Werner Koch
488243f56e
* certpath.c (check_cert_policy): New.
...
(gpgsm_validate_path): And call it from here.
* gpgsm.c (main): New options --policy-file,
--disable-policy-checks and --enable-policy-checks.
* gpgsm.h (opt): Added policy_file, no_policy_checks.
2002-02-19 17:39:05 +00:00
Werner Koch
2a28f5d0ae
* certlist.c (gpgsm_add_to_certlist): Check that the specified
...
name identifies a certificate unambiguously.
(gpgsm_find_cert): Ditto.
* server.c (cmd_listkeys): Check that the data stream is available.
(cmd_listsecretkeys): Ditto.
(has_option): New.
(cmd_sign): Fix ambiguousity in option recognition.
* gpgsm.c (main): Enable --logger-fd.
* encrypt.c (gpgsm_encrypt): Increased buffer size for better
performance.
* call-agent.c (gpgsm_agent_pksign): Check the S-Exp received from
the agent.
* keylist.c (list_cert_colon): Filter out control characters.
2002-02-07 18:43:22 +00:00
Werner Koch
cd30feaa8e
* call-agent.c (gpgsm_agent_havekey): New.
...
* keylist.c (list_cert_colon): New arg HAVE_SECRET, print "crs"
when we know that the secret key is available.
(gpgsm_list_keys): New arg MODE, check whether a secret key is
available. Changed all callers.
* gpgsm.c (main): New command --list-secret-keys.
* server.c (cmd_listsecretkeys): New.
(cmd_listkeys): Return secret keys with "crs" record.
2002-01-29 10:05:24 +00:00
Werner Koch
151deac0df
* gpgsm.c (main): Disable core dumps.
...
* sign.c (add_certificate_list): New.
(gpgsm_sign): Add the certificates to the CMS object.
* certpath.c (gpgsm_walk_cert_chain): New.
* gpgsm.h (server_control_s): Add included_certs.
* gpgsm.c: Add option --include-certs.
(gpgsm_init_default_ctrl): New.
(main): Call it.
* server.c (gpgsm_server): Ditto.
(option_handler): Support --include-certs.
2002-01-25 16:41:13 +00:00
Werner Koch
1146232890
* gpgsm.c: Add option --enable-crl-checks.
...
* call-agent.c (start_agent): Implemented socket based access.
* call-dirmngr.c (start_dirmngr): Ditto.
2002-01-21 12:03:38 +00:00
Werner Koch
88bacd26a2
* server.c (gpgsm_server): Use assuan_deinit_server and setup
...
assuan logging if enabled.
* call-agent.c (inq_ciphertext_cb): Don't show the session key in
an Assuan log file.
* gpgsm.c (my_strusage): Take bugreport address from configure.ac
2002-01-19 18:21:14 +00:00
Werner Koch
6af7631e54
* call-dirmngr.c: New.
...
* certpath.c (gpgsm_validate_path): Check the CRL here.
* fingerprint.c (gpgsm_get_certid): New.
* gpgsm.c: New options --dirmngr-program and --disable-crl-checks.
2002-01-11 17:07:51 +00:00
Werner Koch
3b8cf6e497
* verify.c (gpgsm_verify): Implemented non-detached signature
...
verification. Add OUT_FP arg, initialize a writer and changed all
callers.
* server.c (cmd_verify): Pass an out_fp if one has been set.
2001-12-20 16:51:06 +00:00
Werner Koch
73d2214abb
* gpgsm.c (main): Renamed the default key database to "keyring.kbx".
2001-12-15 16:19:24 +00:00
Werner Koch
b47b62b5f5
* gpgsm.c (main): New option --debug-wait n, so that it is
...
possible to attach gdb when used in server mode.
2001-12-14 15:40:20 +00:00
Werner Koch
595c2cbd87
* keylist.c (list_cert_colon): Print alternative names of subject
...
and a few other values.
2001-12-14 09:20:42 +00:00
Werner Koch
9e241878a6
Made decryption work in --server mode, allow output of plain base64,
...
allow --armor and --base64 arguments for INPUT and OUTPUT, new global
option --base64, cleaned up the help page.
2001-12-13 09:09:11 +00:00
Werner Koch
bc11060de9
* gpgsm.c (main): New options --assume-{armor,base64,binary}.
...
* base64.c (base64_reader_cb): Fixed non-autodetection mode.
2001-12-12 11:57:28 +00:00
Werner Koch
6a8c47bd29
Implemented encryption in server mode.
...
Allow to specify a recipient on the commandline
There is still a default hardwired recipient if none has been set.
2001-12-11 12:31:04 +00:00
Werner Koch
e8676a0871
Started with decryption stuff
2001-12-05 23:48:01 +00:00
Werner Koch
95e6da1b07
--armor does now produce PEM format.
2001-11-27 18:38:59 +00:00
Werner Koch
944fee70bc
* base64.c: New. Changed all other functions to use this instead
...
of direct creation of ksba_reader/writer.
* gpgsm.c (main): Set ctrl.auto_encoding unless --no-armor is used.
This way we can feed PEM encoded stuff to --verify.
2001-11-27 17:40:09 +00:00
Werner Koch
d9aecd9eb7
* gpgsm.c: New option --agent-program
...
* call-agent.c (start_agent): Allow to override the default path
to the agent.
2001-11-26 17:54:49 +00:00
Werner Koch
757c13a171
Just a Backup. We can now write out a basic signature which in turn
...
exhibits a bug in --verify.
2001-11-23 17:12:37 +00:00
Werner Koch
a413066de1
Added basic code for keylisting.
...
New Assuan command LISTKEYS.
2001-11-19 16:17:43 +00:00
Werner Koch
0b17666145
Write status output, make verify work in server mode.
2001-11-19 12:42:01 +00:00
Werner Koch
2b99de5a5d
gpgsm --verify does now work like gpg including the
...
--enable-special-filenames option.
2001-11-19 10:25:00 +00:00
Werner Koch
0f26760d9f
Base code for gpgsm --verify does work
2001-11-16 17:56:23 +00:00
Werner Koch
90d060c199
We have reached a state where we are able to import certs and
...
check the certification path.
2001-11-13 12:50:14 +00:00
Werner Koch
a014d87d1c
we are now able to check self-signed certificates
2001-11-10 18:08:10 +00:00
Werner Koch
7c708298d2
Implemented server main loop and started with import command.
2001-11-07 17:44:22 +00:00
Werner Koch
4fcb72b382
gpgsm does now build and a dummy server can be started.
2001-11-06 19:14:14 +00:00
Werner Koch
a1b39ba850
Created configuration files
2001-10-31 11:47:04 +00:00
