security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2024-12-31 11:41:32 +01:00
Code Activity
gnupg/dirmngr
History
Werner Koch d9c7935188
dirmngr,gpg: Better diagnostic in case of bad TLS certificates. 
* doc/DETAILS: Specify new status code "NOTE".
* dirmngr/ks-engine-http.c (ks_http_fetch): Print a NOTE status for a
bad TLS certificate.
* g10/call-dirmngr.c (ks_status_cb): Detect this status.
--

For example a

  gpg -v --locate-external-keys dd9jn@posteo.net

now yields

  gpg: Note: server uses an invalid certificate
  gpg: (further info: bad cert for 'posteo.net': \
                      Hostname does not match the certificate)
  gpg: error retrieving 'dd9jn@posteo.net' via WKD: Wrong name
  gpg: error reading key: Wrong name

(without -v the "further info" line is not shown).  Note that even
after years Posteo is not able to provide a valid certificate for
their .net addresses.  Anyway, this help to show the feature.

Signed-off-by: Werner Koch <wk@gnupg.org>
2019-11-18 18:26:55 +01:00
..
cdb.h
headers: fix spelling
2018-10-25 16:53:05 -04:00
cdblib.c
all: fix spelling and typos
2018-10-24 15:56:18 -04:00
certcache.c
dirmngr: Improve finding OCSP cert.
2019-05-28 12:27:53 +02:00
certcache.h
dirmngr: Use system certs if --hkp-cacert is not used.
2017-09-18 22:49:05 +02:00
ChangeLog-2011
Fix spelling.
2017-02-21 13:11:46 -05:00
ChangeLog-2011-ks
Remove the obsolete keyserver directory from the repo.
2015-04-20 18:20:45 +02:00
crlcache.c
dirmngr: Add FLUSHCRLs command
2018-11-12 13:54:26 +01:00
crlcache.h
move some file encodings to UTF-8
2016-09-17 15:57:31 +09:00
crlfetch.c
dirmngr: Allow redirection from https to http for CRLs
2018-04-25 12:38:04 +02:00
crlfetch.h
Change all http://www.gnu.org in license notices to https://
2016-11-05 12:02:19 +01:00
dirmngr_ldap.c
dirmngr: Remove cruft from dirmngr_ldap
2019-11-11 20:49:04 +01:00
dirmngr-client.c
Fix usage of ARGPARSE_OPTS.
2017-07-19 13:41:18 +09:00
dirmngr-err.h
Some work on porting dirmngr (unfinished)
2010-07-16 13:19:45 +00:00
dirmngr-status.h
dirmngr: Print a WARNING status for DNS config problems.
2018-07-25 14:35:04 +02:00
dirmngr.c
dirmngr: Use IPv4 or IPv6 interface only if available.
2019-11-12 20:35:12 +01:00
dirmngr.h
gpgsm: Allow sepcification of ldaps servers.
2019-11-09 11:29:59 +01:00
dns-stuff.c
dirmngr: Fixed typo in recently added diagnostic.
2019-11-18 18:24:01 +01:00
dns-stuff.h
dirmngr: Use IPv4 or IPv6 interface only if available.
2019-11-12 20:35:12 +01:00
dns.c
dns: Fix irrelevant use of tmpfile.
2019-08-22 12:51:17 +09:00
dns.h
libdns: Avoid using compound literals (8).
2019-02-26 12:26:02 +09:00
domaininfo.c
dirmngr: Improve domaininfo cache update algorithm.
2019-04-02 13:22:32 +02:00
http-common.c
dirmngr: Fix commit de6d8313
2017-03-03 17:17:26 +01:00
http-common.h
dirmngr: Rearrange files to fix de6d831.
2017-03-02 18:35:03 +01:00
http-ntbtls.c
all: fix spelling and typos
2018-10-24 15:56:18 -04:00
http.c
dirmngr: Forward http redirect warnings to gpg.
2019-11-18 18:24:02 +01:00
http.h
dirmngr: Forward http redirect warnings to gpg.
2019-11-18 18:24:02 +01:00
ks-action.c
all: fix spelling and typos
2018-10-24 15:56:18 -04:00
