security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2024-11-10 21:38:50 +01:00
Code Activity
3,827 Commits 101 Branches 306 Tags 73 MiB
90b419f3e9
Commit Graph

302 Commits

Author SHA1 Message Date
Werner Koch
dc2de957b3 Allow standalone build. 2008-03-26 17:44:56 +00:00
Werner Koch
e751bcdd04 Add IF command and new variable functions to gpg-connect-agent. 2008-03-05 10:08:10 +00:00
Marcus Brinkmann
a33b6677ff 2008-02-27 Marcus Brinkmann <marcus@g10code.de> 
* gpgconf-comp.c (option_check_validity): For now, error out on
	empty strings.
	(enum): Add GC_ARG_TYPE_PUB_KEY and GC_ARG_TYPE_SEC_KEY.
 2008-02-27 17:32:47 +00:00
Werner Koch
f13c5a48fc Improve certificate chain construction. 
Extend PKITS framework
 2008-02-19 10:33:35 +00:00
Marcus Brinkmann
b9cb60ec80 2008-02-01 Marcus Brinkmann <marcus@g10code.de> 
* gpgconf-comp.c (gc_component_list_options): Fix memcpy.
	Reported by Marc Mutz.
 2008-02-01 20:26:24 +00:00
Werner Koch
fefc0da6e9 translation fixes 2008-01-22 12:06:00 +00:00
Marcus Brinkmann
568cc4585a 2008-01-17 Marcus Brinkmann <marcus@g10code.de> 
* gpgconf-comp.c (change_options_program): Strip duplicated
	utf8-strings entries for gnupg backend.  Don't create them either.
 2008-01-17 22:42:58 +00:00
Werner Koch
56bd419029 Doc fixes. 
Add more files to POTFILES.
Protect against malloc bombs.
 2007-12-12 16:47:52 +00:00
Marcus Brinkmann
b644408d0d 2007-12-10 Marcus Brinkmann <marcus@g10code.de> 
* gpgconf-comp.c (gc_component_list_options): Fix up expert level
	of group.
 2007-12-10 16:44:38 +00:00
Marcus Brinkmann
1d282c5938 2007-12-04 Marcus Brinkmann <marcus@g10code.de> 
* gpgconf-comp.c (gc_component_list_components): Do not print a
	trailing semi-colon to ensure forward compatibility, as this would
	indicate another empty field.
	(gc_process_gpgconf_conf): Likewise.
 2007-12-04 14:47:28 +00:00
Marcus Brinkmann
a9b7f3356b 2007-12-04 Marcus Brinkmann <marcus@g10code.de> 
* gpgconf-comp.c (gc_component_list_components): Do not print a
	trailing semi-colon to ensure forward compatibility, as this would
	indicate another empty field.
 2007-12-03 23:39:49 +00:00
Werner Koch
55ba204bfa Started to implement the audit log feature. 
Pass PINENTRY_USER_DATA and XAUTHORITY to Pinentry.
Improved support for the quality bar.
Minor internal restructuring.
Translation fixes.
 2007-11-19 16:03:50 +00:00
Werner Koch
eda26e299f Add a /while loop. 2007-10-24 15:34:23 +00:00
Werner Koch
fd5e7d44f3 Changed wording of passphrase checking messages. 
Fixed a segv in gpg-connect-agent.
 2007-10-24 08:06:16 +00:00
Werner Koch
fca02368da New option --list-config for gpgconf. 2007-10-23 18:13:27 +00:00
Werner Koch
57deea63c5 Fixed wrong entry in the gpg-agent table. 2007-10-23 11:15:26 +00:00
Werner Koch
0e8820b2ab Replace popen by our own code to help with Windows long files (e.g. those 
with a space in the name).
 2007-10-22 19:07:56 +00:00
Werner Koch
c12ce55b25 Factored utf8 switching code out to i18n.c. 2007-10-19 15:58:38 +00:00
Werner Koch
259a40c830 Enhanced gpg-conect-agent scripting. 
Typo fixes in comments.
 2007-10-19 14:51:39 +00:00
Werner Koch
bea6c580f2 Fixed bug 842 (segv in gpgconf) 2007-10-19 08:49:07 +00:00
Werner Koch
e0dbe037b7 Allow ${foo} syntax for variables. 2007-10-12 16:05:14 +00:00
Werner Koch
f8e3f699a9 Add more sytem variables: cwd, foodir and serverpid. 2007-10-11 18:18:24 +00:00
Werner Koch
17fe613ebc * gpg-connect-agent.c (get_var): Expand environment variables. 
Suggested by Marc Mutz.
  (set_var): Return the value.
  (assign_variable): Add arg syslet.
  (main): New command /slet.
 2007-10-11 17:35:31 +00:00
Werner Koch
db9a5246e1 Add commands /run and /bye so that we can better automate tests. 
Also add option --run.
 2007-10-02 21:46:29 +00:00
Werner Koch
