fc This change not only moves the checks for ambiguous key specifications from gpg.c to getkey.c, it also disables the checks. The old code was too divorced from the actual key lookups and, as such, it reproduced the logic. Unfortunately, the reproduction was a poor one: despite fixing some inconsistencies (e.g., 10cca02), it still didn't deal with group expansion or the auto key lookup functionality. Given the amount of instability introduced by this change, we (Neal & Werner) decided it is better to defer introducing this functionality until 2.3.
2015-12-22 14:57:53 +01:00
* gpg: Don't check for ambigious or non-matching key specification in
the config file or given to --encrypt-to. This feature will return
in 2.3.x.
Post release updates. --
2015-12-04 12:00:05 +01:00
Release 2.1.11
2016-01-26 13:49:59 +01:00
* gpg: Lock keybox files while updating them.
* gpg: Solve rare error on Windows during keyring and Keybox updates.
* gpg: Fix possible keyring corruption. (bug#2193)
* gpg: Fix regression of "bkuptocard" sub-command in --edit-key and
remove "checkbkupkey" sub-command introduced with 2.1. (bug#2169)
* gpg: Fix internal error in gpgv when using default keyid-format.
* gpg: Fix --auto-key-retrieve to work with dirmngr.conf configured
keyservers. (bug#2147).
* agent: New option --pinentry-timeout.
* scd: Improve unplugging of USB readers under Windows.
* scd: Fix regression for generating RSA keys on card.
* dirmmgr: All configured keyservers are now searched.
* dirmngr: Install CA certificate for hkps.pool.sks-keyservers.net.
Use this certiticate even if --hkp-cacert is not used.
* gpgtar: Add actual encryption code. gpgtar does now fully replace
gpg-zip.
* gpgtar: Fix filename encoding problem on Windows.
* Print a warning if a GnuPG component is using an older version of
gpg-agent, dirmngr, or scdaemon.
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2016q1/000383.html
Release 2.1.11
2016-01-26 13:49:59 +01:00
Release 2.1.10
2015-12-04 10:50:51 +01:00
Noteworthy changes in version 2.1.10 (2015-12-04)
Post release updates. --
2015-10-10 11:49:32 +02:00
-------------------------------------------------
Update NEWS file --
2015-12-01 08:45:03 +01:00
* gpg: New trust models "tofu" and "tofu+pgp".
* gpg: New command --tofu-policy. New options --tofu-default-policy
and --tofu-db-format.
* gpg: New option --weak-digest to specify hash algorithms which
should be considered weak.
* gpg: Allow the use of multiple --default-key options; take the last
available key.
* gpg: New option --encrypt-to-default-key.
* gpg: New option --unwrap to only strip the encryption layer.
* gpg: New option --only-sign-text-ids to exclude photo IDs from key
signing.
gpg: Do not pre-check keys given on the command line. * g10/keydb.h (PK_LIST_ENCRYPT_TO, PK_LIST_HIDDEN, PK_LIST_CONFIG) (PK_LIST_SHIFT): New. * g10/pkclist.c (build_pk_list): Use them here. * g10/gpg.c (check_user_ids, main): Ditto. * g10/gpg.c (main): Set PK_LIST_CONFIG for REMUSR and LOCUSR. (check_user_ids): Skip check for command line specified options. -- If a key has been given on the command line and it has not been given by one of the encrypt-to options, we now skip the checks. The reason is that the actual key selection code does its own checks and provides proper status message to the caller to detect the wrong keys. Without this we would break most frontends because they expect for example STATUS_INV_RECP. Signed-off-by: Werner Koch <wk@gnupg.org>
2015-12-04 08:56:02 +01:00
* gpg: Check for ambigious or non-matching key specification in the
config file or given to --encrypt-to.
Update NEWS file --
2015-12-01 08:45:03 +01:00
* gpg: Show the used card reader with --card-status.
* gpg: Print export statistics and an EXPORTED status line.
* gpg: Allow selecting subkeys by keyid in --edit-key.
* gpg: Allow updating the expiration time of multiple subkeys at
once.
* dirmngr: New option --use-tor. For full support this requires
Release 2.1.10
2015-12-04 10:50:51 +01:00
libassuan version 2.4.2 and a patched version of libadns
Update NEWS file --
2015-12-01 08:45:03 +01:00
(e.g. adns-1.4-g10-7 as used by the standard Windows installer).
* dirmngr: New option --nameserver to specify the nameserver used in
Tor mode.
* dirmngr: Keyservers may again be specified by IP address.
* dirmngr: Fixed problems in resolving keyserver pools.
* dirmngr: Fixed handling of premature termination of TLS streams so
that large numbers of keys can be refreshed via hkps.
Release 2.1.10
2015-12-04 10:50:51 +01:00
* gpg: Fixed a regression in --locate-key [since 2.1.9].
Update NEWS file --
2015-12-01 08:45:03 +01:00
* gpg: Fixed another bug for keyrings with legacy keys.
* gpgsm: Allow combinations of usage flags in --gen-key.
* Make tilde expansion work with most options.
* Many other cleanups and bug fixes.
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2015q4/000381.html
Post release updates. --
2015-10-10 11:49:32 +02:00
Release 2.1.9
2015-10-09 17:13:35 +02:00
Noteworthy changes in version 2.1.9 (2015-10-09)
Post release updates. --
2015-09-10 21:05:27 +02:00
------------------------------------------------
Release 2.1.9
2015-10-09 17:13:35 +02:00
* gpg: Allow fetching keys via OpenPGP DANE (--auto-key-locate). New
Release 2.1.14
2016-07-14 16:00:06 +02:00
option --print-dane-records. [Update: --print-dane-records replaced
in 2.1.4.]
Release 2.1.9
2015-10-09 17:13:35 +02:00
* gpg: Fix for a problem with PGP-2 keys in a keyring.
* gpg: Fail with an error instead of a warning if a modern cipher
algorithm is used without a MDC.
* agent: New option --pinentry-invisible-char.
* agent: Always do a RSA signature verification after creation.
* agent: Fix a regression in ssh-add-ing Ed25519 keys.
* agent: Fix ssh fingerprint computation for nistp384 and EdDSA.
Spelling: correct spelling of "passphrase". There were several different variant spellings of "passphrase". This should fix them all for all English text. I did notice that po/it.po contains multiple instances of "passhprase", which also looks suspect to me, but i do not know Italian, so i did not try to correct it. Signed-off-by: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
2016-10-28 15:06:11 -04:00
* agent: Fix crash during passphrase entry on some platforms.
Release 2.1.9
2015-10-09 17:13:35 +02:00
* scd: Change timeout to fix problems with some 2.1 cards.
* dirmngr: Displayed name is now Key Acquirer.
* dirmngr: Add option --keyserver. Deprecate that option for gpg.
Install a dirmngr.conf file from a skeleton for new installations.
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2015q4/000380.html
Post release updates. --
2015-09-10 21:05:27 +02:00
Release 2.1.8.
2015-09-10 16:40:37 +02:00
Noteworthy changes in version 2.1.8 (2015-09-10)
Post release updates. --
2015-08-11 16:13:39 +02:00
------------------------------------------------
Release 2.1.8.
2015-09-10 16:40:37 +02:00
* gpg: Sending very large keys to the keyservers works again.
* gpg: Validity strings in key listings are now again translatable.
* gpg: Emit FAILURE status lines to help GPGME.
* gpg: Does not anymore link to Libksba to reduce dependencies.
* gpgsm: Export of secret keys via Assuan is now possible.
* agent: Raise the maximum passphrase length from 100 to 255 bytes.
* agent: Fix regression using EdDSA keys with ssh.
* Does not anymore use a build timestamp by default.
* The fallback encoding for broken locale settings changed
from Latin-1 to UTF-8.
* Many code cleanups and improved internal documentation.
* Various minor bug fixes.
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2015q3/000379.html
Post release updates. --
2015-08-11 16:13:39 +02:00
Release 2.1.7
2015-08-11 13:54:29 +02:00
Noteworthy changes in version 2.1.7 (2015-08-11)
Post release updates --
2015-07-01 15:07:47 +02:00
------------------------------------------------
Release 2.1.7
2015-08-11 13:54:29 +02:00
* gpg: Support encryption with Curve25519 if Libgcrypt 1.7 is used.
* gpg: In the --edit-key menu: Removed the need for "toggle", changed
how secret keys are indicated, new commands "fpr *" and "grip".
* gpg: More fixes related to legacy keys in a keyring.
* gpgv: Does now also work with a "trustedkeys.kbx" file.
* scd: Support some feature from the OpenPGP card 3.0 specs.
* scd: Improved ECC support
* agent: New option --force for the DELETE_KEY command.
* w32: Look for the Pinentry at more places.
* Dropped deprecated gpgsm-gencert.sh
* Various other bug fixes.
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2015q3/000371.html
Post release updates --
2015-07-01 15:07:47 +02:00
Release 2.1.6
2015-07-01 14:16:40 +02:00
Noteworthy changes in version 2.1.6 (2015-07-01)
Post release updates. --
2015-06-11 15:37:50 +02:00
------------------------------------------------
Release 2.1.6
2015-07-01 14:16:40 +02:00
* agent: New option --verify for the PASSWD command.
* gpgsm: Add command option "offline" as an alternative to
--disable-dirmngr.
* gpg: Do not prompt multiple times for a password in pinentry
loopback mode.
* Allow the use of debug category names with --debug.
* Using gpg-agent and gpg/gpgsm with different locales will now show
the correct translations in Pinentry.
* gpg: Improve speed of --list-sigs and --check-sigs.
* gpg: Make --list-options show-sig-subpackets work again.
* gpg: Fix an export problem for old keyrings with PGP-2 keys.
* scd: Support PIN-pads on more readers.
* dirmngr: Properly cleanup zombie LDAP helper processes and avoid
hangs on dirmngr shutdown.
* Various other bug fixes.
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2015q3/000370.html
Post release updates. --
2015-06-11 15:37:50 +02:00
Release 2.1.5
2015-06-11 14:43:57 +02:00
Noteworthy changes in version 2.1.5 (2015-06-11)
Post release updates. --
2015-05-12 15:40:09 +02:00
------------------------------------------------
Release 2.1.5
2015-06-11 14:43:57 +02:00
* Support for an external passphrase cache.
* Support for the forthcoming version 3 OpenPGP smartcard.
* Manuals now show the actual used file names.
* Prepared for improved integration with Emacs.
* Code cleanups and minor bug fixes.
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2015q2/000369.html
Post release updates. --
2015-05-12 15:40:09 +02:00
Release 2.1.4
2015-05-12 15:07:38 +02:00
Noteworthy changes in version 2.1.4 (2015-05-12)
Post release updates. --
2015-04-11 13:33:41 +02:00
------------------------------------------------
build: Make --disable-gpgsm work. * Makefile.am: Always build kbx/ * g10/Makefile.am (AM_CFLAGS): Include KSBA_CFLAGS. -- Note that "make check" still prints a warning. Signed-off-by: Werner Koch <wk@gnupg.org>
2015-05-15 13:20:52 +02:00
* gpg: Add command --quick-adduid to non-interactively add a new user
Release 2.1.4
2015-05-12 15:07:38 +02:00
id to an existing key.
* gpg: Do no enable honor-keyserver-url by default. Make it work if
enabled.
build: Make --disable-gpgsm work. * Makefile.am: Always build kbx/ * g10/Makefile.am (AM_CFLAGS): Include KSBA_CFLAGS. -- Note that "make check" still prints a warning. Signed-off-by: Werner Koch <wk@gnupg.org>
2015-05-15 13:20:52 +02:00
* gpg: Display the serial number in the --card-status output again.
Release 2.1.4
2015-05-12 15:07:38 +02:00
* agent: Support for external password managers.
Add option --no-allow-external-cache.
* scdaemon: Improved handling of extended APDUs.
* Make HTTP proxies work again.
* All network access including DNS as been moved to Dirmngr.
* Allow building without LDAP support.
* Fixed lots of smaller bugs.
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2015q2/000366.html
Post release updates. --
2015-04-11 13:33:41 +02:00
Release 2.1.3.
2015-04-11 13:14:43 +02:00
Noteworthy changes in version 2.1.3 (2015-04-11)
Post release updates. --
2015-02-11 19:48:21 +01:00
------------------------------------------------
Release 2.1.3.
2015-04-11 13:14:43 +02:00
* gpg: LDAP keyservers are now supported by 2.1.
* gpg: New option --with-icao-spelling.
* gpg: New option --print-pka-records. Changed the PKA method to use
Release 2.1.14
2016-07-14 16:00:06 +02:00
CERT records and hashed names. [Update: --print-pka-records
wks: Let the client ignore missing policy flags. * tools/gpg-wks-client.c (command_send): Ignore missing policy flags. Signed-off-by: Werner Koch <wk@gnupg.org>
2016-12-22 14:39:11 +01:00
replaced in 2.1.14.]
Release 2.1.3.
2015-04-11 13:14:43 +02:00
* gpg: New command --list-gcrypt-config. New parameter "curve"
for --list-config.
* gpg: Print a NEWSIG status line like gpgsm always did.
* gpg: Print MPI values with --list-packets and --verbose.
* gpg: Write correct MPI lengths with ECC keys.
* gpg: Skip legacy PGP-2 keys while searching.
* gpg: Improved searching for mail addresses when using a keybox.
* gpgsm: Changed default algos to AES-128 and SHA-256.
* gpgtar: Fixed extracting files with sizes of a multiple of 512.
* dirmngr: Fixed SNI handling for hkps pools.
dirmngr: Initialize cache from sysconfig dir * dirmngr/certcache.c (cert_cache_init): Load certificates from sysconfig dir instead of the homeidr. * dirmngr/dirmngr.c (main): Removed parsing of obsolete homedir_data option. * dirmngr/dirmngr.h (opt): Removed homedir_data. * doc/dirmngr.texi: Update and clarify certs directory doc. -- Using the homedir for extra-certs and trusted-certs makes little sense when dirmngr is used with a caller that manages it's own store of certificates and can provide those through the SENDCERT command. You can use trusted-certs and extra-certs to provide users with a base of locally available certificates that are not already in store of the applications.
2015-02-05 13:58:50 +01:00
* dirmngr: extra-certs and trusted-certs are now always loaded from
the sysconfig dir instead of the homedir.
Release 2.1.3.
2015-04-11 13:14:43 +02:00
* Fixed possible problems due to compiler optimization, two minor
regressions, and other bugs.
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2015q2/000365.html
Post release updates. --
2015-02-11 19:48:21 +01:00
Release 2.1.2
2015-02-11 19:22:25 +01:00
Noteworthy changes in version 2.1.2 (2015-02-11)
Post release updates --
2014-12-16 17:00:45 +01:00
------------------------------------------------
gpg: Re-enable the "Passphrase" parameter for batch key generation. * agent/command.c (cmd_genkey): Add option --inq-passwd. * agent/genkey.c (agent_genkey): Add new arg override_passphrase. * g10/call-agent.c (inq_genkey_parms): Handle NEWPASSWD keyword. (agent_genkey): Add arg optional arg "passphrase". * g10/keygen.c (common_gen, gen_elg, gen_dsa, gen_ecc) (gen_rsa, do_create): Add arg "passphrase" and pass it through. (do_generate_keypair): Make use of pPASSPHRASE. (release_parameter_list): Wipe out a passphrase parameter. Signed-off-by: Werner Koch <wk@gnupg.org>
2015-01-21 11:31:20 +01:00
* gpg: The parameter 'Passphrase' for batch key generation works
again.
gpg: Support --passphrase with --quick-gen-key. * g10/keygen.c: Include shareddefs.h. (quick_generate_keypair): Support static passphrase. (get_parameter_passphrase): New. (do_generate_keypair): Use it. Signed-off-by: Werner Koch <wk@gnupg.org>
2015-01-21 12:42:14 +01:00
* gpg: Using a passphrase option in batch mode now has the expected
effect on --quick-gen-key.
Release 2.1.2
2015-02-11 19:22:25 +01:00
* gpg: Improved reporting of unsupported PGP-2 keys.
* gpg: Added support for algo names when generating keys using
--command-fd.
* gpg: Fixed DoS based on bogus and overlong key packets.
* agent: When setting --default-cache-ttl the value
for --max-cache-ttl is adjusted to be not lower than the former.
* agent: Fixed problems with the new --extra-socket.
* agent: Made --allow-loopback-pinentry changeable with gpgconf.
* agent: Fixed importing of unprotected openpgp keys.
* agent: Now tries to use a fallback pinentry if the standard
pinentry is not installed.
* scd: Added support for ECDH.
* Fixed several bugs related to bogus keyrings and improved some
other code.
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2015q1/000361.html
agent: Make sure --max-cache-ttl is >= --default-cache-ttl. * agent/gpg-agent.c (finalize_rereadable_options): New. (main, reread_configuration): Call it. -- This change should help to avoid surprising behaviour. Signed-off-by: Werner Koch <wk@gnupg.org>
2014-12-19 13:28:14 +01:00
Release 2.1.1
2014-12-16 15:53:28 +01:00
Noteworthy changes in version 2.1.1 (2014-12-16)
Post release updates. --
2014-11-05 16:46:52 +01:00
------------------------------------------------
Update NEWS --
2014-11-21 21:38:00 +01:00
* gpg: Detect faulty use of --verify on detached signatures.
* gpg: New import option "keep-ownertrust".
Release 2.1.1
2014-12-16 15:53:28 +01:00
* gpg: New sub-command "factory-reset" for --card-edit.
* gpg: A stub key for smartcards is now created by --card-status.
Update NEWS --
2014-11-21 21:38:00 +01:00
* gpg: Fixed regression in --refresh-keys.
Release 2.1.1
2014-12-16 15:53:28 +01:00
* gpg: Fixed regresion in %g and %p codes for --sig-notation.
Update NEWS --
2014-11-21 21:38:00 +01:00
* gpg: Fixed best matching hash algo detection for ECDSA and EdDSA.
* gpg: Improved perceived speed of secret key listisngs.
* gpg: Print number of skipped PGP-2 keys on import.
Release 2.1.1
2014-12-16 15:53:28 +01:00
* gpg: Removed the option aliases --throw-keyid and --notation-data;
use --throw-keyids and --set-notation instead.
* gpg: New import option "keep-ownertrust".
* gpg: Skip too large keys during import.
* gpg,gpgsm: New option --no-autostart to avoid starting gpg-agent or
dirmngr.
* gpg-agent: New option --extra-socket to provide a restricted
command set for use with remote clients.
Update NEWS --
2014-11-21 21:38:00 +01:00
* gpgconf --kill does not anymore start a service only to kill it.
Release 2.1.1
2014-12-16 15:53:28 +01:00
* gpg-pconnect-agent: Add convenience option --uiserver.
Update NEWS --
2014-11-21 21:38:00 +01:00
* Fixed keyserver access for Windows.
* Fixed build problems on Mac OS X
* The Windows installer does now install development files
* More translations (but most of them are not complete).
Release 2.1.1
2014-12-16 15:53:28 +01:00
* To support remotely mounted home directories, the IPC sockets may
now be redirected. This feature requires Libassuan 2.2.0.
gpg: Remove option aliases --[no-]throw-keyid and --notation-data. * g10/gpg.c (opts): Remove them. * g10/options.h (opt): s/throw_keyid/throw_keyids/ and change users. -- See mails starting http://lists.gnupg.org/pipermail/gnupg-devel/2014-November/029128.html
2014-12-03 11:28:10 +01:00
Release 2.1.1
2014-12-16 15:53:28 +01:00
* Improved portability and the usual bunch of bug fixes.
gpg: Allow import of large keys. * g10/import.c (import): Skip too large keys. * kbx/keybox-file.c (IMAGELEN_LIMIT): Change limit from 2MB to 5MB. -- The key which triggered the problem was 0x57930DAB0B86B067. With this patch it can be imported. Keys larger than the now increased limit of 5MB will are skipped and the already existing not_imported counter is bumped up. Signed-off-by: Werner Koch <wk@gnupg.org>
2014-12-04 10:53:10 +01:00
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2014q4/000360.html
Post release updates. --
2014-11-05 16:46:52 +01:00
Change a couple of files to use abbreviated copyright notes. -- Also fixed some of my own copyright notices due to the termination of my assignment. The one displayed by --version is kept at FSF because we had contributors in 2014 with FSF assignments and it gives the FSF some visibility.
2014-11-04 16:28:03 +01:00
Noteworthy changes in version 2.1.0 (2014-11-06)
doc: Minor fix. -- Due to todays reminder: On Tue 2014-04-22 18:46:15 -0400, Daniel Kahn Gillmor wrote: > With --trust-model=always, all keys and user IDs are considered > automatically valid; they are not automatically trusted (setting > universal ownertrust to anything other than "ultimate" would be > insufficient to acheive the effect of --trust-model=always, due to > --max-cert-depth and certificate path reachability). > > Thanks to Nicolai Josuttis for pointing out this documentation error.
2014-10-03 20:19:08 +02:00
------------------------------------------------
Change a couple of files to use abbreviated copyright notes. -- Also fixed some of my own copyright notices due to the termination of my assignment. The one displayed by --version is kept at FSF because we had contributors in 2014 with FSF assignments and it gives the FSF some visibility.
2014-11-04 16:28:03 +01:00
This release introduces a lot of changes. Most of them are internal
and thus not user visible. However, some long standing behavior has
slightly changed and it is strongly suggested that an existing
"~/.gnupg" directory is backed up before this version is used.
A verbose description of the major new features and changes can be
found in the file doc/whats-new-in-2.1.txt.
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
Update NEWS. --
2014-10-26 12:48:34 +01:00
* gpg: All support for v3 (PGP 2) keys has been dropped. All
gpg: Fix --rebuild-keydb-caches. * g10/parse-packet.c (parse_key): Store even unsupported packet versions. * g10/keyring.c (keyring_rebuild_cache): Do not copy keys with versions less than 4. -- That function, which is implicitly called while checking the keydb, led to corruption of v3 key packets in the keyring which would later spit out "packet(6)too short" messages. Signed-off-by: Werner Koch <wk@gnupg.org>
2014-10-31 10:29:02 +01:00
signatures are now created as v4 signatures. v3 keys will be
removed from the keyring.
Update NEWS. --
2014-10-26 12:48:34 +01:00
* gpg: With pinentry-0.9.0 the passphrase "enter again" prompt shows
up in the same window as the "new passphrase" prompt.
* gpg: Allow importing keys with duplicated long key ids.
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* dirmngr: May now be build without support for LDAP.
dirmngr: Allow building without LDAP support. * configure.ac: Add option --disable-ldap. (USE_LDAP): New ac_define and am_conditional. * dirmngr/Makefile.am: Take care of USE_LDAP. * dirmngr/dirmngr.c (!USE_LDAP): Make all ldap options dummy options and do not call any ldap function. * dirmngr/server.c (!USE_LDAP): Do not call any ldap function. * dirmngr/crlfetch.c (!USE_LDAP): Ditto. Signed-off-by: Werner Koch <wk@gnupg.org>
2014-10-17 15:59:45 +02:00
doc: Minor fix. -- Due to todays reminder: On Tue 2014-04-22 18:46:15 -0400, Daniel Kahn Gillmor wrote: > With --trust-model=always, all keys and user IDs are considered > automatically valid; they are not automatically trusted (setting > universal ownertrust to anything other than "ultimate" would be > insufficient to acheive the effect of --trust-model=always, due to > --max-cert-depth and certificate path reachability). > > Thanks to Nicolai Josuttis for pointing out this documentation error.
