Werner Koch e7abed3448 gpg: Protect against rogue keyservers sending secret keys. ...

* g10/options.h (IMPORT_NO_SECKEY): New.
* g10/keyserver.c (keyserver_spawn, keyserver_import_cert): Set new
flag.
* g10/import.c (import_secret_one): Deny import if flag is set.
--

By modifying a keyserver or a DNS record to send a secret key, an
attacker could trick a user into signing using a different key and
user id.  The trust model should protect against such rogue keys but
we better make sure that secret keys are never received from remote
sources.

Suggested-by: Stefan Tomanek
Signed-off-by: Werner Koch <wk@gnupg.org>

2013-10-04 13:44:39 +02:00

..

armor.c

Fix bug#1179

2010-05-12 16:18:49 +00:00

build-packet.c

Removed some set but unused variables.

2011-08-04 12:22:04 +02:00

call-agent.c

Fix a typo and a wrong code indentation.

2013-04-25 09:33:33 +02:00

call-agent.h

A bunch of minor changes

2009-12-21 16:19:09 +00:00

card-util.c

Allow generation of card keys up to 4096 bit.

2011-07-07 11:20:53 +02:00

ChangeLog-2011

Generate the ChangeLog from commit logs.

2011-12-02 19:28:02 +01:00

cipher.c

Add provisions to build with Libgcrypt 1.6.

2012-05-24 10:55:11 +02:00

comment.c

Started to implement the audit log feature.

2007-11-19 16:03:50 +00:00

compress-bz2.c

Fix bug#1011.

2009-09-03 11:29:25 +00:00

compress.c

Changed to GPLv3.

2007-07-04 19:49:40 +00:00

cpr.c

Improved detection of bad/invalid signer keys.

2009-08-06 20:12:00 +00:00

dearmor.c

Started to implement the audit log feature.

2007-11-19 16:03:50 +00:00

decrypt.c

Started to implement the audit log feature.

2007-11-19 16:03:50 +00:00

delkey.c

Started to implement the audit log feature.

2007-11-19 16:03:50 +00:00

encode.c

Add full Camellia support.

2009-06-05 14:11:03 +00:00

encr-data.c

Add provisions to build with Libgcrypt 1.6.

2012-05-24 10:55:11 +02:00

exec.c

w32: Almost everywhere include winsock2.h before windows.h.

2013-04-23 18:06:46 +02:00

exec.h

Changed to GPLv3.

2007-07-04 19:49:40 +00:00

export.c

Started to implement the audit log feature.

2007-11-19 16:03:50 +00:00

filter.h

Changed to GPLv3.

2007-07-04 19:49:40 +00:00

free-packet.c

Changed to GPLv3.

2007-07-04 19:49:40 +00:00

getkey.c

gpg: Distinguish between missing and cleared key flags.

2013-10-04 08:53:49 +02:00

gpg-w32info.rc

w32: Add icons and version information.

2013-05-07 21:17:04 +02:00

gpg.c

gpg: No need to create a trustdb when encrypting with --always-trust.

2013-08-02 09:26:32 +02:00

gpg.h

gpg: Detect Keybox files and print a diagnostic.

2013-01-03 20:21:20 +01:00

gpgv.c

gpgv: Init Libgcrypt to avoid syslog warning.

2013-08-19 11:22:11 +02:00

helptext.c

Created help files form the current po entries.

2007-12-04 15:00:14 +00:00

import.c

gpg: Protect against rogue keyservers sending secret keys.

2013-10-04 13:44:39 +02:00

kbnode.c

Changed to GPLv3.

2007-07-04 19:49:40 +00:00

keydb.c

gpg: Detect Keybox files and print a diagnostic.

2013-01-03 20:21:20 +01:00

keydb.h

A bunch of minor changes

2009-12-21 16:19:09 +00:00

keyedit.c

Removed some set but unused variables.