ed7d2d72c6 Extended gpg-connect-agent. 
New "GETINFO pid" command for scdaemon and gpg-agent.
 2007-10-02 16:30:58 +00:00
Werner Koch
31c19d1d68 Use Assuan socket wrapper calls. 
Made socket servers secure under Windows.
 2007-10-01 14:48:39 +00:00
Werner Koch
c058df3a06 Minor translation change. 2007-09-14 11:41:14 +00:00
Werner Koch
782e1bc00b Preparing 2.0.7 2007-09-10 15:40:29 +00:00
Moritz Schulte
7f033b2a88 2007-09-04 Moritz Schulte <moritz@g10code.com> 
* gpgsm-gencert.sh: Use printf instead of echo.
 2007-09-04 07:16:49 +00:00
Moritz Schulte
54a4477749 2007-09-04 Moritz Schulte <moritz@g10code.com> 
* gpgkey2ssh.c: Include sysutils.h so that gnupg_tmpfile() is
	declared.
 2007-09-04 05:59:07 +00:00
Werner Koch
273433d70d Make gpgconf --list-components also print the name of the executable program. 2007-08-31 08:24:52 +00:00
Werner Koch
8464627bf4 Extended the --check-program output: Error messages are now inlcued in an 
easy parsable format.
 2007-08-29 16:59:20 +00:00
Werner Koch
b13587ef16 New command --check-programs for gpgconf. 2007-08-29 09:51:37 +00:00
Werner Koch
f268889b8f Add more passphrase policy rules. 
(--max-passphrase-days).
 2007-08-28 17:48:13 +00:00
Werner Koch
15d0cb42a1 Implemented more gpg-agen options to support certain passphrase policies. 
New tool gpg-check-pattern.
 2007-08-27 18:10:27 +00:00
Werner Koch
f81f521a72 Updated estream. 
More changes for Windows.
 2007-08-22 10:55:07 +00:00
Werner Koch
ebd36b6344 Factored common gpgconf constants out 
Fixed W32 compare_filenames
 2007-08-02 18:12:43 +00:00
Werner Koch
11573b09c4 Typo fixes. 
Made --default-key work for gpgsm
Add --default-key and --encrypt-to to gpgconf.
 2007-07-17 18:11:24 +00:00
Marcus Brinkmann
2d4e157d85 2007-07-16 Marcus Brinkmann <marcus@g10code.de> 
* gpg-connect-agent.c (main): Bail out if write fails.
 2007-07-16 14:33:34 +00:00
Werner Koch
2f6b5cee0a Last minute Makefile library reordering for the sake of non-GNU systems. 2007-07-05 20:11:11 +00:00
Marcus Brinkmann
3c606ba127 2007-07-05 Marcus Brinkmann <marcus@g10code.de> 
* symcryptrun.c (confucius_get_pass): Define orig_codeset if
	[ENABLE_NLS], not [HAVE_LANGINFO_CODESET].
 2007-07-04 22:14:08 +00:00
Werner Koch
93d3811abc Changed to GPLv3. 
Removed intl/.
 2007-07-04 19:49:40 +00:00
Werner Koch
a7fe86bc02 More W32 related changes 2007-06-26 13:48:44 +00:00
Werner Koch
540f9164c0 Made percent_escape more general. 
Added regression tests support to jnlib.
W32 changes.
 2007-06-19 09:11:11 +00:00
Marcus Brinkmann
b1b471dcc8 2007-06-18 Marcus Brinkmann <marcus@g10code.de> 
* gpgconf-comp.c (retrieve_options_from_file): Close LIST_FILE.
	(copy_file): In error case, save/restore errno.  Close SRC and DST.
	(gc_component_change_options): Catch error from unlink().  Remove
	target backup file before rename().
 2007-06-18 20:07:33 +00:00
Marcus Brinkmann
389781bae4 2007-06-15 Marcus Brinkmann <marcus@g10code.de> 
* gpgconf-comp.c (copy_file) [HAVE_W32_SYSTEM]: New function.
	(change_options_file, change_options_program) [HAVE_W32_SYSTEM]:
	Copy backup file.
	(gc_component_change_options) [HAVE_W32_SYSTEM]: Non-atomic replace.
	(gc_process_gpgconf_conf): Rename fname to fname_arg and
	fname_buffer to fname, initialize fname with fname_arg, discarding
	const qualifier.
 2007-06-15 14:46:23 +00:00
Werner Koch
915b7b21fd Build fixes for W32 2007-06-15 14:27:31 +00:00
Werner Koch
0cfbfd6186 A whole bunch of changes to allow building for Windows. 
See the ChangeLogs for details.
 2007-06-14 17:05:07 +00:00
Werner Koch
2c9791db55 First steps towards supporting W32. 
This is mainly source code reorganization.
Update gnulib.
g10/ does currently not build.
 2007-06-06 18:12:30 +00:00
Marcus Brinkmann
b9042f1cec agent/ 
2007-05-19  Marcus Brinkmann  <marcus@g10code.de>

