NIIBE Yutaka 0662b9444b dirmngr: Reject certificate which is not valid into cache. ... * dirmngr/certcache.c (put_cert): When PERMANENT, reject the certificate which is obviously invalid. -- With this change, invalid certificates from system won't be registered into cache. Then, an intermediate certificate which is issued by an entity certified by such an invalid certificate will be also rejected with GPG_ERR_INV_CERT_OBJ. With less invalid certificates in cache, it helps the validate_cert_chain function work better. GnuPG-bug-id: 6142 Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>		2022-08-26 09:24:00 +09:00
..
cdb.h	headers: fix spelling	2018-10-25 16:53:05 -04:00
cdblib.c	dirmngr: Clean up for not supporting WindowsCE.	2022-03-29 13:41:04 +09:00
certcache.c	dirmngr: Reject certificate which is not valid into cache.	2022-08-26 09:24:00 +09:00
certcache.h	dirmngr: Use system certs if --hkp-cacert is not used.	2017-09-18 22:49:05 +02:00
ChangeLog-2011	Fix spelling.	2017-02-21 13:11:46 -05:00
ChangeLog-2011-ks	Remove the obsolete keyserver directory from the repo.	2015-04-20 18:20:45 +02:00
crlcache.c	dirmngr: Support ECDSA for CRLs	2022-02-27 12:26:38 +01:00
crlcache.h	move some file encodings to UTF-8	2016-09-17 15:57:31 +09:00
crlfetch.c	sm: Print diagnostic about CRL problems due to Tor mode.	2022-04-11 17:57:14 +02:00
crlfetch.h	dirmngr: Rewrite the LDAP wrapper tool	2021-06-16 12:58:32 +02:00
dirmngr_ldap.c	dirmngr: Allow to pass no filter args to dirmngr_ldap.	2021-06-16 12:59:49 +02:00
dirmngr-client.c	dirmngr: Suppress error message on trial reading as PEM format.	2022-03-25 08:41:51 +09:00
dirmngr-err.h	Some work on porting dirmngr (unfinished)	2010-07-16 13:19:45 +00:00
dirmngr-status.h	dirmngr: Print a WARNING status for DNS config problems.	2018-07-25 14:35:04 +02:00
dirmngr.c	dirmngr: Fix for C90 compiler.	2022-04-26 11:16:28 +09:00
dirmngr.h	dirmngr: Avoid initial delay on the first keyserver access.	2022-02-01 16:03:06 +01:00
dns-stuff.c	Require Libgcrypt 1.9	2021-01-19 10:33:03 +01:00
dns-stuff.h	dirmngr: Use IPv4 or IPv6 interface only if available.	2019-11-12 20:35:12 +01:00
dns.c	build: Update for newer autoconf.	2021-12-22 10:36:26 +09:00
dns.h	dirmngr: dns: Fix allocation of string buffer in stack.	2020-05-20 19:44:38 +09:00
domaininfo.c	dirmngr: Improve domaininfo cache update algorithm.	2019-04-02 13:22:32 +02:00
http-common.c	dirmngr: Fix commit de6d8313	2017-03-03 17:17:26 +01:00
http-common.h	dirmngr: Rearrange files to fix de6d831.	2017-03-02 18:35:03 +01:00
http-ntbtls.c	dirmngr: Change the default keyserver.	2021-08-24 18:09:56 +02:00
http.c	dirmngr: Fix for Windows.	2022-05-10 14:54:40 +09:00
http.h	dirmngr: Support pseudo URI scheme "opaque".	2021-06-16 11:54:47 +02:00
ks-action.c	dirmngr: Allow for non-URL specified ldap keyservers.	2021-06-16 12:25:13 +02:00
ks-action.h	gpg: Lookup a missing public key of the current card via LDAP.	2021-04-16 20:21:23 +02:00
ks-engine-finger.c	dirmngr: Print a WARNING status for DNS config problems.	2018-07-25 14:35:04 +02:00
