security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2024-11-04 20:38:50 +01:00
Code Activity
3,824 Commits 101 Branches 306 Tags 72 MiB
9f32499f99
Commit Graph

301 Commits

Author SHA1 Message Date
Werner Koch
e751bcdd04 Add IF command and new variable functions to gpg-connect-agent. 2008-03-05 10:08:10 +00:00
Marcus Brinkmann
a33b6677ff 2008-02-27 Marcus Brinkmann <marcus@g10code.de> 
* gpgconf-comp.c (option_check_validity): For now, error out on
	empty strings.
	(enum): Add GC_ARG_TYPE_PUB_KEY and GC_ARG_TYPE_SEC_KEY.
 2008-02-27 17:32:47 +00:00
Werner Koch
f13c5a48fc Improve certificate chain construction. 
Extend PKITS framework
 2008-02-19 10:33:35 +00:00
Marcus Brinkmann
b9cb60ec80 2008-02-01 Marcus Brinkmann <marcus@g10code.de> 
* gpgconf-comp.c (gc_component_list_options): Fix memcpy.
	Reported by Marc Mutz.
 2008-02-01 20:26:24 +00:00
Werner Koch
fefc0da6e9 translation fixes 2008-01-22 12:06:00 +00:00
Marcus Brinkmann
568cc4585a 2008-01-17 Marcus Brinkmann <marcus@g10code.de> 
* gpgconf-comp.c (change_options_program): Strip duplicated
	utf8-strings entries for gnupg backend.  Don't create them either.
 2008-01-17 22:42:58 +00:00
Werner Koch
56bd419029 Doc fixes. 
Add more files to POTFILES.
Protect against malloc bombs.
 2007-12-12 16:47:52 +00:00
Marcus Brinkmann
b644408d0d 2007-12-10 Marcus Brinkmann <marcus@g10code.de> 
* gpgconf-comp.c (gc_component_list_options): Fix up expert level
	of group.
 2007-12-10 16:44:38 +00:00
Marcus Brinkmann
1d282c5938 2007-12-04 Marcus Brinkmann <marcus@g10code.de> 
* gpgconf-comp.c (gc_component_list_components): Do not print a
	trailing semi-colon to ensure forward compatibility, as this would
	indicate another empty field.
	(gc_process_gpgconf_conf): Likewise.
 2007-12-04 14:47:28 +00:00
Marcus Brinkmann
a9b7f3356b 2007-12-04 Marcus Brinkmann <marcus@g10code.de> 
* gpgconf-comp.c (gc_component_list_components): Do not print a
	trailing semi-colon to ensure forward compatibility, as this would
	indicate another empty field.
 2007-12-03 23:39:49 +00:00
Werner Koch
55ba204bfa Started to implement the audit log feature. 
Pass PINENTRY_USER_DATA and XAUTHORITY to Pinentry.
Improved support for the quality bar.
Minor internal restructuring.
Translation fixes.
 2007-11-19 16:03:50 +00:00
Werner Koch
eda26e299f Add a /while loop. 2007-10-24 15:34:23 +00:00
Werner Koch
fd5e7d44f3 Changed wording of passphrase checking messages. 
Fixed a segv in gpg-connect-agent.
 2007-10-24 08:06:16 +00:00
Werner Koch
fca02368da New option --list-config for gpgconf. 2007-10-23 18:13:27 +00:00
Werner Koch
57deea63c5 Fixed wrong entry in the gpg-agent table. 2007-10-23 11:15:26 +00:00
Werner Koch
0e8820b2ab Replace popen by our own code to help with Windows long files (e.g. those 
with a space in the name).
 2007-10-22 19:07:56 +00:00
Werner Koch
c12ce55b25 Factored utf8 switching code out to i18n.c. 2007-10-19 15:58:38 +00:00
Werner Koch
259a40c830 Enhanced gpg-conect-agent scripting. 
Typo fixes in comments.
 2007-10-19 14:51:39 +00:00
Werner Koch
bea6c580f2 Fixed bug 842 (segv in gpgconf) 2007-10-19 08:49:07 +00:00
Werner Koch
e0dbe037b7 Allow ${foo} syntax for variables. 2007-10-12 16:05:14 +00:00
Werner Koch
f8e3f699a9 Add more sytem variables: cwd, foodir and serverpid. 2007-10-11 18:18:24 +00:00
Werner Koch
17fe613ebc * gpg-connect-agent.c (get_var): Expand environment variables. 
Suggested by Marc Mutz.
  (set_var): Return the value.
  (assign_variable): Add arg syslet.
  (main): New command /slet.
 2007-10-11 17:35:31 +00:00
Werner Koch
db9a5246e1 Add commands /run and /bye so that we can better automate tests. 
Also add option --run.
 2007-10-02 21:46:29 +00:00
Werner Koch
ed7d2d72c6 Extended gpg-connect-agent. 
