security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2024-11-04 20:38:50 +01:00
Code Activity
1,967 Commits 101 Branches 306 Tags 72 MiB
9df2dbdfc2
Commit Graph

1967 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
David Shaw
9df2dbdfc2 * NEWS, configure.ac: Switch over to using curl or fake-curl by 
default.  Add --enable-old-keyserver-helpers to not use curl.
 2005-07-27 01:18:52 +00:00
Werner Koch
5fe762d91d post release version number updates 2005-07-26 19:52:22 +00:00
Werner Koch
a5a5acb93a Updated. 2005-07-26 19:11:51 +00:00
Werner Koch
a7ea40e4f8 * passphrase.c (agent_get_passphrase): Make sure to release the 
saved codeset.
(agent_open): Add arg ORIG_CODESET and switch back to it in case
of error.  Changed all callers.

* zh_TW.po, fr.po, cs.po: Updated.
 2005-07-26 19:08:11 +00:00
Werner Koch
862652ebe1 Preparing a release 2005-07-26 15:41:04 +00:00
David Shaw
99c80f8c39 * keyedit.c (sign_uids): Don't prompt for setting signature expiry to 
match key expiry unless --ask-cert-expire is set.  Suggested by Peter
Palfrader.
 2005-07-22 16:42:48 +00:00
Werner Koch
45bacc55da *** empty log message *** 2005-07-22 16:31:05 +00:00
Werner Koch
a486501c0b * gpg.sgml (http): 
* g10.c, options.h: New option --exit-on-status-write-error.
* status.c (write_status_text): Make use of this option.
 2005-07-22 16:28:40 +00:00
David Shaw
04b9cec18f * options.h, g10.c (main), keyedit.c (keyedit_menu): Use --interactive 
to enable the uid walking when signing a key with no uids specified to
sign.

* keylist.c (list_keyblock_print): Fix silly typo.  Noted by Greg
Sabino Mullane.
 2005-07-22 12:52:34 +00:00
David Shaw
6f0ed8571b * gpgkeys_curl.c (get_key, main): Don't try and be smart about what 
protocols we handle.  Directly pass them to curl or fake-curl and see if
an error comes back.

* curl-shim.h, curl-shim.c (handle_error), ksutil.c (curl_err_to_gpg_err):
Add support for CURLE_UNSUPPORTED_PROTOCOL in fake curl.

* Makefile.am: Don't need -DFAKE_CURL any longer since it's in config.h.
 2005-07-20 21:48:28 +00:00
David Shaw
a918d63fd5 * keyserver.c (curl_can_handle): New. Do a runtime check against libcurl 
to see if it can handle a particular protocol. (keyserver_typemap): Call
it here.

* Makefile.am: Pull in libcurl for curl_version_info() if used.
 2005-07-20 21:15:04 +00:00
David Shaw
431de51f10 * configure.ac: Add a define for FAKE_CURL. 2005-07-20 20:55:34 +00:00
David Shaw
eb1db238ed CURLINFO_NOW -> CURLVERSION_NOW 2005-07-20 20:51:42 +00:00
David Shaw
826999a02a Typo. 2005-07-20 20:46:10 +00:00
David Shaw
f23b945965 * libcurl.m4: Check that our libcurl has curl_version_info(CURLINFO_NOW). 2005-07-20 20:45:44 +00:00
Werner Koch
52527dcd7b Document --limit-card-insert-tries. 2005-07-19 12:25:33 +00:00
Werner Koch
a0b4f40301 * g10.c, options.h: New option --limit-card-insert-tries. 
* cardglue.c (open_card): Use it.
 2005-07-19 12:14:39 +00:00
Werner Koch
730247b19e * configure.ac [W32]: Always set DISABLE_KEYSERVER_PATH. 
* export.c (parse_export_options): New option
export-reset-subkey-passwd.
(do_export_stream): Implement it.