2014-10-03 20:19:08 +02:00
* For a complete list of changes see the lists of changes for the
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
2.1.0 beta versions below. Note that all relevant fixes from
versions 2.0.14 to 2.0.26 are also applied to this version.
doc: Minor fix. -- Due to todays reminder: On Tue 2014-04-22 18:46:15 -0400, Daniel Kahn Gillmor wrote: > With --trust-model=always, all keys and user IDs are considered > automatically valid; they are not automatically trusted (setting > universal ownertrust to anything other than "ultimate" would be > insufficient to acheive the effect of --trust-model=always, due to > --max-cert-depth and certificate path reachability). > > Thanks to Nicolai Josuttis for pointing out this documentation error.
2014-10-03 20:19:08 +02:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
[Noteworthy changes in version 2.1.0-beta864 (2014-10-03)]
Post beta release update. --
2014-09-18 16:00:34 +02:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* gpg: Removed the GPG_AGENT_INFO related code. GnuPG does now
always use a fixed socket name in its home directory.
Release 2.1.0-beta864.
2014-10-03 15:45:32 +02:00
* gpg: Renamed --gen-key to --full-gen-key and re-added a --gen-key
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
command with less choices.
Release 2.1.0-beta864.
2014-10-03 15:45:32 +02:00
* gpg: Use SHA-256 for all signature types also on RSA keys.
* gpg: Default keyring is now created with a .kbx suffix.
doc: Minor fix. -- Due to todays reminder: On Tue 2014-04-22 18:46:15 -0400, Daniel Kahn Gillmor wrote: > With --trust-model=always, all keys and user IDs are considered > automatically valid; they are not automatically trusted (setting > universal ownertrust to anything other than "ultimate" would be > insufficient to acheive the effect of --trust-model=always, due to > --max-cert-depth and certificate path reachability). > > Thanks to Nicolai Josuttis for pointing out this documentation error.
2014-10-03 20:19:08 +02:00
* gpg: Add a shortcut to the key capabilies menu (e.g. "=e" sets the
Release 2.1.0-beta864.
2014-10-03 15:45:32 +02:00
encryption capabilities).
* gpg: Fixed obsolete options parsing.
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* Further improvements for the alternative speedo build system.
Release 2.1.0-beta864.
2014-10-03 15:45:32 +02:00
Post beta release update. --
2014-09-18 16:00:34 +02:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
[Noteworthy changes in version 2.1.0-beta834 (2014-09-18)]
Post beta release update. --
2014-08-14 17:15:04 +02:00
Release 2.1.0-beta834.
2014-09-18 16:00:34 +02:00
* gpg: Improved passphrase caching.
* gpg: Switched to algorithm number 22 for EdDSA.
* gpg: Removed CAST5 from the default preferences.
* gpg: Order SHA-1 last in the hash preferences.
* gpg: Changed default cipher for --symmetric to AES-128.
* gpg: Fixed export of ECC keys and import of EdDSA keys.
* dirmngr: Fixed the KS_FETCH command.
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* The speedo build system now downloads related packages and works
for non-Windows platforms.
Release 2.1.0-beta834.
2014-09-18 16:00:34 +02:00
Post beta release update. --
2014-08-14 17:15:04 +02:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
[Noteworthy changes in version 2.1.0-beta783 (2014-08-14)]
Post beta release update --
2014-06-25 14:33:34 +02:00
Release 2.1.0-beta783
2014-08-14 17:08:03 +02:00
* gpg: Add command --quick-gen-key.
* gpg: Make --quick-sign-key promote local key signatures.
Post beta release update. --
2014-08-14 17:15:04 +02:00
* gpg: Added "show-usage" sub-option to --list-options.
Release 2.1.0-beta783
2014-08-14 17:08:03 +02:00
* gpg: Screen keyserver responses to avoid importing unwanted keys
from rogue servers.
gpg: Remove options --pgp2 and --rfc1991. * g10/gpg.c (oRFC1991, oPGP2): Remove (opts): Remove --pgp2 and --rfc1991. * g10/options.h (CO_PGP2, CO_RFC1991): Remove. Remove all users. (RFC2440, PGP2): Remove. Remove all code only enabled by these conditions. * tests/openpgp/clearsig.test: Remove --rfc1991 test. -- The use of PGP 2.c is considered insecure for quite some time now (e.g. due to the use of MD5). Thus we remove all support for _creating_ PGP 2 compatible messages.
2014-08-12 10:36:30 +02:00
* gpg: Removed the option --pgp2 and --rfc1991 and the ability to
create PGP-2 compatible messages.
Release 2.1.0-beta783
2014-08-14 17:08:03 +02:00
* gpg: Removed options --compress-keys and --compress-sigs.
* gpg: Cap attribute packets at 16MB.
* gpg: Improved output of --list-packets.
* gpg: Make with-colons output of --search-keys work again.
* gpgsm: Auto-create the ".gnupg" directory like gpg does.
* agent: Fold new passphrase warning prompts into one.
* scdaemon: Add support for the Smartcard-HSM card.
* scdaemon: Remove the use of the pcsc-wrapper.
Post beta release update --
2014-06-25 14:33:34 +02:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
[Noteworthy changes in version 2.1.0-beta751 (2014-07-03)]
Release 2.1.0-beta751
2014-06-25 14:33:34 +02:00
* gpg: Create revocation certificates during key generation.
* gpg: Create exported secret keys and revocation certifciates with
mode 0700
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* gpg: The validity of user ids is now shown by default. To revert
this add "list-options no-show-uid-validity" to gpg.conf.
* gpg: Make export of secret keys work again.
Release 2.1.0-beta751
2014-06-25 14:33:34 +02:00
* gpg: The output of --list-packets does now print the offset of the
packet and information about the packet header.
* gpg: Avoid DoS due to garbled compressed data packets. [CVE-2014-4617]
* gpg: Print more specific reason codes with the INV_RECP status.
* gpg: Cap RSA and Elgamal keysize at 4096 bit also for unattended
key generation.
* scdaemon: Support reader Gemalto IDBridge CT30 and pinpad of SCT
cyberJack go.
* The speedo build system has been improved. It is now also possible
to build a partly working installer for Windows.
Post beta release update. -- 656fef6454972cb91741c37a0fd19cd9ade9db9c gnupg-2.1.0-beta442.tar.bz2
2014-06-05 17:05:33 +02:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
[Noteworthy changes in version 2.1.0-beta442 (2014-06-05)]
* gpg: Changed the format of key listings. To revert to the old
format the option --legacy-list-mode is available.
Post-release version number update
2011-12-20 17:10:28 +01:00
Update README file. -- The copyright list in AUTHORS as been compiled from a distribution tarball.
2014-06-05 16:20:44 +02:00
* gpg: Add experimental signature support using curve Ed25519 and
with a patched Libgcrypt also encryption support with Curve25519.
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
[Update: this encryption support has been removed from 2.1.0 until
we have agreed on a suitable format.]
Update README file. -- The copyright list in AUTHORS as been compiled from a distribution tarball.
2014-06-05 16:20:44 +02:00
* gpg: Allow use of Brainpool curves.
* gpg: Accepts a space separated fingerprint as user ID. This
gpg: Allow use of a standard space separated fingerprint. * common/userids.c (classify_user_id): Check for space separated GPG fingerprint.
2012-01-06 13:33:10 +01:00
allows to copy and paste the fingerprint from the key listing.
Update README file. -- The copyright list in AUTHORS as been compiled from a distribution tarball.
2014-06-05 16:20:44 +02:00
* gpg: The hash algorithm is now printed for signature records in key
listings.
nPth is now a hard requirement for GnuPG. * configure.ac: Remove cruft to allow building without npth. -- Previous versions of GnuPG allowed to build a subset of it without support of Pth. Meanwhile gpg-agent is a requirement even for gpg and thus it does not make any sense to allow such a restricted build.
2012-01-25 15:48:01 +01:00
Update README file. -- The copyright list in AUTHORS as been compiled from a distribution tarball.
2014-06-05 16:20:44 +02:00
* gpg: Reject signatures made using the MD5 hash algorithm unless the
new option --allow-weak-digest-algos or --pgp2 are given.
agent: Make --allow-mark-trusted the default. * agent/gpg-agent.c (opts, main): Add option --no-allow-mark-trusted. Put this option into the gpgconf-list. (main): Enable opt.allow_mark_trusted by default. * tools/gpgconf-comp.c (gc_options_gpg_agent): Replace allow-mark-trusted by no-allow-mark-trusted. * agent/trustlist.c (agent_marktrusted): Always set the "relax" flag. -- These changes have been in effect for the Gpg4win Windows version since 2011-01-24 and thus first released with Gpg4win 2.1.0. Given the current state of PKIX it does not make any sense to lure the Unix user into false security by making it harder to trust self-signed or CAcert certificates. Signed-off-by: Werner Koch <wk@gnupg.org> (cherry picked from commit 90b419f3e9d05e509348d047e05fcc79e87be6cf) Resolved conflicts: NEWS agent/gpg-agent.c
2013-07-03 15:20:25 +02:00
Update README file. -- The copyright list in AUTHORS as been compiled from a distribution tarball.
2014-06-05 16:20:44 +02:00
* gpg: Print a warning if the Gnome-Keyring-Daemon intercepts the
communication with the gpg-agent.
agent: Make --allow-mark-trusted the default. * agent/gpg-agent.c (opts, main): Add option --no-allow-mark-trusted. Put this option into the gpgconf-list. (main): Enable opt.allow_mark_trusted by default. * tools/gpgconf-comp.c (gc_options_gpg_agent): Replace allow-mark-trusted by no-allow-mark-trusted. * agent/trustlist.c (agent_marktrusted): Always set the "relax" flag. -- These changes have been in effect for the Gpg4win Windows version since 2011-01-24 and thus first released with Gpg4win 2.1.0. Given the current state of PKIX it does not make any sense to lure the Unix user into false security by making it harder to trust self-signed or CAcert certificates. Signed-off-by: Werner Koch <wk@gnupg.org> (cherry picked from commit 90b419f3e9d05e509348d047e05fcc79e87be6cf) Resolved conflicts: NEWS agent/gpg-agent.c
2013-07-03 15:20:25 +02:00
Update README file. -- The copyright list in AUTHORS as been compiled from a distribution tarball.
2014-06-05 16:20:44 +02:00
* gpg: New option --pinentry-mode.
Add an item to NEWS. --
2012-02-07 10:20:12 +01:00
Update README file. -- The copyright list in AUTHORS as been compiled from a distribution tarball.
2014-06-05 16:20:44 +02:00
* gpg: Fixed decryption using an OpenPGP card.
Print the hash algorithm in colon mode key listing. * g10/keylist.c (list_keyblock_colon): Print digest_algo.
2012-05-24 10:13:39 +02:00
Update README file. -- The copyright list in AUTHORS as been compiled from a distribution tarball.
2014-06-05 16:20:44 +02:00
* gpg: Fixed bug with deeply nested compressed packets.
gpg: Add pinentry-mode feature. * g10/gpg.c: Include shareddefs.h. (main): Add option --pinentry-mode. * g10/options.h (struct opt): Add field pinentry_mode. * g10/passphrase.c: Include shareddefs.h. (have_static_passphrase): Take care of loopback pinentry_mode. (read_passphrase_from_fd): Ditto. (get_static_passphrase): New. (passphrase_to_dek_ext): Factor some code out to ... (emit_status_need_passphrase): new. * g10/call-agent.c (start_agent): Send the pinentry mode. (default_inq_cb): Take care of the PASSPHRASE inquiry. Return a proper error code. (agent_pksign): Add args keyid, mainkeyid and pubkey_algo. (agent_pkdecrypt): Ditto. * g10/pubkey-enc.c (get_it): Pass new args. * g10/sign.c (do_sign): Pass new args. * g10/call-agent.c (struct default_inq_parm_s): New. Change all similar structs to reference this one. Change all users and inquire callback to use this struct, instead of NULL or some undefined but not used structs. This change will help to eventually get rid of global variables. -- This new features allows to use gpg without a Pinentry. As a prerequisite the agent must be configured to allow the loopback pinentry mode (option --allow-loopback-pinentry). For example gpg2 --pinentry-mode=loopback FILE.gpg may be used to decrypt FILE.gpg while entering the passphrase on the tty. If batch is used, --passphrase et al. may be used, if --command-fd is used, the passphrase may be provided by another process. Note that there are no try-again prompts in case of a bad passphrase.
2013-02-07 20:37:58 +01:00
Update README file. -- The copyright list in AUTHORS as been compiled from a distribution tarball.
2014-06-05 16:20:44 +02:00
* gpg: Only the major version number is by default included in the
armored output.
scd: Rename 'keypad' to 'pinpad'. * NEWS: Mention scd changes. * agent/divert-scd.c (getpin_cb): Change message. * agent/call-scd.c (inq_needpin): Change the protocol to POPUPPINPADPROMPT and DISMISSPINPADPROMPT. * scd/command.c (pin_cb): Likewise. * scd/apdu.c (struct reader_table_s): Rename member functions. (check_pcsc_pinpad, pcsc_pinpad_verify, pcsc_pinpad_modify, check_ccid_pinpad, ccid_pinpad_operation, apdu_check_pinpad apdu_pinpad_verify, apdu_pinpad_modify): Rename. * scd/apdu.h (SW_HOST_NO_PINPAD, apdu_check_pinpad) (apdu_pinpad_verify, apdu_pinpad_modify): Rename. * scd/iso7816.h (iso7816_check_pinpad): Rename. * scd/iso7816.c (map_sw): Use SW_HOST_NO_PINPAD. (iso7816_check_pinpad): Rename. (iso7816_verify_kp, iso7816_change_reference_data_kp): Follow the change. * scd/ccid-driver.h (CCID_DRIVER_ERR_NO_PINPAD): Rename. * scd/ccid-driver.c (ccid_transceive_secure): Use it. * scd/app-dinsig.c (verify_pin): Follow the change. * scd/app-nks.c (verify_pin): Follow the change. * scd/app-openpgp.c (check_pinpad_request): Rename. (parse_login_data, verify_a_chv, verify_chv3, do_change_pin): Follow the change. * scd/scdaemon.c (oDisablePinpad, oEnablePinpadVarlen): Rename. * scd/scdaemon.h (opt): Rename to disable_pinpad, enable_pinpad_varlen. * tools/gpgconf-comp.c (gc_options_scdaemon): Rename to disable-pinpad.
2013-02-07 10:07:51 +09:00
Update README file. -- The copyright list in AUTHORS as been compiled from a distribution tarball.
2014-06-05 16:20:44 +02:00
* gpg: Do not create a trustdb file if --trust-model=always is used.
Add new option --with-secret. * g10/gpg.c: Add option --with-secret. * g10/options.h (struct opt): Add field with_secret. * g10/keylist.c (public_key_list): Pass opt.with_secret to list_all and list_one. (list_all, list_one): Add arg mark_secret. (list_keyblock_colon): Add arg has_secret. * sm/gpgsm.c: Add option --with-secret. * sm/server.c (option_handler): Add option "with-secret". * sm/gpgsm.h (server_control_s): Add field with_secret. * sm/keylist.c (list_cert_colon): Take care of with_secret. Also move the token string from the wrong field 14 to 15. -- This option is useful for key managers which need to know whether a key has a secret key. This change allows to collect this information in one pass.
2014-06-03 21:35:59 +02:00
Update README file. -- The copyright list in AUTHORS as been compiled from a distribution tarball.
2014-06-05 16:20:44 +02:00
* gpg: Protect against rogue keyservers sending secret keys.
scd: Rename 'keypad' to 'pinpad'. * NEWS: Mention scd changes. * agent/divert-scd.c (getpin_cb): Change message. * agent/call-scd.c (inq_needpin): Change the protocol to POPUPPINPADPROMPT and DISMISSPINPADPROMPT. * scd/command.c (pin_cb): Likewise. * scd/apdu.c (struct reader_table_s): Rename member functions. (check_pcsc_pinpad, pcsc_pinpad_verify, pcsc_pinpad_modify, check_ccid_pinpad, ccid_pinpad_operation, apdu_check_pinpad apdu_pinpad_verify, apdu_pinpad_modify): Rename. * scd/apdu.h (SW_HOST_NO_PINPAD, apdu_check_pinpad) (apdu_pinpad_verify, apdu_pinpad_modify): Rename. * scd/iso7816.h (iso7816_check_pinpad): Rename. * scd/iso7816.c (map_sw): Use SW_HOST_NO_PINPAD. (iso7816_check_pinpad): Rename. (iso7816_verify_kp, iso7816_change_reference_data_kp): Follow the change. * scd/ccid-driver.h (CCID_DRIVER_ERR_NO_PINPAD): Rename. * scd/ccid-driver.c (ccid_transceive_secure): Use it. * scd/app-dinsig.c (verify_pin): Follow the change. * scd/app-nks.c (verify_pin): Follow the change. * scd/app-openpgp.c (check_pinpad_request): Rename. (parse_login_data, verify_a_chv, verify_chv3, do_change_pin): Follow the change. * scd/scdaemon.c (oDisablePinpad, oEnablePinpadVarlen): Rename. * scd/scdaemon.h (opt): Rename to disable_pinpad, enable_pinpad_varlen. * tools/gpgconf-comp.c (gc_options_scdaemon): Rename to disable-pinpad.
2013-02-07 10:07:51 +09:00
Update README file. -- The copyright list in AUTHORS as been compiled from a distribution tarball.
2014-06-05 16:20:44 +02:00
* gpg: The format of the fallback key listing ("gpg KEYFILE") is now
more aligned to the regular key listing ("gpg -k").
scd: Rename 'keypad' to 'pinpad'. * NEWS: Mention scd changes. * agent/divert-scd.c (getpin_cb): Change message. * agent/call-scd.c (inq_needpin): Change the protocol to POPUPPINPADPROMPT and DISMISSPINPADPROMPT. * scd/command.c (pin_cb): Likewise. * scd/apdu.c (struct reader_table_s): Rename member functions. (check_pcsc_pinpad, pcsc_pinpad_verify, pcsc_pinpad_modify, check_ccid_pinpad, ccid_pinpad_operation, apdu_check_pinpad apdu_pinpad_verify, apdu_pinpad_modify): Rename. * scd/apdu.h (SW_HOST_NO_PINPAD, apdu_check_pinpad) (apdu_pinpad_verify, apdu_pinpad_modify): Rename. * scd/iso7816.h (iso7816_check_pinpad): Rename. * scd/iso7816.c (map_sw): Use SW_HOST_NO_PINPAD. (iso7816_check_pinpad): Rename. (iso7816_verify_kp, iso7816_change_reference_data_kp): Follow the change. * scd/ccid-driver.h (CCID_DRIVER_ERR_NO_PINPAD): Rename. * scd/ccid-driver.c (ccid_transceive_secure): Use it. * scd/app-dinsig.c (verify_pin): Follow the change. * scd/app-nks.c (verify_pin): Follow the change. * scd/app-openpgp.c (check_pinpad_request): Rename. (parse_login_data, verify_a_chv, verify_chv3, do_change_pin): Follow the change. * scd/scdaemon.c (oDisablePinpad, oEnablePinpadVarlen): Rename. * scd/scdaemon.h (opt): Rename to disable_pinpad, enable_pinpad_varlen. * tools/gpgconf-comp.c (gc_options_scdaemon): Rename to disable-pinpad.
2013-02-07 10:07:51 +09:00
Update README file. -- The copyright list in AUTHORS as been compiled from a distribution tarball.
2014-06-05 16:20:44 +02:00
* gpg: The option--show-session-key prints its output now before the
decryption of the bulk message starts.
* gpg: New %U expando for the photo viewer.
* gpg,gpgsm: New option --with-secret.
* gpgsm: By default the users are now asked via the Pinentry whether
they trust an X.509 root key. To prohibit interactive marking of
such keys, the new option --no-allow-mark-trusted may be used.
* gpgsm: New commands to export a secret RSA key in PKCS#1 or PKCS#8
format.
* gpgsm: Improved handling of re-issued CA certificates.
w32: Add code to support a portable use of GnuPG. * common/homedir.c (w32_bin_is_bin, w32_portable_app) [W32]: New. (check_portable_app) [W32]: New. (standard_homedir, default_homedir) [W32]: Support the portable flag. (w32_rootdir, w32_commondir) [W32]: Ditto. (gnupg_bindir, gnupg_cachedir, dirmngr_socket_name) [W32]: Ditto. * common/logging.h (JNLIB_LOG_NO_REGISTRY): New. * common/logging.c (no_registry): New variable. (log_set_prefix, log_get_prefix): Set/get that variable. (do_logv): Do not check the registry if that variable is set. -- Beware: This code has not been tested because it is not yet possible to build GnuPG 2.1 for Windows. However, the code will be the base for an implementation in 2.0. A portable use of GnuPG under Windows means that GnuPG uses a home directory depending on the location of the actual binary. No registry variables are considered. The portable mode is enabled if in the installation directory of the the binary "gpgconf.exe" and a file "gpgconf.ctl" are found. The latter file is empty or consists only of empty or '#' comment lines. Signed-off-by: Werner Koch <wk@gnupg.org>
2013-08-01 11:20:48 +02:00
Update README file. -- The copyright list in AUTHORS as been compiled from a distribution tarball.
2014-06-05 16:20:44 +02:00
* agent: The included ssh agent does now support ECDSA keys.
gpg: Make decryption with the OpenPGP card work. * scd/app-common.h (APP_DECIPHER_INFO_NOPAD): New. * scd/app-openpgp.c (do_decipher): Add arg R_INFO. * scd/app-nks.c (do_decipher): Add arg R_INFO as a dummy. * scd/app.c (app_decipher): Add arg R_INFO. * scd/command.c (cmd_pkdecrypt): Print status line "PADDING". * agent/call-scd.c (padding_info_cb): New. (agent_card_pkdecrypt): Add arg R_PADDING. * agent/divert-scd.c (divert_pkdecrypt): Ditto. * agent/pkdecrypt.c (agent_pkdecrypt): Ditto. * agent/command.c (cmd_pkdecrypt): Print status line "PADDING". * g10/call-agent.c (padding_info_cb): New. (agent_pkdecrypt): Add arg R_PADDING. * g10/pubkey-enc.c (get_it): Use padding info. -- Decryption using a card never worked in gpg 2.1 because the information whether the pkcs#1 padding needs to be removed was not available. Gpg < 2.1 too this info from the secret sub key but that has gone in 2.1. Signed-off-by: Werner Koch <wk@gnupg.org>
2013-08-26 17:29:54 +02:00
Update README file. -- The copyright list in AUTHORS as been compiled from a distribution tarball.
