security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2024-05-27 21:41:23 +02:00
Code Activity
3,963 Commits 100 Branches 301 Tags 69 MiB
2336b09779
Commit Graph

102 Commits

Author SHA1 Message Date
Werner Koch
00f8b68505 Move parameter file description to the manual. 2011-03-01 17:08:49 +01:00
Werner Koch
28c157b55c Support X.509 certificate creation. 
Using "gpgsm --genkey" allows the creation of a self-signed
certificate via a new prompt.

Using "gpgsm --genkey --batch" should allow the creation of arbitrary
certificates controlled by a parameter file.  An example parameter file
is

    Key-Type: RSA
    Key-Length: 1024
    Key-Grip: 2C50DC6101C10C9C643E315FE3EADCCBC24F4BEA
    Key-Usage: sign, encrypt
    Serial: random
    Name-DN: CN=some test key
    Name-Email: foo@example.org
    Name-Email: bar@exmaple.org
    Hash-Algo: SHA384
    not-after: 2038-01-16 12:44

This creates a self-signed X.509 certificate using the key given by
the keygrip and using SHA-384 as hash algorithm.  The keyword
signing-key can be used to sign the certificate with a different key.
See sm/certreggen.c for details.
 2011-03-01 14:42:56 +01:00
Werner Koch
cd9614b81b Removed deprecated SIGEXPIRED status line. 2011-02-04 10:28:28 +01:00
Werner Koch
5667e33290 Add a DECRYPTION_INFO status. 
DECRYPTION_INFO <mdc_method> <sym_algo>
        Print information about the symmetric encryption algorithm and
        the MDC method.  This will be emitted even if the decryption
        fails.
 2011-02-03 20:59:01 +01:00
Werner Koch
0103a53aa6 Smartcard related updates 2010-11-17 13:21:24 +00:00
Werner Koch
e9996e855e doc fix 2010-10-18 13:40:06 +00:00
Werner Koch
764e88d4df All tests work are again working 2010-10-14 16:34:31 +00:00
Werner Koch
bfbd80feb9 Exporting secret keys via gpg-agent is now basically supported. 
A couple of forward ported changes.
Doc updates.
 2010-10-01 20:33:53 +00:00
Werner Koch
a1412b05de More changes on the way to remove secring.gpg. 2010-04-21 16:26:17 +00:00
Werner Koch
fb2ba98963 Finished the bulk of changes to use estream in most places instead of 
stdio.
 2010-03-15 11:15:45 +00:00
Werner Koch
be45bf3d54 Add dummu option --passwd for gpg. 
Collected changes.
 2010-01-08 19:18:49 +00:00
Werner Koch
af935bd410 Implement --faked-systrem-time for gpg. 
Typo and comment fixes.
 2009-12-17 17:25:26 +00:00
Werner Koch
85d778b9f6 Use ADNS for PKA and SRV records if no other resolver is available. 2009-12-07 15:52:27 +00:00
Werner Koch
49b00ffd67 allow for default algorithms in a gpg parameter file 2009-12-04 19:47:54 +00:00
Werner Koch
a1b6142855 [scd] Memory leak fix. 
[g13] Send MOUNTPOINT status line
 2009-10-28 12:02:15 +00:00
Werner Koch
019601191a Improved detection of bad/invalid signer keys. 2009-08-06 20:12:00 +00:00
Werner Koch
830dae2873 Print status of CRL checks in the audit log. 2009-07-23 15:18:58 +00:00
Werner Koch
e535e3fccc [g10] 
* exec.c: Fix function name indentation.
(expand_args): Simplify by using membuf functions.
(exec_write): Fix memory leak on error.
(w32_system): Use DETACHED_PROCESS so
that a new console is not created.
 2009-07-13 17:36:02 +00:00
Werner Koch
31084d6dc9 Support writing of existing keys with non-matching key sizes. 2009-07-09 14:54:18 +00:00
Werner Koch
9c47553308 Make soem omnikey readers work with extended length APDUs. 2009-06-29 20:54:00 +00:00
Werner Koch
ceb42db4dd Print NO_SECKEY status line in gpgsm. 
This fixes bug#1020.
 2009-03-25 16:05:16 +00:00
Werner Koch
36d681d98e Fix keygrip computation for TCOS 3 cards. 
Emit PROGRESS status lines during --learn-card.
 2009-03-20 19:04:47 +00:00
Werner Koch
d0440bab64 Cleanups. Fixes bug 956. 2008-12-08 11:42:33 +00:00
Werner Koch
d92f06e882 Add a warning nite to --throw-keyds. 2008-08-28 14:57:25 +00:00
Werner Koch
7b81a6b074 Print a 'f' for validated non-root certificates in gpgsm colon style listing. 
Doc fixes.
 2008-08-13 15:41:48 +00:00
Werner Koch
ac5c3fab30 Cehck for expire date overflows. 2008-08-11 08:08:08 +00:00
Werner Koch
9d5a10a453 Do not run the setuid test if running under as root proper. 
Documentation fixes.
Some enhancements for the new OpenPGP Card.
 2008-07-17 19:40:53 +00:00
Werner Koch
aa68a60301 Add controlo statement %ask-passphrase 2008-06-16 15:48:33 +00:00
Werner Koch
e2ce70f939 Clarify descrition for field 10. 2008-06-13 16:50:59 +00:00
Werner Koch
035c838f71 Made --fixed-list-mode obsolete. 2008-06-11 08:07:54 +00:00
Werner Koch
d9405f0c49 Updated German translation. 
Fix in gpgconf for W32.
 2008-05-09 09:54:35 +00:00
Werner Koch
b680d034fa W32 fix for trustdb creation. 2008-01-30 13:26:32 +00:00
Werner Koch
c1270f06fe Document --auto-issuer-key-retrieve. 2007-11-19 16:32:05 +00:00
Werner Koch
74d344a521 Implemented the chain model for X.509 validation. 2007-08-10 16:52:05 +00:00
Werner Koch
4631bc8ddf Fixed card key generation of gpg2. 
Reveal less information about timings while generating a key.
 2007-07-05 16:58:19 +00:00
Werner Koch
f6243073a8 Add new SVN only file README.maint 
doc/
	* gpg.texi (GPG Configuration): Document envvar LANGUAGE.
	(GPG Configuration Options): Document show-primary-uid-only.
g10/
	* gpg.c (main): Add verify option show-primary-uid-only.
	* options.h (VERIFY_SHOW_PRIMARY_UID_ONLY): New.
	* mainproc.c (check_sig_and_print): Implement it.

