Werner Koch b52a0e244a

dirmngr: Distinguish between "no crl" and "crl not trusted". ...

* dirmngr/crlcache.h (CRL_CACHE_NOTTRUSTED): New.
* dirmngr/crlcache.c (cache_isvalid): Set this status.
(crl_cache_cert_isvalid): Map it to GPG_ERR_NOT_TRUSTED.
(crl_cache_reload_crl): Move diagnostic to ...
* dirmngr/crlfetch.c (crl_fetch): here.
* dirmngr/server.c (cmd_isvalid): Map it to GPG_ERR_NOT_TRUSTED.
* dirmngr/validate.c (check_revocations): Handle new status.  Improve
diagnostics.
* common/status.c (get_inv_recpsgnr_code): Map INV_CRL_OBJ.
* common/audit.c (proc_type_verify): Ditto.
--

This avoids repeated loading of CRLs in case of untrusted root
certificates.

2023-03-09 18:28:39 +01:00

..

cdb.h

headers: fix spelling

2018-10-25 16:53:05 -04:00

cdblib.c

dirmngr: Clean up for not supporting WindowsCE.

2022-03-29 13:41:04 +09:00

certcache.c

dirmngr: New option --debug-cache-expired-certs.

2022-08-31 18:11:36 +02:00

certcache.h

dirmngr: Use system certs if --hkp-cacert is not used.

2017-09-18 22:49:05 +02:00

ChangeLog-2011

Fix spelling.

2017-02-21 13:11:46 -05:00

ChangeLog-2011-ks

Remove the obsolete keyserver directory from the repo.

2015-04-20 18:20:45 +02:00

crlcache.c

dirmngr: Distinguish between "no crl" and "crl not trusted".

2023-03-09 18:28:39 +01:00

crlcache.h

dirmngr: Distinguish between "no crl" and "crl not trusted".

2023-03-09 18:28:39 +01:00

crlfetch.c

dirmngr: Distinguish between "no crl" and "crl not trusted".

2023-03-09 18:28:39 +01:00

crlfetch.h

dirmngr: Rewrite the LDAP wrapper tool

2021-06-16 12:58:32 +02:00

dirmngr_ldap.c

dirmngr: New server flag "areconly" (A-record-only)

2022-09-28 09:55:15 +02:00

dirmngr-client.c

dirmngr: Suppress error message on trial reading as PEM format.

2022-03-25 08:41:51 +09:00

dirmngr-err.h

Some work on porting dirmngr (unfinished)

2010-07-16 13:19:45 +00:00

dirmngr-status.h

dirmngr: Print a WARNING status for DNS config problems.

2018-07-25 14:35:04 +02:00

dirmngr.c

dirmngr: New debug flag "keeptmp".

2023-02-23 10:21:07 +01:00

dirmngr.h

dirmngr: New debug flag "keeptmp".

2023-02-23 10:21:07 +01:00

dns-stuff.c

Require Libgcrypt 1.9

2021-01-19 10:33:03 +01:00

dns-stuff.h

dirmngr: Use IPv4 or IPv6 interface only if available.

2019-11-12 20:35:12 +01:00

dns.c

dirmngr:dns,doc,gpg: Fix for noreturn for C11.

2022-09-16 14:33:50 +09:00

dns.h

dirmngr: dns: Fix allocation of string buffer in stack.

2020-05-20 19:44:38 +09:00

domaininfo.c

dirmngr: Improve domaininfo cache update algorithm.

2019-04-02 13:22:32 +02:00

http-common.c

dirmngr: Fix commit de6d8313

2017-03-03 17:17:26 +01:00

http-common.h

dirmngr: Rearrange files to fix de6d831.

2017-03-02 18:35:03 +01:00

http-ntbtls.c

dirmngr: Change the default keyserver.

2021-08-24 18:09:56 +02:00

http.c

dirmngr: Fix for Windows.

2022-05-10 14:54:40 +09:00

http.h

dirmngr: Support pseudo URI scheme "opaque".

2021-06-16 11:54:47 +02:00

ks-action.c

dirmngr: New options --first and --next for KS_GET.

2022-10-04 12:44:29 +02:00

ks-action.h

dirmngr: New options --first and --next for KS_GET.

2022-10-04 12:44:29 +02:00

ks-engine-finger.c

dirmngr: Print a WARNING status for DNS config problems.