	* protect-tool.c (get_passphrase): Free ORIG_CODESET on error.

g10/
2007-05-19  Marcus Brinkmann  <marcus@g10code.de>

	* passphrase.c (passphrase_get): Free ORIG_CODESET on error.

sm/
2007-05-18  Marcus Brinkmann  <marcus@g10code.de>

	* qualified.c (gpgsm_qualified_consent,
	gpgsm_not_qualified_warning): Free ORIG_CODESET on error.
	* certdump.c (gpgsm_format_keydesc): Likewise.

tools/
2007-05-19  Marcus Brinkmann  <marcus@g10code.de>

	* symcryptrun.c (confucius_get_pass): Free ORIG_CODESET on error.
 2007-05-18 22:58:59 +00:00
Werner Koch
edb3dc99e9 Preparing 2.0.4 2007-05-09 11:01:33 +00:00
Werner Koch
b89d98e335 Improved logging for error orginating from libgcrypt. 2007-04-20 16:59:37 +00:00
Werner Koch
6ae6e18d5f g10/ and sm/ 
* call-agent.c (start_agent): Don't use log_error when using the
	fallback hack to start the agent.  This is bug 782.
scripts/
	* mail-to-translators: Copied from 1.4. and adjusted.
tools/
	* gpgconf-comp.c: Allow changing of --allow-mark-trusted.

	* gpg-connect-agent.c (main): New option --decode and commands
	decode and undecode.
	(read_and_print_response): Implement option.
 2007-04-13 11:45:05 +00:00
Werner Koch
3bbc481935 Add a way to get a listing of available CCID readers. 2007-04-03 16:57:37 +00:00
Werner Koch
75f761e6ef Make gpgconf aware of --p12-charset. 2007-03-20 10:17:05 +00:00
Werner Koch
634b4c31d2 The Cherry XX44 keyboard's PINpad does now work. 
DINSIG and NKS card applications are now also PIN pad aware.
 2007-03-07 20:55:14 +00:00
Werner Koch
ed84b0f787 Support for a global gpgconf configuration file. 2007-03-06 20:44:41 +00:00
Werner Koch
b861561e47 Included LIBICONV in all Makefiles. 
g10/
	* passphrase.c (passphrase_get): Set the cancel flag on all error
	from the agent.  Fixes a bug reported by Tom Duerbusch.
sm/
	* gpgsm.c (main): Let --gen-key print a more informative error
	message.
 2007-01-31 14:24:41 +00:00
Werner Koch
6cee3e66c2 agent/ 
* protect-tool.c (get_passphrase): New arg OPT_CHECK.
	(get_new_passphrase): Enable OTP_CHECK on the first call.
	* command.c (cmd_get_passphrase): Implement option --check.