New "GETINFO pid" command for scdaemon and gpg-agent.
 2007-10-02 16:30:58 +00:00
Werner Koch
31c19d1d68 Use Assuan socket wrapper calls. 
Made socket servers secure under Windows.
 2007-10-01 14:48:39 +00:00
Werner Koch
c058df3a06 Minor translation change. 2007-09-14 11:41:14 +00:00
Werner Koch
782e1bc00b Preparing 2.0.7 2007-09-10 15:40:29 +00:00
Moritz Schulte
7f033b2a88 2007-09-04 Moritz Schulte <moritz@g10code.com> 
* gpgsm-gencert.sh: Use printf instead of echo.
 2007-09-04 07:16:49 +00:00
Moritz Schulte
54a4477749 2007-09-04 Moritz Schulte <moritz@g10code.com> 
* gpgkey2ssh.c: Include sysutils.h so that gnupg_tmpfile() is
	declared.
 2007-09-04 05:59:07 +00:00
Werner Koch
273433d70d Make gpgconf --list-components also print the name of the executable program. 2007-08-31 08:24:52 +00:00
Werner Koch
8464627bf4 Extended the --check-program output: Error messages are now inlcued in an 
easy parsable format.
 2007-08-29 16:59:20 +00:00
Werner Koch
b13587ef16 New command --check-programs for gpgconf. 2007-08-29 09:51:37 +00:00
Werner Koch
f268889b8f Add more passphrase policy rules. 
(--max-passphrase-days).
 2007-08-28 17:48:13 +00:00
Werner Koch
15d0cb42a1 Implemented more gpg-agen options to support certain passphrase policies. 
New tool gpg-check-pattern.
 2007-08-27 18:10:27 +00:00
Werner Koch
f81f521a72 Updated estream. 
More changes for Windows.
 2007-08-22 10:55:07 +00:00
Werner Koch
ebd36b6344 Factored common gpgconf constants out 
Fixed W32 compare_filenames
 2007-08-02 18:12:43 +00:00
Werner Koch
11573b09c4 Typo fixes. 
Made --default-key work for gpgsm
Add --default-key and --encrypt-to to gpgconf.
 2007-07-17 18:11:24 +00:00
Marcus Brinkmann
2d4e157d85 2007-07-16 Marcus Brinkmann <marcus@g10code.de> 
* gpg-connect-agent.c (main): Bail out if write fails.
 2007-07-16 14:33:34 +00:00
Werner Koch
2f6b5cee0a Last minute Makefile library reordering for the sake of non-GNU systems. 2007-07-05 20:11:11 +00:00
Marcus Brinkmann
3c606ba127 2007-07-05 Marcus Brinkmann <marcus@g10code.de> 
* symcryptrun.c (confucius_get_pass): Define orig_codeset if
	[ENABLE_NLS], not [HAVE_LANGINFO_CODESET].
 2007-07-04 22:14:08 +00:00
Werner Koch
93d3811abc Changed to GPLv3. 
Removed intl/.
 2007-07-04 19:49:40 +00:00
Werner Koch
a7fe86bc02 More W32 related changes 2007-06-26 13:48:44 +00:00
Werner Koch
540f9164c0 Made percent_escape more general. 
Added regression tests support to jnlib.
W32 changes.
 2007-06-19 09:11:11 +00:00
Marcus Brinkmann
b1b471dcc8 2007-06-18 Marcus Brinkmann <marcus@g10code.de> 
* gpgconf-comp.c (retrieve_options_from_file): Close LIST_FILE.
	(copy_file): In error case, save/restore errno.  Close SRC and DST.
	(gc_component_change_options): Catch error from unlink().  Remove
	target backup file before rename().
 2007-06-18 20:07:33 +00:00
Marcus Brinkmann
389781bae4 2007-06-15 Marcus Brinkmann <marcus@g10code.de> 
* gpgconf-comp.c (copy_file) [HAVE_W32_SYSTEM]: New function.
	(change_options_file, change_options_program) [HAVE_W32_SYSTEM]:
	Copy backup file.
	(gc_component_change_options) [HAVE_W32_SYSTEM]: Non-atomic replace.
	(gc_process_gpgconf_conf): Rename fname to fname_arg and
	fname_buffer to fname, initialize fname with fname_arg, discarding
	const qualifier.
 2007-06-15 14:46:23 +00:00
Werner Koch
915b7b21fd Build fixes for W32 2007-06-15 14:27:31 +00:00
Werner Koch
0cfbfd6186 A whole bunch of changes to allow building for Windows. 
See the ChangeLogs for details.
 2007-06-14 17:05:07 +00:00
Werner Koch
2c9791db55 First steps towards supporting W32. 
This is mainly source code reorganization.
Update gnulib.
g10/ does currently not build.
 2007-06-06 18:12:30 +00:00
Marcus Brinkmann
b9042f1cec agent/ 
2007-05-19  Marcus Brinkmann  <marcus@g10code.de>

