security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2024-11-05 20:48:52 +01:00
Code Activity
3,948 Commits 101 Branches 306 Tags 73 MiB
f952fe8c6d
Commit Graph

86 Commits

Author SHA1 Message Date
Daniel Kahn Gillmor
f952fe8c6d gpg: Add build and runtime support for larger RSA keys 
* configure.ac: Added --enable-large-secmem option.
* g10/options.h: Add opt.flags.large_rsa.
* g10/gpg.c: Contingent on configure option: adjust secmem size,
add gpg --enable-large-rsa, bound to opt.flags.large_rsa.
* g10/keygen.c: Adjust max RSA size based on opt.flags.large_rsa
* doc/gpg.texi: Document --enable-large-rsa.

--

This is a cherry-pick of 534e2876ac from
STABLE-BRANCH-1-4 against STABLE-BRANCH-2-0

Some older implementations built and used RSA keys up to 16Kib, but
the larger secret keys now fail when used by more recent GnuPG, due to
secure memory limitations.

Building with ./configure --enable-large-secmem will make gpg
capable of working with those secret keys, as well as permitting the
use of a new gpg option --enable-large-rsa, which let gpg generate RSA
keys up to 8Kib when used with --batch --gen-key.

Debian-bug-id: 739424

Minor edits by wk.

GnuPG-bug-id: 1732
 2014-10-03 20:24:03 +02:00
Werner Koch
41dcd32218 Release 2.0.24 2014-06-24 15:22:31 +02:00
Werner Koch
017c6f8fba doc: Update from master. 
--
 2014-06-24 13:54:30 +02:00
Werner Koch
d03df68851 doc: Update from master 
--
 2014-06-03 09:05:25 +02:00
Werner Koch
d7750a15d5 gpg: New %U expando for the photo viewer. 
* g10/photoid.c (show_photos): Set namehash.
* g10/misc.c (pct_expando): Add "%U" expando.
--

This makes is possible to extract all photos ids from a key to
different files.

(cherry picked from commit e184a11f94)

Resolved conflicts:
	g10/photoid.c - whitespaces
 2014-06-03 08:55:31 +02:00
Werner Koch
8a4bd132f7 gpg: Reject signatures made with MD5. 
* g10/gpg.c: Add option --allow-weak-digest-algos.
(main): Set option also in PGP2 mode.
* g10/options.h (struct opt): Add flags.allow_weak_digest_algos.
* g10/sig-check.c (do_check): Reject MD5 signatures.
* tests/openpgp/gpg.conf.tmpl: Add allow_weak_digest_algos.
--
(cherry picked from commit f90cfe6b66)

Resolved conflicts:
	g10/gpg.c - adjust.
	tests/openpgp/defs.inc - no changes
 2014-06-03 08:44:08 +02:00
Werner Koch
fd5f452496 gpg: Change armor Version header to emit only the major version. 
* g10/options.h (opt): Rename field no_version to emit_version.
* g10/gpg.c (main): Init opt.emit_vesion to 1.  Change --emit-version
to bump up opt.emit_version.
* g10/armor.c (armor_filter): Implement different --emit-version
values.
--

GnuPG-bug-id: 1572
Signed-off-by: Werner Koch <wk@gnupg.org>
(cherry picked from commit e951782e93)

Resolved conflicts:
	NEWS
	g10/armor.c
	g10/gpg.c
 2013-11-27 09:32:43 +01:00
Werner Koch
a4b7e2e448 doc: Update from master 2013-10-04 19:09:36 +02:00
Ian Abbott
4d67f59a33 doc: fix some Texinfo warnings. 
* doc/gpg.texi: Fix syntax and add missing menu entries.
* doc/gpgsm.texi: Fix subsectioning.
--

These five patches fix some warnings from Texinfo 5 by adding some
missing nodes and changing some sections to subsections, and moving an
'@end ifset' to the start of a line.  I also noticed the 'Deprecated
options' subsection didn't appear in the GPG options menu, so I added
it.  (Texinfo never warned about it because it was after the last node
in the menu.)

1) doc/gpg.texi: move '@end ifset' to start of line
2) doc/gpg.texi: Add missing node for 'Compliance options' section.
3) doc/gpg.texi: add node for 'Deprecated options' subsection.
4) doc/gpg.texi: make 'Unattended key generation' a subsection
5) doc/gpgsm.texi: fix subsectioning for Unattended Usage

(all 5 merged into one patch by wk)
 2013-05-07 21:10:37 +02:00
Werner Koch
681338bfd3 Update docs from master. 
* doc/gpg-agent.texi: Update from master.
* doc/gpg.texi: Ditto.
* doc/gpgsm.texi: Ditto.
* doc/gpl.texi: Ditto.
* doc/yat2m.c: Ditto.
--