	* gpg-agent.c (MIN_PASSPHRASE_LEN): New
	(parse_rereadable_options): New option 	--min-passphrase-len.
	* genkey.c (check_passphrase_constraints): New.
	(agent_genkey, agent_protect_and_store): Call new function.  Fix
	memory leak.

	* call-pinentry.c (agent_askpin): Allow translation of the displayed
	error message.
	(agent_popup_message_start): Remove arg CANCEL_BTN.
	(popup_message_thread): Use --one-button option.

	* command.c (cmd_passwd): Now that we don't distinguish between
	assuan and regular error codes we can jump to the end on error.

common/
	* simple-pwquery.c (simple_pwquery): New arg OPT_CHECK.
 2007-01-25 08:30:47 +00:00
David Shaw
b26e95cf70 Some build fixes for platforms like OSX where we use the built-in libintl. 2006-12-13 19:48:31 +00:00
David Shaw
7b9eee1e5e Makefile.am: Link to iconv for jnlib dependency. (OSX) 2006-12-07 23:20:20 +00:00
Werner Koch
252b668814 Preparing 2.0.1 2006-11-28 16:36:02 +00:00
Werner Koch
e50c5f39cc No more warnings for AMD64 (at least when cross-compiling). Thus tehre is a 
good chance that gpg2 will now work. 
Other cleanups.
Updated gettext.
 2006-11-21 11:00:14 +00:00
Werner Koch
5885142c83 Made some PIN pads work. 
Some cleanups for 64 bit CPUs.
 2006-11-20 16:49:41 +00:00
Werner Koch
b5a8d7d268 . 2006-11-11 14:17:09 +00:00
Werner Koch
10d563da08 Collected fixes. 2006-11-05 15:08:58 +00:00
Werner Koch
7b8ea82ab6 . 2006-10-23 14:02:13 +00:00
Werner Koch
be410be660 Pth tweaks and improved estream.c 2006-10-17 14:34:42 +00:00
Werner Koch
43825e9dae Allow pkcs#10 creation directkly from a smart card 2006-10-11 17:52:15 +00:00
Werner Koch
2e8481c03b Various changes 2006-10-10 11:11:04 +00:00
Werner Koch
4b48bcacc9 Fix for bug 537 2006-10-02 11:54:35 +00:00
Werner Koch
b0a06d18a4 Clarified cURL and OpenLDAP license issues. 
Made readline support work.
 2006-09-22 11:39:45 +00:00
Werner Koch
c69dc436ce Cleanups. 2006-09-20 11:01:49 +00:00
Werner Koch
03d3322e5f Take advantage of newer gpg-error features. 2006-09-14 16:50:33 +00:00
Werner Koch
9577dd45ab Various fixes and new features. 
Enhanced gpg-connect-agent.
 2006-09-13 15:57:30 +00:00
Werner Koch
eef036df23 The big Assuan error code removal. 2006-09-06 16:35:52 +00:00
Werner Koch
0ebd23fa76 Migrated more stuff to doc/ 
Migrated the gpg regression tests.
Some changes tp the gpg code to fix bugs and
for the use in testing. 
make distcheck works now with gpg enabled.
 2006-08-21 20:20:23 +00:00
Werner Koch
f98537733a Updated FSF's address. 2006-06-20 17:21:37 +00:00
Marcus Brinkmann
5a8770fc6c 2006-06-09 Marcus Brinkmann <marcus@g10code.de> 
* Makefile.am (gpgconf_LDADD): Add $(GPG_ERROR_LIBS).
	(gpgkey2ssh_LDADD): Add ../jnlib/libjnlib.a.
 2006-06-09 11:32:22 +00:00
Werner Koch
fbe4ac37f6 g10/ does build again. 2006-05-23 16:19:43 +00:00
Werner Koch
ee3f99f4e4 . 2006-02-06 18:31:27 +00:00
Werner Koch
38e7c4c50a Fixed importing certs created by newer versions of Mozilla. 2005-12-16 15:52:48 +00:00
Werner Koch
f80ad71f1c Add support for direct pkcs#7 signatures 2005-12-14 09:55:40 +00:00
Werner Koch
6a13cf2c3d Preparing an interim release 2005-11-28 11:52:25 +00:00
Marcus Brinkmann
af0aafa4f7 2005-10-08 Marcus Brinkmann <marcus@g10code.de> 
* Makefile.am (watchgnupg_LDADD): New variable.
 2005-10-08 00:17:09 +00:00
Marcus Brinkmann
41e8fded0a agent/ 
2005-10-08  Marcus Brinkmann  <marcus@g10code.de>

