Werner Koch d246f317c0

sm: Add special case for expired intermediate certificates. ...

* sm/gpgsm.h (struct server_control_s): Add field 'current_time'.
* sm/certchain.c (find_up_search_by_keyid): Detect a corner case.
Also simplify by using ref-ed cert objects in place of an anyfound
var.
--

See the code for a description of the problem. Tested using the certs
from the bug report and various command lines

  gpgsm --faked-system-time=XXXX --disable-crl-checks \
         -ea -v --debug x509  -r 0x95599828

with XXXX being 20190230T000000 -> target cert too young
with XXXX being 20190330T000000 -> okay
with XXXX being 20190830T000000 -> okay, using the long term cert
with XXXX being 20220330T000000 -> target cert expired

The --disabled-crl-checks option is required because in our a simple
test setting dirmngr does not know about the faked time.

GnuPG-bug-id: 4696
Signed-off-by: Werner Koch <wk@gnupg.org>

2019-12-06 20:25:56 +01:00

..

call-agent.c

sm: Fix error checking of decryption result.

2019-07-26 10:03:36 +09:00

call-dirmngr.c

gpgsm: Allow sepcification of ldaps servers.

2019-11-09 11:29:59 +01:00

certchain.c

sm: Add special case for expired intermediate certificates.

2019-12-06 20:25:56 +01:00

certcheck.c

Use the gpgrt log functions if possible.

2017-11-27 15:00:25 +01:00

certdump.c

Use the gpgrt log functions if possible.

2017-11-27 15:00:25 +01:00

certlist.c

sm: Print a better diagnostic for encryption certificate selection.

2019-06-04 09:24:03 +02:00

certreqgen-ui.c

common: Extend function pubkey_algo_string.

2019-04-02 18:50:55 +02:00

certreqgen.c

sm: Fix certificate creation with key on card.

2019-02-21 17:32:39 +01:00

ChangeLog-2011

Generate the ChangeLog from commit logs.

2011-12-01 11:09:02 +01:00

decrypt.c

sm: Support AES-256 key.

2019-08-05 10:15:08 +09:00

delete.c

sm: Change keydb code to use the keybox locking.

2019-05-14 13:36:08 +02:00

encrypt.c

gpg,sm: String changes for compliance diagnostics.

2017-07-28 17:46:43 +02:00

export.c

kbx: Unify the fingerprint search modes.

2019-03-14 14:55:06 +01:00

fingerprint.c

Use the gpgrt log functions if possible.

2017-11-27 15:00:25 +01:00

gpgsm-w32info.rc

w32: Add icons and version information.

2013-05-07 21:35:48 +02:00

gpgsm.c

gpgsm: Allow sepcification of ldaps servers.

2019-11-09 11:29:59 +01:00

gpgsm.h

sm: Add special case for expired intermediate certificates.

2019-12-06 20:25:56 +01:00

import.c

Use the gpgrt log functions if possible.

2017-11-27 15:00:25 +01:00

keydb.c

Merge branch 'switch-to-gpgk' into master

2019-09-27 15:44:23 +02:00

keydb.h

sm: Add a couple of debug calls to the keydb module.

2019-05-15 08:52:21 +02:00

keylist.c

sm: Add a couple of debug calls to the keydb module.

2019-05-15 08:52:21 +02:00

Makefile.am

Remove -I option to common.

2017-03-07 20:25:54 +09:00

minip12.c

all: fix spelling and typos

2018-10-24 15:56:18 -04:00

minip12.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

misc.c

sm: Prepare algo mapping to handle values > 255.

2019-02-21 08:51:50 +01:00

passphrase.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

passphrase.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

qualified.c

all: fix spelling and typos

2018-10-24 15:56:18 -04:00

server.c

Return better error code for some getinfo IPC commands.

2019-06-03 16:33:10 +02:00

sign.c

sm: Avoid confusing diagnostic for the default key.

2019-05-27 15:44:16 +02:00

verify.c

Use the gpgrt log functions if possible.

2017-11-27 15:00:25 +01:00