(updated from commit d6798d261c)
 2013-04-22 17:29:57 +02:00
Werner Koch
e23ca51ba0 Update texinfo source from master. 
* doc/gpg-agent.texi, doc/gpg.texi, doc/gpgsm.texi
* doc/scdaemon.texi,  doc/tools.texi: Update.
* doc/yat2m.c: Update.
 2012-03-27 10:05:59 +02:00
Werner Koch
a7585eeabe Prepare for the 2.0.18 release. 
Copied texi files from master.
Updated de.po.
Added more file to gitignore.
Removed the large PKITS tarball.
General release preparations.
 2011-08-04 16:23:09 +02:00
Werner Koch
1f874f860c Finished preparations for 2.0.17 2011-01-13 16:01:21 +01:00
Werner Koch
46ef7f6243 Fix a bug where scdaemon kills a non-daemon gpg-agent. 
Fix a passphrase cache annoyance.
 2010-11-11 15:08:48 +00:00
Werner Koch
68e18c961d Make CAST5 the default s2k algo tomatch the doc and gpg 1.4. 2010-06-17 12:58:51 +00:00
Werner Koch
32c979559f Minor change 2010-03-05 11:52:13 +00:00
Werner Koch
d6a28faafa Minor changes. 2010-02-11 11:34:34 +00:00
Werner Koch
2437911903 Implement command --passwd for GPG. 2010-01-11 16:05:26 +00:00
Werner Koch
1356693b0d Allow for numerical debug levels. 2009-12-03 19:13:19 +00:00
Werner Koch
999a909708 Allow uid sand key election using a '*'. 2009-09-04 11:52:03 +00:00
David Shaw
fa4a237b6c * gpg.text: Suggested new ordering for --edit-key. 2009-08-24 22:21:39 +00:00
David Shaw
38a3e20952 * gpg.texi (OpenPGP Options): Clarify that personal-foo-preferences 
overrides recipient preferences (safely).
 2009-08-17 16:48:49 +00:00
David Shaw
1b61770848 * gpg.texi (GPG Configuration Options): Document keyserver options 
check-cert and ca-cert-file.
 2009-08-14 19:43:26 +00:00
David Shaw
9df29b446d * gpg.texi (OpenPGP Options): Don't mention --no-sk-comment (doesn't 
exist any longer).
 2009-07-31 14:36:22 +00:00
David Shaw
ab9a918bc2 Try a DNS-SD lookup to find a domain-specific LDAP server before 
resorting to keys.{domain}.
 2009-07-23 18:28:54 +00:00
Werner Koch
506aee32fd Typo fixes. Fixes bug#1093 2009-07-22 13:33:46 +00:00
Werner Koch
02e05e28e7 Give hints on files to backup. 2009-07-22 10:24:46 +00:00
Werner Koch
d56084296c Fix bug 1090. 2009-07-20 10:42:45 +00:00
Werner Koch
556d4ed983 Allow generation of DSA2 keys without --enable-dsa2. 2009-05-20 09:57:10 +00:00
Werner Koch
8e7e6f124b Doc fixes. 2009-05-08 15:08:37 +00:00
David Shaw
a50a274d20 * gpg.texi (GPG Configuration Options): Document keyserver-options 
debug.
 2009-03-16 18:45:46 +00:00
Werner Koch
59d7a54e72 New PIN Callback attributes in gpg-agent. 
Common prompts for keypad and simple card reader.
More support for Netkey cards;  PIN management works now.
 2009-03-05 19:19:37 +00:00
Werner Koch
53f1c11adf Small doc fixes. 2008-12-12 14:04:22 +00:00
Werner Koch
78ff45c49e Align ticker to the full or half second. 2008-12-08 19:10:42 +00:00
David Shaw
bb39c59728 * gpg.texi (OpenPGP Key Management): Clarify setpref a bit. 2008-09-23 19:18:52 +00:00
Werner Koch
f899b9683b Support the Certifciate DO of the v2 OpenPGP cards. 2008-09-23 09:57:45 +00:00
Werner Koch
d92f06e882 Add a warning nite to --throw-keyds. 2008-08-28 14:57:25 +00:00
Werner Koch
7d1b0d8626 Add a warning note to --allow-multiple-messages. 
s/Sylpeed-Claws/Claws-Mail/.
 2008-08-07 07:46:52 +00:00
Werner Koch
035c838f71 Made --fixed-list-mode obsolete. 2008-06-11 08:07:54 +00:00
Marcus Brinkmann
102b285a2d 2008-05-15 Marcus Brinkmann <marcus@g10code.de> 
* gpg.texi (Operational GPG Commands): Mention the way to change
	the default signing key.
 2008-05-15 10:59:35 +00:00
Werner Koch
d9405f0c49 Updated German translation. 
Fix in gpgconf for W32.
 2008-05-09 09:54:35 +00:00
Werner Koch
69ae16636c Add command --locate-key. 
Fix auto-key-locate processing of "nodefault".
 2008-05-07 15:40:36 +00:00
Werner Koch
97ec9aac2b Enhanced --auto-key-locate. 2008-04-08 11:04:16 +00:00
Werner Koch
9a8ee6e6be Changed the way i18n files are located under Windows. The setting of the 
Registry key is not anymore required.  Helpfiles are not properly located.
 2008-03-25 19:41:11 +00:00
Werner Koch
e751bcdd04 Add IF command and new variable functions to gpg-connect-agent. 2008-03-05 10:08:10 +00:00
David Shaw
9c42222a7a * gpg.texi (GPG Esoteric Options): Tweak mention of Tempest font to 
add a "claimed" in there.
 2008-02-05 19:42:12 +00:00
Werner Koch
1e46b20f48 Add missing country tag to qualified.txt. 
Typo fixes.
 2008-01-10 08:13:14 +00:00
Werner Koch
9d66580cff Allow verification of some broken S-TRUST generated signatures. 2007-12-13 15:45:40 +00:00
Werner Koch
598a3d0ab4 [W32] Changed default socket for dirmngr. 
[W32] Add some code for event notifications 
      between scdaemon and gpg-agent.
 2007-11-27 08:01:19 +00:00
Werner Koch
55ba204bfa Started to implement the audit log feature. 
Pass PINENTRY_USER_DATA and XAUTHORITY to Pinentry.
Improved support for the quality bar.
Minor internal restructuring.
Translation fixes.
 2007-11-19 16:03:50 +00:00