security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2024-12-24 10:39:57 +01:00
Code Activity
3,190 Commits 102 Branches 308 Tags 75 MiB
Commit Graph

3190 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Werner Koch
07aa7b210a (main): Optionally allow the input file as command 
line argument.
 2005-04-21 10:07:41 +00:00
Werner Koch
3ff9a743bf * configure.ac: Do not build gpg by default. 
* gpgsm.c: New options --{enable,disable}-trusted-cert-crl-check.
* certchain.c (gpgsm_validate_chain): Make use of it.

* certchain.c (gpgsm_validate_chain): Check revocations even for
expired certificates.  This is required because on signature
verification an expired key is fine whereas a revoked one is not.

* gpgconf-comp.c: Add gpgsm option disable-trusted-cert-crl-check.
 2005-04-21 09:33:07 +00:00
Werner Koch
314c234e7d (gpgsm_validate_chain): Check revocations even for 
expired certificates.  This is required because on signature
verification an expired key is fine whereas a revoked one is not.
 2005-04-21 07:16:41 +00:00
Werner Koch
526ed521a7 . 2005-04-20 19:19:24 +00:00
Werner Koch
cb1840720a (Agent Configuration): New section. 2005-04-20 18:46:51 +00:00
Moritz Schulte
a78c5e9673 2005-04-20 Moritz Schulte <moritz@g10code.com> 
* command-ssh.c (ssh_handler_request_identities): Removed
	debugging code (sleep call), which was commited unintenionally.
 2005-04-20 14:47:19 +00:00
Marcus Brinkmann
92ee8d4886 2005-04-19 Marcus Brinkmann <marcus@g10code.de> 
* symcryptrun.c: Add --input option.
 2005-04-19 12:00:29 +00:00
Werner Koch
eff62d82bf * configure.ac: Require libksba 0.9.11. 
sm/
* call-dirmngr.c (inq_certificate): Add new inquire SENDCERT_SKI.
* certlist.c (gpgsm_find_cert): Add new arg KEYID and implement
this filter.  Changed all callers.

* certchain.c (find_up_search_by_keyid): New helper.
(find_up): Also try using the AKI.keyIdentifier.
(find_up_external): Ditto.
 2005-04-18 10:44:46 +00:00
David Shaw
b7c3018d32 * keyserver.c (keyserver_spawn): Free some memory. 
* sign.c (hash_for): Comments.
 2005-04-17 04:10:03 +00:00
David Shaw
0884653a13 * gpgkeys_hkp.c: New hkp handler that uses curl or curl-shim. 
* Makefile.am: Build new gpgkeys_hkp.

* curl-shim.c (curl_easy_perform): Cleanup.
 2005-04-17 02:18:32 +00:00
David Shaw
5609f5eafd * ksutil.h, ksutil.c (curl_writer), gpgkeys_curl.c (get_key): Pass a 
context to curl_writer so we can support multiple fetches in a single
session.
 2005-04-17 01:52:04 +00:00
David Shaw
f50e99ed7b * curl-shim.h, curl-shim.c (handle_error, curl_easy_setopt, 
curl_easy_perform): Add POST functionality to the curl shim.
 2005-04-17 01:39:24 +00:00
David Shaw
352db25580 * configure.ac: Remove --disable-old-hkp - use new HKP handler for 
--with-libcurl or --enable-fake-curl.
 2005-04-17 00:06:04 +00:00
David Shaw
d8e1f7656b * curl-shim.h, curl-shim.c (curl_escape, curl_free): Emulate 
curl_escape and curl_free.
 2005-04-16 22:21:28 +00:00
David Shaw
5748f595b0 * gpgkeys_curl.c (main): If the http-proxy option is given without any 
arguments, try to get the proxy from the environment.

* ksutil.h, ksutil.c (curl_err_to_gpg_err, curl_writer): Copy from
gpgkeys_curl.c.

