security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2024-06-09 23:39:51 +02:00
Code Activity
50b9828eac
gnupg/dirmngr
History
Werner Koch 50b9828eac
dirmngr: Implement trust classes for the cert cache. 
* dirmngr/certcache.h (CERTTRUST_CLASS_SYSTEM): New.
(CERTTRUST_CLASS_CONFIG): New.
(CERTTRUST_CLASS_HKP): New.
(CERTTRUST_CLASS_HKPSPOOL): New.
* dirmngr/certcache.c (MAX_EXTRA_CACHED_CERTS): Rename to ...
(MAX_NONPERM_CACHED_CERTS): this.
(total_extra_certificates): Rename to ...
(total_nonperm_certificates): this.
(total_config_certificates): Remove.
(total_trusted_certificates): Remove.
(total_system_trusted_certificates): Remove.
(cert_item_s): Remove field 'flags'.  Add fields 'permanent' and
'trustclasses'.
(clean_cache_slot): Clear new fields.
(put_cert): Change for new cert_item_t structure.
(load_certs_from_dir): Rename arg 'are_trusted' to 'trustclass'
(load_certs_from_file): Use CERTTRUST_CLASS_ value for put_cert.
(load_certs_from_w32_store): Ditto.
(cert_cache_init): Ditto.
(cert_cache_print_stats): Rewrite.
(is_trusted_cert): Replace arg 'with_systrust' by 'trustclasses'.
Chnage the test.
* dirmngr/validate.c (allowed_ca): Pass CERTTRUST_CLASS_CONFIG to
is_trusted_cert.
(validate_cert_chain): Pass CERTTRUST_CLASS_ values to
is_trusted_cert.
--

These trust classes make it easier to select certain sets of root
certificates.

Signed-off-by: Werner Koch <wk@gnupg.org>
2017-02-21 12:23:20 +01:00
..
cdb.h Tweaks for gpgconf. 2010-12-14 19:17:58 +00:00
cdblib.c move some file encodings to UTF-8 2016-09-17 15:57:31 +09:00
certcache.c dirmngr: Implement trust classes for the cert cache. 2017-02-21 12:23:20 +01:00
certcache.h dirmngr: Implement trust classes for the cert cache. 2017-02-21 12:23:20 +01:00
ChangeLog-2011 Remove the obsolete keyserver directory from the repo. 2015-04-20 18:20:45 +02:00
ChangeLog-2011-ks Remove the obsolete keyserver directory from the repo. 2015-04-20 18:20:45 +02:00
crlcache.c dirmngr: Add option --no-crl to the VALIDATE cmd. 2017-02-17 21:31:33 +01:00
crlcache.h move some file encodings to UTF-8 2016-09-17 15:57:31 +09:00
crlfetch.c indent: Reformat and extend some comments in dirmngr. 2017-02-16 11:01:19 +01:00
crlfetch.h Change all http://www.gnu.org in license notices to https:// 2016-11-05 12:02:19 +01:00
dirmngr_ldap.c Change all http://www.gnu.org in license notices to https:// 2016-11-05 12:02:19 +01:00
dirmngr-client.c Change all http://www.gnu.org in license notices to https:// 2016-11-05 12:02:19 +01:00
dirmngr-err.h Some work on porting dirmngr (unfinished) 2010-07-16 13:19:45 +00:00
dirmngr.c dirmngr: New Assuan option "http-crl". 2017-02-21 09:37:07 +01:00
dirmngr.h dirmngr: New Assuan option "http-crl". 2017-02-21 09:37:07 +01:00
dns-stuff.c libdns: Workaround for bracketed numerical addresses. 2017-02-15 19:20:33 +01:00
dns-stuff.h dirmngr: New option --no-use-tor and internal changes. 2017-02-01 17:54:14 +01:00
dns.c libdns: Hack to skip negation term. 2017-01-23 12:46:35 +01:00
dns.h dirmngr: New libdns snapshot 2016-12-14 15:56:58 +01:00
http-ntbtls.c dirmngr: New Assuan option "http-crl". 2017-02-21 09:37:07 +01:00
http.c dirmngr: New Assuan option "http-crl". 2017-02-21 09:37:07 +01:00