* misc.c (get_libexecdir): New.
* keyserver.c (keyserver_spawn): Use it
 2005-07-19 08:50:28 +00:00
David Shaw
eae1f4b755 * samplekeys.asc: Update 99242560. 
* gpg.sgml: Clarify --throw-keyid and --hidden-recipient a bit.
 2005-07-19 03:29:56 +00:00
Werner Koch
6dc5a11997 * tdbio.c (open_db): Check for EROFS. Suggested by Bryce Nichols. 
* ttyio.c (do_get): Move printing of the prompt after disabling
echo.  Suggested by Scott Worley.
 2005-07-18 17:58:25 +00:00
David Shaw
8238e7698b * trustdb.c (clean_uids_from_key): Don't keep a valid selfsig around 
when compacting a uid.  There is no reason to make an attacker's job
easier - this way they only have a revocation which is useless in
bringing the uid back.

* keydb.h, kbnode.c (undelete_kbnode): Removed.  No longer needed.

* import.c (chk_self_sigs): Allow a uid revocation to be enough to
allow importing a particular uid (no self sig needed).  This allows
importing compacted uids.
 2005-07-09 02:34:04 +00:00
David Shaw
ccab129be5 * gpgkeys_mailto.in, gpgkeys_test.in: Use @VERSION@ so version string 
stays up to date.

* gpgkeys_http.c: Don't need to define HTTP_PROXY_ENV here since it's
in ksutil.h.

* gpgkeys_curl.c (get_key, main), gpgkeys_hkp.c (main): Pass AUTH
values to curl or curl-shim.

* curl-shim.c (curl_easy_perform), gpgkeys_curl.c (main),
gpgkeys_hkp.c (main): Use curl-style proxy semantics.
 2005-06-23 23:42:35 +00:00
David Shaw
d65763eccd * curl-shim.h, curl-shim.c (curl_easy_setopt, curl_easy_perform): Add 
CURLOPT_USERPWD option for HTTP auth.
 2005-06-23 04:44:20 +00:00
David Shaw
ffa6854080 * gpgkeys_http.c (get_key), gpgkeys_oldhkp (send_key, get_key, 
search_key): No longer need to pass a proxyauth.

* gpgkeys_http.c (get_key): Pass auth outside of the URL.
 2005-06-23 04:26:01 +00:00
David Shaw
b7a7551085 * http.h: Fix prototypes for http_open_document and http_open again, 
to handle the new different auth for regular files and proxies.
 2005-06-23 04:24:28 +00:00
David Shaw
c5a94d29ce * http.c (make_radix64_string): Add '=' padding as per standard. 
(send_request, http_open, http_open_document): Clean up auth code.
Can now support different auth for a proxy and the file being
requested via that proxy.  Unescape auth strings.
 2005-06-23 04:23:37 +00:00
David Shaw
825d12638b * memrchr.c (memrchr): Not all compilers allow initializing based on a 
variable that is also being initialized.  Noted by Nelson H. F. Beebe.
 2005-06-22 20:05:21 +00:00
David Shaw
b0ba0c6314 * libcurl.m4: Only do the OS X linker fix on Panther. Tiger has a 
clean curl-config.
 2005-06-22 05:31:52 +00:00
David Shaw
7f4d49b470 * gpgkeys_http.c (get_key), gpgkeys_oldhkp.c (send_key, get_key, 
search_key): Fix http_open/http_open_document calls to pass NULL for
auth and proxyauth since these programs pass them in the URL.
 2005-06-22 04:16:29 +00:00
David Shaw
1684bda54e * http.h: Fix prototypes for http_open_document and http_open to pass 
in auth and proxyauth.
 2005-06-22 04:13:41 +00:00
David Shaw
c8d1036b26 * http.c (send_request, http_open, http_open_document): Pass in auth 
and proxyauth that can override the in-url auth.
 2005-06-22 04:12:40 +00:00
David Shaw
b967d27173 * http.c (send_request): Need == after the radix64-encoded basic auth 
string.
 2005-06-22 03:20:43 +00:00
Werner Koch
a63f5e50f1 Post release version number update 2005-06-21 14:50:10 +00:00
Werner Koch
fa21ccc6d9 * conventional.test (algos): Uhh ohh, cut+paste error and not 
tested.
 2005-06-21 14:28:12 +00:00
Werner Koch
8bda8f784b . 2005-06-21 14:00:26 +00:00
Werner Koch
167d957f5d Preparing a release candidate 2005-06-21 12:54:56 +00:00
David Shaw
4e9797031f * gpgkeys_hkp.c (append_path, send_key, get_key, search_key, main), 
gpgkeys_oldhkp.c (main): Properly handle double slashes in paths.
 2005-06-21 04:24:10 +00:00
David Shaw
d010af07f9 * NEWS: Note key cleaning commands. 2005-06-20 18:05:37 +00:00
David Shaw
730dbae5c8 * gpg.sgml: Document --edit-key/clean, import-clean, and export-clean. 2005-06-20 18:04:39 +00:00
David Shaw
c66eeec3c6 * keygen.c (save_unprotected_key_to_card): Better fix for gcc4 warning. 2005-06-20 17:32:09 +00:00
Werner Koch
2d2e2e74b8 * gpg.sgml: Document smartcard related options. 
* g10.c, options.h: New option --no-interactive-selection.
* keyedit.c (keyedit_menu): Use it.
 2005-06-20 17:03:27 +00:00
Werner Koch
059d159657 (parse_signature): Use log_info for messages 
about missing timestamp or keyid.  In case we don't use that key
there won't be no further error and thus gpg does not need to
return with an error.
 2005-06-18 11:49:50 +00:00
David Shaw
07e9d532b1 * keygen.c (save_unprotected_key_to_card): Fix gcc4 warning. 
* options.h, import.c (parse_import_options, import_one): Add
import-clean-uids option to automatically compact unusable uids when
importing.  Like import-clean-sigs, this may nodify the local keyring.