ks-action.h
Change all http://www.gnu.org in license notices to https://
2016-11-05 12:02:19 +01:00
ks-engine-finger.c
dirmngr: Print a WARNING status for DNS config problems.
2018-07-25 14:35:04 +02:00
ks-engine-hkp.c
dirmngr: Forward http redirect warnings to gpg.
2019-11-18 18:24:02 +01:00
ks-engine-http.c
dirmngr,gpg: Better diagnostic in case of bad TLS certificates.
2019-11-18 18:26:55 +01:00
ks-engine-kdns.c
Remove -I option to common.
2017-03-07 20:25:54 +09:00
ks-engine-ldap.c
kbx: Unify the fingerprint search modes.
2019-03-14 14:55:06 +01:00
ks-engine.h
dirmngr: Allow redirection from https to http for CRLs
2018-04-25 12:38:04 +02:00
ldap-parse-uri.c
Remove -I option to common.
2017-03-07 20:25:54 +09:00
ldap-parse-uri.h
Remove -I option to common.
2017-03-07 20:25:54 +09:00
ldap-url.c
dirmngr: Simplify strtok macro.
2014-03-07 19:00:31 +01:00
ldap-url.h
Merged Dirmngr with GnuPG.
2010-06-09 16:53:51 +00:00
ldap-wrapper.c
dirmngr: Remove cruft from dirmngr_ldap
2019-11-11 20:49:04 +01:00
ldap-wrapper.h
dirmngr: Remove cruft from dirmngr_ldap
2019-11-11 20:49:04 +01:00
ldap.c
gpgsm: Allow sepcification of ldaps servers.
2019-11-09 11:29:59 +01:00
ldapserver.c
gpgsm: Allow sepcification of ldaps servers.
2019-11-09 11:29:59 +01:00
ldapserver.h
dirmngr: Rename an enum value for clarity.
2019-11-11 09:45:01 +01:00
loadswdb.c
dirmngr: Allow redirection from https to http for CRLs
2018-04-25 12:38:04 +02:00
Makefile.am
dirmngr: Remove cruft from dirmngr_ldap
2019-11-11 20:49:04 +01:00
misc.c
dirmngr: Fix LDAP port parsing.
2018-11-05 09:00:02 +01:00
misc.h
dirmngr: Rearrange files to fix de6d831.
2017-03-02 18:35:03 +01:00
OAUTHORS
Nuked almost all trailing white space.
2011-02-04 12:57:53 +01:00
ocsp.c
dirmngr: Allow for other hash algorithms than SHA-1 in OCSP.
2019-05-28 12:27:53 +02:00
ocsp.h
Merged Dirmngr with GnuPG.
2010-06-09 16:53:51 +00:00
ONEWS
Nuked almost all trailing white space.
2011-02-04 12:57:53 +01:00
server.c
dirmngr: Support the new WKD draft with the openpgpkey subdomain.
2018-11-13 11:35:39 +01:00
sks-keyservers.netCA.pem
dirmngr: Add support for hkps keyservers.
2014-05-05 16:23:37 +02:00
t-dns-stuff.c
dirmngr: Print a WARNING status for DNS config problems.
2018-07-25 14:35:04 +02:00
t-http-basic.c
dirmngr: Avoid possible CSRF attacks via http redirects.
2018-11-22 22:36:07 +01:00
t-http.c
dirmngr: Avoid possible CSRF attacks via http redirects.
2018-11-22 22:36:07 +01:00
t-ldap-parse-uri.c
Change all http://www.gnu.org in license notices to https://
2016-11-05 12:02:19 +01:00
t-support.c
dirmngr: Print a WARNING status for DNS config problems.
2018-07-25 14:35:04 +02:00
t-support.h
Change all http://www.gnu.org in license notices to https://
2016-11-05 12:02:19 +01:00
tls-ca.pem
Move http module from common/ to dirmngr/.
2015-10-18 20:08:26 +02:00
validate.c
Spelling fixes in docs and comments.
2017-04-28 10:06:33 +09:00
validate.h
dirmngr: Add special treatment for the standard hkps pool to ntbtls.
2017-02-21 14:55:04 +01:00
w32-ldap-help.h
Change all http://www.gnu.org in license notices to https://
2016-11-05 12:02:19 +01:00
workqueue.c
all: fix spelling and typos
2018-10-24 15:56:18 -04:00