ks-engine-hkp.c	dirmngr: Ask keyservers to provide the key fingerprints	2021-12-20 09:25:26 +01:00
ks-engine-http.c	dirmngr,gpg: Better diagnostic in case of bad TLS certificates.	2019-11-18 18:26:55 +01:00
ks-engine-kdns.c	Remove -I option to common.	2017-03-07 20:25:54 +09:00
ks-engine-ldap.c	sm: Print diagnostic about CRL problems due to Tor mode.	2022-04-11 17:57:14 +02:00
ks-engine.h	dirmngr: Allow redirection from https to http for CRLs	2018-04-25 12:38:04 +02:00
ldap-misc.c	dirmngr: Avoid memory leaks on errors	2021-11-24 10:50:33 +09:00
ldap-misc.h	dirmngr: Rewrite the LDAP wrapper tool	2021-06-16 12:58:32 +02:00
ldap-parse-uri.c	dirmngr: Support new gpgNtds parameter in LDAP keyserver URLs.	2021-02-17 17:40:02 +01:00
ldap-parse-uri.h	Remove -I option to common.	2017-03-07 20:25:54 +09:00
ldap-url.c	dirmngr: Fix ldap-url.c.	2021-12-17 13:33:40 +09:00
ldap-url.h	Merged Dirmngr with GnuPG.	2010-06-09 16:53:51 +00:00
ldap-wrapper.c	agent,dirmngr,kbx,scd,tpm2d: Use gnupg_sleep.	2021-10-05 14:05:56 +09:00
ldap-wrapper.h	dirmngr: Remove cruft from dirmngr_ldap	2019-11-11 20:49:04 +01:00
ldap.c	dirmngr: Workaround for a certain broken LDAP URL	2022-03-25 13:36:20 +01:00
ldapserver.c	dirmngr: Allow for non-URL specified ldap keyservers.	2021-06-16 12:25:13 +02:00
ldapserver.h	dirmngr: Allow for non-URL specified ldap keyservers.	2021-06-16 12:25:13 +02:00
loadswdb.c	common,agent,dirmngr,g10,tools: Fix split_fields API.	2020-09-18 10:20:23 +09:00
Makefile.am	dirmngr: Fix NTBTLS include for test	2022-08-16 16:28:45 +02:00
misc.c	dirmngr: Fix LDAP port parsing.	2018-11-05 09:00:02 +01:00
misc.h	dirmngr: Rearrange files to fix de6d831.	2017-03-02 18:35:03 +01:00
OAUTHORS	Nuked almost all trailing white space.	2011-02-04 12:57:53 +01:00
ocsp.c	dirmngr: Fix failed malloc error message.	2022-08-03 10:49:58 +02:00
ocsp.h	Merged Dirmngr with GnuPG.	2010-06-09 16:53:51 +00:00
ONEWS	Nuked almost all trailing white space.	2011-02-04 12:57:53 +01:00
server.c	dirmngr: Escape more characters in WKD requests.	2022-03-28 16:12:03 +02:00
sks-keyservers.netCA.pem	dirmngr: Add support for hkps keyservers.	2014-05-05 16:23:37 +02:00
t-dns-stuff.c	dirmngr: Print a WARNING status for DNS config problems.	2018-07-25 14:35:04 +02:00
t-http-basic.c	dirmngr: Avoid possible CSRF attacks via http redirects.	2018-11-22 22:36:07 +01:00
t-http.c	dirmngr: Support pseudo URI scheme "opaque".	2021-06-16 11:54:47 +02:00
t-ldap-misc.c	dirmngr: Rewrite the LDAP wrapper tool	2021-06-16 12:58:32 +02:00
t-ldap-parse-uri.c	dirmngr: Rework of the LDAP code, part 1.	2019-11-26 13:09:35 +01:00
t-support.c	dirmngr: Print a WARNING status for DNS config problems.	2018-07-25 14:35:04 +02:00
t-support.h	dirmngr: Rewrite the LDAP wrapper tool	2021-06-16 12:58:32 +02:00
tls-ca.pem	Move http module from common/ to dirmngr/.	2015-10-18 20:08:26 +02:00
validate.c	dirmngr: Fix a wrong compiler warning.	2022-06-13 17:54:01 +02:00
validate.h	dirmngr: Support ECDSA for OCSP.	2022-02-27 12:26:38 +01:00
workqueue.c	Spelling cleanup.	2020-02-18 18:07:46 -05:00