Werner Koch 070211eb99

dirmngr: Add options --tls and --systrust to the VALIDATE cmd. ...

* dirmngr/certcache.h (certlist_s, certlist_t): New.
* dirmngr/certcache.c (read_certlist_from_stream): New.
(release_certlist): New.
* dirmngr/server.c (MAX_CERTLIST_LENGTH): New.
(cmd_validate): Add options --tls and --systrust.  Implement them
using a kludge for now.
* dirmngr/validate.c (validate_cert_chain): Support systrust
checking.  Add kludge to disable the CRL checking for tls mode.
--

This can now be used to test a list of certificates as returned by
TLS.  Put the certs PEM encoded into a a file certlist.pem with the
target certificate being the first.  Then run

  gpg-connect-agent --dirmngr \
    '/definqfile CERTLIST wiki-gnupg-chain.pem' \
    'validate --systrust --tls' /bye

CRLS check has been disabled becuase we can't yet pass the systrust
flag to the CRL checking code.

Signed-off-by: Werner Koch <wk@gnupg.org>

2017-02-17 16:41:02 +01:00

..

cdb.h

Tweaks for gpgconf.

2010-12-14 19:17:58 +00:00

cdblib.c

move some file encodings to UTF-8

2016-09-17 15:57:31 +09:00

certcache.c

dirmngr: Add options --tls and --systrust to the VALIDATE cmd.

2017-02-17 16:41:02 +01:00

certcache.h

dirmngr: Add options --tls and --systrust to the VALIDATE cmd.

2017-02-17 16:41:02 +01:00

ChangeLog-2011

Remove the obsolete keyserver directory from the repo.

2015-04-20 18:20:45 +02:00

ChangeLog-2011-ks

Remove the obsolete keyserver directory from the repo.

2015-04-20 18:20:45 +02:00

crlcache.c

dirmngr: Remove warnings about unused global variables.

2017-01-11 10:48:20 +01:00

crlcache.h

move some file encodings to UTF-8

2016-09-17 15:57:31 +09:00

crlfetch.c

indent: Reformat and extend some comments in dirmngr.

2017-02-16 11:01:19 +01:00

crlfetch.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

dirmngr_ldap.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

dirmngr-client.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

dirmngr-err.h

Some work on porting dirmngr (unfinished)

2010-07-16 13:19:45 +00:00

dirmngr.c

dirmngr: New option --no-use-tor and internal changes.

2017-02-01 17:54:14 +01:00

dirmngr.h

dirmngr: Add options --tls and --systrust to the VALIDATE cmd.

2017-02-17 16:41:02 +01:00

dns-stuff.c

libdns: Workaround for bracketed numerical addresses.

2017-02-15 19:20:33 +01:00

dns-stuff.h

dirmngr: New option --no-use-tor and internal changes.

2017-02-01 17:54:14 +01:00

dns.c

libdns: Hack to skip negation term.

2017-01-23 12:46:35 +01:00

dns.h

dirmngr: New libdns snapshot

2016-12-14 15:56:58 +01:00

http.c

dirmngr: Replace stpcpy chains by strconcat.

2017-02-16 10:33:26 +01:00

http.h

dirmngr: Add debug code to http.c.

2017-01-11 10:42:44 +01:00

ks-action.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

ks-action.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

ks-engine-finger.c

dirmngr: New option --no-use-tor and internal changes.

2017-02-01 17:54:14 +01:00

ks-engine-hkp.c

dirmngr: Do PTR lookups only for 'keyserver --hosttable'.

2017-02-15 19:20:33 +01:00

ks-engine-http.c

dirmngr: New option --no-use-tor and internal changes.

2017-02-01 17:54:14 +01:00

ks-engine-kdns.c

Fix format string errors and some missing error case initialization.

2017-01-23 16:33:01 +01:00

ks-engine-ldap.c

dirmngr: New option --no-use-tor and internal changes.

2017-02-01 17:54:14 +01:00

ks-engine.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

ldap-parse-uri.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

ldap-parse-uri.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

ldap-url.c

dirmngr: Simplify strtok macro.

2014-03-07 19:00:31 +01:00

ldap-url.h

Merged Dirmngr with GnuPG.

2010-06-09 16:53:51 +00:00

ldap-wrapper-ce.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

ldap-wrapper.c

dirmngr: Lazily launch ldap reaper thread.

2016-11-29 14:32:31 +01:00

ldap-wrapper.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

ldap.c

dirmngr: Replace stpcpy chains by strconcat.

2017-02-16 10:33:26 +01:00

ldapserver.c

Improve spelling and grammar of some comments.

2015-03-23 19:58:30 +01:00

ldapserver.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

loadswdb.c

Fix 2 compiler warnings.

2016-12-08 19:02:56 +01:00

Makefile.am

dirmngr: New configure option --disable-libdns.

2016-12-14 15:57:17 +01:00

misc.c

indent: Reformat and extend some comments in dirmngr.

2017-02-16 11:01:19 +01:00

misc.h

dirmngr: Indicate that serial numbers are hexadecimal.

2016-01-22 12:54:02 +01:00

OAUTHORS

Nuked almost all trailing white space.

2011-02-04 12:57:53 +01:00

ocsp.c

dirmngr: New option --no-use-tor and internal changes.

2017-02-01 17:54:14 +01:00

ocsp.h

Merged Dirmngr with GnuPG.

2010-06-09 16:53:51 +00:00

ONEWS

Nuked almost all trailing white space.

2011-02-04 12:57:53 +01:00

server.c

dirmngr: Add options --tls and --systrust to the VALIDATE cmd.

2017-02-17 16:41:02 +01:00

sks-keyservers.netCA.pem

dirmngr: Add support for hkps keyservers.

2014-05-05 16:23:37 +02:00

t-dns-stuff.c

dirmngr: Change internal SRV lookup API.

2017-01-08 18:04:59 +01:00

t-http.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

t-ldap-parse-uri.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

t-support.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

tls-ca.pem

Move http module from common/ to dirmngr/.

2015-10-18 20:08:26 +02:00

validate.c

dirmngr: Add options --tls and --systrust to the VALIDATE cmd.

2017-02-17 16:41:02 +01:00

validate.h

dirmngr: Remove use of hardcoded numbers in validate.

2017-02-17 16:41:02 +01:00

w32-ldap-help.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00