Werner Koch b52a0e244a

dirmngr: Distinguish between "no crl" and "crl not trusted". ...

* dirmngr/crlcache.h (CRL_CACHE_NOTTRUSTED): New.
* dirmngr/crlcache.c (cache_isvalid): Set this status.
(crl_cache_cert_isvalid): Map it to GPG_ERR_NOT_TRUSTED.
(crl_cache_reload_crl): Move diagnostic to ...
* dirmngr/crlfetch.c (crl_fetch): here.
* dirmngr/server.c (cmd_isvalid): Map it to GPG_ERR_NOT_TRUSTED.
* dirmngr/validate.c (check_revocations): Handle new status.  Improve
diagnostics.
* common/status.c (get_inv_recpsgnr_code): Map INV_CRL_OBJ.
* common/audit.c (proc_type_verify): Ditto.
--

This avoids repeated loading of CRLs in case of untrusted root
certificates.

2023-03-09 18:28:39 +01:00

..

call-agent.c

agent: New flag "qual" for the trustlist.txt.

2022-02-27 12:26:38 +01:00

call-dirmngr.c

dirmngr: Distinguish between "no crl" and "crl not trusted".

2023-03-09 18:28:39 +01:00

certchain.c

sm: Fix compliance checking for ECC signature verification.

2023-01-12 20:52:27 +01:00

certcheck.c

sm: Avoid memory leaks and double double-free

2021-05-20 13:51:47 +02:00

certdump.c

sm: Add LotW support to the key listing

2021-09-09 13:30:22 +02:00

certlist.c

gpgsm: Improve cert lookup callback from dirmngr.

2023-02-26 19:14:22 +01:00

certreqgen-ui.c

gpgsm: Replace all assert calls by log_assert.

2020-07-08 14:40:34 +02:00

certreqgen.c

gpgsm: Replace all assert calls by log_assert.

2020-07-08 14:40:34 +02:00

ChangeLog-2011

Generate the ChangeLog from commit logs.

2011-12-01 11:09:02 +01:00

decrypt.c

gpgsm: New option --require-compliance

2022-03-08 19:28:16 +01:00

delete.c

sm: Implement delete key in keyboxd mode

2020-09-21 09:20:40 +02:00

encrypt.c

gpgsm: New option --require-compliance

2022-03-08 19:28:16 +01:00

export.c

sm: Ask for the password for password based decryption (pwri)

2021-05-17 15:42:27 +02:00

fingerprint.c

gpgsm: Allow ECC encryption keys with just keyAgreement specified.

2022-10-25 11:57:23 +02:00

gpgsm-w32info.rc

w32: Add icons and version information.

2013-05-07 21:35:48 +02:00

gpgsm.c

gpg,gpgsm: New option --log-time

2023-03-08 15:10:52 +01:00

gpgsm.h

gpgsm: Improve cert lookup callback from dirmngr.

2023-02-26 19:14:22 +01:00

import.c

sm: Fix use of value NONE in gnupg_isotime_t type.

2022-02-18 11:11:12 +09:00

keydb.c

gpgsm: Fix "problem re-searching certificate" case.

2022-12-05 17:30:26 +01:00

keydb.h

sm: Implement initial support for keyboxd.

2020-09-10 13:05:17 +02:00

keylist.c

gpgsm: Print revocation date and reason in cert listings.

2022-12-05 16:42:08 +01:00

Makefile.am

build: Remove Windows CE support.

2022-12-09 14:06:08 +09:00

minip12.c

sm: Fix reporting of bad passphrase error

2022-09-09 18:23:11 +02:00

minip12.h

sm: Silence some output on --quiet

2021-02-24 08:40:06 +01:00

misc.c

sm: Print diagnostic about CRL problems due to Tor mode.

2022-04-11 17:57:14 +02:00

passphrase.c

gpg,common,scd,sm: Function prototype fixes for modern compiler.

2022-09-13 16:34:00 +09:00

passphrase.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

qualified.c

Replace most of the remaining stdio calls by estream calls.

2020-10-20 12:15:56 +02:00

server.c

Remove remaining support for WindowsCE

2022-06-03 10:08:21 +02:00

sign.c

gpgsm: Also announce AES256-CBC in signatures.

2022-10-28 15:24:17 +02:00

t-minip12.c

sm: Add support to export ECC private keys.

2020-04-27 19:54:39 +02:00

verify.c

gpgsm: Strip trailing zeroes from detached signatures.

2023-03-08 11:00:00 +01:00