	* protect-tool.c (get_passphrase): Free ORIG_CODESET on error.

g10/
2007-05-19  Marcus Brinkmann  <marcus@g10code.de>

	* passphrase.c (passphrase_get): Free ORIG_CODESET on error.

sm/
2007-05-18  Marcus Brinkmann  <marcus@g10code.de>

	* qualified.c (gpgsm_qualified_consent,
	gpgsm_not_qualified_warning): Free ORIG_CODESET on error.
	* certdump.c (gpgsm_format_keydesc): Likewise.

tools/
2007-05-19  Marcus Brinkmann  <marcus@g10code.de>

	* symcryptrun.c (confucius_get_pass): Free ORIG_CODESET on error.
 2007-05-18 22:58:59 +00:00
Werner Koch
edb3dc99e9 Preparing 2.0.4 2007-05-09 11:01:33 +00:00
Werner Koch
b89d98e335 Improved logging for error orginating from libgcrypt. 2007-04-20 16:59:37 +00:00
Werner Koch
6ae6e18d5f g10/ and sm/ 
* call-agent.c (start_agent): Don't use log_error when using the
	fallback hack to start the agent.  This is bug 782.
scripts/
	* mail-to-translators: Copied from 1.4. and adjusted.
tools/
	* gpgconf-comp.c: Allow changing of --allow-mark-trusted.

	* gpg-connect-agent.c (main): New option --decode and commands
	decode and undecode.
	(read_and_print_response): Implement option.
 2007-04-13 11:45:05 +00:00
Werner Koch
3bbc481935 Add a way to get a listing of available CCID readers. 2007-04-03 16:57:37 +00:00
Werner Koch
75f761e6ef Make gpgconf aware of --p12-charset. 2007-03-20 10:17:05 +00:00
Werner Koch
634b4c31d2 The Cherry XX44 keyboard's PINpad does now work. 
DINSIG and NKS card applications are now also PIN pad aware.
 2007-03-07 20:55:14 +00:00
Werner Koch
ed84b0f787 Support for a global gpgconf configuration file. 2007-03-06 20:44:41 +00:00
Werner Koch
b861561e47 Included LIBICONV in all Makefiles. 
g10/
	* passphrase.c (passphrase_get): Set the cancel flag on all error
	from the agent.  Fixes a bug reported by Tom Duerbusch.
sm/
	* gpgsm.c (main): Let --gen-key print a more informative error
	message.
 2007-01-31 14:24:41 +00:00
Werner Koch
6cee3e66c2 agent/ 
* protect-tool.c (get_passphrase): New arg OPT_CHECK.
	(get_new_passphrase): Enable OTP_CHECK on the first call.
	* command.c (cmd_get_passphrase): Implement option --check.

