Werner Koch
6089d7f5d8
Updated keys
2006-05-17 08:42:12 +00:00
Werner Koch
1918e6a5e2
Forgot to save the actual fix
2006-05-16 11:08:47 +00:00
Werner Koch
e09aa70c54
Fixed OSF5 warning suppression.
2006-05-16 11:06:28 +00:00
David Shaw
eda3d78130
* libcurl.m4: Fix mistaken AC_SUBST when curl is not found.
2006-05-10 02:09:27 +00:00
David Shaw
76d69cd56a
* NEWS: Note SHA-224 and DSA2.
...
* configure.ac: Remove --enable-old-keyserver-helpers. Comment out
--enable-m-guard for now.
2006-04-27 16:20:13 +00:00
David Shaw
bc81ce601f
(keyserver_import_cert): Show warning if there is a CERT fingerprint,
...
but no --keyserver set.
2006-04-27 03:38:56 +00:00
David Shaw
034937c6d1
* keyserver.c (path_makes_direct): New. (keyserver_spawn): Used here
...
to add "_uri" to certain gpgkeys_xxx helpers when the meaning is
different if a path is provided (i.e. ldap).
2006-04-27 03:14:17 +00:00
David Shaw
f37dac88cb
* gpgkeys_http.c, gpgkeys_oldhkp.c: Removed.
2006-04-26 21:49:43 +00:00
David Shaw
e87d36ccf6
* Makefile.am: Don't build gpgkeys_http or gpgkeys_(old)hkp any longer as
...
this is done via curl or fake-curl.
* ksutil.h, ksutil.c, gpgkeys_hkp.c, gpgkeys_curl.c: Minor #include tweaks
as FAKE_CURL is no longer meaningful.
2006-04-26 21:48:29 +00:00
David Shaw
19c353232e
* keyserver.c: Fix build problem with platforms that stick libcurl in
...
a place not in the regular include search path.
2006-04-22 14:15:50 +00:00
David Shaw
fcb3150564
* make-dns-cert.c (main): Small exit code tweak from Peter Palfrader.
2006-04-20 22:05:42 +00:00
David Shaw
0f1c0a9f28
* options.h, gpg.c (main): Add --enable-dsa2 and --disable-dsa2. Defaults
...
to disable.
* pkclist.c (algo_available): If --enable-dsa2 is set, we're allowed to
truncate hashes to fit DSA keys.
* sign.c (match_dsa_hash): New. Return the best match hash for a given q
size. (do_sign, hash_for, sign_file): When signing with a DSA key, if it
has q==160, assume it is an old DSA key and don't allow truncation unless
--enable-dsa2 is also set. q!=160 always allows truncation since they
must be DSA2 keys. (make_keysig_packet): If the user doesn't specify a
--cert-digest-algo, use match_dsa_hash to pick the best hash for key
signatures.
2006-04-20 21:32:42 +00:00
David Shaw
b625a6d1a9
(generate): Tweak to allow keys larger than 1024 bits. Enforce that the q
...
size doesn't end between byte boundaries.
2006-04-20 21:11:56 +00:00
David Shaw
2f94329422
The plumbing necessary to create DSA keys with variable sized q.
...
Not yet used (q==160).
2006-04-20 18:40:37 +00:00
David Shaw
99b1f3e1da
* gpg.c (print_mds), armor.c (armor_filter, parse_hash_header): Add
...
SHA-224.
* sign.c (write_plaintext_packet), encode.c (encode_simple): Factor
common literal packet setup code from here, to...
* main.h, plaintext.c (setup_plaintext_name): Here. New. Make sure the
literal packet filename field is UTF-8 encoded.
* options.h, gpg.c (main): Make sure --set-filename is UTF-8 encoded
and note when filenames are already UTF-8.
2006-04-20 02:36:05 +00:00
David Shaw
ebdd458f82
* sigs.test, mds.test: Add tests for SHA-224, SHA-384, and SHA-512.
2006-04-20 02:12:34 +00:00
David Shaw
f0902a6aef
Add SHA-224 support
2006-04-20 02:05:32 +00:00
David Shaw
36ce455f15
* keyedit.c (menu_backsign): Give some more verbose errors when we
...
have no need to backsign.
2006-04-19 04:29:31 +00:00
David Shaw
0b33740f4e
* gpg.sgml: Reminders that --cipher-algo, --digest-algo, and
...
--compress-algo should be avoided.
2006-04-19 03:56:23 +00:00
David Shaw
45c1414a2f
* miscutil.c (make_printable_string): Fix bug where some control
...
characters lose part of their ASCII representation.
2006-04-17 20:54:15 +00:00
Werner Koch
b2f4b15b7c
use minimal posix sed
2006-04-12 10:36:23 +00:00
David Shaw
8df71cf868
* memory.c (realloc): Revert m_guard fix and stick an #error in there to
...
inform people not to use it.
2006-04-11 19:45:44 +00:00
David Shaw
27bb89d687
* options.skel, photoid.c (get_default_photo_command): Find an image
...
viewer at runtime. Seems FC5 doesn't have xloadimage.
2006-04-11 19:20:08 +00:00
Werner Koch
2830e83246
.