2014-06-05 16:20:44 +02:00
* agent: New option --enable-putty-support to allow gpg-agent on
Windows to act as a Pageant replacement with full smartcard support.
gpg: Fix bug with deeply nested compressed packets. * g10/mainproc.c (MAX_NESTING_DEPTH): New. (proc_compressed): Return an error code. (check_nesting): New. (do_proc_packets): Check packet nesting depth. Handle errors from check_compressed. Signed-off-by: Werner Koch <wk@gnupg.org>
2013-10-02 09:11:43 +02:00
Update README file. -- The copyright list in AUTHORS as been compiled from a distribution tarball.
2014-06-05 16:20:44 +02:00
* scdaemon: New option --enable-pinpad-varlen.
gpg: Change armor Version header to emit only the major version. * g10/options.h (opt): Rename field no_version to emit_version. * g10/gpg.c (main): Init opt.emit_vesion to 1. Change --emit-version to bump up opt.emit_version. * g10/armor.c (armor_filter): Implement different --emit-version values. -- GnuPG-bug-id: 1572 Signed-off-by: Werner Koch <wk@gnupg.org>
2013-11-27 09:20:02 +01:00
Update README file. -- The copyright list in AUTHORS as been compiled from a distribution tarball.
2014-06-05 16:20:44 +02:00
* scdaemon: Various fixes for pinpad equipped card readers.
gpg: Do not require a trustdb with --always-trust. * g10/tdbio.c (tdbio_set_dbname): Add arg R_NOFILE. * g10/trustdb.c (trustdb_args): Add field no_trustdb. (init_trustdb): Set that field. (revalidation_mark): Take care of a nonexistent trustdb file. (read_trust_options): Ditto. (tdb_get_ownertrust): Ditto. (tdb_get_min_ownertrust): Ditto. (tdb_update_ownertrust): Ditto. (update_min_ownertrust): Ditto. (tdb_clear_ownertrusts): Ditto. (tdb_cache_disabled_value): Ditto. (tdb_check_trustdb_stale): Ditto. (tdb_get_validity_core): Ditto. * g10/gpg.c (main): Do not create a trustdb with most commands for trust-model always. -- This slightly changes the semantics of most commands in that they won't create a trustdb if --trust-model=always is used. It just does not make sense to create a trustdb if there is no need for it. Signed-off-by: Werner Koch <wk@gnupg.org> (cherry picked from commit 1a0eeaacd1bf09fe5125dbc3f56016bc20f3512e) Resolved conflicts: NEWS g10/trustdb.c: Manually apply changes due to changed function names. Note that this also includes the fix for clear_ownertrust, see GnuPG-bug-id: 1622.
2013-10-11 09:25:58 +02:00
Update README file. -- The copyright list in AUTHORS as been compiled from a distribution tarball.
2014-06-05 16:20:44 +02:00
* scdaemon: Rename option --disable-pinpad (was --disable-keypad).
* scdaemon: Better support fo CCID readers. Now, internal CCID
driver supports readers with no auto configuration feature.
* dirmngr: Removed support for the original HKP keyserver which is
not anymore used by any site.
* dirmngr: Improved support for keyserver pools.
* tools: New option --dirmngr for gpg-connect-agent.
* The GNU Pth library has been replaced by the new nPth library.
* Support installation as portable application under Windows.
gpg: Do not require a trustdb with --always-trust. * g10/tdbio.c (tdbio_set_dbname): Add arg R_NOFILE. * g10/trustdb.c (trustdb_args): Add field no_trustdb. (init_trustdb): Set that field. (revalidation_mark): Take care of a nonexistent trustdb file. (read_trust_options): Ditto. (tdb_get_ownertrust): Ditto. (tdb_get_min_ownertrust): Ditto. (tdb_update_ownertrust): Ditto. (update_min_ownertrust): Ditto. (tdb_clear_ownertrusts): Ditto. (tdb_cache_disabled_value): Ditto. (tdb_check_trustdb_stale): Ditto. (tdb_get_validity_core): Ditto. * g10/gpg.c (main): Do not create a trustdb with most commands for trust-model always. -- This slightly changes the semantics of most commands in that they won't create a trustdb if --trust-model=always is used. It just does not make sense to create a trustdb if there is no need for it. Signed-off-by: Werner Koch <wk@gnupg.org> (cherry picked from commit 1a0eeaacd1bf09fe5125dbc3f56016bc20f3512e) Resolved conflicts: NEWS g10/trustdb.c: Manually apply changes due to changed function names. Note that this also includes the fix for clear_ownertrust, see GnuPG-bug-id: 1622.
2013-10-11 09:25:58 +02:00
Update README file. -- The copyright list in AUTHORS as been compiled from a distribution tarball.
2014-06-05 16:20:44 +02:00
* All kind of other improvements - see the git log.
gpgsm: New commands --export-secret-key-{p8,raw} * sm/gpgsm.c: Add new commands. * sm/minip12.c (build_key_sequence): Add arg mode. (p12_raw_build): New. * sm/export.c (export_p12): Add arg rawmode. Call p12_raw_build. (gpgsm_p12_export): Ditto. (print_short_info): Print the keygrip.
2014-06-03 18:57:33 +02:00
Post-release version number update
2011-12-20 17:10:28 +01:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
[Noteworthy changes in version 2.1.0beta3 (2011-12-20)]
Post beta release updates
2011-03-08 14:00:04 +01:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* gpg: Fixed regression in the secret key export function.
Allow generation of card keys up to 4096 bit. This patch implementes a chunk mode to pass the key parameters from scdaemon to gpg. This allows to pass arbitrary long key paremeters; it is used for keys larger than 3072 bit. Note: the card key generation in gpg is currently broken. The keys are generated but it is not possible to create the self-signature because at that time the gpg-agent does not yet know about the new keys and thus can't divert the sign request to the card. We either need to run the learn command right after calling agent_scd_genkey or implement a way to sign using the currently inserted card. Another option would be to get rid of agent_scd_genkey and implement the feature directly in agent_genkey.
2011-06-16 14:27:33 +02:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* gpg: Allow generation of card keys up to 4096 bit.
Fixed regression in OpenPGP secret key export. The protection used in the exported key used a different iteration count than given in the S2K field. Thus all OpenPGP keys exported from GnuPG 2.1-beta can't be imported again. Given that the actual secret key material is kept in private-keys-v1.d/ the can be re-exported with this fixed version.
2011-04-26 20:33:46 +02:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* gpgsm: Preliminary support for the validation model "steed".
Support a confirm flag for ssh. This implements the suggestion from bug#1349. With this change the fingerprint of the ssh key is also displayed in the pinentry prompts.
2011-07-20 20:49:41 +02:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* gpgsm: Improved certificate creation.
Made the KILLAGENT and KILLSCD commands working again. This requires that GnuPG is build with a newer version of Libassuan (2.0.3).
2011-08-10 11:47:04 +02:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* agent: Support the SSH confirm flag.
agent: Pass comment lines from scd verbatim thru gpg-agent. * agent/call-scd.c (pass_status_thru): Pass comment lines verbatim. * tools/gpg-connect-agent.c (help_cmd_p): New. (main): Treat an "SCD HELP" the same as "HELP".
2011-12-14 15:42:28 +01:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* agent: New option to select a passphrase mode. The loopback
mode may be used to bypass Pinentry.
agent: Pass comment lines from scd verbatim thru gpg-agent. * agent/call-scd.c (pass_status_thru): Pass comment lines verbatim. * tools/gpg-connect-agent.c (help_cmd_p): New. (main): Treat an "SCD HELP" the same as "HELP".
2011-12-14 15:42:28 +01:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* agent: The Assuan commands KILLAGENT and KILLSCD are working again.
agent: Pass comment lines from scd verbatim thru gpg-agent. * agent/call-scd.c (pass_status_thru): Pass comment lines verbatim. * tools/gpg-connect-agent.c (help_cmd_p): New. (main): Treat an "SCD HELP" the same as "HELP".
2011-12-14 15:42:28 +01:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* scdaemon: Does not anymore block after changing a card (regression
fix).
agent: Pass comment lines from scd verbatim thru gpg-agent. * agent/call-scd.c (pass_status_thru): Pass comment lines verbatim. * tools/gpg-connect-agent.c (help_cmd_p): New. (main): Treat an "SCD HELP" the same as "HELP".
2011-12-14 15:42:28 +01:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* tools: gpg-connect-agent does now proberly display the help output
for "SCD HELP" commands.
agent: Pass comment lines from scd verbatim thru gpg-agent. * agent/call-scd.c (pass_status_thru): Pass comment lines verbatim. * tools/gpg-connect-agent.c (help_cmd_p): New. (main): Treat an "SCD HELP" the same as "HELP".
2011-12-14 15:42:28 +01:00
Post beta release updates
2011-03-08 14:00:04 +01:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
[Noteworthy changes in version 2.1.0beta2 (2011-03-08)]
Honor TMPDIR.
2010-10-27 07:37:52 +00:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* gpg: ECC support as described by draft-jivsov-openpgp-ecc-06.txt
[Update: now known as RFC-6637].
Honor TMPDIR.
2010-10-27 07:37:52 +00:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* gpg: Print "AES128" instead of "AES". This change introduces a
little incompatibility for tools using "gpg --list-config". We
hope that these tools are written robust enough to accept this new
algorithm name as well.
Fix bug where scdaemon kills a non-daemon gpg-agent.
2010-11-11 15:07:37 +00:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* gpgsm: New feature to create certificates from a parameter file.
Add prompt to the --gen-key UI to create self-signed certificates.
s/AES/AES128/ in diagnostics and --list-config
2010-12-02 15:49:02 +00:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* agent: TMPDIR is now also honored when creating a socket using
the --no-standard-socket option and with symcryptrun's temp files.
Tweaks for gpgconf. Fixed dirmngr bug 1010.
2010-12-14 19:17:58 +00:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* scdaemon: Fixed a bug where scdaemon sends a signal to gpg-agent
running in non-daemon mode.
* dirmngr: Fixed CRL loading under W32 (bug#1010).
Fix bug #1311.
2011-01-10 11:37:57 +01:00
Fix for bug#1313. de.po update.
2011-01-20 15:11:25 +01:00
* Dirmngr has taken over the function of the keyserver helpers. Thus
we now have a specified direct interface to keyservers via Dirmngr.
Support X.509 certificate creation. Using "gpgsm --genkey" allows the creation of a self-signed certificate via a new prompt. Using "gpgsm --genkey --batch" should allow the creation of arbitrary certificates controlled by a parameter file. An example parameter file is Key-Type: RSA Key-Length: 1024 Key-Grip: 2C50DC6101C10C9C643E315FE3EADCCBC24F4BEA Key-Usage: sign, encrypt Serial: random Name-DN: CN=some test key Name-Email: foo@example.org Name-Email: bar@exmaple.org Hash-Algo: SHA384 not-after: 2038-01-16 12:44 This creates a self-signed X.509 certificate using the key given by the keygrip and using SHA-384 as hash algorithm. The keyword signing-key can be used to sign the certificate with a different key. See sm/certreggen.c for details.
2011-03-01 14:42:56 +01:00
LDAP, DNS and mail backends are not yet implemented.
Fix for bug#1313. de.po update.
2011-01-20 15:11:25 +01:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* Fixed TTY management for pinentries and session variable update
problem.
Support X.509 certificate creation. Using "gpgsm --genkey" allows the creation of a self-signed certificate via a new prompt. Using "gpgsm --genkey --batch" should allow the creation of arbitrary certificates controlled by a parameter file. An example parameter file is Key-Type: RSA Key-Length: 1024 Key-Grip: 2C50DC6101C10C9C643E315FE3EADCCBC24F4BEA Key-Usage: sign, encrypt Serial: random Name-DN: CN=some test key Name-Email: foo@example.org Name-Email: bar@exmaple.org Hash-Algo: SHA384 not-after: 2038-01-16 12:44 This creates a self-signed X.509 certificate using the key given by the keygrip and using SHA-384 as hash algorithm. The keyword signing-key can be used to sign the certificate with a different key. See sm/certreggen.c for details.
2011-03-01 14:42:56 +01:00
Honor TMPDIR.
2010-10-27 07:37:52 +00:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
[Noteworthy changes in version 2.1.0beta1 (2010-10-26)]
Post release version bumb
2009-09-04 17:52:40 +00:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* gpg: secring.gpg is not anymore used but all secret key operations
are delegated to gpg-agent. The import command moves secret keys
to the agent.
Keep on hacking on g13. A simple --create and --mount does now work. A hacked up encfs is required.
2009-10-13 19:17:24 +00:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* gpg: The OpenPGP import command is now able to merge secret keys.
More stuff for the audit-log.
2009-12-02 18:33:59 +00:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* gpg: Encrypted OpenPGP messages with trailing data (e.g. other
OpenPGP packets) are now correctly parsed.
More stuff for the audit-log.
2009-12-02 18:33:59 +00:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* gpg: Given sufficient permissions Dirmngr is started automagically.
allow for default algorithms in a gpg parameter file
2009-12-04 19:47:54 +00:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* gpg: Fixed output of "gpgconf --check-options".
More stuff for the audit-log.
2009-12-02 18:33:59 +00:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* gpg: Removed options --export-options(export-secret-subkey-passwd)
and --simple-sk-checksum.
Use ADNS for PKA and SRV records if no other resolver is available.
2009-12-07 15:52:27 +00:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* gpg: New options --try-secret-key.
Add option --cert-extension.
2009-12-10 13:00:30 +00:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* gpg: Support DNS lookups for SRV, PKA and CERT on W32.
Implement dynamic S2K count computation.
2009-12-14 20:12:56 +00:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* gpgsm: The --audit-log feature is now more complete.
First batch of changes to support W32CE. Note that jnlib/w32-reg.c is not yet ready.
2010-02-26 18:44:36 +00:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* gpgsm: The default for --include-cert is now to include all
certificates in the chain except for the root certificate.
Auto starting the agent does now work on CE.
2010-05-04 15:21:47 +00:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* gpgsm: New option --ignore-cert-extension.
Auto-start dirmngr.
2010-08-16 11:03:43 +00:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* g13: The G13 tool for disk encryption key management has been
added.
Merged Dirmngr with GnuPG. A few code changes to support dirmngr.
2010-06-09 16:53:51 +00:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* agent: If the agent's --use-standard-socket option is active, all
tools try to start and daemonize the agent on the fly. In the past
this was only supported on W32; on non-W32 systems the new
configure option --disable-standard-socket may now be used to
disable this new default.
Reworked the posix and w32 exechelpers.
2010-08-20 12:18:38 +00:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* agent: New and changed passphrases are now created with an
iteration count requiring about 100ms of CPU work.
Import OpenPGP keys into the agent.
2010-08-31 15:58:39 +00:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* dirmngr: Dirmngr is now a part of this package. It is now also
expected to run as a system service and the configuration
directories are changed to the GnuPG name space. [Update: 2.1.0
starts dirmngr on demand as user daemon.]
Merge secret keys during import
2010-09-02 15:11:51 +00:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* Support for Windows CE. [Update: This has not been tested for the
2.1.0 release]
Exporting secret keys via gpg-agent is now basically supported. A couple of forward ported changes. Doc updates.
2010-10-01 20:33:53 +00:00
doc: Re-formated some NEWS entries and added update notes to some. --
2014-10-26 20:07:16 +01:00
* Numerical values may now be used as an alternative to the
debug-level keywords.
More agent support for gpg.
2010-10-13 15:57:08 +00:00
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2014q4/000358.html
Post release version bumb
2009-09-04 17:52:40 +00:00
Added release date of older versions to NEWS. --
2015-06-15 14:12:43 +02:00
Version 2.0.28 (2015-06-02)
Version 2.0.27 (2015-02-18)
Version 2.0.26 (2014-08-12)
Version 2.0.25 (2014-06-30)
Version 2.0.24 (2014-06-24)
Version 2.0.23 (2014-06-03)
Version 2.0.22 (2013-10-04)
Version 2.0.21 (2013-08-19)
Version 2.0.20 (2013-05-10)
Version 2.0.19 (2012-03-27)
Version 2.0.18 (2011-08-04)
Version 2.0.17 (2011-01-13)
Version 2.0.16 (2010-07-19)
Version 2.0.15 (2010-03-09)
Version 2.0.14 (2009-12-21)
preparae release
2009-09-04 13:38:16 +00:00
Noteworthy changes in version 2.0.13 (2009-09-04)
Post release updates
2009-06-17 11:57:24 +00:00
-------------------------------------------------
Changed default hash algorithm preferences
2009-07-09 08:52:31 +00:00
* GPG now generates 2048 bit RSA keys by default. The default hash
algorithm preferences has changed to prefer SHA-256 over SHA-1.
2048 bit DSA keys are now generated to use a 256 bit hash algorithm
Reworked passing of envars to Pinentry.
2009-07-07 10:02:41 +00:00
* The envvars XMODIFIERS, GTK_IM_MODULE and QT_IM_MODULE are now
passed to the Pinentry to make SCIM work.
Alow batch ode for gpgsm --gen-key. Allow CSR generation using an existing key with gpgsm.
2009-07-01 18:30:33 +00:00
Changed default hash algorithm preferences
2009-07-09 08:52:31 +00:00
* The GPGSM command --gen-key features a --batch mode and implements
all features of gpgsm-gencert.sh in standard mode.
Post release updates
2009-06-17 11:57:24 +00:00
Changed default hash algorithm preferences
2009-07-09 08:52:31 +00:00
* New option --re-import for GPGSM's IMPORT server command.
Impleemned gpgsm's IMPORT --re-import feature. Typo fix.
2009-07-07 16:52:12 +00:00
Support writing of existing keys with non-matching key sizes.
2009-07-09 14:54:18 +00:00
* Enhanced writing of existing keys to OpenPGP v2 cards.
* Add hack to the internal CCID driver to allow the use of some
Omnikey based card readers with 2048 bit keys.
Ask to insert the right OpenPGP card.
2009-08-11 10:56:44 +00:00
* GPG now repeatly asks the user to insert the requested OpenPGP
card. This can be disabled with --limit-card-insert-tries=1.
Reworked passing of envars to Pinentry.
2009-07-07 10:02:41 +00:00
* Minor bug fixes.
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2009q3/000294.html
Post release updates
2009-06-17 11:57:24 +00:00
Preparing for 2.0.12.
2009-06-17 11:18:26 +00:00
Noteworthy changes in version 2.0.12 (2009-06-17)
New PIN Callback attributes in gpg-agent. Common prompts for keypad and simple card reader. More support for Netkey cards; PIN management works now.
2009-03-05 19:19:37 +00:00
-------------------------------------------------
New gpg-agent command to list key information. Gpgsm does now print the S/N of cards. Consider ephemeral keys during listing an export.
2009-03-06 17:31:27 +00:00
* GPGSM now always lists ephemeral certificates if specified by
fingerprint or keygrip.
* New command "KEYINFO" for GPG_AGENT. GPGSM now also returns
information about smartcards.
Changed order of the confirmation questions for root certificates and stores negative answers in trustlist.txt.
2009-03-19 10:21:51 +00:00
* Made sure not to leak file descriptors if running gpg-agent with a
Preparing for 2.0.12.
2009-06-17 11:18:26 +00:00
command. Restore the signal mask to solve a problem in Mono.
Changed order of the confirmation questions for root certificates and stores negative answers in trustlist.txt.
2009-03-19 10:21:51 +00:00
* Changed order of the confirmation questions for root certificates
Preparing for 2.0.12.
2009-06-17 11:18:26 +00:00
and store negative answers in trustlist.txt.
Make sure not to leak file descriptors if running gpg-agent with a command. Restore the signal mask to solve a problem in Mono.
2009-03-19 07:09:31 +00:00
Improved smartcard robustness.
2009-05-13 17:12:00 +00:00
* Better synchronization of concurrent smartcard sessions.
Better syncronization of several smartcard sessions.
2009-03-24 11:40:57 +00:00
Improved smartcard robustness.
2009-05-13 17:12:00 +00:00
* Support 2048 bit OpenPGP cards.
* Support Telesec Netkey 3 cards.
Signing using Netkey 3 cards does now work.
2009-03-26 19:27:04 +00:00
Import/export of pkcs#12 now uses the gpg-agent directly. Removed duplicated code (percent unescaping).
2009-04-01 10:51:53 +00:00
* The gpg-protect-tool now uses gpg-agent via libassuan. Under
Windows the Pinentry will now be put into the foreground.
Fix possible system freeze on Mac OS X.
2009-05-19 22:39:45 +00:00
* Changed code to avoid a possible Mac OS X system freeze.
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2009q2/000288.html
New PIN Callback attributes in gpg-agent. Common prompts for keypad and simple card reader. More support for Netkey cards; PIN management works now.
2009-03-05 19:19:37 +00:00
Add --reload command to gpgconf. Fix a problem in exechelp.c Get ready for a release.
2009-03-03 09:02:58 +00:00
Noteworthy changes in version 2.0.11 (2009-03-03)
Post release updates
2009-01-12 10:56:52 +00:00
-------------------------------------------------
Fix a gpg2 problem with removed cards. Allow runtime conf change for scdaemon. New commands for scdaemon.
2009-02-27 14:36:59 +00:00
* Fixed a problem in SCDAEMON which caused unexpected card resets.
Change default gpgsm cipher back to 3DES. Typo fixes.
2009-02-09 10:25:41 +00:00
* SCDAEMON is now aware of the Geldkarte.
Fix a gpg2 problem with removed cards. Allow runtime conf change for scdaemon. New commands for scdaemon.
2009-02-27 14:36:59 +00:00
* The SCDAEMON option --allow-admin is now used by default.
Add --reload command to gpgconf. Fix a problem in exechelp.c Get ready for a release.
2009-03-03 09:02:58 +00:00
* GPGCONF now restarts SCdaemon if necessary.
New scd getinfo subcommand deny_admin
2009-02-12 17:45:40 +00:00
* The default cipher algorithm in GPGSM is now again 3DES. This is
due to interoperability problems with Outlook 2003 which still
can't cope with AES.
Make --allow-admin the default.
2009-01-28 14:18:40 +00:00
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2009q1/000287.html
Post release updates
2009-01-12 10:56:52 +00:00
preparing a release
2009-01-12 09:18:27 +00:00
Noteworthy changes in version 2.0.10 (2009-01-12)
Post release update
2008-03-26 11:01:06 +00:00
-------------------------------------------------
Check that the socket is well and served by us.
2008-10-29 17:24:27 +00:00
* [gpg] New keyserver helper gpg2keys_kdns as generic DNS CERT
lookup. Run with --help for a short description. Requires the
ADNS library.
Enhanced --auto-key-locate.
2008-04-08 11:04:16 +00:00
Finished support for v2 cards with the exception of secure messaging.
2008-09-25 10:06:02 +00:00
* [gpg] New mechanisms "local" and "nodefault" for --auto-key-locate.
Enhanced --auto-key-locate.
2008-04-08 11:04:16 +00:00
Fixed a few problems with this option.
Post release update
2008-03-26 11:01:06 +00:00
Finished support for v2 cards with the exception of secure messaging.
2008-09-25 10:06:02 +00:00
* [gpg] New command --locate-keys.
Add command --locate-key. Fix auto-key-locate processing of "nodefault".
2008-05-07 15:40:36 +00:00
Finished support for v2 cards with the exception of secure messaging.
2008-09-25 10:06:02 +00:00
* [gpg] New options --with-sig-list and --with-sig-check.
