Neal H. Walfield 44c17bcb00 g10: If the set of UTKs changes, invalidate any changed policies. ...

* g10/trustdb.c (tdb_utks): New function.
* g10/tofu.c (check_utks): New function.
(initdb): Call it.
* tests/openpgp/tofu.scm: Modify test to check the effective policy of
keys whose effective policy changes when we change the set of UTKs.

--
Signed-off-by: Neal H. Walfield <neal@g10code.com>

If the set of ultimately trusted keys changes, then it is possible
that a binding's effective policy changes.  To deal with this, we
detect when the set of ultimately trusted keys changes and invalidate
all cached policies.

2016-11-22 15:24:05 +01:00

..

armor.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

build-packet.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

call-agent.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

call-agent.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

call-dirmngr.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

call-dirmngr.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

card-util.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

ChangeLog-2011

Spelling: correct spelling of "passphrase".

2016-11-02 12:53:58 +01:00

cipher.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

compress-bz2.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

compress.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

cpr.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

dearmor.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

decrypt-data.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

decrypt.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

dek.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

delkey.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

dirmngr-conf.skel

dirmngr: Change the Onion keyserver in the conf template.

2015-12-23 20:06:49 +01:00

distsigkey.gpg

Add more signing keys.

2014-10-31 14:21:34 +01:00

ecdh.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

encrypt.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

exec.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

exec.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

export.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

filter.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

free-packet.c

gpg: Use usual free semantics for packet structure free functions.

2016-11-15 16:24:09 +01:00

getkey.c

gpg: Use usual free semantics for packet structure free functions.

2016-11-15 16:24:09 +01:00

gpg-w32info.rc

w32: Add manifest to gpg.

2015-02-04 09:15:34 +01:00

gpg.c

gpg: New option --override-session-key-fd.

2016-11-16 09:03:03 +01:00

gpg.h

doc: Add comment to make clear that KBNODE is deprecated.

2016-11-15 16:29:08 +01:00

gpg.w32-manifest.in

w32: Add manifest to gpg.

2015-02-04 09:15:34 +01:00

gpgcompose.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

gpgsql.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

gpgsql.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

gpgv.c

g10: Cache the effective policy. Recompute it when required.

2016-11-21 22:47:30 +01:00

helptext.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

import.c

g10: Cache the effective policy. Recompute it when required.

2016-11-21 22:47:30 +01:00

kbnode.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

keydb.c

g10: Cache the effective policy. Recompute it when required.

2016-11-21 22:47:30 +01:00

keydb.h

g10: Cache the effective policy. Recompute it when required.

2016-11-21 22:47:30 +01:00

keyedit.c

g10: Cache the effective policy. Recompute it when required.

2016-11-21 22:47:30 +01:00

keygen.c

gpg: Add new compliance mode "de-vs".

2016-11-15 17:50:03 +01:00

keyid.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

keylist.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

keyring.c

common: Rename keybox_file_rename to gnupg_rename_file.

2016-11-16 17:43:59 +01:00

keyring.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

keyserver-internal.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

keyserver.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

main.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

mainproc.c

g10: Fix memory leak.

2016-11-14 17:33:18 +01:00

Makefile.am

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

mdfilter.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

migrate.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

misc.c

gpg: Add new compliance mode "de-vs".

2016-11-15 17:50:03 +01:00

openfile.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

OPTIONS

See ChangeLog: Mon Jul 31 10:04:47 CEST 2000 Werner Koch

2000-07-31 08:04:16 +00:00

options.h

gpg: Add new compliance mode "de-vs".

2016-11-15 17:50:03 +01:00

options.skel

gpg: Rework gpg-conf.skel

2016-01-22 10:54:10 +01:00

packet.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

parse-packet.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

passphrase.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

photoid.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

photoid.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

pkclist.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

pkglue.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

pkglue.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

plaintext.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

progress.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

pubkey-enc.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

pubring.asc

See ChangeLog: Mon Jul 31 10:04:47 CEST 2000 Werner Koch

2000-07-31 08:04:16 +00:00

revoke.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

rmd160.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

rmd160.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

seckey-cert.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

server.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

seskey.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

sig-check.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

sign.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

skclist.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

sqrtu32.c

g10: Add missing sqrtu32.h and sqrtu32.c.

2016-09-07 08:55:17 +02:00

sqrtu32.h

g10: Add missing sqrtu32.h and sqrtu32.c.

2016-09-07 08:55:17 +02:00

t-keydb-get-keyblock.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

t-keydb-get-keyblock.gpg

gpg: Correctly handle keyblocks followed by legacy keys.

2015-11-17 14:53:03 +01:00

t-keydb-keyring.kbx

g10: Add test for keydb as well as new testing infrastructure.

2015-09-02 15:08:57 +02:00

t-keydb.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

t-rmd160.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

t-stutter-data.asc

gpg: Add a new test.

2016-03-08 14:08:49 +01:00

t-stutter.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

tdbdump.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

tdbio.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

tdbio.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

test-stubs.c

g10: Cache the effective policy. Recompute it when required.

2016-11-21 22:47:30 +01:00

test.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

textfilter.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

tofu.c

g10: If the set of UTKs changes, invalidate any changed policies.

2016-11-22 15:24:05 +01:00

tofu.h

g10: Cache the effective policy. Recompute it when required.

2016-11-21 22:47:30 +01:00

trust.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

trustdb.c

g10: If the set of UTKs changes, invalidate any changed policies.

2016-11-22 15:24:05 +01:00

trustdb.h

g10: If the set of UTKs changes, invalidate any changed policies.

2016-11-22 15:24:05 +01:00

verify.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

zlib-riscos.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00