security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2024-12-27 11:10:13 +01:00
Code Activity
3,917 Commits 102 Branches 308 Tags 75 MiB
Commit Graph

3917 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Ben Kibbey
fb1cdd7b0e Handle pinentry-mode=loopback. 
When this mode is set an inquire will be sent to the client to retrieve
the passphrase. This adds a new inquire keyword "NEW_PASSPHRASE" that the
GENKEY and PASSWD commands use when generating a new key.
 2011-09-12 09:54:16 +02:00
Werner Koch
bea3b7c93f Mark component descriptions for translation. 2011-08-26 15:20:41 +02:00
Werner Koch
4379c01a24 Beautified the online html manual 2011-08-12 14:40:47 +02:00
Werner Koch
816bee1fa0 Fixed set but unused variable bugs 2011-08-10 14:11:30 +02:00
Werner Koch
14442d2be0 Fix autoconf warnings and update config.* files. 2011-08-10 13:39:38 +02:00
Werner Koch
7316b53426 Typo fix 2011-08-10 13:26:17 +02:00
Ben Kibbey
28eac436bb Update option s2k-count to match the documentation. 
The option would previously return an error if its value was < 65536.
 2011-08-10 12:46:06 +02:00
Werner Koch
81389383a3 Made the KILLAGENT and KILLSCD commands working again. 
This requires that GnuPG is build with a newer version of Libassuan
(2.0.3).
 2011-08-10 11:47:04 +02:00
Werner Koch
14e0b60efd Adjust for signed integer passed to OpenPGP card decrypt. 2011-08-08 10:44:03 +02:00
Werner Koch
663768f9af Minor doc updates v2.0 vs. v2.1) 2011-08-08 10:17:33 +02:00
Werner Koch
fe8619d29c Do not print read-only trustdb warning with --quiet. 
This is only a warning and gpg would anyway print an error message if
it tries to write to the trustdb.
 2011-07-29 09:58:34 +02:00
Werner Koch
809dfd70e3 Make the inquire cancel fix a little bit more robust. 2011-07-27 11:10:15 +02:00
Ben Kibbey
29af48840f Fixed gpg-agent SCD inquire command cancellation. 
Need to send the CANCEL command back to scdaemon otherwise the next SCD
command will fail.
 2011-07-27 10:58:52 +02:00
Werner Koch
6f86ee812f Fix crash while reading unsupported ssh keys. 
This bug was found by n-roeser at gmx.net
(gnupg-devel@, msgid 4DFC7298.4040509@gmx.net).
 2011-07-22 09:29:40 +02:00
Werner Koch
2d0ca28a22 Try to get the only-valid-if-cert-valid cert from the dirmngr first. 
This should always work because the dirmngr asked us to validate the
given certificate.  This should make OCSP configuration easier because
there is less requirement to install all certificates for Dirmngr and
gpgsm.

CAUTION:  This code has not yet been tested.
 2011-07-21 10:24:03 +02:00
Werner Koch
093ed70fbf Allow listing of ssh fingerprint with the agent's KEYINFO command. 2011-07-20 21:13:24 +02:00
Werner Koch
d479906991 Support a confirm flag for ssh. 
This implements the suggestion from bug#1349.  With this change the
fingerprint of the ssh key is also displayed in the pinentry prompts.
 2011-07-20 20:49:41 +02:00
Werner Koch
69f8a7f15d New functions to compute an ssh style fingerprint. 2011-07-20 16:41:25 +02:00
Werner Koch
a74d5e3550 Print decoded S2K count in --list-packets mode. 
Fixes bug#1355.
 2011-07-18 10:57:33 +02:00
Werner Koch
550d94b011 Clarify documentation of --keyid-format. 
Fixes bug#1354.
 2011-07-18 10:38:14 +02:00
Werner Koch
92e66c70b6 Document OPTION s2k-count 2011-06-29 13:23:41 +02:00
Ben Kibbey
137e3a0fbc Added gpg-agent OPTION "s2k-count". 
When unset or 0, the calibrated count will be used.
 2011-06-29 13:17:25 +02:00
Werner Koch
c9e473618f Fixed an URL typo in the FAQ. 2011-06-28 10:32:46 +02:00
Bernhard Reiter
f194773540 doc/gpgsm.texi com-certs.pem mini-fix 
[[PGP Signed Part:Undecided]]
[1. text/plain]

Example path for com-certs.pem corrected.
[2. text/x-diff; doc.diff]
 2011-06-27 16:12:35 +02:00
Werner Koch
7d68c6b0ec Add question "What are DH/DSS keys?" 
... and the answer of course.
 2011-06-27 15:56:47 +02:00
Werner Koch
37228cfa05 Allow generation of card keys up to 4096 bit. 
This patch implementes a chunk mode to pass the key parameters from
scdaemon to gpg.  This allows to pass arbitrary long key paremeters;
it is used for keys larger than 3072 bit.