Add command --locate-key. Fix auto-key-locate processing of "nodefault".
2008-05-07 15:40:36 +00:00
Remove hacks which are not anymore needed since we now require Libgcrypt 1.4
2008-09-29 15:02:55 +00:00
* [gpg] The option "-sat" is no longer an alias for --clearsign.
Finished support for v2 cards with the exception of secure messaging.
2008-09-25 10:06:02 +00:00
* [gpg] The option --fixed-list-mode is now implicitly used and obsolete.
Made --fixed-list-mode obsolete.
2008-06-11 08:07:54 +00:00
Finished support for v2 cards with the exception of secure messaging.
2008-09-25 10:06:02 +00:00
* [gpg] New control statement %ask-passphrase for the unattended key
generation.
Add controlo statement %ask-passphrase
2008-06-16 15:48:33 +00:00
Make gpg not depend on the RIPE-MD160 implementaion in Libgcrypt. Fix SIG_ID computation.
2008-12-11 17:44:52 +00:00
* [gpg] The algorithm to compute the SIG_ID status has been changed.
Check that the socket is well and served by us.
2008-10-29 17:24:27 +00:00
* [gpgsm] Now uses AES by default.
Start support of TCOS 3 cards. Support restriction attribute. Fix utf-8 printing problems. Use AES by default.
2008-06-26 19:09:07 +00:00
Check that the socket is well and served by us.
2008-10-29 17:24:27 +00:00
* [gpgsm] Made --output option work with --export-secret-key-p12.
* [gpg-agent] Terminate process if the own listening socket is not
anymore served by ourself.
* [scdaemon] Made it more robust on W32.
* [gpg-connect-agent] Accept commands given as command line arguments.
* [w32] Initialized the socket subsystem for all keyserver helpers.
* [w32] The sysconf directory has been moved from a subdirectory of
the installation directory to %CSIDL_COMMON_APPDATA%/GNU/etc/gnupg.
Minor cleanups.
2008-11-11 08:22:06 +00:00
* [w32] The gnupg2.nls directory is not anymore used. The standard
Finished ECC integration. Wrote the ChangeLog 2011-01-13 entry for Andrey's orginal work modulo the cleanups I did in the last week. Adjusted my own ChangeLog entries to be consistent with that entry. Nuked quite some trailing spaces; again sorry for that, I will better take care of not saving them in the future. "git diff -b" is useful to read the actual changes ;-). The ECC-INTEGRATION-2-1 branch can be closed now.
2011-02-03 16:31:42 +01:00
locale directory is now used.
Minor cleanups.
2008-11-11 08:22:06 +00:00
Post release updates
2009-01-12 10:56:52 +00:00
* [w32] Fixed a race condition between gpg and gpgsm in the use of
Fixed a temporary file name collision between gpg and gpgsm under Windows.
2008-11-20 16:26:40 +00:00
temporary file names.
Minor fixes.
2008-12-09 08:58:02 +00:00
* The gpg-preset-passphrase mechanism works again. An arbitrary
string may now be used for a custom cache ID.
Fix gpg-preset-passphrase bug. Cleanups
2008-09-03 09:37:32 +00:00
Finished support for v2 cards with the exception of secure messaging.
2008-09-25 10:06:02 +00:00
* Admin PINs are cached again (bug in 2.0.9).
* Support for version 2 OpenPGP cards.
Remove hacks which are not anymore needed since we now require Libgcrypt 1.4
2008-09-29 15:02:55 +00:00
* Libgcrypt 1.4 is now required.
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2009q1/000284.html
Post release update
2008-03-26 11:01:06 +00:00
Preparing a release.
2008-03-26 09:20:40 +00:00
Noteworthy changes in version 2.0.9 (2008-03-26)
Typo fixes. Portability fix for asschk.c
2008-01-26 22:12:23 +00:00
------------------------------------------------
Always search missing certifcates using a running Dirmngr's cache.
2008-02-13 16:47:14 +00:00
* Gpgsm always tries to locate missing certificates from a running
Dirmngr's cache.
Improve certificate chain construction. Extend PKITS framework
2008-02-19 10:33:35 +00:00
* Tweaks for Windows.
Preparing a release.
2008-03-26 09:20:40 +00:00
* The Admin PIN for OpenPGP cards may now be entered with the pinpad.
Improve certificate chain construction. Extend PKITS framework
2008-02-19 10:33:35 +00:00
* Improved certificate chain construction.
Preparing a test release
2008-02-15 09:58:01 +00:00
Improve certificate chain construction. Extend PKITS framework
2008-02-19 10:33:35 +00:00
* Extended the PKITS framework.
Fix a bug in the ambigious name detection. Minor cleanups.
2008-03-20 15:31:43 +00:00
* Fixed a bug in the ambigious name detection.
Changed the way i18n files are located under Windows. The setting of the Registry key is not anymore required. Helpfiles are not properly located.
2008-03-25 19:41:11 +00:00
* Fixed possible memory corruption while importing OpenPGP keys (bug
Add CVE number.
2008-03-28 09:21:59 +00:00
introduced with 2.0.8). [CVE-2008-1530]
Fix bug 894. Change default keyserver. Allow key protection with Camellia.
2008-03-25 08:33:31 +00:00
Improve certificate chain construction. Extend PKITS framework
2008-02-19 10:33:35 +00:00
* Minor bug fixes.
Preparing a test release
2008-02-15 09:58:01 +00:00
Typo fixes. Portability fix for asschk.c
2008-01-26 22:12:23 +00:00
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
Preparing a release.
2007-12-20 08:52:40 +00:00
Noteworthy changes in version 2.0.8 (2007-12-20)
post release version bump
2007-09-10 16:38:04 +00:00
------------------------------------------------
Enhanced gpg-conect-agent scripting. Typo fixes in comments.
2007-10-19 14:51:39 +00:00
* Enhanced gpg-connect-agent with a small scripting language.
New option --list-config for gpgconf.
2007-10-23 18:13:27 +00:00
* New option --list-config for gpgconf.
Preparing a release.
2007-12-20 08:52:40 +00:00
* Fixed a crash in gpgconf.
Started to implement the audit log feature. Pass PINENTRY_USER_DATA and XAUTHORITY to Pinentry. Improved support for the quality bar. Minor internal restructuring. Translation fixes.
2007-11-19 16:03:50 +00:00
Preparing a release.
2007-12-20 08:52:40 +00:00
* Gpg-agent now supports the passphrase quality bar of the latest
Pinentry.
* The envvars XAUTHORITY and PINENTRY_USER_DATA are now passed to the
Pinentry.
Support DSA2. Support Camellia for testing. More audit stuff.
2007-12-12 10:28:30 +00:00
Finished ECC integration. Wrote the ChangeLog 2011-01-13 entry for Andrey's orginal work modulo the cleanups I did in the last week. Adjusted my own ChangeLog entries to be consistent with that entry. Nuked quite some trailing spaces; again sorry for that, I will better take care of not saving them in the future. "git diff -b" is useful to read the actual changes ;-). The ECC-INTEGRATION-2-1 branch can be closed now.
2011-02-03 16:31:42 +01:00
* Fixed the auto creation of the key stub for smartcards.
Support DSA2. Support Camellia for testing. More audit stuff.
2007-12-12 10:28:30 +00:00
* Fixed a rare bug in decryption using the OpenPGP card.
* Creating DSA2 keys is now possible.
Allow verification of some broken S-TRUST generated signatures.
2007-12-13 15:45:40 +00:00
* New option --extra-digest-algo for gpgsm to allow verification of
broken signatures.
Preparing a release.
2007-12-20 08:52:40 +00:00
* Allow encryption with legacy Elgamal sign+encrypt keys with option
--rfc2440.
* Windows is now a supported platform.
* Made sure that under Windows the file permissions of the socket are
taken into account. This required a change of our socket emulation
code and changed the IPC protocol under Windows.
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2007q4/000267.html
post release version bump
2007-09-10 16:38:04 +00:00
Preparing 2.0.7
2007-09-10 15:40:29 +00:00
Noteworthy changes in version 2.0.7 (2007-09-10)
Post release version number bump
2007-08-16 10:57:35 +00:00
------------------------------------------------
tryu harder to ignore duplicate specified keyrings and -boxes. Documentation updates.
2007-08-24 09:34:39 +00:00
* Fixed encryption problem if duplicate certificates are in the
keybox.
Implemented more gpg-agen options to support certain passphrase policies. New tool gpg-check-pattern.
2007-08-27 18:10:27 +00:00
* Made it work on Windows Vista. Note that the entire Windows port
is still considered Beta.
Add more passphrase policy rules. (--max-passphrase-days).
2007-08-28 17:48:13 +00:00
* Add new options min-passphrase-nonalpha, check-passphrase-pattern,
enforce-passphrase-constraints and max-passphrase-days to
gpg-agent.
tryu harder to ignore duplicate specified keyrings and -boxes. Documentation updates.
2007-08-24 09:34:39 +00:00
New command --check-programs for gpgconf.
2007-08-29 09:51:37 +00:00
* Add command --check-components to gpgconf. Gpgconf now uses the
installed versions of the programs and does not anymore search via
PATH for them.
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2007q3/000259.html
Post release version number bump
2007-08-16 10:57:35 +00:00
About to do a release
2007-08-16 10:42:06 +00:00
Noteworthy changes in version 2.0.6 (2007-08-16)
Post release updates
2007-07-05 20:29:14 +00:00
------------------------------------------------
Implemented the chain model for X.509 validation.
2007-08-10 16:52:05 +00:00
* GPGSM does now grok --default-key.
Finished ECC integration. Wrote the ChangeLog 2011-01-13 entry for Andrey's orginal work modulo the cleanups I did in the last week. Adjusted my own ChangeLog entries to be consistent with that entry. Nuked quite some trailing spaces; again sorry for that, I will better take care of not saving them in the future. "git diff -b" is useful to read the actual changes ;-). The ECC-INTEGRATION-2-1 branch can be closed now.
2011-02-03 16:31:42 +01:00
* GPGCONF is now aware of --default-key and --encrypt-to.
Typo fixes. Made --default-key work for gpgsm Add --default-key and --encrypt-to to gpgconf.
2007-07-17 18:11:24 +00:00
Implemented the chain model for X.509 validation.
2007-08-10 16:52:05 +00:00
* GPGSM does again correctly print the serial number as well the the
various keyids. This was broken since 2.0.4.
Post release updates
2007-07-05 20:29:14 +00:00
Documentaion updates. Support doe Dirmngr under W32. Fixed a yat2m bug.
2007-08-14 16:50:27 +00:00
* New option --validation-model and support for the chain-model.
About to do a release
2007-08-16 10:42:06 +00:00
* Improved Windows support.
Documentaion updates. Support doe Dirmngr under W32. Fixed a yat2m bug.
2007-08-14 16:50:27 +00:00
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2007q3/000258.html
Finished ECC integration. Wrote the ChangeLog 2011-01-13 entry for Andrey's orginal work modulo the cleanups I did in the last week. Adjusted my own ChangeLog entries to be consistent with that entry. Nuked quite some trailing spaces; again sorry for that, I will better take care of not saving them in the future. "git diff -b" is useful to read the actual changes ;-). The ECC-INTEGRATION-2-1 branch can be closed now.
2011-02-03 16:31:42 +01:00
Prearing a release
2007-07-05 18:59:50 +00:00
Noteworthy changes in version 2.0.5 (2007-07-05)
Use estream_asprintf instead of the GNU asprintf.
2007-05-15 16:10:48 +00:00
------------------------------------------------
Changed to GPLv3. Removed intl/.
2007-07-04 19:49:40 +00:00
* Switched license to GPLv3.
* Basic support for Windows. Run "./autogen.sh --build-w32" to build
it. As usual the mingw cross compiling toolchain is required.
Print passphrase encoding info only in PEM mode.
2007-05-29 20:11:17 +00:00
Changed to GPLv3. Removed intl/.
2007-07-04 19:49:40 +00:00
* Fixed bug when using the --p12-charset without --armor.
A whole bunch of changes to allow building for Windows. See the ChangeLogs for details.
2007-06-14 17:05:07 +00:00
Implemented the --gen-key command as we can't use the gpgsm-gencert.sh under Windows.
2007-06-21 18:44:48 +00:00
* The command --gen-key may now be used instead of the
gpgsm-gencert.sh script.
Fixed card key generation of gpg2. Reveal less information about timings while generating a key.
2007-07-05 16:58:19 +00:00
* Changed key generation to reveal less information about the
machine. Bug fixes for gpg2's card key generation.
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2007q3/000255.html
Use estream_asprintf instead of the GNU asprintf.
2007-05-15 16:10:48 +00:00
Preparing 2.0.4
2007-05-09 11:01:33 +00:00
Noteworthy changes in version 2.0.4 (2007-05-09)
Post release version number bump
2007-03-08 14:54:33 +00:00
------------------------------------------------
Preparing 2.0.4
2007-05-09 11:01:33 +00:00
* The server mode key listing commands are now also working for
systems without the funopen/fopencookie API.
Changes to let the key listing use estream to help systems without funopen.
2007-03-19 14:35:04 +00:00
* PKCS#12 import now tries several encodings in case the passphrase was not utf-8 encoded.
2007-03-19 18:54:34 +00:00
* PKCS#12 import now tries several encodings in case the passphrase
Allow setting of the passphrase encoding of pkcs#12 files. New option --p12-charset.
2007-03-20 10:00:55 +00:00
was not utf-8 encoded. New option --p12-charset for gpgsm.
* PKCS#12 import now tries several encodings in case the passphrase was not utf-8 encoded.
2007-03-19 18:54:34 +00:00
Improved logging for error orginating from libgcrypt.
2007-04-20 16:59:37 +00:00
* Improved the libgcrypt logging support in all modules.
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2007q2/000254.html
Post release version number bump
2007-03-08 14:54:33 +00:00
Preparing the 2.0.3 release
2007-03-08 14:16:15 +00:00
Noteworthy changes in version 2.0.3 (2007-03-08)
Add new SVN only file README.maint doc/ * gpg.texi (GPG Configuration): Document envvar LANGUAGE. (GPG Configuration Options): Document show-primary-uid-only. g10/ * gpg.c (main): Add verify option show-primary-uid-only. * options.h (VERIFY_SHOW_PRIMARY_UID_ONLY): New. * mainproc.c (check_sig_and_print): Implement it. * encr-data.c (decrypt_data): Correctly test for unknown algorithm. * import.c (check_prefs): Ditto. * keyedit.c (show_prefs): Ditto. * mainproc.c (proc_symkey_enc): Ditto.
2007-02-26 20:24:29 +00:00
------------------------------------------------
Ported multiple-messages protection.
2007-03-05 14:56:31 +00:00
* By default, do not allow processing multiple plaintexts in a single
stream. Many programs that called GnuPG were assuming that GnuPG
did not permit this, and were thus not using the plaintext boundary
status tags that GnuPG provides. This change makes GnuPG reject
such messages by default which makes those programs safe again.
Changes to let the key listing use estream to help systems without funopen.
2007-03-19 14:35:04 +00:00
--allow-multiple-messages returns to the old behavior. [CVE-2007-1263].
Ported multiple-messages protection.
2007-03-05 14:56:31 +00:00
Finished ECC integration. Wrote the ChangeLog 2011-01-13 entry for Andrey's orginal work modulo the cleanups I did in the last week. Adjusted my own ChangeLog entries to be consistent with that entry. Nuked quite some trailing spaces; again sorry for that, I will better take care of not saving them in the future. "git diff -b" is useful to read the actual changes ;-). The ECC-INTEGRATION-2-1 branch can be closed now.
2011-02-03 16:31:42 +01:00
* New --verify-option show-primary-uid-only.
Add new SVN only file README.maint doc/ * gpg.texi (GPG Configuration): Document envvar LANGUAGE. (GPG Configuration Options): Document show-primary-uid-only. g10/ * gpg.c (main): Add verify option show-primary-uid-only. * options.h (VERIFY_SHOW_PRIMARY_UID_ONLY): New. * mainproc.c (check_sig_and_print): Implement it. * encr-data.c (decrypt_data): Correctly test for unknown algorithm. * import.c (check_prefs): Ditto. * keyedit.c (show_prefs): Ditto. * mainproc.c (proc_symkey_enc): Ditto.
2007-02-26 20:24:29 +00:00
Preparing the 2.0.3 release
2007-03-08 14:16:15 +00:00
* gpgconf may now reads a global configuration file to select which
The Cherry XX44 keyboard's PINpad does now work. DINSIG and NKS card applications are now also PIN pad aware.
2007-03-07 20:55:14 +00:00
options are changeable by a frontend. The new applygnupgdefaults
tool may be used by an admin to set default options for all users.
* The PIN pad of the Cherry XX44 keyboard is now supported. The
DINSIG and the NKS applications are now also aware of PIN pads.
Support for a global gpgconf configuration file.
2007-03-06 20:44:41 +00:00
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2007q1/000252.html
Add new SVN only file README.maint doc/ * gpg.texi (GPG Configuration): Document envvar LANGUAGE. (GPG Configuration Options): Document show-primary-uid-only. g10/ * gpg.c (main): Add verify option show-primary-uid-only. * options.h (VERIFY_SHOW_PRIMARY_UID_ONLY): New. * mainproc.c (check_sig_and_print): Implement it. * encr-data.c (decrypt_data): Correctly test for unknown algorithm. * import.c (check_prefs): Ditto. * keyedit.c (show_prefs): Ditto. * mainproc.c (proc_symkey_enc): Ditto.
2007-02-26 20:24:29 +00:00
Included LIBICONV in all Makefiles. g10/ * passphrase.c (passphrase_get): Set the cancel flag on all error from the agent. Fixes a bug reported by Tom Duerbusch. sm/ * gpgsm.c (main): Let --gen-key print a more informative error message.
2007-01-31 14:24:41 +00:00
Noteworthy changes in version 2.0.2 (2007-01-31)
Fixes for CVE-2006-6235
2006-12-06 10:16:50 +00:00
------------------------------------------------
* Fixed a serious and exploitable bug in processing encrypted
packages. [CVE-2006-6235].
* Added --passphrase-repeat to set the number of times GPG will
prompt for a new passphrase to be repeated. This is useful to help
memorize a new passphrase. The default is 1 repetition.
Included LIBICONV in all Makefiles. g10/ * passphrase.c (passphrase_get): Set the cancel flag on all error from the agent. Fixes a bug reported by Tom Duerbusch. sm/ * gpgsm.c (main): Let --gen-key print a more informative error message.
2007-01-31 14:24:41 +00:00
* Using a PIN pad does now also work for the signing key.
agent/ * protect-tool.c (get_passphrase): New arg OPT_CHECK. (get_new_passphrase): Enable OTP_CHECK on the first call. * command.c (cmd_get_passphrase): Implement option --check. * gpg-agent.c (MIN_PASSPHRASE_LEN): New (parse_rereadable_options): New option --min-passphrase-len. * genkey.c (check_passphrase_constraints): New. (agent_genkey, agent_protect_and_store): Call new function. Fix memory leak. * call-pinentry.c (agent_askpin): Allow translation of the displayed error message. (agent_popup_message_start): Remove arg CANCEL_BTN. (popup_message_thread): Use --one-button option. * command.c (cmd_passwd): Now that we don't distinguish between assuan and regular error codes we can jump to the end on error. common/ * simple-pwquery.c (simple_pwquery): New arg OPT_CHECK.
2007-01-25 08:30:47 +00:00
doc/ * gpg.texi (GPG Esoteric Options): No card reader options for gpg2. scd/ * scdaemon.c (DEFAULT_PCSC_DRIVER): Add a default for OS X.
2007-02-18 13:48:03 +00:00
* A warning is displayed by gpg-agent if a new passphrase is too
Included LIBICONV in all Makefiles. g10/ * passphrase.c (passphrase_get): Set the cancel flag on all error from the agent. Fixes a bug reported by Tom Duerbusch. sm/ * gpgsm.c (main): Let --gen-key print a more informative error message.
2007-01-31 14:24:41 +00:00
short. New option --min-passphrase-len defaults to 8.
agent/ * protect-tool.c (get_passphrase): New arg OPT_CHECK. (get_new_passphrase): Enable OTP_CHECK on the first call. * command.c (cmd_get_passphrase): Implement option --check. * gpg-agent.c (MIN_PASSPHRASE_LEN): New (parse_rereadable_options): New option --min-passphrase-len. * genkey.c (check_passphrase_constraints): New. (agent_genkey, agent_protect_and_store): Call new function. Fix memory leak. * call-pinentry.c (agent_askpin): Allow translation of the displayed error message. (agent_popup_message_start): Remove arg CANCEL_BTN. (popup_message_thread): Use --one-button option. * command.c (cmd_passwd): Now that we don't distinguish between assuan and regular error codes we can jump to the end on error. common/ * simple-pwquery.c (simple_pwquery): New arg OPT_CHECK.
2007-01-25 08:30:47 +00:00
Included LIBICONV in all Makefiles. g10/ * passphrase.c (passphrase_get): Set the cancel flag on all error from the agent. Fixes a bug reported by Tom Duerbusch. sm/ * gpgsm.c (main): Let --gen-key print a more informative error message.
2007-01-31 14:24:41 +00:00
* The status code BEGIN_SIGNING now shows the used hash algorithms.
Add new SVN only file README.maint doc/ * gpg.texi (GPG Configuration): Document envvar LANGUAGE. (GPG Configuration Options): Document show-primary-uid-only. g10/ * gpg.c (main): Add verify option show-primary-uid-only. * options.h (VERIFY_SHOW_PRIMARY_UID_ONLY): New. * mainproc.c (check_sig_and_print): Implement it. * encr-data.c (decrypt_data): Correctly test for unknown algorithm. * import.c (check_prefs): Ditto. * keyedit.c (show_prefs): Ditto. * mainproc.c (proc_symkey_enc): Ditto.
2007-02-26 20:24:29 +00:00
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2007q1/000249.html
Fixes for CVE-2006-6235
2006-12-06 10:16:50 +00:00
Preparing 2.0.1
2006-11-28 16:36:02 +00:00
Noteworthy changes in version 2.0.1 (2006-11-28)
------------------------------------------------
Post release update
2006-11-11 14:41:22 +00:00
Made some PIN pads work. Some cleanups for 64 bit CPUs.
2006-11-20 16:49:41 +00:00
* Experimental support for the PIN pads of the SPR 532 and the Kaan
Advanced card readers. Add "disable-keypad" scdaemon.conf if you
don't want it. Does currently only work for the OpenPGP card and
Preparing 2.0.1
2006-11-28 16:36:02 +00:00
its authentication and decrypt keys.
Made some PIN pads work. Some cleanups for 64 bit CPUs.
2006-11-20 16:49:41 +00:00
Preparing 2.0.1rc1
2006-11-23 09:53:17 +00:00
* Fixed build problems on some some platforms and crashes on amd64.
Fixes for CVE-2006-6235
2006-12-06 10:16:50 +00:00
* Fixed a buffer overflow in gpg2. [bug#728,CVE-2006-6169]
Preparing 2.0.1
2006-11-28 16:36:02 +00:00
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2006q4/000242.html
Post release update
2006-11-11 14:41:22 +00:00
.