2018-07-25 14:35:04 +02:00

ks-engine-hkp.c

dirmngr: Ask keyservers to provide the key fingerprints

2021-12-20 09:25:26 +01:00

ks-engine-http.c

dirmngr,gpg: Better diagnostic in case of bad TLS certificates.

2019-11-18 18:26:55 +01:00

ks-engine-kdns.c

Remove -I option to common.

2017-03-07 20:25:54 +09:00

ks-engine-ldap.c

dirmngr: Support paged LDAP mode for KS_GET

2022-10-05 15:15:14 +02:00

ks-engine.h

dirmngr: New options --first and --next for KS_GET.

2022-10-04 12:44:29 +02:00

ldap-misc.c

dirmngr: Avoid memory leaks on errors

2021-11-24 10:50:33 +09:00

ldap-misc.h

dirmngr: Rewrite the LDAP wrapper tool

2021-06-16 12:58:32 +02:00

ldap-parse-uri.c

dirmngr: Support new gpgNtds parameter in LDAP keyserver URLs.

2021-02-17 17:40:02 +01:00

ldap-parse-uri.h

Remove -I option to common.

2017-03-07 20:25:54 +09:00

ldap-url.c

dirmngr: Fix ldap-url.c.

2021-12-17 13:33:40 +09:00

ldap-url.h

Merged Dirmngr with GnuPG.

2010-06-09 16:53:51 +00:00

ldap-wrapper.c

agent,common,dirmngr,tests,tools: Remove spawn PREEXEC argument.

2022-10-20 14:19:19 +09:00

ldap-wrapper.h

dirmngr: Remove cruft from dirmngr_ldap

2019-11-11 20:49:04 +01:00

ldap.c

doc: Typo fixes and new notes in DETAILS

2023-03-03 08:50:08 +01:00

ldapserver.c

dirmngr: Fix lost flags during LDAP upload

2022-09-28 15:43:48 +02:00

ldapserver.h

dirmngr: Fix lost flags during LDAP upload

2022-09-28 15:43:48 +02:00

loadswdb.c

common,agent,dirmngr,g10,tools: Fix split_fields API.

2020-09-18 10:20:23 +09:00

Makefile.am

build: Remove Windows CE support.

2022-12-09 14:06:08 +09:00

misc.c

dirmngr: Fix LDAP port parsing.

2018-11-05 09:00:02 +01:00

misc.h

dirmngr: Rearrange files to fix de6d831.

2017-03-02 18:35:03 +01:00

OAUTHORS

Nuked almost all trailing white space.

2011-02-04 12:57:53 +01:00

ocsp.c

gpgsm: Print revocation date and reason in cert listings.

2022-12-05 16:42:08 +01:00

ocsp.h

gpgsm: Print revocation date and reason in cert listings.

2022-12-05 16:42:08 +01:00

ONEWS

Nuked almost all trailing white space.

2011-02-04 12:57:53 +01:00

server.c

dirmngr: Distinguish between "no crl" and "crl not trusted".

2023-03-09 18:28:39 +01:00

sks-keyservers.netCA.pem

dirmngr: Add support for hkps keyservers.

2014-05-05 16:23:37 +02:00

t-dns-stuff.c

dirmngr: Print a WARNING status for DNS config problems.

2018-07-25 14:35:04 +02:00

t-http-basic.c

dirmngr: Avoid possible CSRF attacks via http redirects.

2018-11-22 22:36:07 +01:00

t-http.c

dirmngr: Support pseudo URI scheme "opaque".

2021-06-16 11:54:47 +02:00

t-ldap-misc.c

dirmngr: Rewrite the LDAP wrapper tool

2021-06-16 12:58:32 +02:00

t-ldap-parse-uri.c

dirmngr: Rework of the LDAP code, part 1.

2019-11-26 13:09:35 +01:00

t-support.c

dirmngr: Print a WARNING status for DNS config problems.

2018-07-25 14:35:04 +02:00

t-support.h

dirmngr: Rewrite the LDAP wrapper tool

2021-06-16 12:58:32 +02:00

tls-ca.pem

Move http module from common/ to dirmngr/.

2015-10-18 20:08:26 +02:00

validate.c

dirmngr: Distinguish between "no crl" and "crl not trusted".

2023-03-09 18:28:39 +01:00

validate.h

dirmngr: Support ECDSA for OCSP.

2022-02-27 12:26:38 +01:00

workqueue.c

Spelling cleanup.

2020-02-18 18:07:46 -05:00