1
0
mirror of git://git.gnupg.org/gnupg.git synced 2024-11-12 21:58:50 +01:00
Go to file
NIIBE Yutaka d5c46ac6f4 agent: Fix wrong use of gcry_sexp_build_array
* findkey.c (agent_public_key_from_file): Fix use of
gcry_sexp_build_array.

--
A test case leading to a segv in Libgcrypt is

  gpg-connect-agent \
    "READKEY 9277C5875C8AFFCB727661C18BE4E0A0DEED9260" /bye

The keygrip was created by "monkeysphere s", which has a comment.

gcry_sexp_build_array expects pointers to the arguments which is quite
surprising.  Probably ARG_NEXT was accidentally implemented wrongly.
Anyway, we can't do anything about it and thus need to fix the check
the users of this function.

Some-comments-by: Werner Koch <wk@gnupg.org>
2012-11-02 16:32:15 +01:00
agent agent: Fix wrong use of gcry_sexp_build_array 2012-11-02 16:32:15 +01:00
am Changed to GPLv3. 2007-07-04 19:49:40 +00:00
artwork Define SUN_LEN also for W32. 2009-06-04 14:19:21 +00:00
common common: Remove generated files only during maintainer-clean. 2012-05-08 16:02:54 +02:00
doc Print the hash algorithm in colon mode key listing. 2012-05-24 10:50:14 +02:00
g10 Fix typos spotted during translations 2012-08-24 10:34:43 +02:00
gl Preparing a test release 2008-02-15 09:58:01 +00:00
include Generate the ChangeLog from commit logs. 2011-12-02 19:28:02 +01:00
jnlib Update copyright year. 2012-01-31 18:08:24 +01:00
kbx Fix typos spotted during translations 2012-08-24 10:34:43 +02:00
keyserver Use the longest key ID available when talking to a HKP server. 2011-12-28 16:46:28 -05:00
m4 Fix --with-pth-prefix help string. 2012-03-30 15:21:30 +02:00
po Update French translation 2012-08-24 17:36:55 +02:00
scd SCD: Upon error, open_pcsc_reader_wrapped does same as _direct. 2012-10-31 11:02:58 +09:00
scripts Fix generated ChangeLog entry. 2012-06-25 10:04:22 +09:00
sm Fix typos spotted during translations 2012-08-24 10:34:43 +02:00
tests Generate the ChangeLog from commit logs. 2011-12-02 19:28:02 +01:00
tools Update copyright year. 2012-01-31 18:08:24 +01:00
.gitignore Add files to .gitignore 2012-01-20 11:20:55 +01:00
ABOUT-NLS Preparing a test release 2008-02-15 09:58:01 +00:00
acinclude.m4 Changed to GPLv3. 2007-07-04 19:49:40 +00:00
announce.txt Write the announce message. 2012-03-27 11:19:32 +02:00
AUTHORS Add Ukrainian translation. 2012-01-31 15:43:33 +01:00
autogen.sh Generate the ChangeLog from commit logs. 2011-12-02 19:28:02 +01:00
ChangeLog Generate the ChangeLog from commit logs. 2011-12-02 19:28:02 +01:00
ChangeLog-2011 Generate the ChangeLog from commit logs. 2011-12-02 19:28:02 +01:00
configure.ac Post release updates 2012-03-27 11:13:50 +02:00
COPYING Changed to GPLv3. 2007-07-04 19:49:40 +00:00
COPYING.LIB Changed to GPLv3. 2007-07-04 19:49:40 +00:00
INSTALL Upgraded gettext. 2007-05-07 19:49:12 +00:00
Makefile.am Update copyright year. 2012-01-31 18:08:24 +01:00
NEWS Print the hash algorithm in colon mode key listing. 2012-05-24 10:50:14 +02:00
README Update copyright year. 2012-01-31 18:08:24 +01:00
README.SVN Fixes for CVE-2006-6235 2006-12-06 10:16:50 +00:00
THANKS Support the Cherry ST-2000 card reader. 2012-06-25 10:04:22 +09:00
TODO Impleemned gpgsm's IMPORT --re-import feature. 2009-07-07 16:52:12 +00:00

                       The GNU Privacy Guard 2
                      =========================
                             Version 2.0

   Copyright 1998, 1999, 2000, 2001, 2002, 2003, 2004,
             2005, 2006, 2007, 2008, 2009, 2010, 2011,
             2012 Free Software Foundation, Inc.


INTRODUCTION
============

GnuPG is GNU's tool for secure communication and data storage.  It can
be used to encrypt data and to create digital signatures.  It includes
an advanced key management facility and is compliant with the proposed
OpenPGP Internet standard as described in RFC4880 and the S/MIME
standard as described by several RFCs.