2006-11-11 14:17:09 +00:00
Noteworthy changes in version 2.0.0 (2006-11-11)
Preparing 2.0.1
2006-11-28 16:36:02 +00:00
------------------------------------------------
post release updates
2006-11-06 10:26:55 +00:00
* First stable version of a GnuPG integrating OpenPGP and S/MIME.
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2006q4/000239.html
post release updates
2006-11-06 10:26:55 +00:00
Preparing another release
2006-11-06 09:44:28 +00:00
Noteworthy changes in version 1.9.95 (2006-11-06)
Post release update
2006-10-24 15:01:23 +00:00
-------------------------------------------------
Preparing another release
2006-11-06 09:44:28 +00:00
* Minor bug fixes.
Post release update
2006-10-24 15:01:23 +00:00
Preparing another release
2006-10-24 14:45:34 +00:00
Noteworthy changes in version 1.9.94 (2006-10-24)
Fixes
2006-10-19 14:22:06 +00:00
-------------------------------------------------
Allow to select X.509 certificates using the keygrip.
2006-10-20 11:38:48 +00:00
* Keys for gpgsm may now be specified using a keygrip. A keygrip is
indicated by a prefixing it with an ampersand.
.
2006-10-23 14:02:13 +00:00
* gpgconf now supports switching the CMS cipher algo (e.g. to AES).
* New command --gpgconf-test for all major tools. This may be used to
check whether the configuration file is sane.
Fixes
2006-10-19 14:22:06 +00:00
Preparing a release
2006-10-18 17:19:08 +00:00
Noteworthy changes in version 1.9.93 (2006-10-18)
Allow pkcs#10 creation directkly from a smart card
2006-10-11 17:52:15 +00:00
-------------------------------------------------
Pth tweaks and improved estream.c
2006-10-17 14:34:42 +00:00
* In --with-validation mode gpgsm will now also ask whether a root
certificate should be trusted.
* Link to Pth only if really necessary.
Preparing a release
2006-10-18 17:19:08 +00:00
* Fixed a pubring corruption bug in gpg2 occurring when importing
signatures or keys with insane lengths.
* Fixed v3 keyID calculation bug in gpg2.
* More tweaks for certificates without extensions.
Allow pkcs#10 creation directkly from a smart card
2006-10-11 17:52:15 +00:00
Preparing a release
2006-10-11 10:05:03 +00:00
Noteworthy changes in version 1.9.92 (2006-10-11)
bug fixes
2006-10-05 11:06:42 +00:00
-------------------------------------------------
Preparing a release
2006-10-11 10:05:03 +00:00
* Bug fixes.
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2006q4/000236.html
bug fixes
2006-10-05 11:06:42 +00:00
Preparing a new release
2006-10-04 10:22:56 +00:00
Noteworthy changes in version 1.9.91 (2006-10-04)
New "relax" option for trustlist.txt
2006-09-25 18:29:20 +00:00
-------------------------------------------------
Finished implementation of the "relax" flag.
2006-09-26 10:00:12 +00:00
* New "relax" flag for trustlist.txt to allow root CA certificates
without BasicContraints.
Preparing a new release
2006-10-04 10:22:56 +00:00
* [gpg2] Removed the -k PGP 2 compatibility hack. -k is now an
alias for --list-keys.
* [gpg2] Print a warning if "-sat" is used instead of "--clearsign".
New "relax" option for trustlist.txt
2006-09-25 18:29:20 +00:00
Preparing a new release
2006-09-25 07:59:34 +00:00
Noteworthy changes in version 1.9.90 (2006-09-25)
Post release updates
2006-09-18 14:08:27 +00:00
-------------------------------------------------
Added iconv support and doc cleanups.
2006-09-22 18:15:18 +00:00
* Made readline work for gpg.
* Cleanups und minor bug fixes.
Post release updates
2006-09-18 14:08:27 +00:00
Preparing a new release
2006-09-25 07:59:34 +00:00
* Included translations from gnupg 1.4.5.
Post release updates
2006-09-18 14:08:27 +00:00
Ready for another release
2006-09-18 13:23:18 +00:00
Noteworthy changes in version 1.9.23 (2006-09-18)
post release preparations
2006-07-27 14:45:11 +00:00
-------------------------------------------------
Various fixes and new features. Enhanced gpg-connect-agent.
2006-09-13 15:57:30 +00:00
* Regular man pages for most tools are now build directly from the
Take advantage of newer gpg-error features.
2006-09-14 16:50:33 +00:00
Texinfo source.
More man pages. Added include files for 2 common paragraphs.
2006-08-18 13:05:39 +00:00
* The gpg code from 1.4.5 has been fully merged into this release.
The configure option --enable-gpg is still required to build this
gpg part. For production use of OpenPGP the gpg version 1.4.5 is
Ready for another release
2006-09-18 13:23:18 +00:00
still recommended. Note, that gpg will be installed under the name
gpg2 to allow coexisting with an 1.4.x gpg.
post release preparations
2006-07-27 14:45:11 +00:00
See ChangeLogs
2006-08-29 16:18:30 +00:00
* API change in gpg-agent's pkdecrypt command. Thus an older gpgsm
may not be used with the current gpg-agent.
Let scdaemon call a script on status changes
2006-09-07 15:13:33 +00:00
* The scdaemon will now call a script on reader status changes.
Various fixes and new features. Enhanced gpg-connect-agent.
2006-09-13 15:57:30 +00:00
* gpgsm now allows file descriptor passing for "INPUT", "OUTPUT" and
"MESSAGE".
* The gpgsm server may now output a key listing to the output file
handle. This needs to be enabled using "OPTION list-to-output=1".
* The --output option of gpgsm has now an effect on list-keys.
* New gpgsm commands --dump-chain and list-chain.
* gpg-connect-agent has new options to utilize descriptor passing.
Allow for a global trustlist.
2006-09-15 18:53:37 +00:00
* A global trustlist may now be used. See doc/examples/trustlist.txt.
Added common certificates.
2006-09-18 09:28:58 +00:00
* When creating a new pubring.kbx keybox common certificates are
imported.
post release preparations
2006-07-27 14:45:11 +00:00
Preparing a new release
2006-07-27 14:18:55 +00:00
Noteworthy changes in version 1.9.22 (2006-07-27)
Various smaller changes
2006-06-27 14:32:34 +00:00
-------------------------------------------------
Support import from TrustedMIME (i.e. from simple keyBags)
2006-07-21 09:41:11 +00:00
* Enhanced pkcs#12 support to allow import from simple keyBags.
Create bag attributes so that Mozilla will accept these files. Tested with using a CAcert generated certificate.
2006-07-24 11:20:33 +00:00
* Exporting to pkcs#12 now create bag attributes so that Mozilla is
able to import the files.
Preparing a new release
2006-07-27 14:18:55 +00:00
* Fixed uploading of certain keys to the smart card.
Various smaller changes
2006-06-27 14:32:34 +00:00
Preparing a new release
2006-06-20 18:52:43 +00:00
Noteworthy changes in version 1.9.21 (2006-06-20)
post release preparations
2005-12-20 11:12:16 +00:00
-------------------------------------------------
Preparing a new release
2006-06-20 18:52:43 +00:00
* New command APDU for scdaemon to allow using it for general card
access. Might be used through gpg-connect-agent by using the SCD
prefix command.
Merged with gpg 1.4.3 code. The gpg part does not yet build.
2006-04-19 11:26:11 +00:00
Preparing a new release
2006-06-20 18:52:43 +00:00
* Support for the CardMan 4040 PCMCIA reader (Linux 2.6.15 required).
post release preparations
2005-12-20 11:12:16 +00:00
Finished ECC integration. Wrote the ChangeLog 2011-01-13 entry for Andrey's orginal work modulo the cleanups I did in the last week. Adjusted my own ChangeLog entries to be consistent with that entry. Nuked quite some trailing spaces; again sorry for that, I will better take care of not saving them in the future. "git diff -b" is useful to read the actual changes ;-). The ECC-INTEGRATION-2-1 branch can be closed now.
2011-02-03 16:31:42 +01:00
* Scdaemon does not anymore reset cards at the end of a connection.
.
2006-02-06 18:31:27 +00:00
Preparing a new release
2006-06-20 18:52:43 +00:00
* Kludge to allow use of Bundesnetzagentur issued X.509 certificates.
PIN caching of cards does now work.
2006-02-09 18:29:31 +00:00
Preparing a new release
2006-06-20 18:52:43 +00:00
* Added --hash=xxx option to scdaemon's PKSIGN command.
Add Kludge for RegTP sillyness.
2006-03-21 09:56:47 +00:00
Preparing a new release
2006-06-20 18:52:43 +00:00
* Pkcs#12 files are now created with a MAC. This is for better
interoperability.
Allo RMD160 signatures
2006-03-21 12:48:51 +00:00
Preparing a new release
2006-06-20 18:52:43 +00:00
* Collected bug fixes and minor other changes.
Updated FSF's address.
2006-06-20 17:21:37 +00:00
post release preparations
2005-12-20 11:12:16 +00:00
Preparing a released
2005-12-20 10:26:32 +00:00
Noteworthy changes in version 1.9.20 (2005-12-20)
Preparing an interim release
2005-11-28 11:52:25 +00:00
-------------------------------------------------
Fixed importing certs created by newer versions of Mozilla.
2005-12-16 15:52:48 +00:00
* Importing pkcs#12 files created be recent versions of Mozilla works
again.
Preparing a released
2005-12-20 10:26:32 +00:00
* Basic support for qualified signatures.
Finished ECC integration. Wrote the ChangeLog 2011-01-13 entry for Andrey's orginal work modulo the cleanups I did in the last week. Adjusted my own ChangeLog entries to be consistent with that entry. Nuked quite some trailing spaces; again sorry for that, I will better take care of not saving them in the future. "git diff -b" is useful to read the actual changes ;-). The ECC-INTEGRATION-2-1 branch can be closed now.
2011-02-03 16:31:42 +01:00
* New debug tool gpgparsemail.
Preparing a released
2005-12-20 10:26:32 +00:00
Preparing an interim release
2005-11-28 11:52:25 +00:00
About to release 1.9.19
2005-09-12 08:23:33 +00:00
Noteworthy changes in version 1.9.19 (2005-09-12)
Use a default argument for --write-env-file.
2005-08-16 09:15:09 +00:00
-------------------------------------------------
Bug fixes and ssh support for the BELPIC.
2005-09-09 11:18:08 +00:00
* The Belgian eID card is now supported for signatures and ssh.
About to release 1.9.19
2005-09-12 08:23:33 +00:00
Other pkcs#15 cards should work as well.
The BELPIC card does now work.
2005-09-06 18:42:13 +00:00
Bug fixes and ssh support for the BELPIC.
2005-09-09 11:18:08 +00:00
* Fixed bug in --export-secret-key-p12 so that certificates are again
included.
Use a default argument for --write-env-file.
2005-08-16 09:15:09 +00:00
About to release 1.9.19
2005-09-12 08:23:33 +00:00
About to release 1.9.18
2005-08-01 16:54:54 +00:00
Noteworthy changes in version 1.9.18 (2005-08-01)
post release version number update
2005-06-20 17:52:13 +00:00
-------------------------------------------------
* findkey.c (agent_public_key_from_file): Fixed array assignment. This was the cause for random segvs. * call-agent.c (gpgsm_agent_readkey): New.
2005-07-25 14:35:04 +00:00
* [gpgsm] Now allows for more than one email address as well as URIs
and dnsNames in certificate request generation. A keygrip may be
given to create a request from an existing key.
About to release 1.9.18
2005-08-01 16:54:54 +00:00
* A couple of minor bug fixes.
post release version number update
2005-06-20 17:52:13 +00:00
Preparing 1.9.17
2005-06-20 17:32:44 +00:00
Noteworthy changes in version 1.9.17 (2005-06-20)
post release version number update
2005-04-21 14:59:18 +00:00
-------------------------------------------------
* call-scd.c (start_scd): Don't test for an alive scdaemon here. (agent_scd_check_aliveness): New. * gpg-agent.c (handle_tick): Test for an alive scdaemon. (handle_signal): Print thread info on SIGUSR1. * scdaemon.c (handle_signal): Print thread info on SIGUSR1.
2005-05-21 18:49:00 +00:00
* gpg-connect-agent has now features to handle Assuan INQUIRE
commands.
* Internal changes for OpenPGP cards. New Assuan command WRITEKEY.
Changed the scdaemon to handle concurrent sessions. Adjusted gpg-agent accordingly. Code cleanups.
2005-05-18 10:48:06 +00:00
* GNU Pth is now a hard requirement.
* configure.ac: Removed OpenSC detection and options. * acinclude.m4: Ditto. * scdaemon.texi: Removed OpenSC specific options. * app-p15.c: New. Basic support for pkcs15 cards without OpenSC. There are quite a couple of things missing but at least I can use my old TCOS cards from the Aegypten-1 development for signing. * app.c (select_application): Detect pkcs15 applications. * Makefile.am (scdaemon_SOURCES): Removed card.c, card-common.h and card-p15.c because they are now obsolete. Added app-p15.c. Removed all OpenSC stuff. * command.c (do_reset, open_card, cmd_serialno, cmd_learn) (cmd_readcert, cmd_readkey, cmd_pksign, cmd_pkdecrypt): Removed all special cases for the old card.c based mechanisms. * scdaemon.c, apdu.c: Removed all special cases for OpenSC.
2005-04-27 12:09:21 +00:00
* [scdaemon] Support for OpenSC has been removed. Instead a new and
Changed the scdaemon to handle concurrent sessions. Adjusted gpg-agent accordingly. Code cleanups.
2005-05-18 10:48:06 +00:00
straightforward pkcs#15 modules has been written. As of now it
* configure.ac: Removed OpenSC detection and options. * acinclude.m4: Ditto. * scdaemon.texi: Removed OpenSC specific options. * app-p15.c: New. Basic support for pkcs15 cards without OpenSC. There are quite a couple of things missing but at least I can use my old TCOS cards from the Aegypten-1 development for signing. * app.c (select_application): Detect pkcs15 applications. * Makefile.am (scdaemon_SOURCES): Removed card.c, card-common.h and card-p15.c because they are now obsolete. Added app-p15.c. Removed all OpenSC stuff. * command.c (do_reset, open_card, cmd_serialno, cmd_learn) (cmd_readcert, cmd_readkey, cmd_pksign, cmd_pkdecrypt): Removed all special cases for the old card.c based mechanisms. * scdaemon.c, apdu.c: Removed all special cases for OpenSC.
2005-04-27 12:09:21 +00:00
does allows only signing using TCOS cards but we are going to
enhance it to match all the old capabilities.
New debugging optionhs, updates to the manual.
2005-06-07 19:09:18 +00:00
* [gpg-agent] New option --write-env-file and Assuan command
* command.c (cmd_updatestartuptty): New. * gpg-agent.c: New option --write-env-file. * gpg-agent.c (handle_connections): Make sure that the signals we are handling are not blocked.Block signals while creating new threads. * estream.c: Use HAVE_CONFIG_H and not USE_CONFIG_H! (es_func_fd_read, es_func_fd_write): Protect against EINTR. * gpg-agent.texi (Agent UPDATESTARTUPTTY): New. * scdaemon.c (handle_connections): Make sure that the signals we are handling are not blocked.Block signals while creating new threads. (handle_connections): Include the file descriptor into the name of the thread.
2005-06-03 13:57:24 +00:00
UPDATESTARTUPTTY.
New debugging optionhs, updates to the manual.
2005-06-07 19:09:18 +00:00
* [gpg-agent] New option --default-cache-ttl-ssh to set the TTL for
SSH passphrase caching independent from the other passphrases.
post release version number update
2005-04-21 14:59:18 +00:00
Preparing a release
2005-04-21 14:39:00 +00:00
Noteworthy changes in version 1.9.16 (2005-04-21)
post release updates
2005-01-13 19:03:37 +00:00
-------------------------------------------------
* configure.ac: Require libksba 0.9.11. sm/ * call-dirmngr.c (inq_certificate): Add new inquire SENDCERT_SKI. * certlist.c (gpgsm_find_cert): Add new arg KEYID and implement this filter. Changed all callers. * certchain.c (find_up_search_by_keyid): New helper. (find_up): Also try using the AKI.keyIdentifier. (find_up_external): Ditto.
2005-04-18 10:44:46 +00:00
* gpg-agent does now support the ssh-agent protocol and thus allows
to use the pinentry as well as the OpenPGP smartcard with ssh.
Preparing a release
2005-04-21 14:39:00 +00:00
* New tool gpg-connect-agent as a general client for the gpg-agent.
* configure.ac: Require libksba 0.9.11. sm/ * call-dirmngr.c (inq_certificate): Add new inquire SENDCERT_SKI. * certlist.c (gpgsm_find_cert): Add new arg KEYID and implement this filter. Changed all callers. * certchain.c (find_up_search_by_keyid): New helper. (find_up): Also try using the AKI.keyIdentifier. (find_up_external): Ditto.
2005-04-18 10:44:46 +00:00
* New tool symcryptrun as a wrapper for certain encryption tools.
Preparing a release
2005-04-21 14:39:00 +00:00
* The gpg tool is not anymore build by default because those gpg
versions available in the gnupg 1.4 series are far more matured.
post release updates
2005-01-13 19:03:37 +00:00
* acinclude.m4 (GNUPG_PTH_VERSION_CHECK): Link a simple test program to see whether the installation is sane. * certreqgen.c (proc_parameters): Cast printf arg.
2005-01-13 18:00:46 +00:00
Noteworthy changes in version 1.9.15 (2005-01-13)
Post release updates
2004-12-22 19:07:46 +00:00
-------------------------------------------------
* acinclude.m4 (GNUPG_PTH_VERSION_CHECK): Link a simple test program to see whether the installation is sane. * certreqgen.c (proc_parameters): Cast printf arg.
2005-01-13 18:00:46 +00:00
* Fixed passphrase caching bug.
* Better support for CCID readers; the reader from Cherry RS 6700 USB
does now work.
Post release updates
2004-12-22 19:07:46 +00:00
(set_binary): New. (main, open_read, open_fwrite): Use it.
2004-12-22 17:55:28 +00:00
Noteworthy changes in version 1.9.14 (2004-12-22)
post release version number updates
2004-12-03 19:43:11 +00:00
-------------------------------------------------
* configure.ac: Add PATHSEP_C and PATHSEP_S. For W32 let all directories default to c:/gnupg. Require libassuan 0.6.9. * gpg-agent.c (main) [W32]: Now that Mutexes work we can remove the pth_init kludge. (main): Add new options --[no-]use-standard-socket. (check_for_running_agent): Check whether it is running on the standard socket. * sysutils.h [W32]: Define sleep. * util.h: Add prototype for mkdtemp. * call-agent.c (start_agent): Before starting a pipe server start to connect to a server on the standard socket. Use PATHSEP * call-dirmngr.c (start_dirmngr): Use PATHSEP. * import.c: Include unistd.h for dup and close.
2004-12-20 16:17:25 +00:00
* [gpg-agent] New option --use-standard-socket to allow the use of a
fixed socket. gpgsm falls back to this socket if GPG_AGENT_INFO
has not been set.
(set_binary): New. (main, open_read, open_fwrite): Use it.
2004-12-22 17:55:28 +00:00
* Ported to MS Windows with some functional limitations.
* New tool gpg-preset-passphrase.
* configure.ac: Add PATHSEP_C and PATHSEP_S. For W32 let all directories default to c:/gnupg. Require libassuan 0.6.9. * gpg-agent.c (main) [W32]: Now that Mutexes work we can remove the pth_init kludge. (main): Add new options --[no-]use-standard-socket. (check_for_running_agent): Check whether it is running on the standard socket. * sysutils.h [W32]: Define sleep. * util.h: Add prototype for mkdtemp. * call-agent.c (start_agent): Before starting a pipe server start to connect to a server on the standard socket. Use PATHSEP * call-dirmngr.c (start_dirmngr): Use PATHSEP. * import.c: Include unistd.h for dup and close.
2004-12-20 16:17:25 +00:00
post release version number updates
2004-12-03 19:43:11 +00:00
Preparing 1.9.13
2004-12-03 17:44:57 +00:00
Noteworthy changes in version 1.9.13 (2004-12-03)
Post release preparations
2004-10-22 19:57:03 +00:00
-------------------------------------------------
Preparing 1.9.13
2004-12-03 17:44:57 +00:00
* [gpgsm] New option --prefer-system-dirmngr.
* configure.ac (have_w32_system): New. Disable Pth checks for W32. Link jnlib/w32-pth.h to pth.h. * Makefile.am (pkglib_PROGRAMS): Build only for W32. * keydb.c: Don't define DIRSEP_S here.
2004-12-06 13:49:14 +00:00
* Minor cleanups and debugging aids.
Preparing 1.9.13
2004-12-03 17:44:57 +00:00
Post release preparations
2004-10-22 19:57:03 +00:00
Releasing 1.9.12
2004-10-22 19:48:12 +00:00
Noteworthy changes in version 1.9.12 (2004-10-22)
post release preparations
2004-10-01 13:31:46 +00:00
-------------------------------------------------
* sc-investigate: Removed. * Makefile.am (sc_investigate): Removed. * pcsc-wrapper.c (load_pcsc_driver): Load get_status_change func. (handle_open): Succeed even without a present card. (handle_status, handle_reset): New. * apdu.c (apdu_open_reader): Load pcsc_get_status_change fucntion. (pcsc_get_status): Implemented. (reset_pcsc_reader): Implemented. (open_pcsc_reader): Succeed even with no card inserted. (open_ccid_reader): Set LAST_STATUS. * iso7816.c (iso7816_select_application): Always use 0 for P1.
2004-10-20 08:54:45 +00:00
* [scdaemon] Partly rewrote the PC/SC code.
Compile fixes.
2004-10-22 16:03:04 +00:00
* Removed the sc-investigate tool. It is now in a separate package
available at ftp://ftp.g10code.com/g10code/gscutils/ .
* [gpg-agent] Fixed logging problem.
post release preparations
2004-10-01 13:31:46 +00:00
Fixed copyright years
2004-10-15 16:10:50 +00:00
*** empty log message ***
2004-10-01 12:54:53 +00:00
Noteworthy changes in version 1.9.11 (2004-10-01)
post-release version number bump
2004-07-22 11:40:17 +00:00
-------------------------------------------------
* import.c (check_and_store): Do a full validation if --with-validation is set. * certchain.c (gpgsm_basic_cert_check): Print more detailed error messages. * certcheck.c (do_encode_md): Partly support DSA. Add new arg PKALGO. Changed all callers to pass it. (pk_algo_from_sexp): New. tests/pkits: New directory
2004-08-17 15:26:22 +00:00
* When using --import along with --with-validation, the imported
certificates are validated and only imported if they are fully
valid.
post-release version number bump
2004-07-22 11:40:17 +00:00
(check_for_running_agent): New. (main): The default action is now to check for an already running agent. (parse_rereadable_options): Set logfile only on reread. (main): Do not print the "is development version" note.
2004-09-09 07:27:57 +00:00
* [gpg-agent] New option --max-cache-ttl.