	* gpg-agent.c (MIN_PASSPHRASE_LEN): New
	(parse_rereadable_options): New option 	--min-passphrase-len.
	* genkey.c (check_passphrase_constraints): New.
	(agent_genkey, agent_protect_and_store): Call new function.  Fix
	memory leak.

	* call-pinentry.c (agent_askpin): Allow translation of the displayed
	error message.
	(agent_popup_message_start): Remove arg CANCEL_BTN.
	(popup_message_thread): Use --one-button option.

	* command.c (cmd_passwd): Now that we don't distinguish between
	assuan and regular error codes we can jump to the end on error.

common/
	* simple-pwquery.c (simple_pwquery): New arg OPT_CHECK.
 2007-01-25 08:30:47 +00:00
David Shaw
b26e95cf70 Some build fixes for platforms like OSX where we use the built-in libintl. 2006-12-13 19:48:31 +00:00
David Shaw
7b9eee1e5e Makefile.am: Link to iconv for jnlib dependency. (OSX) 2006-12-07 23:20:20 +00:00
Werner Koch
252b668814 Preparing 2.0.1 2006-11-28 16:36:02 +00:00
Werner Koch
e50c5f39cc No more warnings for AMD64 (at least when cross-compiling). Thus tehre is a 
good chance that gpg2 will now work. 
Other cleanups.
Updated gettext.
 2006-11-21 11:00:14 +00:00
Werner Koch
5885142c83 Made some PIN pads work. 
Some cleanups for 64 bit CPUs.
 2006-11-20 16:49:41 +00:00
Werner Koch
b5a8d7d268 . 2006-11-11 14:17:09 +00:00
Werner Koch
10d563da08 Collected fixes. 2006-11-05 15:08:58 +00:00
Werner Koch
7b8ea82ab6 . 2006-10-23 14:02:13 +00:00
Werner Koch
be410be660 Pth tweaks and improved estream.c 2006-10-17 14:34:42 +00:00
Werner Koch
43825e9dae Allow pkcs#10 creation directkly from a smart card 2006-10-11 17:52:15 +00:00
Werner Koch
2e8481c03b Various changes 2006-10-10 11:11:04 +00:00
Werner Koch
4b48bcacc9 Fix for bug 537 2006-10-02 11:54:35 +00:00
Werner Koch
b0a06d18a4 Clarified cURL and OpenLDAP license issues. 
Made readline support work.
 2006-09-22 11:39:45 +00:00
Werner Koch
c69dc436ce Cleanups. 2006-09-20 11:01:49 +00:00
Werner Koch
03d3322e5f Take advantage of newer gpg-error features. 2006-09-14 16:50:33 +00:00
Werner Koch
9577dd45ab Various fixes and new features. 
Enhanced gpg-connect-agent.
 2006-09-13 15:57:30 +00:00
Werner Koch
eef036df23 The big Assuan error code removal. 2006-09-06 16:35:52 +00:00
Werner Koch
0ebd23fa76 Migrated more stuff to doc/ 
Migrated the gpg regression tests.
Some changes tp the gpg code to fix bugs and
for the use in testing. 
make distcheck works now with gpg enabled.
 2006-08-21 20:20:23 +00:00
Werner Koch
f98537733a Updated FSF's address. 2006-06-20 17:21:37 +00:00
Marcus Brinkmann
5a8770fc6c 2006-06-09 Marcus Brinkmann <marcus@g10code.de> 
* Makefile.am (gpgconf_LDADD): Add $(GPG_ERROR_LIBS).
	(gpgkey2ssh_LDADD): Add ../jnlib/libjnlib.a.
 2006-06-09 11:32:22 +00:00
Werner Koch
fbe4ac37f6 g10/ does build again. 2006-05-23 16:19:43 +00:00
Werner Koch
ee3f99f4e4 . 2006-02-06 18:31:27 +00:00
Werner Koch
38e7c4c50a Fixed importing certs created by newer versions of Mozilla. 2005-12-16 15:52:48 +00:00
Werner Koch
f80ad71f1c Add support for direct pkcs#7 signatures 2005-12-14 09:55:40 +00:00
Werner Koch
6a13cf2c3d Preparing an interim release 2005-11-28 11:52:25 +00:00
Marcus Brinkmann
af0aafa4f7 2005-10-08 Marcus Brinkmann <marcus@g10code.de> 
* Makefile.am (watchgnupg_LDADD): New variable.
 2005-10-08 00:17:09 +00:00
Marcus Brinkmann
41e8fded0a agent/ 
2005-10-08  Marcus Brinkmann  <marcus@g10code.de>