* gpgkeys_oldhkp.c: Copy from gpgkeys_hkp.c.
 2005-04-16 18:50:46 +00:00
David Shaw
799f97ceee * configure.ac: Add --disable-old-hkp option that can be used along 
with --with-libcurl to build the curl version of HKP.
 2005-04-16 18:20:01 +00:00
Marcus Brinkmann
00853b8a1a 2005-04-15 Marcus Brinkmann <marcus@g10code.de> 
* symcryptrun.c (TEMP_FAILURE_RETRY): Define if not defined.
 2005-04-15 09:04:43 +00:00
Marcus Brinkmann
e0d6d1c476 2005-04-15 Marcus Brinkmann <marcus@g10code.de> 
* configure.ac: Check for /usr/bin/shred and define SHRED.

tools/
2005-04-15  Marcus Brinkmann  <marcus@g10code.de>

	* symcryptrun.c (remove_file): New function.
	(confucius_copy_file): Accept new argument PLAIN and shred the
	file if it is set on error.
 2005-04-15 02:24:44 +00:00
Marcus Brinkmann
f527f721d4 2005-04-15 Marcus Brinkmann <marcus@g10code.de> 
* configure.ac: Add --enable-symcryptrun, disabled by default.
	Define automake variable BUILD_SYMCRYPTRUN.
	Check for openpty -lutil, define LIBUTIL_LIBS.

tools/
2005-04-15  Marcus Brinkmann  <marcus@g10code.de>

	* Makefile.am: Define symcryptrun make variable depending on
	BUILD_SYMCRYPTUN.
	(bin_PROGRAMS): Add ${symcryptrun} instead symcryptrun.
	(symcryptrun_LDADD): Use $(LIBUTIL_LIBS) instead of -lutil.
 2005-04-15 01:33:46 +00:00
Werner Koch
9f9a18c011 (retrieve_key_material): Rewritten. Return a 
proper error code.
(retrieve_next_token): Removed.
(retrieve_fpr_from_card): Rewritten to make use of DO caching and
to take the KEYNO as arg.
(get_public_key): Renamed variable for clarity.
 2005-04-14 17:25:43 +00:00
Werner Koch
f084afaeda Added missing file 2005-04-13 09:39:38 +00:00
David Shaw
40a9c998b3 Check for memrchr() 2005-04-12 16:11:03 +00:00
David Shaw
4f996cc5b8 Fix minor build problem on OSX (need a replacement for memrchr) 2005-04-12 16:08:51 +00:00
Werner Koch
73fb1c592f * g10.c (main, add_notation_data, add_policy_url) 
(add_keyserver_url): Use isascii() to protect the isfoo macros and
to replace direct tests.  Possible problems noted by Christian
Biere.
* keyserver.c (parse_keyserver_uri): Ditto.