* [gpg-agent] When used without --daemon or --server, gpg-agent now
check whether a agent is already running and usable.
* gpgv.c (i18n_init): Always use LC_ALL. * kbxutil.c (i18n_init): Always use LC_ALL. * gpgsm.c (i18n_init): Always use LC_ALL. * certdump.c (gpgsm_format_name): Factored code out to .. (gpgsm_format_name2): .. new. (gpgsm_print_name): Factored code out to .. (gpgsm_print_name2): .. new. (print_dn_part): New arg TRANSLATE. Changed all callers. (print_dn_parts): Ditto. (gpgsm_format_keydesc): Do not translate the SUBJECT; we require it to stay UTF-8 but we still want to filter out bad control characters. * gpgconf.c (i18n_init): Always use LC_ALL.
2004-09-30 21:37:11 +00:00
* Fixed some i18n problems.
(check_for_running_agent): New. (main): The default action is now to check for an already running agent. (parse_rereadable_options): Set logfile only on reread. (main): Do not print the "is development version" note.
2004-09-09 07:27:57 +00:00
* trustlist.c (read_list): Allow colons in the fingerprint. (headerblurb): Rephrased. * gpg-agent.c (handle_connections): Increase the stack size ot 256k. * de.po: Updated. * scdaemon.c (main): Bumbed thread stack size up to 512k. * keylist.c (list_cert_raw): Print the keygrip.
2004-07-22 09:37:36 +00:00
Noteworthy changes in version 1.9.10 (2004-07-22)
-------------------------------------------------
* Fixed a serious bug in the checking of trusted root certificates.
* New configure option --enable-agent-pnly allows to build and
install just the agent.
* Fixed a problem with the log file handling.
post release version bump
2004-06-08 19:25:06 +00:00
about to release 1.9.9
2004-06-08 19:10:32 +00:00
Noteworthy changes in version 1.9.9 (2004-06-08)
post release version bump
2004-04-29 18:16:44 +00:00
------------------------------------------------
* gpgsm.h (opt): Add member CONFIG_FILENAME. * gpgsm.c (main): Use it here instead of the local var. * server.c (gpgsm_server): Print some additional information with the hello in verbose mode.
2004-05-11 09:15:56 +00:00
* [gpg-agent] The new option --allow-mark-trusted is now required to
allow gpg-agent to add a key to the trustlist.txt after user
confirmation.
post release version bump
2004-04-29 18:16:44 +00:00
* configure.ac: Require libksba 0.9.7. * certreqgen.c (get_parameter_uint, create_request): Create an extension for key usage when requested. * gpgsm.c (main): Install emergency_cleanup also as an atexit handler. * verify.c (gpgsm_verify): Removed the separate error code handling for KSBA. We use shared error codes anyway. * export.c (export_p12): Removed debugging code. * encrypt.c (gpgsm_encrypt): Put the session key in to secure memory.
2004-06-06 13:00:59 +00:00
* Creating PKCS#10 requests does now honor the key usage.
post release version bump
2004-04-29 18:16:44 +00:00
About to release 1.9.8
2004-04-29 17:32:02 +00:00
Noteworthy changes in version 1.9.8 (2004-04-29)
post release re-versioning
2004-04-06 14:15:47 +00:00
------------------------------------------------
* command.c (scd_update_reader_status_file): Write status files. * app-help.c (app_help_read_length_of_cert): Fixed calculation of R_CERTOFF. * pcsc-wrapper.c: New. * Makefile.am (pkglib_PROGRAMS): Install it here. * apdu.c (writen, readn): New. (open_pcsc_reader, pcsc_send_apdu, close_pcsc_reader): Use the pcsc-wrapper if we are using Pth. (apdu_send_le): Reinitialize RESULTLEN. Handle SW_EOF_REACHED like SW_SUCCESS.
2004-04-20 16:42:55 +00:00
* [scdaemon] Overhauled the internal CCID driver.
* [scdaemon] Status files named ~/.gnupg/reader_<n>.status are now
written when using the internal CCID driver.
The keybox gets now compressed after 3 hours and ephemeral stored certificates are deleted after about a day.
2004-04-26 08:09:25 +00:00
* [gpgsm] New commands --dump-{,secret,external}-keys to show a very
detailed view of the certificates.
* The keybox gets now compressed after 3 hours and ephemeral
stored certificates are deleted after about a day.
About to release 1.9.8
2004-04-29 17:32:02 +00:00
* [gpg] Usability fixes for --card-edit. Note, that this has already
been ported back to gnupg-1.3
post release re-versioning
2004-04-06 14:15:47 +00:00
About to release 1.9.7
2004-04-06 11:40:28 +00:00
Noteworthy changes in version 1.9.7 (2004-04-06)
post release development preparations
2004-03-06 20:42:14 +00:00
------------------------------------------------
*** empty log message ***
2004-03-16 19:00:00 +00:00
* Instrumented the modules for gpgconf.
* Added support for DINSIG card applications.
Require libgcrypt 1.1.94.
2004-04-06 07:36:25 +00:00
* Include the smimeCapabilities attribute with signed messages.
* configure.ac: Require libgcrypt 1.1.94. Introduce PACKAGE_GT and set it to gnupg2. * gpg-agent.c (main): Use new libgcrypt thread library register scheme. * Makevars (DOMAIN): Init from PACKAGE_GT
2004-04-06 10:01:04 +00:00
* Now uses the gettext domain "gnupg2" to avoid conflicts with gnupg
versions < 1.9.
post release development preparations
2004-03-06 20:42:14 +00:00
Preparing for a release
2004-03-06 20:11:19 +00:00
Noteworthy changes in version 1.9.6 (2004-03-06)
post release version bumb
2004-02-21 13:35:42 +00:00
------------------------------------------------
Preparing for a release
2004-03-06 20:11:19 +00:00
* Code cleanups and bug fixes.
post release version bumb
2004-02-21 13:35:42 +00:00
About to release 1.9.5
2004-02-21 13:13:35 +00:00
Noteworthy changes in version 1.9.5 (2004-02-21)
Post release updated
2004-01-30 10:13:51 +00:00
------------------------------------------------
* am/cmacros.am: New. * configure.ac: Removed the need for g10defs.h. Reworked the --with-foo-pgm stuff. * autogen.sh (check_version): Removed bashism and simplified. * acinclude.m4 (AM_PATH_OPENSC): Kludge to avoid error output for a bad opensc-config.
2004-02-12 09:25:30 +00:00
* gpg-protect-tool gets now installed into libexec as it ought to be.
Cleaned up the build system to better comply with the coding
standards.
Post release updated
2004-01-30 10:13:51 +00:00
* command.c (cmd_setkeydesc): New. (register_commands): Add command SETKEYDESC. (cmd_pksign, cmd_pkdecrypt): Use the key description. (reset_notify): Reset the description. * findkey.c (unprotect): Add arg DESC_TEXT. (agent_key_from_file): Ditto. * pksign.c (agent_pksign): Ditto. * pkdecrypt.c (agent_pkdecrypt): Ditto. Made CIPHERTEXT an unsigned char*.
2004-02-13 17:06:34 +00:00
* [gpgsm] The --import command is now able to autodetect pkcs#12
files and import secret and private keys from this file format.
* protect-tool.c: New options --have-cert and --prompt. (export_p12_file): Read a certificate from STDIN and pass it to p12_build. Detect a keygrip and construct the filename in that case. Unprotcet a key if needed. Print error messages for key formats we can't handle. (release_passphrase): New. (get_passphrase): New arg PROMPTNO. Return the allocated string. Changed all callers. * minip12.c: Revamped the build part. (p12_build): New args CERT and CERTLEN. * simple-pwquery.c (agent_open): Don't mangle INFOSTR. * export.c (export_p12, popen_protect_tool) (gpgsm_p12_export): New. * gpgsm.c (main): New command --export-secret-key-p12.
2004-02-19 16:26:32 +00:00
A new command --export-secret-key-p12 is provided to allow
exporting of secret keys in PKCS\#12 format.
* command.c (cmd_setkeydesc): New. (register_commands): Add command SETKEYDESC. (cmd_pksign, cmd_pkdecrypt): Use the key description. (reset_notify): Reset the description. * findkey.c (unprotect): Add arg DESC_TEXT. (agent_key_from_file): Ditto. * pksign.c (agent_pksign): Ditto. * pkdecrypt.c (agent_pkdecrypt): Ditto. Made CIPHERTEXT an unsigned char*.
2004-02-13 17:06:34 +00:00
* protect-tool.c (main): Setup the used character set. * gpg-agent.c (main): Ditto. * gpg-agent.c (set_debug): New. New option --debug-level. (main): New option --gpgconf-list.
2004-02-18 16:57:38 +00:00
* [gpgsm] The pinentry will now present a description of the key for
About to release 1.9.5
2004-02-21 13:13:35 +00:00
whom the passphrase is requested.
Require libksba 0.9.4 and libgcrypt 1.1.92.
2004-02-13 12:40:54 +00:00
* protect-tool.c (main): Setup the used character set. * gpg-agent.c (main): Ditto. * gpg-agent.c (set_debug): New. New option --debug-level. (main): New option --gpgconf-list.
2004-02-18 16:57:38 +00:00
* [gpgsm] New option --with-validation to check the validity of key
while listing it.
* New option --debug-level={none,basic,advanced,expert,guru} to map
the debug flags to sensitive levels on a per program base.
Require libksba 0.9.4 and libgcrypt 1.1.92.
2004-02-13 12:40:54 +00:00
* configure.ac: Require libksba 0.9.3 due to another bug fix there. * sign.c (add_certificate_list): Decrement N for the first cert. * Makefile.am (sbin_SCRIPTS): New, to install addgnupghome. (EXTRA_DIST): Added rfc822parse.c rfc822parse.h gpgparsemail.c which might be useful for debugging.
2004-01-30 09:12:36 +00:00
Noteworthy changes in version 1.9.4 (2004-01-30)
Post release version number bump.
2003-12-23 11:27:13 +00:00
------------------------------------------------
* README: Updated.
2004-01-29 20:16:59 +00:00
* Added support for the Telesec NKS 2.0 card application.
* configure.ac: Require libksba 0.9.3 due to another bug fix there. * sign.c (add_certificate_list): Decrement N for the first cert. * Makefile.am (sbin_SCRIPTS): New, to install addgnupghome. (EXTRA_DIST): Added rfc822parse.c rfc822parse.h gpgparsemail.c which might be useful for debugging.
2004-01-30 09:12:36 +00:00
* Added simple tool addgnupghome to create .gnupg directories from
/etc/skel/.gnupg.
* README: Updated.
2004-01-29 20:16:59 +00:00
* Various minor bug fixes and cleanups; mainly gpgsm and gpg-agent
related.
Post release version number bump.
2003-12-23 11:27:13 +00:00
* configure.ac: Require libksba 0.9.3 due to another bug fix there. * sign.c (add_certificate_list): Decrement N for the first cert. * Makefile.am (sbin_SCRIPTS): New, to install addgnupghome. (EXTRA_DIST): Added rfc822parse.c rfc822parse.h gpgparsemail.c which might be useful for debugging.
2004-01-30 09:12:36 +00:00
* README-alpha: Removed. * configure.ac, Makefile.am: Add the tests and tools directories.
2003-12-23 11:05:19 +00:00
Noteworthy changes in version 1.9.3 (2003-12-23)
*** empty log message ***
2003-11-17 12:56:43 +00:00
------------------------------------------------
* server.c (gpgsm_server): Add arg DEFAULT_RECPLIST. (cmd_encrypt): Add all enrypt-to marked certs to the list. * encrypt.c (gpgsm_encrypt): Check that real recipients are available. * gpgsm.c (main): Make the --encrypt-to and --no-encrypt-to options work. Pass the list of recients to gpgsm_server. * gpgsm.h (certlist_s): Add field IS_ENCRYPT_TO. (opt): Add NO_ENCRYPT_TO. * certlist.c (gpgsm_add_to_certlist): New arg IS_ENCRYPT_TO. Changed all callers and ignore duplicate entries. (is_cert_in_certlist): New. (gpgsm_add_cert_to_certlist): New.
2003-12-17 17:12:14 +00:00
* New gpgsm options --{enable,disable}-ocsp to validate keys using
Enable the tests directory.
2003-12-23 10:23:16 +00:00
OCSP. This option requires a not yet released DirMngr version.
Default is disabled.
* configure.ac: Check for funopen and fopencookie as part of the jnlib checks. * logging.c (writen, fun_writer, fun_closer): New. (log_set_file): Add feature to log to a socket.
2003-12-16 11:30:16 +00:00
Updated.
2003-12-16 16:32:02 +00:00
* The --log-file option may now be used to print logs to a socket.
Prefix the socket name with "socket://" to enable this. This does
not work on all systems and falls back to stderr if there is a
problem with the socket.
(Certificate Options): Add --{enable,disable}-ocsp.
2003-12-01 10:53:40 +00:00
* server.c (gpgsm_server): Add arg DEFAULT_RECPLIST. (cmd_encrypt): Add all enrypt-to marked certs to the list. * encrypt.c (gpgsm_encrypt): Check that real recipients are available. * gpgsm.c (main): Make the --encrypt-to and --no-encrypt-to options work. Pass the list of recients to gpgsm_server. * gpgsm.h (certlist_s): Add field IS_ENCRYPT_TO. (opt): Add NO_ENCRYPT_TO. * certlist.c (gpgsm_add_to_certlist): New arg IS_ENCRYPT_TO. Changed all callers and ignore duplicate entries. (is_cert_in_certlist): New. (gpgsm_add_cert_to_certlist): New.
2003-12-17 17:12:14 +00:00
* The options --encrypt-to and --no-encrypt-to now work the same in
gpgsm as in gpg. Note, they are also used in server mode.
* Duplicated recipients are now silently removed in gpgsm.
(Certificate Options): Add --{enable,disable}-ocsp.
2003-12-01 10:53:40 +00:00
Preparing for 1.9.2 release.
2003-11-17 12:20:11 +00:00
Noteworthy changes in version 1.9.2 (2003-11-17)
Post release version number update
2003-09-06 13:44:17 +00:00
------------------------------------------------
* call-agent.c (agent_scd_getattr): Don't clear the passed info structure, so that it can indeed be updated. * card-util.c (fpr_is_zero): New. (generate_card_keys): New. (card_edit): New command "generate". * keygen.c (generate_keypair): New arg CARD_SERIALNO, removed call to check_smartcard. (check_smartcard,show_smartcard): Removed. (show_sha1_fpr,fpr_is_zero): Removed. * app-openpgp.c (do_getattr): Support SERIALNO and AID.
2003-10-08 10:46:58 +00:00
* On card key generation is no longer done using the --gen-key
command but from the menu provided by the new --card-edit command.
* PINs are now properly cached and there are only 2 PINs visible.
spelling: Fix "synchronize" Signed-off-by: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
2019-06-23 20:17:05 -04:00
The 3rd PIN (CHV2) is internally synchronized with the regular PIN.
Post release version number update
2003-09-06 13:44:17 +00:00
Preparing for 1.9.2 release.
2003-11-17 12:20:11 +00:00
* All kind of other internal stuff.
Post release version number update
2003-09-06 13:44:17 +00:00
* configure.ac: Required newer versions of some libraries. * misc.c (openpgp_pk_algo_usage): Allow AUTH where SIGN is allowed. * keygen.c (ask_passphrase): No need to allocated S2K in secure memory. * scdaemon.c (main): --pcsc-driver again defaults to pcsclite. David Corcoran was so kind to remove the GPL incompatible advertisng clause from pcsclite. * apdu.c (apdu_open_reader): Actually make pcsc-driver option work.
2003-09-06 13:23:48 +00:00
Noteworthy changes in version 1.9.1 (2003-09-06)
Bumbed version number
2003-08-05 18:55:40 +00:00
------------------------------------------------
* configure.ac: Required newer versions of some libraries. * misc.c (openpgp_pk_algo_usage): Allow AUTH where SIGN is allowed. * keygen.c (ask_passphrase): No need to allocated S2K in secure memory. * scdaemon.c (main): --pcsc-driver again defaults to pcsclite. David Corcoran was so kind to remove the GPL incompatible advertisng clause from pcsclite. * apdu.c (apdu_open_reader): Actually make pcsc-driver option work.
2003-09-06 13:23:48 +00:00
* Support for OpenSC is back. scdaemon supports a --disable-opensc to
* Makefile.am: Add OPENSC_LIBS to all programs. * scdaemon.c, scdaemon.h: New option --disable-opensc. * card.c (card_open): Implement it. * apdu.c (open_osc_reader, osc_send_apdu): New. (apdu_open_reader) [HAVE_OPENSC]: Use the opensc driver if not disabled. (error_string) [HAVE_OPENSC]: Use sc_strerror. (send_apdu) [HAVE_OPENSC]: Call osc_apdu_send.
2003-08-18 17:34:28 +00:00
disable OpenSC use at runtime, so that PC/SC or ct-API can still be
used directly.
* configure.ac: Required newer versions of some libraries. * misc.c (openpgp_pk_algo_usage): Allow AUTH where SIGN is allowed. * keygen.c (ask_passphrase): No need to allocated S2K in secure memory. * scdaemon.c (main): --pcsc-driver again defaults to pcsclite. David Corcoran was so kind to remove the GPL incompatible advertisng clause from pcsclite. * apdu.c (apdu_open_reader): Actually make pcsc-driver option work.
2003-09-06 13:23:48 +00:00
* Rudimentary support for the SCR335 smartcard reader using an
internal driver. Requires current libusb from CVS.
* Bug fixes.
Bumbed version number
2003-08-05 18:55:40 +00:00
About to release the first 1.9 version.
2003-08-05 17:20:18 +00:00
Noteworthy changes in version 1.9.0 (2003-08-05)
Bumped version number for cvs version
2002-10-18 10:41:34 +00:00
------------------------------------------------
About to release the first 1.9 version.
2003-08-05 17:20:18 +00:00
====== PLEASE SEE README-alpha =======
Cleanups, fixes and PC/SC support
2003-08-05 17:11:04 +00:00
* gpg has been renamed to gpg2 and gpgv to gpgv2. This is a
About to release the first 1.9 version.
2003-08-05 17:20:18 +00:00
temporary change to allow co-existing with stable gpg versions.
Cleanups, fixes and PC/SC support
2003-08-05 17:11:04 +00:00
About to release the first 1.9 version.
2003-08-05 17:20:18 +00:00
* ~/.gnupg/gpg.conf-1.9.0 is fist tried as config file before the
usual gpg.conf.
Cleanups, fixes and PC/SC support
2003-08-05 17:11:04 +00:00
* Removed the -k, -kv and -kvv commands. -k is now an alias to
--list-keys. New command -K as alias for --list-secret-keys.
* Removed --run-as-shm-coprocess feature.
Key generation and signing using the OpenPGP card does rudimentary work.
2003-06-27 20:53:09 +00:00
* gpg does now also use libgcrypt, libgpg-error is required.
Updated from latest NewPG project
2003-01-09 13:15:07 +00:00
* New gpgsm commands --call-dirmngr and --call-protect-tool.
started with trust stuff
1998-01-12 10:18:17 +00:00
Updated from latest NewPG project
2003-01-09 13:15:07 +00:00
* Changing a passphrase is now possible using "gpgsm --passwd"
Update head to match stable 1.0
2002-06-29 14:15:02 +00:00
Updated from latest NewPG project
2003-01-09 13:15:07 +00:00
* The content-type attribute is now recognized and created.
* The agent does now reread certain options on receiving a HUP.
* The pinentry is now forked for each request so that clients with
different environments are supported. When running in daemon mode
and --keep-display is not used the DISPLAY variable is ignored.
* Merged stuff from the newpg branch and started this new
development branch.
Added release date of older versions to NEWS. --
2015-06-15 14:12:43 +02:00
Version 1.4.19 (2015-02-27)
Version 1.4.18 (2014-06-30)
Version 1.4.17 (2014-06-23)
Version 1.4.16 (2013-12-18)
Version 1.4.15 (2013-10-04)
Version 1.4.14 (2013-07-25)
Version 1.4.13 (2012-12-20)
Version 1.4.12 (2012-01-30)
Version 1.4.11 (2010-10-18)
Version 1.4.10 (2009-09-02)
Version 1.4.9 (2008-03-26)
Version 1.4.8 (2007-12-20)
Version 1.4.7 (2007-03-05)
Version 1.4.6 (2006-12-06)
Version 1.4.5 (2006-08-01)
Version 1.4.4 (2006-06-25)
Version 1.4.3 (2006-04-03)
Version 1.4.2 (2005-07-26)
Version 1.4.1 (2005-03-15)
Version 1.4.0 (2004-12-16)
Noteworthy changes in version 1.3.2 (2003-05-27)
------------------------------------------------
* New "--gnupg" option (set by default) that disables --openpgp,
and the various --pgpX emulation options. This replaces
--no-openpgp, and --no-pgpX, and also means that GnuPG has
finally grown a --gnupg option to make GnuPG act like GnuPG.
* A bug in key validation has been fixed. This bug only affects
keys with more than one user ID (photo IDs do not count here),
and results in all user IDs on a given key being treated with
the validity of the most-valid user ID on that key.
* Notation names that do not contain a '@' are no longer allowed
unless --expert is set. This is to help prevent pollution of
the (as yet unused) IETF notation namespace.
* Multiple trust models are now supported via the --trust-model
option. The options are "pgp" (web-of-trust plus trust
signatures), "classic" (web-of-trust only), and "always"
(identical to the --always-trust option).
* The --personal-{cipher|digest|compression}-preferences are now
consulted to get default algorithms before resorting to the
last-ditch defaults of --s2k-cipher-algo, SHA1, and ZIP
respectively. This allows a user to set algorithms to use in a
safe manner so they are used when legal to do so, without
forcing them on for all messages.
* New --primary-keyring option to designate the keyring that the
user wants new keys imported into.
* --s2k-digest-algo is now used for all password mangling.
Earlier versions used both --s2k-digest-algo and --digest-algo
for passphrase mangling.
* Handling of --hidden-recipient or --throw-keyid messages is now
easier - the user only needs to give their passphrase once, and
GnuPG will try it against all of the available secret keys.
* Care is taken to prevent compiler optimization from removing
memory wiping code.
* New option --no-mangle-dos-filenames so that filenames are not
truncated in the W32 version.
* A "convert-from-106" script has been added. This is a simple
script that automates the conversion from a 1.0.6 or earlier
version of GnuPG to a 1.0.7 or later version.
* Disabled keys are now skipped when selecting keys for
encryption. If you are using the --with-colons key listings to
detect disabled keys, please see doc/DETAILS for a minor format
change in this release.
* Minor trustdb changes to make the trust calculations match
common usage.
* New command "revuid" in the --edit-key menu to revoke a user ID.
This is a simpler interface to the old method (which still
works) of revoking the user ID self-signature.
* Status VALIDSIG does now also print the primary key's
fingerprint, as well as the signature version, pubkey algorithm,
hash algorithm, and signature class.
* Add read-only support for the SHA-256 hash, and optional
read-only support for the SHA-384 and SHA-512 hashes.
* New option --enable-progress-filter for use with frontends.