	* Makefile.am (gpg_protect_tool_LDADD): Add ../gl/libgnu.a.
	(gpg_preset_passphrase_LDADD, t_common_ldadd): Likewise.
	(gpg_agent_LDADD): Add ../gl/libgnu.a after ../common/libcommon.a.

kbx/
2005-10-08  Marcus Brinkmann  <marcus@g10code.de>

	* Makefile.am (kbxutil_LDADD): Add ../gl/libgnu.a after
	../jnlib/libjnlib.a.

scd/
2005-10-08  Marcus Brinkmann  <marcus@g10code.de>

	* Makefile.am (scdaemon_LDADD): Add ../gl/libgnu.a after
	../common/libcommon.a.
sm/
2005-10-08  Marcus Brinkmann  <marcus@g10code.de>

	* Makefile.am (gpgsm_LDADD): Add ../gl/libgnu.a after
	../common/libcommon.a.

tools/
2005-10-08  Marcus Brinkmann  <marcus@g10code.de>

	* Makefile.am (gpgconf_LDADD): Add ../gl/libgnu.a after
	../common/libcommon.a.
	(symcryptrun_LDADD, gpg_connect_agent_LDADD, gpgkey2ssh_LDADD):
	Likewise.
 2005-10-08 00:13:27 +00:00
Marcus Brinkmann
482b509aa9 2005-09-29 Marcus Brinkmann <marcus@g10code.de> 
* Makefile.am (AM_CFLAGS): Add $(LIBGCRYPT_CFLAGS).
 2005-09-28 22:44:20 +00:00
Werner Koch
12f7e943cc Changed license of this parser to LPGL. 2005-09-06 10:25:41 +00:00
Werner Koch
3919421a4f About to release 1.9.18 2005-08-01 16:54:54 +00:00
Werner Koch
99f403b015 * gpgsm.c (main): New options --no-log-file and --debug-none. 
* certreqgen.c (get_parameter, get_parameter_value): Add SEQ arg
to allow enumeration.  Changed all callers.
(create_request): Process DNS and URI parameters.

* gpgsm-gencert.sh: Reworked to allow for multiple email addresses
as well as DNsanmes and URi.  Present the parameter file before
creating the certificate.
 2005-07-21 18:29:13 +00:00
Marcus Brinkmann
53a1347fbe 2005-07-04 Marcus Brinkmann <marcus@g10code.de> 
* symcryptrun.c (SYMC_BAD_PASSPHRASE, SYMC_CANCELED): New symbols,
	use instead constants.
	(hash_string): New function copied from simple-gettext.c.
	(confucius_get_pass): Take new argument CACHEID.
	(confucius_process): Calculate cacheid and pass it to
	confucius_get_pass.  Clear passphrase from cache if necessary.
 2005-07-04 04:58:04 +00:00
Werner Koch
deeba405a9 gcc-4 defaults forced me to edit many many files to get rid of the 
char * vs. unsigned char * warnings.  The GNU coding standards used to
say that these mismatches are okay and better than a bunch of casts.
Obviously this has changed now.
 2005-06-16 08:12:03 +00:00
Marcus Brinkmann
941880a28b 2005-06-04 Marcus Brinkmann <marcus@g10code.de> 
* symcryptrun.c (main): Allow any number of arguments, don't use
	first argument as input file name.  Pass extra arguments to
	confucius_main.
	(confucius_main): Accept new arguments argc and argv and pass them
	to confucius_process.
	(confucius_process): Accept new arguments argc and argv and pass
	them to the confucius process.
 2005-06-04 12:57:26 +00:00
Werner Koch
cad9562436 * configure.ac (gl_INIT): Add gnulib stuff. 
(fseeko, ftello, ttyname, isascii): Replaced the AC_REPLACE_FUNCS
by a simple check.
(putc_unlocked): Removed check.  Not used.
(strsep, mkdtemp, asprintf): Replaced checks by gnulib checks.
(xsize): Added will probably come handy soon.
(CFLAGS): Use -Wformat-security instead of
-Wformat-nonliteral. Add --Wno-format-y2k.
* gl/, gl/m4/: New.