* trustdb.c (clean_uids_from_key): Only allow selfsigs to be a
candidate for re-inclusion.
 2005-06-14 03:55:19 +00:00
David Shaw
1067c01c93 * configure.ac: Add check for no-pointer-sign warning keyword, and 
disable.  This is gcc4 specific.
 2005-06-13 20:45:05 +00:00
David Shaw
f3c4b07d05 * options.h, import.c (parse_import_options, clean_sigs_from_all_uids, 
import_one): Add import-clean-sigs option to automatically clean a key
when importing.  Note that when importing a key that is already on the
local keyring, the clean applies to the merged key - i.e. existing
superceded or invalid signatures are removed.
 2005-06-12 21:17:46 +00:00
David Shaw
6e9b751b79 * getkey.c (merge_selfsigs_main, merge_selfsigs_subkey): Make sure 
that even after keys may be merged together, we only have one chosen
selfsig.
 2005-06-12 20:42:04 +00:00
David Shaw
1594883f2f * options.h, import.c (parse_import_options, delete_inv_parts): 
import-unusable-sigs is now a noop.
 2005-06-10 03:15:25 +00:00
David Shaw
045433e35c * options.h, export.c (do_export_stream), keyedit.c (keyedit_menu, 
menu_clean_subkeys_from_key), trustdb.h, trustdb.c
(clean_subkeys_from_key): Remove subkey cleaning function.  It is of
very limited usefulness since it cannot be used on any subkey that can
sign, and can only affect multiple selfsigs on encryption-only
subkeys.
 2005-06-10 03:00:57 +00:00
David Shaw
31522bac1d * keydb.h, kbnode.c (undelete_kbnode): New function to undelete a 
kbnode.

* trustdb.c (clean_uids_from_key): Further tweak the algorithm so that
the last good selfsig is kept when the chosen selfsig is a revocation.
 2005-06-10 02:52:41 +00:00
David Shaw
475107dff3 * trustdb.c (clean_uids_from_key), keyedit.c 
(menu_clean_uids_from_key): Tweak algorithm to preserve the last
selfsig which helps prevent uid resurrections.
 2005-06-09 02:53:18 +00:00