Print a 'f' for validated non-root certificates in gpgsm colon style listing.

Doc fixes.

doc/DETAILS

@@ -59,6 +59,10 @@ record; gpg2 does this by default and the option is a dummy.
 		    that the secret key is available, but any key may
 		    be marked as ultimately trusted. 
 
+            For X.509 certificates an 'u' is used for a trusted root
+            certificates (i.e. for the truct anchor) and and 'f' for
+            all other validated certificates.
+
  3. Field:  length of key in bits.
 
  4. Field:  Algorithm:	1 = RSA

g10/ChangeLog

@@ -1,3 +1,8 @@
+2008-08-11  Werner Koch  <wk@g10code.com>
+
+	* keygen.c (ask_expire_interval): Check for time overflow of an
+	u32.  Fixes bug #947.
+
 2008-08-01  Werner Koch  <wk@g10code.com>
 
 	* tdbio.c (open_db) [!EROFS]: Move closing parens out of the

scd/ChangeLog

@@ -4,7 +4,7 @@
 	(reset_rapdu_reader, open_rapdu_reader): Allow ATRs of up to 33
 	bytes.  Provide maximum size of ATR buffer using DIM.  Such long
 	ATR are never seen in reality but the PC/SC library of MAC OS X is
-	just too buggy. Reported by Ludovic Rousseau.  Fixes bug #948.
+	just too buggy.  Reported by Ludovic Rousseau.  Fixes bug #948.
 
 2008-07-30  Werner Koch  <wk@g10code.com>
 

sm/ChangeLog

@@ -1,3 +1,7 @@
+2008-08-13  Werner Koch  <wk@g10code.com>
+
+	* keylist.c (list_cert_colon): Print 'f' for validated certs.
+
 2008-08-08  Marcus Brinkmann  <marcus@g10code.de>
 
 	* gpgsm.h (struct server_control_s): Remove member dirmngr_seen.

sm/keylist.c

@@ -415,6 +415,8 @@ list_cert_colon (ctrl_t ctrl, ksba_cert_t cert, unsigned int validity,
         *truststring = 'e';
       else if (valerr)
         *truststring = 'i';
+      else if (ctrl->with_validation && !is_root)
+        *truststring = 'f';
     }
 
   /* If we have no truststring yet (i.e. the certificate might be