1
0
mirror of git://git.gnupg.org/gnupg.git synced 2024-11-09 21:28:51 +01:00
gnupg/sm
Werner Koch 8a12a2000d gpgsm: Add new validation model "steed".
* sm/gpgsm.h (VALIDATE_FLAG_STEED): New.
* sm/gpgsm.c (gpgsm_parse_validation_model): Add model "steed".
* sm/server.c (option_handler): Allow validation model "steed".
* sm/certlist.c (gpgsm_cert_has_well_known_private_key): New.
* sm/certchain.c (do_validate_chain): Handle the
well-known-private-key attribute.  Support the "steed" model.
(gpgsm_validate_chain): Ditto.
* sm/verify.c (gpgsm_verify): Return "steed" in the trust status line.
* sm/keylist.c (list_cert_colon): Print the new 'w' flag.
--

This is the first part of changes to implement the STEED proposal as
described at http://g10code.com/steed.html .  The idea for X.509 is
not to use plain self-signed certificates but certificates signed by a
dummy CA (i.e. one for which the private key is known).  Having a
single CA as an indication for the use of STEED might help other X.509
implementations to implement STEED.
2011-12-07 16:15:15 +01:00
..
base64.c Fix faulty gcc warnings 2011-03-03 12:40:54 +01:00
call-agent.c Nuked almost all trailing white space. 2011-02-04 12:57:53 +01:00
call-dirmngr.c Try to get the only-valid-if-cert-valid cert from the dirmngr first. 2011-07-21 10:24:03 +02:00
certchain.c gpgsm: Add new validation model "steed". 2011-12-07 16:15:15 +01:00
certcheck.c Replace gcry_md_start_debug by gcry_md_debug. 2011-09-20 09:54:27 +02:00
certdump.c Nuked almost all trailing white space. 2011-02-04 12:57:53 +01:00
certlist.c gpgsm: Add new validation model "steed". 2011-12-07 16:15:15 +01:00
certreqgen-ui.c Prepare for 1.5.0beta2 2011-03-08 12:56:45 +01:00
certreqgen.c gpgsm: Allow specification of an AuthorityKeyIdentifier. 2011-12-06 21:43:18 +01:00
ChangeLog-2011 Generate the ChangeLog from commit logs. 2011-12-01 11:09:02 +01:00
decrypt.c Nuked almost all trailing white space. 2011-02-04 12:57:53 +01:00
delete.c Fix regression in gpg's mail address parsing. 2011-04-25 23:59:25 +02:00
encrypt.c Nuked almost all trailing white space. 2011-02-04 12:57:53 +01:00
export.c Fix regression in gpg's mail address parsing. 2011-04-25 23:59:25 +02:00
fingerprint.c Nuked almost all trailing white space. 2011-02-04 12:57:53 +01:00
gpgsm.c gpgsm: Add new validation model "steed". 2011-12-07 16:15:15 +01:00
gpgsm.h gpgsm: Add new validation model "steed". 2011-12-07 16:15:15 +01:00
import.c Fix regression in gpg's mail address parsing. 2011-04-25 23:59:25 +02:00
keydb.c Add a flag parameter to dotlock_create. 2011-09-28 15:41:58 +02:00
keydb.h Nuked almost all trailing white space. 2011-02-04 12:57:53 +01:00
keylist.c gpgsm: Add new validation model "steed". 2011-12-07 16:15:15 +01:00
Makefile.am Generate the ChangeLog from commit logs. 2011-12-01 11:09:02 +01:00
minip12.c Support pkcs#12 import of PBES2 encoded data. 2011-03-10 15:30:40 +01:00
minip12.h Implement export of pkcs#12 objects using a direct agent connection. 2010-06-21 10:01:24 +00:00
misc.c Support X.509 certificate creation. 2011-03-01 14:42:56 +01:00
qualified.c Nuked almost all trailing white space. 2011-02-04 12:57:53 +01:00
server.c gpgsm: Add new validation model "steed". 2011-12-07 16:15:15 +01:00
sign.c Replace gcry_md_start_debug by gcry_md_debug. 2011-09-20 09:54:27 +02:00
verify.c gpgsm: Add new validation model "steed". 2011-12-07 16:15:15 +01:00