	* Makefile.am (gpg_protect_tool_LDADD): Add ../gl/libgnu.a.
	(gpg_preset_passphrase_LDADD, t_common_ldadd): Likewise.
	(gpg_agent_LDADD): Add ../gl/libgnu.a after ../common/libcommon.a.

kbx/
2005-10-08  Marcus Brinkmann  <marcus@g10code.de>

	* Makefile.am (kbxutil_LDADD): Add ../gl/libgnu.a after
	../jnlib/libjnlib.a.

scd/
2005-10-08  Marcus Brinkmann  <marcus@g10code.de>

	* Makefile.am (scdaemon_LDADD): Add ../gl/libgnu.a after
	../common/libcommon.a.
sm/
2005-10-08  Marcus Brinkmann  <marcus@g10code.de>

	* Makefile.am (gpgsm_LDADD): Add ../gl/libgnu.a after
	../common/libcommon.a.

tools/
2005-10-08  Marcus Brinkmann  <marcus@g10code.de>

	* Makefile.am (gpgconf_LDADD): Add ../gl/libgnu.a after
	../common/libcommon.a.
	(symcryptrun_LDADD, gpg_connect_agent_LDADD, gpgkey2ssh_LDADD):
	Likewise.
 2005-10-08 00:13:27 +00:00
Marcus Brinkmann
482b509aa9 2005-09-29 Marcus Brinkmann <marcus@g10code.de> 
* Makefile.am (AM_CFLAGS): Add $(LIBGCRYPT_CFLAGS).
 2005-09-28 22:44:20 +00:00
Werner Koch
12f7e943cc Changed license of this parser to LPGL. 2005-09-06 10:25:41 +00:00
Werner Koch
3919421a4f About to release 1.9.18 2005-08-01 16:54:54 +00:00
Werner Koch
99f403b015 * gpgsm.c (main): New options --no-log-file and --debug-none. 
* certreqgen.c (get_parameter, get_parameter_value): Add SEQ arg
to allow enumeration.  Changed all callers.
(create_request): Process DNS and URI parameters.

* gpgsm-gencert.sh: Reworked to allow for multiple email addresses
as well as DNsanmes and URi.  Present the parameter file before
creating the certificate.
 2005-07-21 18:29:13 +00:00
Marcus Brinkmann
53a1347fbe 2005-07-04 Marcus Brinkmann <marcus@g10code.de> 
* symcryptrun.c (SYMC_BAD_PASSPHRASE, SYMC_CANCELED): New symbols,
	use instead constants.
	(hash_string): New function copied from simple-gettext.c.
	(confucius_get_pass): Take new argument CACHEID.
	(confucius_process): Calculate cacheid and pass it to
	confucius_get_pass.  Clear passphrase from cache if necessary.
 2005-07-04 04:58:04 +00:00
Werner Koch
deeba405a9 gcc-4 defaults forced me to edit many many files to get rid of the 
char * vs. unsigned char * warnings.  The GNU coding standards used to
say that these mismatches are okay and better than a bunch of casts.
Obviously this has changed now.
 2005-06-16 08:12:03 +00:00
Marcus Brinkmann
941880a28b 2005-06-04 Marcus Brinkmann <marcus@g10code.de> 
* symcryptrun.c (main): Allow any number of arguments, don't use
	first argument as input file name.  Pass extra arguments to
	confucius_main.
	(confucius_main): Accept new arguments argc and argv and pass them
	to confucius_process.
	(confucius_process): Accept new arguments argc and argv and pass
	them to the confucius process.
 2005-06-04 12:57:26 +00:00
Werner Koch
cad9562436 * configure.ac (gl_INIT): Add gnulib stuff. 
(fseeko, ftello, ttyname, isascii): Replaced the AC_REPLACE_FUNCS
by a simple check.
(putc_unlocked): Removed check.  Not used.
(strsep, mkdtemp, asprintf): Replaced checks by gnulib checks.
(xsize): Added will probably come handy soon.
(CFLAGS): Use -Wformat-security instead of
-Wformat-nonliteral. Add --Wno-format-y2k.
* gl/, gl/m4/: New.

