Werner Koch d0bd91ba73

agent: New option --no-user-trustlist and --sys-trustlist-name. ...

* agent/gpg-agent.c (oNoUserTrustlist,oSysTrustlistName): New.
(opts): Add new option names.
(parse_rereadable_options): Parse options.
(finalize_rereadable_options): Reset allow-mark-trusted for the new
option.
* agent/agent.h (opt): Add fields no_user_trustlist and
sys_trustlist_name.
* agent/trustlist.c (make_sys_trustlist_name): New.
(read_one_trustfile): Use here.
(read_trustfiles): Use here.  Implement --no-user-trustlist.  Also
repalce "allow_include" by "systrust" and adjust callers.
--

With the global options we can now avoid that a user changes the
Root-CA trust by editing the trustlist.txt.  However, to implement
this we need a new option so that we don't need to rely on some magic
like --no-allow-mark-trusted has been put into a force section.

The second option makes system administration easier as it allows to
keep the trustlist in a non-distributed file.

GnuPG-bug-id: 5990
Backported-from-master: 1530d04725d475bf29328eab40b42f72ff8aa06b

2022-07-27 17:02:29 +02:00

..

agent.h

agent: New option --no-user-trustlist and --sys-trustlist-name.

2022-07-27 17:02:29 +02:00

all-tests.scm

tests: Make it possible to run all tests using our infrastructure.

2017-05-11 18:12:37 +02:00

cache.c

agent: Make the request origin a part of the cache items.

2018-03-27 08:40:58 +02:00

call-pinentry.c

agent: Ignore passphrase constraints for a generated passphrase.

2021-08-20 10:18:11 +02:00

call-scd.c

agent,scd: Make sure to set CONFIDENTIAL flag in Assuan.

2022-06-09 14:28:08 +09:00

ChangeLog-2011

Fix typos

2015-10-28 10:20:17 +01:00

command-ssh.c

ssh: Fix adding an ed25519 key with a zero length comment.

2022-01-28 20:00:50 +01:00

command.c

agent,scd: Make sure to set CONFIDENTIAL flag in Assuan.

2022-06-09 14:28:08 +09:00

cvt-openpgp.c

agent: Appropriate error code for importing key with no passwd.

2021-06-08 09:12:26 +09:00

cvt-openpgp.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

divert-scd.c

gpg: Provide better diagnostic for replaced card keys.

2020-11-13 16:06:59 +01:00

findkey.c

agent: Flush before calling ftruncate.

2022-06-24 08:41:10 +09:00

genkey.c

agent: Not writing password into file.

2022-04-25 11:45:12 +02:00

gpg-agent-w32info.rc

w32: Add manifest files to most binaries

2020-10-02 17:04:12 +02:00

gpg-agent.c

agent: New option --no-user-trustlist and --sys-trustlist-name.

2022-07-27 17:02:29 +02:00

gpg-agent.w32-manifest.in

w32: Add manifest files to most binaries

2020-10-02 17:04:12 +02:00

keyformat.txt

agent: Silence error messages for READKEY --card

2021-05-04 08:42:51 +02:00

learncard.c

agent: Fix returning GPG_ERR_NOT_FOUND wrongly.

2017-11-02 17:04:03 +01:00

Makefile.am

w32: Add manifest files to most binaries

2020-10-02 17:04:12 +02:00

pkdecrypt.c

gpg: Provide better diagnostic for replaced card keys.

2020-11-13 16:06:59 +01:00

pksign.c

gpg: Provide better diagnostic for replaced card keys.

2020-11-13 16:06:59 +01:00

preset-passphrase.c

Backport of the new option parser from 2.3

2020-12-04 12:12:20 +01:00

protect-tool.c

Backport of the new option parser from 2.3

2020-12-04 12:12:20 +01:00

protect.c

gpg: Provide better diagnostic for replaced card keys.

2020-11-13 16:06:59 +01:00

t-protect.c

build: Always use EXTERN_UNLESS_MAIN_MODULE pattern.

2020-02-10 16:37:34 +01:00

trans.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

trustlist.c

agent: New option --no-user-trustlist and --sys-trustlist-name.

2022-07-27 17:02:29 +02:00

w32main.c

agent: Resolve conflict of util.h.

2017-03-07 19:22:48 +09:00

w32main.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00