* DNS SRV records are used in HKP keyserver lookups to allow
administrators to load balance and select keyserver ports
automatically. This is as specified in
draft-shaw-openpgp-hkp-00.txt.
* When using the "keyid!" syntax during a key export, only that
specified key is exported. If the key in question is a subkey,
the primary key plus only that subkey is exported.
* configure --disable-xxx options to disable individual algorithms
at build time. This can be used to build a smaller gpg binary
for embedded uses where space is tight. See the README file for
the algorithms that can be used with this option, or use
--enable-minimal to build the smallest gpg possible (disables
all optional algorithms, disables keyserver access, and disables
photo IDs).
* The keyserver no-modify flag on a key can now be displayed and
modified.
* Note that the TIGER/192 digest algorithm is in the process of
being dropped from the OpenPGP standard. While this release of
GnuPG still contains it, it is disabled by default. To ensure
you will still be able to use your messages with future versions
of GnuPG and other OpenPGP programs, please do not use this
algorithm.
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2003q2/000153.html
Added release date of older versions to NEWS. --
2015-06-15 14:12:43 +02:00
Noteworthy changes in version 1.3.1 (2002-11-12)
------------------------------------------------
* Trust signature support. This is based on the Maurer trust
model where a user can specify the trust level along with the
signature with multiple levels so users can delegate
certification ability to other users, possibly restricted by a
regular expression on the user ID. Note that full trust
signature support requires a regular expression parsing library.
The regexp code from glibc 2.3.1 is included for those platforms
that don't have working regexp functions available. The
configure option --disable-regex may be used to disable any
regular expression code, which will make GnuPG ignore any trust
signature with a regular expression included.
* Two new commands --hidden-recipient (-R) and --hidden-encrypt-to
encrypt to a user, but hide the identity of that user. This is
the same functionality as --throw-keyid, but can be used on a
per-user basis.
* Full algorithm names (e.g. "3DES", "SHA1", "ZIP") can now be
used interchangeably with the short algorithm names (e.g. "S2",
"H2", "Z1") anywhere algorithm names are used in GnuPG.
Noteworthy changes in version 1.3.0 (2002-10-18)
------------------------------------------------
* The last piece of internal keyserver support has been removed,
and now all keyserver access is done via the keyserver plugins.
There is also a newer keyserver protocol used between GnuPG and
the plugins, so plugins from earlier versions of GnuPG may not
work properly.
* The HKP keyserver plugin supports the new machine-readable key
listing format for those keyservers that provide it.
* When using a HKP keyserver with multiple DNS records (such as
wwwkeys.pgp.net which has the addresses of multiple servers
around the world), try all records until one succeeds. Note
that it depends on the LDAP library used whether the LDAP
keyserver plugin does this as well.
* The library dependencies for OpenLDAP seem to change fairly
frequently, and GnuPG's configure script cannot guess all the
combinations. Use ./configure LDAPLIBS="-L libdir -l libs" to
override the script and use the libraries selected.
* Secret keys generated with --export-secret-subkeys are now
indicated in key listings with a '#' after the "sec", and in
--with-colons listings by showing no capabilities (no lowercase
characters).
* --trusted-key has been un-obsoleted, as it is useful for adding
ultimately trusted keys from the config file. It is identical
to using --edit and "trust" to change a key to ultimately
trusted.
* Translations other than de are no longer distributed with the
development branch. This is due to the frequent text changes
during development, which cause the translations to rapidly go
out of date.
Version 1.2.8 (2006-12-07)
Version 1.2.7 (2004-12-27)
Version 1.2.6 (2004-08-25)
Version 1.2.5 (2004-07-26)
Version 1.2.4 (2003-12-23)
Version 1.2.3 (2003-08-21)
Version 1.2.2 (2003-05-01)
Version 1.2.1 (2002-10-25)
Version 1.2.0 (2002-09-21)
Noteworthy changes in version 1.1.92 (2002-09-11)
-------------------------------------------------
* [IMPORTANT] The default configuration file is now
~/.gnupg/gpg.conf. If an old ~/.gnupg/options is found it will
still be used. This change is required to have a more
consistent naming scheme with forthcoming tools.
* The use of MDCs have increased. A MDC will be used if the
recipients directly request it, if the recipients have AES,
AES192, AES256, or TWOFISH in their cipher preferences, or if
the chosen cipher has a blocksize not equal to 64 bits
(currently this is also AES, AES192, AES256, and TWOFISH).
* GnuPG will no longer automatically disable compression when
processing an already-compressed file unless a MDC is being
used. This is to give the message a certain amount of
resistance to the chosen-ciphertext attack while communicating
with other programs (most commonly PGP earlier than version 7.x)
that do not support MDCs.
* The option --interactive now has the desired effect when
importing keys.
* The file permission and ownership checks on files have been
clarified. Specifically, the homedir (usually ~/.gnupg) is
checked to protect everything within it. If the user specifies
keyrings outside this homedir, they are presumed to be shared
keyrings and therefore *not* checked. Configuration files
specified with the --options option and the IDEA cipher
extension specified with --load-extension are checked, along
with their enclosing directories.
* The configure option --with-static-rnd=auto allows to build gpg
with all available entropy gathering modules included. At
runtime the best usable one will be selected from the list
linux, egd, unix. This is also the default for systems lacking
a /dev/random device.
* The default character set is now taken from the current locale;
it can still be overridden by the --charset option. Using the
option -vvv shows the used character set.
* [REMOVED] --emulate-checksum-bug and --emulate-3des-s2k-bug have
been removed.
Noteworthy changes in version 1.1.91 (2002-08-04)
-------------------------------------------------
* All modules are now linked statically; the --load-extension
option is in general not useful anymore. The only exception is
to specify the deprecated idea cipher.
* The IDEA plugin has changed. Previous versions of the IDEA
plugin will no longer work with GnuPG. However, the current
version of the plugin will work with earlier GnuPG versions.
* When using --batch with one of the --delete-key commands, the
key must be specified by fingerprint. See the man page for
details.
* There are now various ways to restrict the ability GnuPG has to
exec external programs (for the keyserver helpers or photo ID
viewers). Read the README file for the complete list.
* New export option to leave off attribute packets (photo IDs)
during export. This is useful when exporting to HKP keyservers
which do not understand attribute packets.
* New import option to repair during import the HKP keyserver
mangling multiple subkeys bug. Note that this cannot completely
repair the damaged key as some crucial data is removed by the
keyserver, but it does at least give you back one subkey. This
is on by default for keyserver --recv-keys, and off by default
for regular --import.
* The keyserver helper programs now live in
/usr/[local/]libexec/gnupg by default. If you are upgrading
from 1.0.7, you might want to delete your old copies in
/usr/[local/]bin. If you use an OS that does not use libexec
for whatever reason, use configure --libexecdir=/usr/local/lib
to place the keyserver helpers there.
* The LDAP keyserver handler now works properly with very old
(version 1) LDAP keyservers.
Noteworthy changes in version 1.1.90 (2002-07-01)
-------------------------------------------------
* New commands: --personal-cipher-preferences,
--personal-digest-preferences, and
--personal-compress-preferences allow the user to specify which
algorithms are to be preferred. Note that this does not permit
using an algorithm that is not present in the recipient's
preferences (which would violate the OpenPGP standard). This
just allows sorting the preferences differently.
* New "group" command to refer to several keys with one name.
* A warning is issued if the user forces the use of an algorithm
that is not listed in the recipient's preferences.
* Full revocation key (aka "designated revoker") support.
* The preferred hash algorithms on a key are consulted when
encrypting a signed message to that key. Note that this is
disabled by default by a SHA1 preference in
--personal-digest-preferences.
* --cert-digest-algo allows the user to specify the hash algorithm
to use when signing a key rather than the default SHA1 (or MD5
for PGP2 keys). Do not use this feature unless you fully
understand the implications of this.
* --pgp7 mode automatically sets all necessary options to ensure
that the resulting message will be usable by a user of PGP 7.x.
* New --attribute-fd command for frontends and scripts to get the
contents of attribute packets (i.e. photos)
* In expert mode, the user can now re-sign a v3 key with a v4
self-signature. This does not change the v3 key into a v4 key,
but it does allow the user to use preferences, primary ID flags,
etc.
* Significantly improved photo ID support on non-unixlike
platforms.
* The version number has jumped ahead to 1.1.90 to skip over the
old version 1.1 and to get ready for the upcoming 1.2.
* ElGamal sign and encrypt is not anymore allowed in the key
generation dialog unless in expert mode. RSA sign and encrypt
has been added with the same restrictions.
* [W32] Keyserver access does work with Windows NT.
Noteworthy changes in version 1.0.7 (2002-04-29)
------------------------------------------------
* Secret keys are now stored and exported in a new format which
uses SHA-1 for integrity checks. This format renders the
Rosa/Klima attack useless. Other OpenPGP implementations might
not yet support this, so the option --simple-sk-checksum creates
the old vulnerable format.
* The default cipher algorithm for encryption is now CAST5,
default hash algorithm is SHA-1. This will give us better
interoperability with other OpenPGP implementations.
* Symmetric encrypted messages now use a fixed file size if
possible. This is a tradeoff: it breaks PGP 5, but fixes PGP 2,
6, and 7. Note this was only an issue with RFC-1991 style
symmetric messages.
* Photographic user ID support. This uses an external program to
view the images.
* Enhanced keyserver support via keyserver "plugins". GnuPG comes
with plugins for the NAI LDAP keyserver as well as the HKP email
keyserver. It retains internal support for the HKP HTTP
keyserver.
* Nonrevocable signatures are now supported. If a user signs a
key nonrevocably, this signature cannot be taken back so be
careful!
* Multiple signature classes are usable when signing a key to
specify how carefully the key information (fingerprint, photo
ID, etc) was checked.
* --pgp2 mode automatically sets all necessary options to ensure
that the resulting message will be usable by a user of PGP 2.x.
* --pgp6 mode automatically sets all necessary options to ensure
that the resulting message will be usable by a user of PGP 6.x.
* Signatures may now be given an expiration date. When signing a
key with an expiration date, the user is prompted whether they
want their signature to expire at the same time.
* Revocation keys (designated revokers) are now supported if
present. There is currently no way to designate new keys as
designated revokers.
* Permissions on the .gnupg directory and its files are checked
for safety.
* --expert mode enables certain silly things such as signing a
revoked user id, expired key, or revoked key.
* Some fixes to build cleanly under Cygwin32.
* New tool gpgsplit to split OpenPGP data formats into packets.
* New option --preserve-permissions.
* Subkeys created in the future are not used for encryption or
signing unless the new option --ignore-valid-from is used.
* Revoked user-IDs are not listed unless signatures are listed too
or we are in verbose mode.
* There is no default comment string with ascii armors anymore
except for revocation certificates and --enarmor mode.
* The command "primary" in the edit menu can be used to change the
primary UID, "setpref" and "updpref" can be used to change the
preferences.
* Fixed the preference handling; since 1.0.5 they were erroneously
matched against against the latest user ID and not the given one.
* RSA key generation.
* Merged Stefan's patches for RISC OS in. See comments in
scripts/build-riscos.
* It is now possible to sign and conventional encrypt a message (-cs).
* The MDC feature flag is supported and can be set by using
the "updpref" edit command.
* The status messages GOODSIG and BADSIG are now returning the primary
UID, encoded using %XX escaping (but with spaces left as spaces,
so that it should not break too much)
* Support for GDBM based keyrings has been removed.
* The entire keyring management has been revamped.
* The way signature stati are store has changed so that v3
signatures can be supported. To increase the speed of many
operations for existing keyrings you can use the new
--rebuild-keydb-caches command.
* The entire key validation process (trustdb) has been revamped.
See the man page entries for --update-trustdb, --check-trustdb
and --no-auto-check-trustdb.
* --trusted-keys is again obsolete, --edit can be used to set the
ownertrust of any key to ultimately trusted.
* A subkey is never used to sign keys.
* Read only keyrings are now handled as expected.
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2002q2/000135.html
Added release date of older versions to NEWS. --
2015-06-15 14:12:43 +02:00
Noteworthy changes in version 1.0.6 (2001-05-29)
------------------------------------------------
* Security fix for a format string bug in the tty code.
* Fixed format string bugs in all PO files.
* Removed Russian translation due to too many bugs. The FTP
server has an unofficial but better translation in the contrib
directory.
* Fixed expire time calculation and keyserver access.
* The usual set of minor bug fixes and enhancements.
* non-writable keyrings are now correctly handled.
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2001q2/000123.html
Added release date of older versions to NEWS. --
2015-06-15 14:12:43 +02:00
Noteworthy changes in version 1.0.5 (2001-04-29)
------------------------------------------------
* WARNING: The semantics of --verify have changed to address a
problem with detached signature detection. --verify now ignores
signed material given on stdin unless this is requested by using
a "-" as the name for the file with the signed material. Please
check all your detached signature handling applications and make
sure that they don't pipe the signed material to stdin without
using a filename together with "-" on the the command line.
* WARNING: Corrected hash calculation for input data larger than
512M - it was just wrong, so you might notice bad signature in
some very big files. It may be wise to keep an old copy of
GnuPG around.
* Secret keys are no longer imported unless you use the new option
--allow-secret-key-import. This is a kludge and future versions will
handle it in another way.
* New command "showpref" in the --edit-key menu to show an easier
to understand preference listing.
* There is now the notation of a primary user ID. For example, it
is printed with a signature verification as the first user ID;
revoked user IDs are not printed there anymore. In general the
primary user ID is the one with the latest self-signature.
* New --charset=utf-8 to bypass all internal conversions.
* Large File Support (LFS) is now working.
* New options: --ignore-crc-error, --no-sig-create-check,
--no-sig-cache, --fixed-list-mode, --no-expensive-trust-checks,
--enable-special-filenames and --use-agent. See man page.
* New command --pipemode, which can be used to run gpg as a
co-process. Currently only the verification of detached
signatures are working. See doc/DETAILS.
* Keyserver support for the W32 version.
* Rewritten key selection code so that GnuPG can better cope with
multiple subkeys, expire dates and so. The drawback is that it
is slower.
* A whole lot of bug fixes.
* The verification status of self-signatures are now cached. To
increase the speed of key list operations for existing keys you
can do the following in your GnuPG homedir (~/.gnupg):
cp pubring.gpg pubring.gpg.save && gpg --export-all >x && \
rm pubring.gpg && gpg --import x
Only v4 keys (i.e not the old RSA keys) benefit from this caching.
* New translations: Estonian, Turkish.
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2001q2/000122.html
Added release date of older versions to NEWS. --
2015-06-15 14:12:43 +02:00
Noteworthy changes in version 1.0.4 (2000-10-17)
------------------------------------------------
* Fixed a serious bug which could lead to false signature verification
results when more than one signature is fed to gpg. This is the
primary reason for releasing this version.
* New utility gpgv which is a stripped down version of gpg to
be used to verify signatures against a list of trusted keys.
* Rijndael (AES) is now supported and listed with top preference.
* --with-colons now works with --print-md[s].
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2000q4/000082.html
Added release date of older versions to NEWS. --
2015-06-15 14:12:43 +02:00
Noteworthy changes in version 1.0.3 (2000-09-18)
------------------------------------------------
* Fixed problems with piping to/from other MS-Windows software
* Expiration time of the primary key can be changed again.
* Revoked user IDs are now marked in the output of --list-key
* New options --show-session-key and --override-session-key
to help the British folks to somewhat minimize the danger
of this Orwellian RIP bill.
* New options --merge-only and --try-all-secrets.
* New configuration option --with-egd-socket.
* The --trusted-key option is back after it left us with 0.9.5
* RSA is supported. Key generation does not yet work but will come
soon.
* CAST5 and SHA-1 are now the default algorithms to protect the key
and for symmetric-only encryption. This should solve a couple
of compatibility problems because the old algorithms are optional
according to RFC2440
* Twofish and MDC enhanced encryption is now used. PGP 7 supports
this. Older versions of GnuPG don't support it, so they should be
upgraded to at least 1.0.2
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2000q3/000075.html
Added release date of older versions to NEWS. --
2015-06-15 14:12:43 +02:00
Noteworthy changes in version 1.0.2 (2000-07-12)
----------------------------------------------
* Fixed expiration handling of encryption keys.
* Add an experimental feature to do unattended key generation.
* The user is now asked for the reason of revocation as required
by the new OpenPGP draft.
* There is a ~/.gnupg/random_seed file now which saves the
state of the internal RNG and increases system performance
somewhat. This way the full entropy source is only used in
cases were it is really required.
Use the option --no-random-seed-file to disable this feature.
* New options --ignore-time-conflict and --lock-never.
* Some fixes for the W32 version.
* The entropy.dll is not anymore used by the W32 version but replaced
by code derived from Cryptlib.
* Encryption is now much faster: About 2 times for 1k bit keys
and 8 times for 4k keys.
* New encryption keys are generated in a way which allows a much
faster decryption.
* New command --export-secret-subkeys which outputs the
the _primary_ key with it's secret parts deleted. This is
useful for automated decryption/signature creation as it
allows to keep the real secret primary key offline and
thereby protecting the key certificates and allowing to
create revocations for the subkeys. See the FAQ for a
procedure to install such secret keys.
* Keygeneration now writes to the first writeable keyring or
as default to the one in the homedirectory. Prior versions
ignored all --keyring options.
* New option --command-fd to take user input from a file descriptor;
to be used with --status-fd by software which uses GnuPG as a backend.
* There is a new status PROGRESS which is used to show progress during
key generation.
* Support for the new MDC encryption packets. To create them either
--force-mdc must be use or cipher algorithm with a blocksize other
than 64 bits is to be used. --openpgp currently disables MDC packets
entirely. This option should not yet be used.
* New option --no-auto-key-retrieve to disable retrieving of
a missing public key from a keyserver, when a keyserver has been set.
* Danish translation
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/2000q3/000069.html
Added release date of older versions to NEWS. --
2015-06-15 14:12:43 +02:00
Noteworthy changes in version 1.0.1 (1999-12-16)
-----------------------------------
* New command --verify-files. New option --fast-list-mode.
* $http_proxy is now used when --honor-http-proxy is set.
* Fixed some minor bugs and the problem with conventional encrypted
packets which did use the gpg v3 partial length headers.
* Add Indonesian and Portugese translations.
* Fixed a bug with symmetric-only encryption using the non-default 3DES.
The option --emulate-3des-s2k-bug may be used to decrypt documents
which have been encrypted this way; this should be done immediately
as this workaround will be remove in 1.1
* Can now handle (but not display) PGP's photo IDs. I don't know the
format of that packet but after stripping a few bytes from the start
it looks like a JPEG (at least my test data). Handling of this
package is required because otherwise it would mix up the
self signatures and you can't import those keys.
* Passing non-ascii user IDs on the commandline should now work in all
cases.
* New keys are now generated with an additional preference to Blowfish.
* Removed the GNU Privacy Handbook from the distribution as it will go
into a separate one.
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/1999q4/000050.html
Added release date of older versions to NEWS. --
2015-06-15 14:12:43 +02:00
Noteworthy changes in version 1.0.0 (1999-09-07)
-----------------------------------
* Add a very preliminary version of the GNU Privacy Handbook to
the distribution (lynx doc/gph/index.html).
* Changed the version number to GnuPG 2001 ;-)
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/1999q3/000037.html
Added release date of older versions to NEWS. --
2015-06-15 14:12:43 +02:00
Noteworthy changes in version 0.9.11 (1999-09-03)
------------------------------------
* UTF-8 strings are now correctly printed (if --charset is set correctly).
Output of --with-colons remains C-style escaped UTF-8.
* Workaround for a problem with PGP 5 detached signature in textmode.
* Fixed a problem when importing new subkeys (duplicated signatures).
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/1999q3/000036.html
Added release date of older versions to NEWS. --
2015-06-15 14:12:43 +02:00
Noteworthy changes in version 0.9.10 (1999-07-23)
------------------------------------
* Some strange new options to help pgpgpg
* Cleaned up the dox a bit.
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/1999q3/000034.html
Added release date of older versions to NEWS. --
2015-06-15 14:12:43 +02:00
Noteworthy changes in version 0.9.9
-----------------------------------
* New options --[no-]utf8-strings.
* New edit-menu commands "enable" and "disable" for entire keys.
* You will be asked for a filename if gpg cannot deduce one.
* Changes to support libtool which is needed for the development
of libgcrypt.
* New script tools/lspgpot to help transferring assigned
trustvalues from PGP to GnuPG.
* New commands --lsign-key and made --sign-key a shortcut for --edit
and sign.
* New options (#122--126 ;-) --[no-]default-recipient[-self],
--disable-{cipher,pubkey}-algo. See the man page.
* Enhanced info output in case of multiple recipients and fixed exit code.
* New option --allow-non-selfsigned-uid to work around a problem with
the German IN way of separating signing and encryption keys.
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/1999q3/000028.html
Added release date of older versions to NEWS. --
2015-06-15 14:12:43 +02:00
Noteworthy changes in version 0.9.8 (1999-06-26)
-----------------------------------
* New subcommand "delsig" in the edit menu.
* The name of the output file is not anymore the one which is
embedded in the processed message, but the used filename with
the extension stripped. To revert to the old behaviour you can
use the option --use-embedded-filename.
* Another hack to cope with pgp2 generated detached signatures.
* latin-2 character set works (--charset=iso-8859-2).
* New option --with-key-data to list the public key parameters.
New option -N to insert notations and a --set-policy-url.
A couple of other options to allow reseting of options.
* Better support for HPUX.
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/1999q2/000016.html
Added release date of older versions to NEWS. --
2015-06-15 14:12:43 +02:00
Noteworthy changes in version 0.9.7 (1999-05-23)
-----------------------------------
* Add some work arounds for a bugs in pgp 2 which led to bad signatures
when used with canonical texts in some cases.
* Enhanced some status outputs.
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
See-also: gnupg-announce/1999q2/000000.html
Added release date of older versions to NEWS. --
2015-06-15 14:12:43 +02:00
Noteworthy changes in version 0.9.6 (1999-05-06)
-----------------------------------
* Twofish is now statically linked by default. The experimental 128 bit
version is now disabled. Full support will be available as soon as
the OpenPGP WG has decided on an interpretation of rfc2440.
* Dropped support for the ancient Blowfish160 which is not OpenPGP.
* Merged gpgm and gpg into one binary.
* Add "revsig" and "revkey" commands to the edit menu. It is now
possible to revoke signature and subkeys.
Noteworthy changes in version 0.9.5 (1999-03-20)
-----------------------------------
* New command "lsign" in the keyedit menu to create non-exportable
signatures. Removed --trusted-keys option.
* A bunch of changes to the key validation code.
* --list-trust-path now has an optional --with-colons format.
* New command --recv-keys to import keys from an keyserver.
Noteworthy changes in version 0.9.4 (1999-03-08)
-----------------------------------
* New configure option --enable-static-rnd=[egd|linux|unix|none]
to select a random gathering module for static linking.
* The original text is now verbatim copied to a cleartext signed message.
* Bugfixes but there are still a couple of bugs.
Noteworthy changes in version 0.9.3 (1999-02-19)
-----------------------------------
* Changed the internal design of getkey which now allows a
efficient lookup of multiple keys and add a word match mode.