Note: the card key generation in gpg is currently broken.  The keys
are generated but it is not possible to create the self-signature
because at that time the gpg-agent does not yet know about the new
keys and thus can't divert the sign request to the card.  We either
need to run the learn command right after calling agent_scd_genkey or
implement a way to sign using the currently inserted card.  Another
option would be to get rid of agent_scd_genkey and implement the
feature directly in agent_genkey.
 2011-06-16 14:27:33 +02:00
Werner Koch
328ac58962 Fix for latest fix in Libgcrypt. 2011-06-13 14:54:40 +02:00
Werner Koch
070df4ea58 Revert latest po add-line-number patch. 
To avoid this in the future, everyone should really use the clean-po
filter as installed with ./autogen.sh .  Thanks.
 2011-06-13 14:49:37 +02:00
Marcus Brinkmann
1c684df5b8 Fix size_t vs int issues. 2011-06-01 21:43:30 +02:00
Marcus Brinkmann
9cb6557121 po 2011-06-01 15:47:41 +02:00
Marcus Brinkmann
35491a1793 dd 2011-06-01 15:45:24 +02:00
Marcus Brinkmann
bb0de520c1 Add missing LIBGCRYPT_CFLAGS for dirmngr_ldap. 2011-06-01 15:44:52 +02:00
Marcus Brinkmann
3a686a11d3 Add LIBICONV to LDFLAGS. 2011-06-01 15:43:22 +02:00
Werner Koch
79d59e8c09 Merge branch 'master' of git+ssh://playfair.gnupg.org/git/gnupg 2011-05-20 10:30:36 +02:00
Werner Koch
d679b4d642 Require libgpg-error 1.10 
This allows to remove some error code substitutes.
Fixed a typo in gpg.text.
 2011-05-20 10:27:50 +02:00
Marcus Brinkmann
de7cfc0c9b Merge dirmgr cs.po into gnupg cs.po. 2011-05-12 01:34:04 +02:00
Werner Koch
f8285f9b00 Add fixme note regarding pth_kill 2011-04-29 16:44:28 +02:00
Werner Koch
c36deeea8b Merge branch 'wk-gpg-keybox' 2011-04-29 15:10:36 +02:00
Werner Koch
afe5c1a370 Re-indentation of keydb.c and error code changes. 
Returning -1 as an error code is not very clean given that gpg error
has more descriptive error codes.  Thus we now return
GPG_ERR_NOT_FOUND for all search operations and adjusted all callers.
 2011-04-29 15:07:11 +02:00
Marcus Brinkmann
10cccd45af Fix import stat counter and abort secret key import on merge-only error case. 2011-04-29 12:02:46 +02:00
Marcus Brinkmann
a286e95f3a Give sensible error messages when trying to delete secret key. 2011-04-29 12:01:52 +02:00
Werner Koch
740629de00 Update OpenPGP parser to support ECC 2011-04-28 20:21:14 +02:00
Werner Koch
25f292ed89 Removed memory leak in the ECDH code. 2011-04-28 10:51:14 +02:00
Werner Koch
817f07173c Fixed regression in OpenPGP secret key export. 
The protection used in the exported key used a different iteration
count than given in the S2K field.  Thus all OpenPGP keys exported
from GnuPG 2.1-beta can't be imported again.  Given that the actual
secret key material is kept in private-keys-v1.d/ the can be
re-exported with this fixed version.
 2011-04-26 20:39:09 +02:00
Werner Koch
5da12674ea Fix regression in gpg's mail address parsing. 
Since 2009-12-08 gpg was not able to find email addresses indicated
by a leading '<'.  This happened when I merged the user id
classification code of gpgsm and gpg.
 2011-04-25 23:59:25 +02:00
Werner Koch
4caa768f1d Add OPTION:cache-ttl-opt-preset to gpg-agent. 
This option may be used to change the default ttl values use with the
--preset option of GENKEY and PASSWD.
 2011-04-21 15:40:48 +02:00
Marcus Brinkmann
dd491d290a 2011-04-20 Marcus Brinkmann <mb@g10code.com> 
* keylist.c (list_keyblock_colon): Use get_ownertrust_info, not
        get_ownertrust (which lead to binary zeroes in the output!).
 2011-04-20 22:41:22 +02:00
Marcus Brinkmann
70b871abbc Fix gpg-agent secure memory leak in OpenPGP private key import. 
2011-04-20  Marcus Brinkmann  <mb@g10code.com>

        * command.c (cmd_import_key): Release key from failed import
        before converting openpgp private key in the openpgp-private-key
        case.
 2011-04-20 11:33:09 +02:00
Ben Kibbey
b5f585f7d7 Another PASSWD --preset fix. 
Check for an error before presetting the passphrase.
 2011-04-18 10:20:36 +02:00
Ben Kibbey
b3c71eb26b Fixed PASSWD --preset. 
The previous patch required that the keygrip be cached before adding the
new passphrase to the cache. No more.
 2011-04-13 14:15:21 +02:00