	* encr-data.c (decrypt_data): Correctly test for unknown algorithm.
	* import.c (check_prefs): Ditto.
	* keyedit.c (show_prefs): Ditto.
	* mainproc.c (proc_symkey_enc): Ditto.
 2007-02-26 20:24:29 +00:00
Werner Koch
7eec2efa66 Added LIBINTL to more Makefile targets. 
doc/
	* com-certs.pem: Added the current root certifcates of D-Trust and
	S-Trust.

g10/
	* status.c (write_status_begin_signing): New.
	* sign.c (sign_file, sign_symencrypt_file): Call it.
	* textfilter.c (copy_clearsig_text): Call it.

	* call-agent.c (agent_scd_pksign): Pass --hash-rmd160 to SCD if
	required.

	* gpg.c (main): Let --no-use-agent and --gpg-agent-info print a
	warning.  
	* misc.c (obsolete_option): New.
 2007-01-30 20:16:28 +00:00
Werner Koch
650293c4f6 sm/ 
* server.c (skip_options): Skip leading spaces.
(has_option): Honor "--".
(cmd_export): Add option --data to do an inline export.  Skip all
options.

* certdump.c (gpgsm_fpr_and_name_for_status): New.
* verify.c (gpgsm_verify): Use it to print correct status messages.

doc/
* gpgsm.texi (GPGSM EXPORT): Document changes.
 2006-11-14 10:23:21 +00:00
Werner Koch
b5a8d7d268 . 2006-11-11 14:17:09 +00:00
Werner Koch
0ebd23fa76 Migrated more stuff to doc/ 
Migrated the gpg regression tests.
Some changes tp the gpg code to fix bugs and
for the use in testing. 
make distcheck works now with gpg enabled.
 2006-08-21 20:20:23 +00:00
Repo Admin
82a17c9fb3 This commit was manufactured by cvs2svn to create branch 
'GNUPG-1-9-BRANCH'.
 2002-10-19 07:55:27 +00:00
Werner Koch
10128a5e25 * DETAILS (KEY_CREATED): Enhanced by fingerprint. 2002-10-12 11:47:01 +00:00
Werner Koch
18306f4650 * DETAILS: s/XORed/ORed/. 2002-09-20 06:01:14 +00:00
David Shaw
811b782cba * DETAILS: Fix batch key generation example. 2002-09-12 12:12:58 +00:00
Werner Koch
bcedc5dad1 * gpg.sgml: Updated the charset option. 
* DETAILS: Added status IMPORT_OK.
 2002-09-02 10:58:46 +00:00
David Shaw
a30375ef28 * gpg.sgml: Document keyserver-option include-subkeys. Note that 
honor-http-proxy is a keyserver-option now.

* DETAILS: Add "Key not trusted" to INV_RECP status code.
 2002-08-30 19:28:33 +00:00
Werner Koch
277a9a3755 Include intl/ in the CVS again; otherwise we are not able to 
re-recreate a distribution from CVS.
Some minor other fixes.
 2002-08-23 08:02:08 +00:00
David Shaw
12fb1e6d55 * DETAILS: Clarify that trust letters 'q' and '-' can be treated 
identically.

* gpg.sgml: Document --ignore-mdc-error.
 2002-08-20 12:56:51 +00:00
Werner Koch
67faf234a3 minor doc fixes. 2002-08-06 13:30:28 +00:00
Werner Koch
160895b8e6 Add a new readon code for delet key. 2002-07-24 07:41:41 +00:00