security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2024-12-22 10:19:57 +01:00
Code Activity
gnupg/dirmngr
History
Werner Koch 1303b0ed84
gpg: Do not use self-sigs-only for LDAP keyserver imports. 
* dirmngr/ks-engine-ldap.c (ks_ldap_get): Print a SOURCE status.
* g10/options.h (opts): New field expl_import_self_sigs_only.
* g10/import.c (parse_import_options): Set it.
* g10/keyserver.c (keyserver_get_chunk): Add special options for LDAP.
--

I can be assumed that configured LDAP servers are somehow curated and
not affected by rogue key signatures as the HKP servers are.  Thus we
can allow the import of key signature from LDAP keyservers by default.

GnuPG-bug-id: 5387
2021-04-13 14:50:05 +02:00
..
cdb.h
Tweaks for gpgconf.
2010-12-14 19:17:58 +00:00
cdblib.c
g10, sm, dirmngr, common: Add comment for fall through.
2017-05-10 11:13:12 +09:00
certcache.c
common: New functions gnupg_opendir et al.
2020-10-23 11:24:09 +02:00
certcache.h
dirmngr: Use system certs if --hkp-cacert is not used.
2017-09-18 22:49:05 +02:00
ChangeLog-2011
Fix spelling.
2017-02-21 13:11:46 -05:00
ChangeLog-2011-ks
Remove the obsolete keyserver directory from the repo.
2015-04-20 18:20:45 +02:00
crlcache.c
common: New functions gnupg_opendir et al.
2020-10-23 11:24:09 +02:00
crlcache.h
move some file encodings to UTF-8
2016-09-17 15:57:31 +09:00
crlfetch.c
dirmngr: Minor cleanup for better readability.
2020-10-05 17:21:55 +02:00
crlfetch.h
dirmngr: Minor cleanup for better readability.
2020-10-05 17:21:55 +02:00
dirmngr_ldap.c
Backport of the new option parser from 2.3
2020-12-04 12:12:20 +01:00
dirmngr-client.c
Backport of the new option parser from 2.3
2020-12-04 12:12:20 +01:00
dirmngr-err.h
Some work on porting dirmngr (unfinished)
2010-07-16 13:19:45 +00:00
dirmngr-status.h
dirmngr: Factor some prototypes out to dirmngr-status.h.
2019-11-18 18:44:30 +01:00
dirmngr-w32info.rc
w32: Add manifest files to most binaries
2020-10-02 17:04:12 +02:00
dirmngr.c
dirmngr: Fix backport of the new option parser from 2.3
2020-12-18 11:21:18 +01:00
dirmngr.h
build: Always use EXTERN_UNLESS_MAIN_MODULE pattern.
2020-02-10 16:37:34 +01:00
dirmngr.w32-manifest.in
w32: Add manifest files to most binaries
2020-10-02 17:04:12 +02:00
dns-stuff.c
dirmngr: Fixed typo in recently added diagnostic.
2019-11-18 18:44:28 +01:00
dns-stuff.h
dirmngr: Use IPv4 or IPv6 interface only if available.
2019-11-12 20:31:34 +01:00
dns.c
dirmngr: dns: Fix allocation of string buffer in stack.
2020-05-21 14:37:03 +09:00
dns.h
dirmngr: dns: Fix allocation of string buffer in stack.
2020-05-21 14:37:03 +09:00
domaininfo.c
dirmngr: Improve domaininfo cache update algorithm.
2019-04-02 13:25:48 +02:00
http-common.c
dirmngr: Fix commit de6d8313
2017-03-03 17:17:26 +01:00
http-common.h
dirmngr: Rearrange files to fix de6d831.
2017-03-02 18:35:03 +01:00
http-ntbtls.c
dirmngr: Align the gnutls use of CAs with the ntbtls code.
2020-09-10 11:04:15 +02:00
http.c
Replace all calls to access by gnupg_access
2020-10-21 20:49:18 +02:00
http.h
dirmngr: Support "ldap:///" for the current AD user.
2020-12-17 16:09:31 +01:00
ks-action.c
dirmngr: Do not store the useless pgpSignerID in the LDAP.
2020-12-17 11:02:49 +01:00
ks-action.h
Change all http://www.gnu.org in license notices to https://
2016-11-05 12:02:19 +01:00
ks-engine-finger.c
dirmngr: Implement HTTP connect timeouts of 15 or 2 seconds.
