security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2024-12-23 10:29:58 +01:00
Code Activity
4,024 Commits 102 Branches 308 Tags 75 MiB
Commit Graph

30 Commits

Author SHA1 Message Date
Werner Koch
90b419f3e9 agent: Make --allow-mark-trusted the default. 
* agent/gpg-agent.c (opts, main): Add option --no-allow-mark-trusted.
Put this option into the gpgconf-list.
(main): Enable opt.allow_mark_trusted by default.
* tools/gpgconf-comp.c (gc_options_gpg_agent): Replace
allow-mark-trusted by no-allow-mark-trusted.

* agent/trustlist.c (agent_marktrusted): Always set the "relax" flag.

--

These changes have been in effect for the Gpg4win Windows version
since 2011-01-24 and thus first released with Gpg4win 2.1.0.  Given
the current state of PKIX it does not make any sense to lure the Unix
user into false security by making it harder to trust self-signed or
CAcert certificates.

Signed-off-by: Werner Koch <wk@gnupg.org>
 2013-07-03 15:20:25 +02:00
Werner Koch
56680123a6 Fix realloc usage. Fixes bug#1163. 2009-12-02 19:02:33 +00:00
Werner Koch
aa03d8f184 Use cancel button in confirmation only if requested. 2009-06-17 10:19:50 +00:00
Werner Koch
dac70ca2fd Fixed an fopen problem on Windows Vista. 2009-06-03 17:24:24 +00:00
Werner Koch
6e63e54b00 Fixed a trustlist update problem. 
Pretty format the marktrusted pinentry prompt.
 2009-03-26 11:33:53 +00:00
Werner Koch
c2c3cf4be1 Changed order of the confirmation questions for root certificates 
and stores negative answers in trustlist.txt.
 2009-03-19 10:21:51 +00:00
Werner Koch
138bf2dc15 Fixed segv in gpg-agent (command marktrusted). 
Replaced almost all free by xfree.
Translation fixes.
 2008-05-27 12:03:50 +00:00
Werner Koch
15d0cb42a1 Implemented more gpg-agen options to support certain passphrase policies. 
New tool gpg-check-pattern.
 2007-08-27 18:10:27 +00:00
Werner Koch
74d344a521 Implemented the chain model for X.509 validation. 2007-08-10 16:52:05 +00:00
Werner Koch
93d3811abc Changed to GPLv3. 
Removed intl/.
 2007-07-04 19:49:40 +00:00
Werner Koch
0cfbfd6186 A whole bunch of changes to allow building for Windows. 
See the ChangeLogs for details.
 2007-06-14 17:05:07 +00:00
Werner Koch
61bcf36235 * trustlist.c (read_trustfiles): Take a missing trustlist as an 
empty one.
 2007-04-03 18:43:00 +00:00
Werner Koch
a98ea89fa5 New command GETEVENTCOUNTER. 
* command.c (bump_key_eventcounter): New.
(bump_card_eventcounter): New.
(cmd_geteventcounter): New command.
* gpg-agent.c (handle_signal): Call bump_card_eventcounter.
* findkey.c (agent_write_private_key): Call bump_key_eventcounter.
* trustlist.c (agent_reload_trustlist): Ditto.
 2006-11-14 14:53:42 +00:00
Werner Koch
c1f4a8edff gpg-agent.c (main): In detached mode connect standard descriptors to /dev/null. 
Other minor fixes
 2006-11-09 16:09:46 +00:00
Werner Koch
416ac2e4d7 Allow to cancel marktrusted. 2006-10-16 17:36:44 +00:00
Werner Koch
d94faf4a3d New "relax" option for trustlist.txt 2006-09-25 18:29:20 +00:00
Werner Koch
7f42987b07 Allow for a global trustlist. 2006-09-15 18:53:37 +00:00
Werner Koch
eef036df23 The big Assuan error code removal. 2006-09-06 16:35:52 +00:00
Werner Koch
f98537733a Updated FSF's address. 2006-06-20 17:21:37 +00:00
Werner Koch
444c93043d * acinclude.m4 (GNUPG_PTH_VERSION_CHECK): Link a simple test 
program to see whether the installation is sane.

* certreqgen.c (proc_parameters): Cast printf arg.
 2005-01-13 18:00:46 +00:00
Werner Koch
d9147773b4 * trustlist.c (read_list): Allow colons in the fingerprint. 
(headerblurb): Rephrased.

* gpg-agent.c (handle_connections): Increase the stack size ot 256k.

* de.po: Updated.

* scdaemon.c (main): Bumbed thread stack size up to 512k.

* keylist.c (list_cert_raw): Print the keygrip.
 2004-07-22 09:37:36 +00:00
Werner Koch
2cce42c23f * gpg-agent.c (handle_signal): Reload the trustlist on SIGHUP. 
(start_connection_thread): Hack to simulate a ticker.
* trustlist.c (agent_trustlist_housekeeping)
(agent_reload_trustlist): New.  Protected all global functions
here with a simple counter which is sufficient for Pth.

* fingerprint.c (gpgsm_get_key_algo_info): New.
* sign.c (gpgsm_sign): Don't assume RSA in the status line.
* keylist.c (list_cert_colon): Really print the algorithm and key
length.
(list_cert_raw, list_cert_std): Ditto.
(list_cert_colon): Reorganized to be able to tell whether a root
certificate is trusted.
 2004-05-11 19:11:53 +00:00
Werner Koch
30bbef1a28 * gpg-agent.c: Remove help texts for options lile --lc-ctype. 
(main): New option --allow-mark-trusted.
* trustlist.c (agent_marktrusted): Use it here.

* gpg-agent.texi (Agent Options): Add --allow-mark-trusted.

* gpgconf-comp.c: Add --allow-mark-trusted for the gpg-agent.
 2004-05-03 13:37:38 +00:00
Werner Koch
fa5d1513a2 (agent_marktrusted): Check whether the trustlist is 
writable.
 2004-01-28 16:19:46 +00:00
Repo Admin
7250331472 This commit was manufactured by cvs2svn to create branch 
'GNUPG-1-9-BRANCH'.
 2003-06-05 07:14:21 +00:00
Repo Admin
82a17c9fb3 This commit was manufactured by cvs2svn to create branch 
'GNUPG-1-9-BRANCH'.
 2002-10-19 07:55:27 +00:00
Marcus Brinkmann
b4f8fcb0e1 2002-04-25 Marcus Brinkmann <marcus@g10code.de> 
* agent.h (agent_get_confirmation): Replace paramter prompt with
	two parameters ok and cancel.
	* query.c (agent_get_confirmation): Likewise.  Implement this.
	* trustlist.c (agent_marktrusted): Fix invocation of
	agent_get_confirmation.
	* divert-scd.c (ask_for_card): Likewise.
 2002-04-24 23:18:53 +00:00
Werner Koch
c39b866d2a Doc fixes, moved some fizmes to TODO, fixed minor bugs. 2002-03-18 09:30:35 +00:00
Werner Koch
822e682c50 * command.c (cmd_marktrusted): Implemented. 
* trustlist.c (agent_marktrusted): New.
(open_list): Add APPEND arg.

* query.c (agent_get_confirmation): New.
 2002-02-18 20:44:48 +00:00
Werner Koch
148aa6e529 * trustlist.c: New. 
* command.c (cmd_istrusted, cmd_listtrusted, cmd_marktrusted): New.
 2002-01-15 13:01:52 +00:00