Werner Koch 8a12a2000d gpgsm: Add new validation model "steed". ...

* sm/gpgsm.h (VALIDATE_FLAG_STEED): New.
* sm/gpgsm.c (gpgsm_parse_validation_model): Add model "steed".
* sm/server.c (option_handler): Allow validation model "steed".
* sm/certlist.c (gpgsm_cert_has_well_known_private_key): New.
* sm/certchain.c (do_validate_chain): Handle the
well-known-private-key attribute.  Support the "steed" model.
(gpgsm_validate_chain): Ditto.
* sm/verify.c (gpgsm_verify): Return "steed" in the trust status line.
* sm/keylist.c (list_cert_colon): Print the new 'w' flag.
--

This is the first part of changes to implement the STEED proposal as
described at http://g10code.com/steed.html .  The idea for X.509 is
not to use plain self-signed certificates but certificates signed by a
dummy CA (i.e. one for which the private key is known).  Having a
single CA as an indication for the use of STEED might help other X.509
implementations to implement STEED.

2011-12-07 16:15:15 +01:00

..

base64.c

Fix faulty gcc warnings

2011-03-03 12:40:54 +01:00

call-agent.c

Nuked almost all trailing white space.

2011-02-04 12:57:53 +01:00

call-dirmngr.c

Try to get the only-valid-if-cert-valid cert from the dirmngr first.

2011-07-21 10:24:03 +02:00

certchain.c

gpgsm: Add new validation model "steed".

2011-12-07 16:15:15 +01:00

certcheck.c

Replace gcry_md_start_debug by gcry_md_debug.

2011-09-20 09:54:27 +02:00

certdump.c

Nuked almost all trailing white space.

2011-02-04 12:57:53 +01:00

certlist.c

gpgsm: Add new validation model "steed".

2011-12-07 16:15:15 +01:00

certreqgen-ui.c

Prepare for 1.5.0beta2

2011-03-08 12:56:45 +01:00

certreqgen.c

gpgsm: Allow specification of an AuthorityKeyIdentifier.

2011-12-06 21:43:18 +01:00

ChangeLog-2011

Generate the ChangeLog from commit logs.

2011-12-01 11:09:02 +01:00

decrypt.c

Nuked almost all trailing white space.

2011-02-04 12:57:53 +01:00

delete.c

Fix regression in gpg's mail address parsing.

2011-04-25 23:59:25 +02:00

encrypt.c

Nuked almost all trailing white space.

2011-02-04 12:57:53 +01:00

export.c

Fix regression in gpg's mail address parsing.

2011-04-25 23:59:25 +02:00

fingerprint.c

Nuked almost all trailing white space.

2011-02-04 12:57:53 +01:00

gpgsm.c

gpgsm: Add new validation model "steed".

2011-12-07 16:15:15 +01:00

gpgsm.h

gpgsm: Add new validation model "steed".

2011-12-07 16:15:15 +01:00

import.c

Fix regression in gpg's mail address parsing.

2011-04-25 23:59:25 +02:00

keydb.c

Add a flag parameter to dotlock_create.

2011-09-28 15:41:58 +02:00

keydb.h

Nuked almost all trailing white space.

2011-02-04 12:57:53 +01:00

keylist.c

gpgsm: Add new validation model "steed".

2011-12-07 16:15:15 +01:00

Makefile.am

Generate the ChangeLog from commit logs.

2011-12-01 11:09:02 +01:00

minip12.c

Support pkcs#12 import of PBES2 encoded data.

2011-03-10 15:30:40 +01:00

minip12.h

Implement export of pkcs#12 objects using a direct agent connection.

2010-06-21 10:01:24 +00:00

misc.c

Support X.509 certificate creation.

2011-03-01 14:42:56 +01:00

qualified.c

Nuked almost all trailing white space.

2011-02-04 12:57:53 +01:00

server.c

gpgsm: Add new validation model "steed".

2011-12-07 16:15:15 +01:00

sign.c

Replace gcry_md_start_debug by gcry_md_debug.

2011-09-20 09:54:27 +02:00

verify.c

gpgsm: Add new validation model "steed".

2011-12-07 16:15:15 +01:00