* New options --[no-]encrypt-to.
* Some changes to the configure stuff. Switched to automake 1.4.
Removed intl/ from CVS, autogen.sh now uses gettextize.
* Preferences now include Twofish. Removed preference to Blowfish with
a special hack to suppress the "not listed in preferences" warning;
this is to allow us to switch completely to Twofish in the near future.
* Changed the locking stuff.
* Print all user ids of a good signature.
Noteworthy changes in version 0.9.2 (1999-01-01)
-----------------------------------
* add some additional time warp checks.
* Option --keyserver and command --send-keys to utilize HKP servers.
* Upgraded to zlib 1.1.3 and fixed an inflate bug
* More cleanup on the cleartext signatures.
Noteworthy changes in version 0.9.1 (1999-01-01)
-----------------------------------
* Polish language support.
* When querying the passphrase, the key ID of the primary key is
displayed along with the one of the used secondary key.
* Fixed a bug occurring when decrypting pgp 5 encrypted messages,
fixed an infinite loop bug in the 3DES code and in the code
which looks for trusted signatures.
* Fixed a bug in the mpi library which caused signatures not to
compare okay.
* Rewrote the handling of cleartext signatures; the code is now
better maintainable (I hope so).
* New status output VALIDSIG only for valid signatures together
with the fingerprint of the signer's key.
Noteworthy changes in version 0.9.0 (1998-12-23)
-----------------------------------
* --export does now only exports rfc2440 compatible keys; the
old behaviour is available with --export-all.
Generation of v3 ElGamal (sign and encrypt) keys is not longer
supported.
* Fixed the uncompress bug.
* Rewrote the rndunix module. There are two environment variables
used for debugging now: GNUPG_RNDUNIX_DBG give the file to write
debugging information (use "-" for stdout) and if GNUPG_RNDUNIX_DBGALL
is set, all programs which are only tried are also printed.
* New option --escape-from-lines to "dash-escape" "From " lines to
prevent mailers to change them to ">From ". This is not enabled by
default because it is not in compliance with rfc2440 - however, you
should turn it on.
Noteworthy changes in version 0.4.5 (1998-12-08)
-----------------------------------
* The keyrings and the trustdb is now locked, so that
other GnuPG processes won't damage these files. You
may want to put the option --lock-once into your options file.
* The latest self-signatures are now used; this enables --import
to see updated preferences etc.
* Import of subkeys should now work.
* Random gathering modules may now be loaded as extensions. Add
such a module for most Unices but it is very experimental!
* Brazilian language support.
Noteworthy changes in version 0.4.4 (1998-11-20)
-----------------------------------
* Fixed the way the key expiration time is stored. If you have
an expiration time on your key you should fix it with --edit-key
and the command "expire". I apologize for this inconvenience.
* Add option --charset to support "koi8-r" encoding of user ids.
(Not yet tested).
* Preferences should now work again. You should run
"gpgm --check-trustdb \*" to rebuild all preferences.
* Checking of certificates should now work but this needs a lot
of testing. Key validation values are now cached in the
trustdb; they should be recalculated as needed, but you may
use --check-trustdb or --update-trustdb to do this.
* Spanish translation by Urko Lusa.
* Patch files are from now on signed. See the man page
for the new option --not-dash-escaped.
* New syntax: --edit-key <userID> [<commands>]
If you run it without --batch the commands are executed and then
you are put into normal mode unless you use "quit" or "save" as
one of the commands. When in batch mode, the program quits after
the last command, so you have to use "save" if you did some changes.
It does not yet work completely, but may be used to list so the
keys etc.
Noteworthy changes in version 0.4.3 (1998-11-08)
-----------------------------------
* Fixed the gettext configure bug.
* Kludge for RSA keys: keyid and length of a RSA key are
correctly reported, but you get an error if you try to use
this key (If you do not have the non-US version).
* Experimental support for keyrings stored in a GDBM database.
This is *much* faster than a standard keyring. You will notice
that the import gets slower with time; the reason is that all
new keys are used to verify signatures of previous inserted
keys. Use "--keyring gnupg-gdbm:<name-of-gdbm-file>". This is
not (yet) supported for secret keys.
* A Russian language file in the distribution (alternatives are in
the contrib directory of the FTP servers)
* commandline option processing now works as expected for GNU programs
with the exception that you can't mix options and normal arguments.
* Now --list-key lists all matching keys. This is needed in some
other places too.
Noteworthy changes in version 0.4.2 (1998-10-18)
-----------------------------------
* This is only a snapshot: There are still a few bugs.
* Fixed this huge memory leak.
* Redesigned the trust database: You should run "gpgm --check-trustdb".
New command --update-trustdb, which adds new key from the public
keyring into your trustdb
* Fixed a bug in the armor code, leading to invalid packet errors.
(a workaround for this was to use --no-armor). The shorten line
length (64 instead of 72) fixes a problem with pgp5 and keyservers.
* comment packets are not anymore generated. "--export" filters
them out. One Exception: The comment packets in a secret keyring
are still used because they carry the factorization of the public
prime product.
* --import now only looks for KEYBLOCK headers, so you can now simply
Fix more spelling * NEWS, acinclude.m4, agent/command-ssh.c, agent/command.c, agent/gpg-agent.c, agent/keyformat.txt, agent/protect-tool.c, common/asshelp.c, common/b64enc.c, common/recsel.c, doc/DETAILS, doc/HACKING, doc/Notes, doc/TRANSLATE, doc/dirmngr.texi, doc/faq.org, doc/gpg-agent.texi, doc/gpg.texi, doc/gpgsm.texi, doc/instguide.texi, g10/armor.c, g10/gpg.c, g10/keyedit.c, g10/mainproc.c, g10/pkclist.c, g10/tofu.c, g13/sh-cmd.c, g13/sh-dmcrypt.c, kbx/keybox-init.c, m4/pkg.m4, sm/call-dirmngr.c, sm/gpgsm.c, tests/Makefile.am, tests/gpgscm/Manual.txt, tests/gpgscm/scheme.c, tests/openpgp/gpgv-forged-keyring.scm, tests/openpgp/multisig.test, tests/openpgp/verify.scm, tests/pkits/README, tools/applygnupgdefaults, tools/gpg-connect-agent.c, tools/mime-maker.c, tools/mime-parser.c: minor spelling cleanup. Signed-off-by: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
2016-09-15 14:21:15 -04:00
remove the "- " in front of such a header if someone accidentally signed
Added release date of older versions to NEWS. --
2015-06-15 14:12:43 +02:00
such a message or the keyblock is part of a cleartext signed message.
* --with-colons now lists the key expiration time and not anymore
the valid period.
* Some keyblocks created with old releases have a wrong sequence
of packets, so that the keyservers don't accept these keys.
Simply using "--edit-key" fixes the problem.
* New option --force-v3-sigs to generate signed messages which are
compatible to PGP 5.
* Add some code to support DLD (for non ELF systems) - but this is
not tested because my BSD box is currently broken.
* New command "expire" in the edit-key menu.
Noteworthy changes in version 0.4.1 (1998-10-07)
-----------------------------------
* A secondary key is used when the primary key is specified but cannot
be used for the operation (if it is a sign-only key).
* GNUPG can now handle concatenated armored messages: There is still a
bug if different kinds of messages are mixed.
* Iterated+Salted passphrases now work. If want to be sure that PGP5
is able to handle them you may want to use the options
"--s2k-mode 3 --s2k-cipher-algo cast5 --s2k-digest-algo sha1"
when changing a passphrase.
* doc/OpenPGP talks about OpenPGP compliance, doc/HACKING gives
a few hints about the internal structure.
* Checked gnupg against the August 1998 draft (07) and I believe
it is in compliance with this document (except for one point).
* Fixed some bugs in the import merging code and rewrote some
code for the trustdb.
Noteworthy changes in version 0.4.0 (1998-09-18)
-----------------------------------
* Triple DES is now supported. Michael Roth did this piece of
needed work. We have now all the coded needed to be OpenPGP
compliant.
* Added a simple rpm spec file (see INSTALL).
* detached and armored signatures are now using "PGP SIGNATURE",
except when --rfc1991 is used.
* All times which are not in the yyyy-mm-dd format are now printed
in local time.
Noteworthy changes in version 0.3.5 (1998-09-14)
-----------------------------------
* New option --throw-keyid to create anonymous enciphered messages.
If gpg detects such a message it tires all available secret keys
in turn so decode it. This is a gnupg extension and not in OpenPGP
but it has been discussed there and afaik some products use this
scheme too (Suggested by Nimrod Zimmerman).
* Fixed a bug with 5 byte length headers.
* --delete-[secret-]key is now also available in gpgm.
* cleartext signatures are not anymore converted to LF only.
* Fixed a trustdb problem. Run "gpgm --check-trustdb" to fix old
trust dbs.
* Building in another directory should now work.
* Weak key detection mechanism (Niklas Hernaeus).
Noteworthy changes in version 0.3.4 (1998-08-11)
-----------------------------------
* New options --comment and --set-filename; see g10/OPTIONS
* yes/no, y/n localized.
* Fixed some bugs.
Noteworthy changes in version 0.3.3 (1998-08-08)
-----------------------------------
* IMPORTANT: I found yet another bug in the way the secret keys
are encrypted - I did it the way pgp 2.x did it, but OpenPGP
and pgp 5.x specify another (in some aspects simpler) method.
To convert your secret keys you have to do this:
1. Build the new release but don't install it and keep
a copy of the old program.
2. Disable the network, make sure that you are the only
user, be sure that there are no Trojan horses etc ....
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
3. Use your old gpg (version 0.3.1 or 0.3.2) and set the
Added release date of older versions to NEWS. --
2015-06-15 14:12:43 +02:00
passphrases of ALL your secret keys to empty!
(gpg --change-passphrase your-user-id).
4. Save your ownertrusts (see the next point)
5. rm ~/.gnupg/trustdb.gpg
6. install the new version of gpg (0.3.3)
7. For every secret key call "gpg --edit-key your-user-id",
enter "passwd" at the prompt, follow the instructions and
change your password back, enter "save" to store it.
8. Restore the ownertrust (see next point).
* The format of the trust database has changed; you must delete
the old one, so gnupg can create a new one.
doc: Add release announcement pointers to NEWS entries. -- These are used by the website buider to link to the announcement mails. Signed-off-by: Werner Koch <wk@gnupg.org>
2017-01-04 18:37:36 +01:00
IMPORTANT: Use version 0.3.1 or .2 to save your assigned ownertrusts
Added release date of older versions to NEWS. --
2015-06-15 14:12:43 +02:00
("gpgm --list-ownertrust >saved-trust"); then build this new version
and restore the ownertrust with this new version
("gpgm --import-ownertrust saved-trust"). Please note that
--list-ownertrust has been renamed to --export-ownertrust in this
release and it does now only export defined ownertrusts.
* The command --edit-key now provides a commandline driven menu
which can be used for various tasks. --sign-key is only an
an alias to --edit-key and maybe removed in future: use the
command "sign" of this new menu - you can select which user ids
you want to sign.
* Alternate user ids can now be created an signed.
* Owner trust values can now be changed with --edit-key (trust)
* GNUPG can now run as a coprocess; this enables sophisticated
frontends. tools/shmtest.c is a simple sample implementation.
This needs some more work: all tty_xxx() are to be replaced
by cpr_xxx() and some changes in the display logics is needed.
* Removed options --gen-prime and --gen-random.
* Removed option --add-key; use --edit-key instead.
* Removed option --change-passphrase; use --edit-key instead.
* Signatures are now checked even if the output file could not
be created. Command "--verify" tries to find the detached data.
* gpg now disables core dumps.
* compress and symmetric cipher preferences are now used.
Because there is no 3DES yet, this is replaced by Blowfish.
* We have added the Twofish as an experimental cipher algorithm.
Many thanks to Matthew Skala for doing this work.
Twofish is the AES submission from Schneier et al.; see
"www.counterpane.com/twofish.html" for more information.
* Started with a help system: If you enter a question mark at some
prompt; you should get a specific help for this prompt.
* There is no more backup copy of the secret keyring.
* A lot of new bugs. I think this release is not as stable as
the previous one.
Noteworthy changes in version 0.3.2 (1998-07-09)
-----------------------------------
* Fixed some bugs when using --textmode (-seat)
* Now displays the trust status of a positive verified message.
* Keyrings are now scanned in the sequence they are added with
--[secret-]keyring. Note that the default keyring is implicitly
added as the very first one unless --no-default-keyring is used.
* Fixed setuid and dlopen bug.
Noteworthy changes in version 0.3.1 (1998-07-06)
-----------------------------------
* Partial headers are now written in the OpenPGP format if
a key in a v4 packet is used.
* Removed some unused options, removed the gnupg.sig stuff.
* Key lookup by name now returns a key which can be used for
the desired action.
* New options --list-ownertrust (gpgm) to make a backup copy
of the ownertrust values you assigned.
* clear signature headers are now in compliance with OpenPGP.
Noteworthy changes in version 0.3.0 (1998-06-25)
-----------------------------------
* New option --emulate-checksum-bug. If your passphrase does not
work anymore, use this option and --change-passphrase to rewrite
your passphrase.
* More complete v4 key support: Preferences and expiration time
is set into the self signature.
* Key generation defaults to DSA/ElGamal keys, so that new keys are
interoperable with pgp5
* DSA key generation is faster and key generation does not anymore
remove entropy from the random generator (the primes are public
parameters, so there is really no need for a cryptographic secure
prime number generator which we had used).
* A complete new structure for representing the key parameters.
* Removed most public key knowledge into the cipher library.
* Support for dynamic loading of new algorithms.
* Moved tiger to an extension module.
Noteworthy changes in version 0.2.19 (1998-05-29)
------------------------------------
* Replaced /dev/urandom in checks with new tool mk-tdata.
* Some assembler file cleanups; some more functions for the Alpha.
* Tiger has now the OpenPGP assigned number 6. Because the OID has
changed, old signatures using this algorithm can't be verified.
* gnupg now encrypts the compressed packed and not any longer in the
reverse order; anyway it can decrypt both versions. Thanks to Tom
for telling me this (not security related) bug.
* --add-key works and you are now able to generate subkeys.
* It is now possible to generate ElGamal keys in v4 packets to create
valid OpenPGP keys.
* Some new features for better integration into MUAs.
Noteworthy changes in version 0.2.18 (1998-05-15)
------------------------------------
* Splitted cipher/random.c, add new option "--disable-dev-random"
to configure to support the development of a random source for
other systems. Prepared sourcefiles rand-unix.c, rand-w32.c
and rand-dummy.c (which is used to allow compilation on systems
without a random source).
* Fixed a small bug in the key generation (it was possible that 48 bits
of a key were not taken from the random pool)
* Add key generation for DSA and v4 signatures.
* Add a function trap_unaligned(), so that a SIGBUS is issued on
Alphas and not the slow emulation code is used. And success: rmd160
raised a SIGBUS.
* Enhanced the formatting facility of argparse and changed the use of
\r,\v to @ because gettext does not like it.
* New option "--compress-algo 1" to allow the creation of compressed
messages which are readable by PGP and "--print-md" (gpgm) to make
speed measurement easier.
Noteworthy changes in version 0.2.17 (1998-05-04)
------------------------------------
* Comment packets are now of private type 61.
* Passphrase code still used a 160 bit blowfish key, added a
silly workaround. Please change your passphrase again - sorry.
* Conventional encryption now uses a type 3 packet to describe the
used algorithms.
* The new algorithm number for Blowfish is 20, 16 is still used for
encryption only; for signing it is only used when it is in a v3 packet,
so that GNUPG keys are still valid.
Noteworthy changes in version 0.2.16 (1998-04-28)
------------------------------------
* Add experimental support for the TIGER/192 message digest algorithm.
(But there is only a dummy ASN OID).
* Standard cipher is now Blowfish with 128 bit key in OpenPGP's CFB
mode. I renamed the old cipher to Blowfish160. Because the OpenPGP
group refused to assign me a number for Blowfish160, I have to
drop support for this in the future. You should use
"--change-passphrase" to recode your current passphrase with 128
bit Blowfish.
Noteworthy changes in version 0.2.15 (1998-04-09)
------------------------------------
* Fixed a bug with the old checksum calculation for secret keys.
If you run the program without --batch, a warning does inform
you if your secret key needs to be converted; simply use
--change-passphrase to recalculate the checksum. Please do this
soon, as the compatible mode will be removed sometime in the future.
* CAST5 works (using the PGP's special CFB mode).
* Again somewhat more PGP 5 compatible.
* Some new test cases
Noteworthy changes in version 0.2.14 (1998-04-02)
------------------------------------
* Changed the internal handling of keyrings.
* Add support to list PGP 5 keyrings with subkeys
* Timestamps of signatures are now verified.
* A expiration time can now be specified during key generation.
* Some speedups for Blowfish and SHA-1, rewrote SHA-1 transform.
Reduced the amount of random bytes needed for key generation in
some cases.
Noteworthy changes in version 0.2.13 (1998-03-10)
------------------------------------
* Verify of DSA signatures works.
* Re-implemented the slower random number generator.
Noteworthy changes in version 0.2.12 (1998-03-07)
------------------------------------
* --delete-key checks that there is no secret key. The new
option --delete-secret-key maybe used to delete a secret key.
* "-kv" now works as expected. Options "--list-{keys,sigs]"
and "--check-sigs" are now working.
* New options "--verify" and "--decrypt" to better support integration
into MUAs (partly done for Mutt).
* New option "--with-colons" to make parsing of key lists easier.
Noteworthy changes in version 0.2.11 (1998-03-02)
------------------------------------
* GPG now asks for a recipient's name if option "-r" is not used.
* If there is no good trust path, the program asks whether to use
the public keys anyway.
* "--delete-key" works for public keys. What semantics shall I use
when there is a secret key too? Delete the secret key or leave him
and auto-regenerate the public key, next time the secret key is used?
Noteworthy changes in version 0.2.10 (1998-02-27)
------------------------------------
* Code for the alpha is much faster (about 20 times); the data
was misaligned and the kernel traps this, so nearly all time
was used by system to trap the misalignments and to write
syslog messages. Shame on me and thanks to Ralph for
pointing me at this while drinking some beer yesterday.
* Changed some configure options and add an option
--disable-m-guard to remove the memory checking code
and to compile everything with optimization on.
* New environment variable GNUPGHOME, which can be used to set
another homedir than ~/.gnupg. Changed default homedir for
Windoze version to c:/gnupg.
* Fixed detached signatures; detached PGP signatures caused a SEGV.
* The Windoze version works (as usual w/o a strong RNG).
Noteworthy changes in version 0.2.9 (1998-02-26)
-----------------------------------
* Fixed FreeBSD bug.
* Added a simple man page.
* Switched to automake1.2f and a newer gettext.
Noteworthy changes in version 0.2.8 (1998-02-24)
-----------------------------------
* Changed the name to GNUPG, the binaries are called gpg and gpgm.
You must rename rename the directory "~/.g10" to ~/.gnupg/, rename
{pub,sec}ring.g10 to {pub,sec}ring.gpg, trustdb.g10 to trustdb.gpg
and g10.sig to gnupg.sig.
* New or changed passphrases are now salted.
Noteworthy changes in version 0.2.7 (1998-02-18)
-----------------------------------
* New command "gen-revoke" to create a key revocation certificate.
* New option "homedir" to set the homedir (which defaults to "~/.g10").
This directory is created if it does not exists (only the last
part of the name and not the complete hierarchy)
* Command "import" works. (Try: "finger gcrypt@ftp.guug.de|g10 --import")
* New commands "dearmor/enarmor" for g10maint. These are mainly
used for internal test purposes.
* Option --version now conforming to the GNU standards and lists
the available ciphers, message digests and public key algorithms.
* Assembler code for m68k (not tested).
* "make check" works.
Noteworthy changes in version 0.2.6 (1998-02-13)
-----------------------------------
* Option "--export" works.
Noteworthy changes in version 0.2.5 (1998-02-12)
-----------------------------------
* Added zlib for systems which don't have it.
Use "./configure --with-zlib" to link with the static version.
* Generalized some more functions and rewrote the encoding of
message digests into MPIs.
* Enhanced the checkit script
Noteworthy changes in version 0.2.4 (1998-02-11)
-----------------------------------
* nearly doubled the speed of the ElGamal signature verification.
* backup copies of keyrings are created.
* assembler stuff for Pentium; gives about 15% better performance.
* fixed a lot of bugs.
Noteworthy changes in version 0.2.3 (1998-02-09)
-----------------------------------
* Found a bug in the calculation of ELG fingerprints. This is now
fixed, but all existing fingerprints and keyids for ELG keys
are not any more valid.
* armor should now work; including clear signed text.
* moved some options to the new program g10maint
* It's now 64 bit clean and runs fine on an alpha--linux.
* Key generation is much faster now. I fixed this by using not
so strong random number for the primes (this was a bug because the
ElGamal primes are public parameters and it does not make sense
to generate them from strong random). The real secret is the x value
which is still generated from strong (okay: /dev/random) random bits.
* added option "--status-fd": see g10/OPTIONS
* We have secure memory on systems which support mlock().
It is not complete yet, because we do not have signal handler
which does a cleanup in very case.
We should also check the ulimit for the user in the case
that the admin does not have set a limit on locked pages.
* started with internationalization support.
* The logic to handle the web of trust is now implemented. It is
has some bugs; but I'm going to change the algorithm anyway.
It works by calculating the trustlevel on the fly. It may ask
you to provide trust parameters if the calculated trust probability
is too low. I will write a paper which discusses this new approach.
* a couple of changes to the configure script.
* New option "--quick-random" which uses a much quicker random
number generator. Keys generated while this option is in effect
are flags with "INSECURE!" in the user-id. This is a development
only option.
* Read support for new version packets (OpenPGP).
* Comment packets are now of correct OpenPGP type 16. Old comment
packets written by G10 are detected because they always start with
a hash which is an invalid version byte.
* The string "(INSECURE!)" is appended to a new user-id if this
is generated on a system without a good random number generator.
Version 0.2.2 (1998-02-09)
Version 0.2.1 (1998-01-28)
Version 0.2.0 (1998-01-25)
Version 0.1.3 (1998-01-12)
Version 0.1.2 (1998-01-07)
Version 0.1.1 (1998-01-07)
Version 0.1.0 (1998-01-05)
Version 0.0.0 (1997-12-20)
Release 2.1.22
2017-07-28 18:59:04 +02:00
Copyright (C) 1998-2017 Free Software Foundation, Inc.
Copyright (C) 1997-2017 Werner Koch
Update head to match stable 1.0
2002-06-29 14:15:02 +00:00
Merged Top directory of NewPG with GnuPG.
2002-10-19 07:55:27 +00:00
This file is free software; as a special exception the author gives
unlimited permission to copy and/or distribute it, with or without
modifications, as long as this notice is preserved.
Update head to match stable 1.0
2002-06-29 14:15:02 +00:00
Merged Top directory of NewPG with GnuPG.
2002-10-19 07:55:27 +00:00
This file is distributed in the hope that it will be useful, but
WITHOUT ANY WARRANTY, to the extent permitted by law; without even the
implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Copy Permalink