http.h dirmngr: New Assuan option "http-crl". 2017-02-21 09:37:07 +01:00
ks-action.c Change all http://www.gnu.org in license notices to https:// 2016-11-05 12:02:19 +01:00
ks-action.h Change all http://www.gnu.org in license notices to https:// 2016-11-05 12:02:19 +01:00
ks-engine-finger.c dirmngr: New option --no-use-tor and internal changes. 2017-02-01 17:54:14 +01:00
ks-engine-hkp.c dirmngr: New Assuan option "http-crl". 2017-02-21 09:37:07 +01:00
ks-engine-http.c dirmngr: New Assuan option "http-crl". 2017-02-21 09:37:07 +01:00
ks-engine-kdns.c Fix format string errors and some missing error case initialization. 2017-01-23 16:33:01 +01:00
ks-engine-ldap.c dirmngr: New option --no-use-tor and internal changes. 2017-02-01 17:54:14 +01:00
ks-engine.h Change all http://www.gnu.org in license notices to https:// 2016-11-05 12:02:19 +01:00
ldap-parse-uri.c Change all http://www.gnu.org in license notices to https:// 2016-11-05 12:02:19 +01:00
ldap-parse-uri.h Change all http://www.gnu.org in license notices to https:// 2016-11-05 12:02:19 +01:00
ldap-url.c dirmngr: Simplify strtok macro. 2014-03-07 19:00:31 +01:00
ldap-url.h Merged Dirmngr with GnuPG. 2010-06-09 16:53:51 +00:00
ldap-wrapper-ce.c Change all http://www.gnu.org in license notices to https:// 2016-11-05 12:02:19 +01:00
ldap-wrapper.c dirmngr: Lazily launch ldap reaper thread. 2016-11-29 14:32:31 +01:00
ldap-wrapper.h Change all http://www.gnu.org in license notices to https:// 2016-11-05 12:02:19 +01:00
ldap.c dirmngr: Replace stpcpy chains by strconcat. 2017-02-16 10:33:26 +01:00
ldapserver.c Improve spelling and grammar of some comments. 2015-03-23 19:58:30 +01:00
ldapserver.h Change all http://www.gnu.org in license notices to https:// 2016-11-05 12:02:19 +01:00
loadswdb.c Fix 2 compiler warnings. 2016-12-08 19:02:56 +01:00
Makefile.am dirmngr: Make t-http.c work again with gnutls. 2017-02-20 09:48:37 +01:00
misc.c indent: Reformat and extend some comments in dirmngr. 2017-02-16 11:01:19 +01:00
misc.h dirmngr: Indicate that serial numbers are hexadecimal. 2016-01-22 12:54:02 +01:00
OAUTHORS Nuked almost all trailing white space. 2011-02-04 12:57:53 +01:00
ocsp.c dirmngr: New option --no-use-tor and internal changes. 2017-02-01 17:54:14 +01:00
ocsp.h Merged Dirmngr with GnuPG. 2010-06-09 16:53:51 +00:00
ONEWS Nuked almost all trailing white space. 2011-02-04 12:57:53 +01:00
server.c dirmngr: New Assuan option "http-crl". 2017-02-21 09:37:07 +01:00
sks-keyservers.netCA.pem dirmngr: Add support for hkps keyservers. 2014-05-05 16:23:37 +02:00
t-dns-stuff.c dirmngr: Change internal SRV lookup API. 2017-01-08 18:04:59 +01:00
t-http.c dirmngr: New Assuan option "http-crl". 2017-02-21 09:37:07 +01:00
t-ldap-parse-uri.c Change all http://www.gnu.org in license notices to https:// 2016-11-05 12:02:19 +01:00
t-support.h Change all http://www.gnu.org in license notices to https:// 2016-11-05 12:02:19 +01:00
tls-ca.pem Move http module from common/ to dirmngr/. 2015-10-18 20:08:26 +02:00
validate.c dirmngr: Implement trust classes for the cert cache. 2017-02-21 12:23:20 +01:00
validate.h dirmngr: Add option --no-crl to the VALIDATE cmd. 2017-02-17 21:31:33 +01:00
w32-ldap-help.h Change all http://www.gnu.org in license notices to https:// 2016-11-05 12:02:19 +01:00