Werner Koch ddc74f50d4

sm,dirmngr: Restrict allowed parameters used with rsaPSS. ...

* sm/certcheck.c (extract_pss_params): Check the used PSS params.
* dirmngr/crlcache.c (finish_sig_check): Ditto.
* dirmngr/validate.c (check_cert_sig): Ditto.
--

GnuPG-bug-id: 4538

# ------------------------ >8 ------------------------
See
https://www.metzdowd.com/pipermail/cryptography/2019-November/035449.html

Signed-off-by: Werner Koch <wk@gnupg.org>

2020-04-15 15:45:58 +02:00

..

call-agent.c

sm: Show the usage flags when generating a key from a card.

2019-08-21 13:59:17 +02:00

call-dirmngr.c

sm: Fix dirmngr loadcrl for intermediate certs

2018-10-23 15:59:54 +02:00

certchain.c

sm: Consider certificates w/o CRL DP as valid.

2020-03-27 21:20:13 +01:00

certcheck.c

sm,dirmngr: Restrict allowed parameters used with rsaPSS.

2020-04-15 15:45:58 +02:00

certdump.c

sm: Fix a warning in an es_fopencooie function.

2019-05-12 20:41:32 +02:00

certlist.c

sm: Avoid confusing diagnostic for the default key.

2019-05-27 15:48:41 +02:00

certreqgen-ui.c

sm: Show the usage flags when generating a key from a card.

2019-08-21 13:59:17 +02:00

certreqgen.c

sm: Fix possible NULL deref in error messages of --gen-key.

2020-03-30 17:32:42 +02:00

ChangeLog-2011

Generate the ChangeLog from commit logs.

2011-12-01 11:09:02 +01:00

decrypt.c

sm: Support AES-256 key.

2019-08-12 10:42:34 +09:00

delete.c

Remove -I option to common.

2017-03-07 20:25:54 +09:00

encrypt.c

gpg,sm: String changes for compliance diagnostics.

2017-07-28 17:46:43 +02:00

export.c

sm: Fix minor memory leak in --export-p12.

2018-02-14 14:54:51 +01:00

fingerprint.c

Remove -I option to common.

2017-03-07 20:25:54 +09:00

gpgsm-w32info.rc

w32: Add icons and version information.

2013-05-07 21:35:48 +02:00

gpgsm.c

sm: Consider certificates w/o CRL DP as valid.

2020-03-27 21:20:13 +01:00

gpgsm.h

sm: Consider certificates w/o CRL DP as valid.

2020-03-27 21:20:13 +01:00

import.c

Spelling fixes in docs and comments.

2017-04-28 10:06:33 +09:00

keydb.c

sm, w32: Fix initial keybox creation

2017-11-14 12:26:29 +01:00

keydb.h

gpg,sm: Add STATUS_ERROR keydb_search and keydb_add-resource.

2016-11-10 17:07:28 +01:00

keylist.c

sm: Print Yubikey attestation extensions with --dump-cert.

2019-03-07 10:53:52 +01:00

Makefile.am

Remove -I option to common.

2017-03-07 20:25:54 +09:00

minip12.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

minip12.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

misc.c

Spelling fixes in docs and comments.

2017-04-28 10:06:33 +09:00

passphrase.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

passphrase.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

qualified.c

Spelling fixes in docs and comments.

2017-04-28 10:06:33 +09:00

server.c

Return better error code for some getinfo IPC commands.

2019-06-03 16:33:50 +02:00

sign.c

sm: Avoid confusing diagnostic for the default key.

2019-05-27 15:48:41 +02:00

verify.c

sm: Support rsaPSS verification also for CMS signatures.

2020-04-15 15:45:34 +02:00