* gpg-agent.c: Include setenv.h.

* Makefile.am (AM_CPPFLAGS): Added.

* util.h: Add some includes for gnulib.
(ttyname, isascii): Define them inline.
* fseeko.c, ftello.c: Removed.
* strsep.c, mkdtemp.c: Removed.
* ttyname.c, isascii.c: Removed.

* mkdtemp.c: Removed.
* exec.c: Include mkdtemp.h

* keybox-file.c (ftello) [!HAVE_FSEEKO]: New replacement
function.  Copied from ../common/ftello.c.
* keybox-update.c (fseeko) [!HAVE_FSEEKO]: New replacement
function.  Copied from ../common/iobuf.c.

* scdaemon.c: Include mkdtemp.h.

* misc.c: Include setenv.h.

* symcryptrun.c: Include mkdtemp.h.
 2005-06-01 15:46:01 +00:00
Werner Koch
6e522257a9 * agent.h (out_of_core): s/__inline__/inine. Noted by Ray Link. 
* dynload.h: s/__inline__/inline/.

* tlv.c [GNUPG_MAJOR_VERSION==1]: Define constants instead of
including a gnupg 1.4 header.

* watchgnupg.c: Make sure that PF_LCOAL and AF_LOCAL are defines.
Noted by Ray Link.
 2005-05-31 20:03:04 +00:00
Moritz Schulte
c8efd2bf77 2005-05-28 Moritz Schulte <moritz@g10code.com> 
* gpgkey2ssh.c: New file.
	* Makefile.am (bin_PROGRAMS): Added gpgkey2ssh.
 2005-05-28 13:43:21 +00:00
Werner Koch
41862f5f13 * protect-tool.c: New option --canonical. 
(show_file): Implement it.

* keyformat.txt: Define the created-at attribute for keys.

* ccid-driver.c: Replaced macro DEBUG_T1 by a new debug level.
(parse_ccid_descriptor): Mark SCR335 firmware version 5.18 good.
(ccid_transceive): Arghhh.  The seqno is another bit in the
R-block than in the I block, this was wrong at one place.

* scdaemon.c: New options --debug-ccid-driver and
--debug-disable-ticker.

* app-openpgp.c (do_genkey, do_writekey): Factored code to check
for existing key out into ..
(does_key_exist): .. New function.

* gpg-connect-agent.c (add_definq, show_definq, clear_definq)
(handle_inquire): New.
(read_and_print_response): Handle INQUIRE command.
(main): Implement control commands.
 2005-05-20 20:39:36 +00:00
Werner Koch
4237a9cc7f Changed the scdaemon to handle concurrent sessions. Adjusted 
gpg-agent accordingly. Code cleanups.
 2005-05-18 10:48:06 +00:00
Werner Koch
07aa7b210a (main): Optionally allow the input file as command 
line argument.
 2005-04-21 10:07:41 +00:00
Werner Koch
3ff9a743bf * configure.ac: Do not build gpg by default. 
* gpgsm.c: New options --{enable,disable}-trusted-cert-crl-check.
* certchain.c (gpgsm_validate_chain): Make use of it.

* certchain.c (gpgsm_validate_chain): Check revocations even for
expired certificates.  This is required because on signature
verification an expired key is fine whereas a revoked one is not.

* gpgconf-comp.c: Add gpgsm option disable-trusted-cert-crl-check.
 2005-04-21 09:33:07 +00:00
Marcus Brinkmann
92ee8d4886 2005-04-19 Marcus Brinkmann <marcus@g10code.de> 
* symcryptrun.c: Add --input option.
 2005-04-19 12:00:29 +00:00