2017-06-08 09:37:36 +02:00
ks-engine-hkp.c
dirmngr: Fix the pool keyserver case for a single host in the pool.
2020-09-10 11:04:46 +02:00
ks-engine-http.c
dirmngr,gpg: Better diagnostic in case of bad TLS certificates.
2019-11-18 18:44:36 +01:00
ks-engine-kdns.c
Remove -I option to common.
2017-03-07 20:25:54 +09:00
ks-engine-ldap.c
gpg: Do not use self-sigs-only for LDAP keyserver imports.
2021-04-13 14:50:05 +02:00
ks-engine.h
dirmngr: Allow redirection from https to http for CRLs
2018-04-25 12:38:04 +02:00
ldap-parse-uri.c
dirmngr: Support new gpgNtds parameter in LDAP keyserver URLs.
2021-02-17 17:31:36 +01:00
ldap-parse-uri.h
Remove -I option to common.
2017-03-07 20:25:54 +09:00
ldap-url.c
dirmngr: Simplify strtok macro.
2014-03-07 19:00:31 +01:00
ldap-url.h
Merged Dirmngr with GnuPG.
2010-06-09 16:53:51 +00:00
ldap-wrapper-ce.c
dirmngr: Use the LDAP wrapper process also for Windows.
2018-04-27 12:05:31 +02:00
ldap-wrapper.c
dirmngr: Sleep in the ldap wrapper thread.
2018-04-30 08:46:03 +02:00
ldap-wrapper.h
Change all http://www.gnu.org in license notices to https://
2016-11-05 12:02:19 +01:00
ldap.c
dirmngr: Minor cleanup for better readability.
2020-10-05 17:21:55 +02:00
ldapserver.c
Improve spelling and grammar of some comments.
2015-03-23 19:58:30 +01:00
ldapserver.h
Change all http://www.gnu.org in license notices to https://
2016-11-05 12:02:19 +01:00
loadswdb.c
dirmngr: Allow redirection from https to http for CRLs
2018-04-25 12:38:04 +02:00
Makefile.am
w32: Add manifest files to most binaries
2020-10-02 17:04:12 +02:00
misc.c
common: Change argument order of log_printhex.
2020-05-12 18:51:47 +02:00
misc.h
dirmngr: Rearrange files to fix de6d831.
2017-03-02 18:35:03 +01:00
OAUTHORS
Nuked almost all trailing white space.
2011-02-04 12:57:53 +01:00
ocsp.c
sm: Support rsaPSS verification also for CMS signatures.
2020-04-15 15:45:34 +02:00
ocsp.h
Merged Dirmngr with GnuPG.
2010-06-09 16:53:51 +00:00
ONEWS
Nuked almost all trailing white space.
2011-02-04 12:57:53 +01:00
server.c
dirmngr: Do not store the useless pgpSignerID in the LDAP.
2020-12-17 11:02:49 +01:00
sks-keyservers.netCA.pem
dirmngr: Add support for hkps keyservers.
2014-05-05 16:23:37 +02:00
t-dns-stuff.c
Remove -I option to common.
2017-03-07 20:25:54 +09:00
t-http-basic.c
dirmngr: Avoid possible CSRF attacks via http redirects.
2018-11-23 09:23:26 +01:00
t-http.c
dirmngr: Avoid possible CSRF attacks via http redirects.
2018-11-23 09:23:26 +01:00
t-ldap-parse-uri.c
Change all http://www.gnu.org in license notices to https://
2016-11-05 12:02:19 +01:00
t-support.c
dirmngr: Factor some prototypes out to dirmngr-status.h.
2019-11-18 18:44:30 +01:00
t-support.h
Change all http://www.gnu.org in license notices to https://
2016-11-05 12:02:19 +01:00
tls-ca.pem
Move http module from common/ to dirmngr/.
2015-10-18 20:08:26 +02:00
validate.c
sm,dirmngr: Restrict allowed parameters used with rsaPSS.
2020-04-15 15:45:58 +02:00
validate.h
dirmngr: Add special treatment for the standard hkps pool to ntbtls.
2017-02-21 14:55:04 +01:00
w32-ldap-help.h
Change all http://www.gnu.org in license notices to https://
2016-11-05 12:02:19 +01:00
workqueue.c
dirmngr: Add a background task framework.
2017-12-11 11:30:45 +01:00