GnuPG is distributed under the terms of the GNU General Public
License.  See the file COPYING for details.  GnuPG works best on
GNU/Linux or *BSD systems.  Most other Unices are also supported but
are not as well tested as the Free Unices.

GnuPG 2.0 is the stable version of GnuPG integrating support for
OpenPGP and S/MIME.  It does not conflict with an installed 1.4
OpenPGP-only version.



BUILD INSTRUCTIONS
==================

GnuPG 2.0 depends on the following packages:

  libgpg-error     (ftp://ftp.gnupg.org/gcrypt/libgpg-error/)
  libgcrypt        (ftp://ftp.gnupg.org/gcrypt/libgcrypt/)
  libksba          (ftp://ftp.gnupg.org/gcrypt/libksba/)
  libassuan >= 2.0 (ftp://ftp.gnupg.org/gcrypt/libassuan/)

You also need the Pinentry package for most function of GnuPG; however
it is not a build requirement.  Pinentry is available at
ftp://ftp.gnupg.org/gcrypt/pinentry/ .

You should get the latest versions of course, the GnuPG configure
script complains if a version is not sufficient.

After building and installing the above packages in the order as given
above, you may now continue with GnuPG installation (you may also just
try to build GnuPG to see whether your already installed versions are
sufficient).

As with all packages, you just have to do

 ./configure
 make
 make install

(Before doing install you might need to become root.)

If everything succeeds, you have a working GnuPG with support for
S/MIME and smartcards.  Note that there is no binary gpg but a gpg2 so
that this package won't conflict with a GnuPG 1.4 installation.  gpg2
behaves just like gpg.

In case of problem please ask on gnupg-users@gnupg.org for advise.

Note that the PKITS tests are always skipped unless you copy the PKITS
test data file into the tests/pkits directory.


DOCUMENTATION
=============

The complete documentation is in the texinfo manual named
`gnupg.info'.  Run "info gnupg" to read it.  If you want a a printable
copy of the manual, change to the "doc" directory and enter "make pdf"
For a HTML version enter "make html" and point your browser to
gnupg.html/index.html.  Standard man pages for all components are
provided as well.  An online version of the manual is available at
http://www.gnupg.org/documentation/manuals/gnupg/ .  A version of the
manual pertaining to the current development snapshot is at
http://www.gnupg.org/documentation/manuals/gnupg-devel/ .


GNUPG 1.4 AND GNUPG 2.0
=======================

GnuPG 2.0 is a newer version of GnuPG with additional support for
S/MIME.  It has a different design philosophy that splits
functionality up into several modules.  Both versions may be installed
simultaneously without any conflict (gpg is called gpg2 in GnuPG 2).
In fact, the gpg version from GnuPG 1.4 is able to make use of the
gpg-agent as included in GnuPG 2 and allows for seamless passphrase
caching.  The advantage of GnuPG 1.4 is its smaller size and no
dependency on other modules at run and build time.


HOW TO GET MORE INFORMATION
===========================

The primary WWW page is "http://www.gnupg.org"
The primary FTP site is "ftp://ftp.gnupg.org/gcrypt/"

See http://www.gnupg.org/download/mirrors.html for a list of mirrors
and use them if possible.  You may also find GnuPG mirrored on some of
the regular GNU mirrors.

We have some mailing lists dedicated to GnuPG:

   gnupg-announce@gnupg.org   For important announcements like new
                              versions and such stuff.  This is a
                              moderated list and has very low traffic.
                              Do not post to this list.

   gnupg-users@gnupg.org      For general user discussion and
                              help (English).

   gnupg-de@gnupg.org         German speaking counterpart of
                              gnupg-users.

   gnupg-ru@gnupg.org         Russian speaking counterpart of
                              gnupg-users.

   gnupg-devel@gnupg.org      GnuPG developers main forum.

You subscribe to one of the list by sending mail with a subject of
"subscribe" to x-request@gnupg.org, where x is the name of the mailing
list (gnupg-announce, gnupg-users, etc.).  An archive of the mailing
lists is available at <http://www.gnupg.org/documentation/mailing-lists.html>.

Please direct bug reports to http://bugs.gnupg.org or post them direct
to the mailing list <gnupg-devel@gnupg.org>.

Please direct questions about GnuPG to the users mailing list or one
of the pgp newsgroups; please do not direct questions to one of the
authors directly as we are busy working on improvements and bug fixes.
The English and German mailing lists are watched by the authors and we
try to answer questions when time allows us to do so.

Commercial grade support for GnuPG is available; please see
<http://www.gnupg.org/service.html>.


  This file is Free Software; as a special exception the authors gives
  unlimited permission to copy and/or distribute it, with or without
  modifications, as long as this notice is preserved. For conditions
  of the whole package, please see the file COPYING.  This file is
  distributed in the hope that it will be useful, but WITHOUT ANY
  WARRANTY, to the extent permitted by law; without even the implied
  warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.