* g10.c (main): Declare --pipemode deprecated.
* misc.c (deprecated_command): New.
 2005-04-11 18:24:09 +00:00
Werner Koch
14f6a82ca9 (confucius_mktmpdir): Changed to use mkdtmp(3). 2005-04-11 17:22:23 +00:00
Werner Koch
3441826da7 * gpg-connect-agent.c (start_agent): Use PATHSEP_C instead of ':'. 2005-04-11 16:21:49 +00:00
Werner Koch
5a6edf162b * call-dirmngr.c (start_dirmngr): Use PATHSEP_C instead of ':'. 
* call-agent.c (start_agent): Ditto.
 2005-04-11 16:21:05 +00:00
Werner Koch
6b002f0602 * app-openpgp.c (do_check_pin): Add hack to allow verification of 
CHV3.
(get_public_key): Don't use gcry functions to create S-expressions.
(do_deinit, do_readkey, do_genkey, send_keypair_info): Adjust for
above change.
 2005-04-11 16:20:10 +00:00
Werner Koch
45eba6e5de * sexputil.c: New. 2005-04-11 16:10:03 +00:00
Werner Koch
1c88f744d6 typo fixes 2005-04-11 16:09:18 +00:00
Marcus Brinkmann
cf502487fc 2005-04-11 Marcus Brinkmann <marcus@g10code.de> 
* symcryptrun.c: Implement config file parsing.
 2005-04-10 23:54:39 +00:00
Marcus Brinkmann
57ee014863 2005-04-11 Marcus Brinkmann <marcus@g10code.de> 
* Makefile.am (bin_PROGRAMS): Add symcryptrun.
	(symcryptrun_SOURCES, symcryptrun_LDADD): New variables.
	* symcryptrun.c: New file.
 2005-04-10 23:10:52 +00:00
Marcus Brinkmann
c5b1095b6d 2005-04-11 Marcus Brinkmann <marcus@g10code.de> 
* simple-pwquery.c (simple_pwquery): Use spwq_secure_free.
 2005-04-10 22:12:31 +00:00
Moritz Schulte
6ece9a0de9 2005-04-03 Moritz Schulte <moritz@g10code.com> 
* command-ssh.c (ssh_request_spec): New member: secret_input.
	(REQUEST_SPEC_DEFINE): New argument: secret_input.
	(request_specs): Add secret_input flag.
	(request_spec_lookup): New function ...
	(ssh_request_process): ... use it here; depending on secret_input
	flag allocate secure or non-secure memory.
 2005-04-09 16:41:28 +00:00
Werner Koch
f8a3345229 * ccid-driver.c (ccid_slot_status): Fixed debug messages. 
* card-util.c (card_edit): Add command "verify".  Enhanced admin
command to allow optional arguments "on", "off" and "verify".
(card_status): Print private DOs in colon mode.
* app-openpgp.c (do_check_pin): Add hack to allow verification of
CHV3.
 2005-04-07 08:31:23 +00:00
Werner Koch
4e1a0eac3e Typo fixes 2005-04-05 17:10:28 +00:00
Werner Koch
80f4424658 Changes to make use of code taken from libassuan. This replaces the 
old ad-hoc connection code to gpg-agent.  We do need this for the
forthcoming diversion of card code to an already running gpg-agent
with card-support.
 2005-04-05 17:09:13 +00:00
David Shaw
727cda9758 * mainproc.c (proc_plaintext): Properly handle SIG+LITERAL (old-style PGP) 
signatures that use hashes other than SHA-1, RIPEMD160, or MD5.
 2005-04-01 16:22:34 +00:00
Werner Koch
c43423f0bd (keygen_set_std_prefs): Explain the chosen order of 
AES key sizes.
 2005-04-01 09:03:15 +00:00
David Shaw
c336e34571 * exec.h, exec.c (set_exec_path): Remove some dead code and change all 
callers.  We no longer need to append to $PATH.
 2005-03-31 17:11:53 +00:00
Werner Koch
fe01cbceb0 * keydb.c (keydb_add_resource): Clarify meaning of flags. Add new 
flag 4.  Use log_info for errors registering the default secret key.
* g10.c (main): Flag the default keyrings.
 2005-03-31 07:05:35 +00:00
David Shaw
14fdbdc97a * keyserver.c (keyserver_spawn): Don't mess about with the $PATH. 
Rather, call keyserver helpers with the full path.  This fixes some
PATH-inspired DLL problems on W32.  Noted by Carlo Luciano Bianco.
 2005-03-31 03:58:53 +00:00
Werner Koch
0fae3c3738 * w32installer.nsi: Allow including of WINPT source. Include 
libiconv source.
* mk-w32-dist: Add code to detect presence of source.  Calculate a
build number; add option --build-number to overide.
 2005-03-30 14:23:01 +00:00
Werner Koch
1985805cdf (pin_cb): Print a warning if the info string hack is 
not there.  This may happen due to typos in the translation.
 2005-03-30 10:39:13 +00:00
Moritz Schulte
9476729709 2005-03-29 Moritz Schulte <moritz@g10code.com> 
* app-openpgp.c (retrieve_fpr_from_card): New function.
	(retrieve_next_token): New function.
	(retrieve_key_material): New function.
	(get_public_key): Implement retrival of key through expernal
	helper (gpg) in case the openpgp card is not cooperative enough.
 2005-03-29 20:46:18 +00:00
Werner Koch
4d5285ee87 (rndw32_gather_random_fast): While adding data use the 
size of the object and not the one of its address.  Bug reported by
Sascha Kiefer.
 2005-03-23 08:50:27 +00:00
David Shaw
1517f0e945 * gpgkeys_ldap.c, ksutil.h, ksutil.c (print_nocr): Moved from 
gpgkeys_ldap.c.  Print a string, but strip out any CRs.

* gpgkeys_finger.c (get_key), gpgkeys_hkp.c (get_key), gpgkeys_http.c
(get_key): Use it here when outputting key material to canonicalize
line endings.
 2005-03-22 23:41:08 +00:00
David Shaw
57b9ba5e16 * gpgv.c: Stubs for tty_enable_completion() & tty_disable_completion(). 
* openfile.c (ask_outfile_name): Enable readline completion when prompting
for an output filename.

* plaintext.c (ask_for_detached_datafile): Enable readline completion when
prompting for a detached sig datafile.
 2005-03-21 20:47:28 +00:00
Werner Koch
31135aff14 * keyedit.c (command_generator, keyedit_completion): Changed 
indentation.
* card-util.c (command_generator, card_edit_completion): Ditto.
 2005-03-21 15:24:48 +00:00
David Shaw
f58ccc8c3d * readline.m4: Check for completion functionality. 
* ldap.m4: Comments.
 2005-03-21 14:32:44 +00:00