* gpg-agent.c: Include setenv.h.

* Makefile.am (AM_CPPFLAGS): Added.

* util.h: Add some includes for gnulib.
(ttyname, isascii): Define them inline.
* fseeko.c, ftello.c: Removed.
* strsep.c, mkdtemp.c: Removed.
* ttyname.c, isascii.c: Removed.

* mkdtemp.c: Removed.
* exec.c: Include mkdtemp.h

* keybox-file.c (ftello) [!HAVE_FSEEKO]: New replacement
function.  Copied from ../common/ftello.c.
* keybox-update.c (fseeko) [!HAVE_FSEEKO]: New replacement
function.  Copied from ../common/iobuf.c.

* scdaemon.c: Include mkdtemp.h.

* misc.c: Include setenv.h.

* symcryptrun.c: Include mkdtemp.h.
 2005-06-01 15:46:01 +00:00
Werner Koch
6e522257a9 * agent.h (out_of_core): s/__inline__/inine. Noted by Ray Link. 
* dynload.h: s/__inline__/inline/.

* tlv.c [GNUPG_MAJOR_VERSION==1]: Define constants instead of
including a gnupg 1.4 header.

* watchgnupg.c: Make sure that PF_LCOAL and AF_LOCAL are defines.
Noted by Ray Link.
 2005-05-31 20:03:04 +00:00
Moritz Schulte
c8efd2bf77 2005-05-28 Moritz Schulte <moritz@g10code.com> 
* gpgkey2ssh.c: New file.
	* Makefile.am (bin_PROGRAMS): Added gpgkey2ssh.
 2005-05-28 13:43:21 +00:00
Werner Koch
41862f5f13 * protect-tool.c: New option --canonical. 
(show_file): Implement it.

* keyformat.txt: Define the created-at attribute for keys.

* ccid-driver.c: Replaced macro DEBUG_T1 by a new debug level.
(parse_ccid_descriptor): Mark SCR335 firmware version 5.18 good.
(ccid_transceive): Arghhh.  The seqno is another bit in the
R-block than in the I block, this was wrong at one place.

* scdaemon.c: New options --debug-ccid-driver and
--debug-disable-ticker.

* app-openpgp.c (do_genkey, do_writekey): Factored code to check
for existing key out into ..
(does_key_exist): .. New function.

* gpg-connect-agent.c (add_definq, show_definq, clear_definq)
(handle_inquire): New.
(read_and_print_response): Handle INQUIRE command.
(main): Implement control commands.
 2005-05-20 20:39:36 +00:00
Werner Koch
4237a9cc7f Changed the scdaemon to handle concurrent sessions. Adjusted 
gpg-agent accordingly. Code cleanups.
 2005-05-18 10:48:06 +00:00
Werner Koch
07aa7b210a (main): Optionally allow the input file as command 
line argument.
 2005-04-21 10:07:41 +00:00
Werner Koch
3ff9a743bf * configure.ac: Do not build gpg by default. 
* gpgsm.c: New options --{enable,disable}-trusted-cert-crl-check.
* certchain.c (gpgsm_validate_chain): Make use of it.

* certchain.c (gpgsm_validate_chain): Check revocations even for
expired certificates.  This is required because on signature
verification an expired key is fine whereas a revoked one is not.

* gpgconf-comp.c: Add gpgsm option disable-trusted-cert-crl-check.
 2005-04-21 09:33:07 +00:00