2006-04-11 07:50:34 +00:00
Werner Koch
168583e596
Add new regression test
2006-04-11 07:49:25 +00:00
David Shaw
ed776a913f
* gpgkeys_ldap.c (ldap_quote, get_name, search_key): LDAP-quote
...
directly into place rather than mallocing temporary buffers.
2006-04-11 03:25:25 +00:00
David Shaw
af0a0ae6ee
* gpgkeys_ldap.c (get_name): Build strings with strcat rather than
...
using sprintf which is harder to read and modify.
2006-04-11 03:13:46 +00:00
David Shaw
3011a39284
* ksutil.h, ksutil.c (classify_ks_search): Add KS_SEARCH_KEYID_SHORT
...
and KS_SEARCH_KEYID_LONG to search for a key ID.
* gpgkeys_ldap.c (search_key): Use it here to flip from pgpUserID
searches to pgpKeyID or pgpCertID.
2006-04-11 03:00:50 +00:00
David Shaw
1bf02666fb
* gpg.sgml: Some typo fixes. This is Debian 361324.
2006-04-09 23:22:24 +00:00
David Shaw
51e88a5fdb
* getkey.c (parse_auto_key_locate): Fix dupe-removal code.
...
* keyedit.c (menu_backsign): Allow backsigning even if the secret
subkey doesn't have a binding signature.
* armor.c (radix64_read): Don't report EOF when reading only a pad (=)
character. The EOF actually starts after the pad.
* gpg.c (main): Make --export, --send-keys, --recv-keys,
--refresh-keys, and --fetch-keys follow their arguments from left to
right. Suggested by Peter Palfrader.
2006-04-09 03:34:09 +00:00
Werner Koch
4fdc6387c3
Fixed segv
2006-04-08 01:23:23 +00:00
Werner Koch
e5a03c84f7
See ChangeLog
2006-04-08 00:36:51 +00:00
David Shaw
4af2725d32
* memory.c (realloc): Fix compile problem with --enable-m-guard.
2006-04-06 17:58:13 +00:00
David Shaw
1f6fba7c52
* make-dns-cert.c: Some changes from Peter Palfrader to send errors to
...
stderr and allow spaces in a fingerprint. Also warn when a key is
over 16k (as that is the default max-cert-size) and fail when a key is
over 64k as that is the DNS limit in many places.
2006-04-05 14:25:40 +00:00
David Shaw
d855bd31ab
* make-dns-cert.c: New program to generate properly formatted CERT records
...
so people don't have to do it manually.
2006-04-04 22:19:13 +00:00
Werner Koch
91497480aa
post release updates
2006-04-03 11:16:19 +00:00
Werner Koch
256f67675f
About to release 1.4.3
2006-04-03 10:13:23 +00:00
David Shaw
4afa4eb10e
* getkey.c (get_pubkey_byname): Fix missing auto_key_retrieve unlock.
...
Fix strings to not start with a capital letter as per convention.
2006-04-01 02:47:53 +00:00
David Shaw
66965ccc29
Update copyright
2006-03-30 23:55:45 +00:00
David Shaw
92e1528bf2
* main.h, seskey.c (encode_md_value): Modify to allow a q size greater
...
than 160 bits as per DSA2. This will allow us to verify and issue DSA2
signatures for some backwards compatibility once we start generating DSA2
keys.
* sign.c (do_sign), sig-check.c (do_check): Change all callers.
* sign.c (do_sign): Enforce the 160-bit check for new signatures here
since encode_md_value can handle non-160-bit digests now. This will need
to come out once the standard for DSA2 is firmed up.
2006-03-30 19:20:59 +00:00
David Shaw
a43c1bc874
* README: Some more notes about building fat binaries.
2006-03-30 14:19:08 +00:00
David Shaw
f99dec9e53
* cert.c (main): Fix test program build warning on OSX.
2006-03-30 14:13:35 +00:00
David Shaw
0ea95fd80f
* gpgkeys_ldap.c: #define LDAP_DEPRECATED for newer OpenLDAPs so they use
...
the regular old API that is compatible with other LDAP libraries.
2006-03-27 19:06:46 +00:00
David Shaw
025aabfd8e
* README: Missing some instructions on building a fat binary.
2006-03-25 03:05:30 +00:00
David Shaw
97b0606a95
* getkey.c (parse_auto_key_locate): Silently strip out duplicates rather
...
than causing an error.
2006-03-22 23:05:32 +00:00
Werner Koch
ac46433052
Changed URLs
2006-03-22 16:43:59 +00:00
David Shaw
5531da1cfc
* mainproc.c (get_pka_address): Fix bug introduced as part of
...
sig_to_notation conversion. Noted by Peter Palfradrer.
2006-03-22 14:37:53 +00:00
Werner Koch
7f99c71839
Allow for rmd160 signatures when using gpg-agent.
2006-03-21 13:01:45 +00:00
David Shaw
70f1c32ffd
* blowfish.c, md5.c, rmd160.c, sha1.c, sha256.c, sha512.c: Revert previous
...
change. It's now all done in configure.
2006-03-20 16:40:28 +00:00
David Shaw
ca766728f4
* configure.ac: Improved --disable-endian-check that doesn't involve
...
changing #ifdefs in the rest of the code.
2006-03-20 16:13:52 +00:00