2011-08-04 12:22:04 +02:00

keygen.c

gpg: Allow setting of all zero key flags

2013-10-04 08:54:25 +02:00

keyid.c

Provide pubkey letters e and E

2011-07-01 10:33:43 +02:00

keylist.c

Add provisions to build with Libgcrypt 1.6.

2012-05-24 10:55:11 +02:00

keyring.c

Fix bug 1091.

2009-07-20 11:02:20 +00:00

keyring.h

Make gpgv error message about a missing keyring more useful. This fixes

2009-04-03 10:34:22 +00:00

keyserver-internal.h

Changed to GPLv3.

2007-07-04 19:49:40 +00:00

keyserver.c

gpg: Protect against rogue keyservers sending secret keys.

2013-10-04 13:44:39 +02:00

main.h

Fix printing of ECC algo names in hkp keyserver listings.

2012-11-27 17:35:16 +01:00

mainproc.c

gpg: Limit the nesting level of I/O filters.

2013-10-04 08:20:49 +02:00

Makefile.am

w32: Add icons and version information.

2013-05-07 21:17:04 +02:00

mdfilter.c

Started to implement the audit log feature.

2007-11-19 16:03:50 +00:00

misc.c

w32: Almost everywhere include winsock2.h before windows.h.

2013-04-23 18:06:46 +02:00

openfile.c

Changed to GPLv3.

2007-07-04 19:49:40 +00:00

OPTIONS

See ChangeLog: Mon Jul 31 10:04:47 CEST 2000 Werner Koch

2000-07-31 08:04:16 +00:00

options.h

gpg: Protect against rogue keyservers sending secret keys.

2013-10-04 13:44:39 +02:00

options.skel

gpg: Remove legacy keyserver examples from the template conf file.

2013-08-06 10:04:12 +02:00

packet.h

Fix bug#1122.

2009-09-03 20:51:55 +00:00

parse-packet.c

Print the decoded iteration count with --list-packets.

2011-07-22 13:56:14 +02:00

passphrase.c

Implement command --passwd for GPG.

2010-01-11 16:05:26 +00:00

photoid.c

w32: Almost everywhere include winsock2.h before windows.h.

2013-04-23 18:06:46 +02:00

photoid.h

* main.h, mainproc.c (check_sig_and_print), keylist.c

2008-10-03 20:00:46 +00:00

pkclist.c

gpg: Suppress "public key already present" in quiet mode.

2012-12-19 11:29:37 +01:00

pkglue.c

Fix a for a bug fix in the latest Libgcrypt.

2011-06-13 14:35:30 +02:00

pkglue.h

Changed to GPLv3.

2007-07-04 19:49:40 +00:00

plaintext.c

Fix bug 1207

2010-05-12 10:53:02 +00:00

progress.c

Changed to GPLv3.

2007-07-04 19:49:40 +00:00

pubkey-enc.c

Add full Camellia support.

2009-06-05 14:11:03 +00:00

pubring.asc

See ChangeLog: Mon Jul 31 10:04:47 CEST 2000 Werner Koch

2000-07-31 08:04:16 +00:00

revoke.c

Fixed a bunch of little bugs as reported by Fabian Keil.

2009-06-24 14:03:09 +00:00

rmd160.c

Add rmd160.c.

2008-12-12 12:01:20 +00:00

rmd160.h

Add missing header file.

2008-12-12 08:54:50 +00:00

seckey-cert.c

Return a posiive status message for a successfull passphrase change.

2010-03-12 17:24:06 +00:00

server.c

2009-09-23 Marcus Brinkmann <marcus@g10code.de>

2010-02-12 15:15:34 +00:00

seskey.c

Add full Camellia support.

2009-06-05 14:11:03 +00:00

sig-check.c

Removed some set but unused variables.

2011-08-04 12:22:04 +02:00

sign.c

Comment fixes.

2013-04-22 19:59:34 +02:00

signal.c

Fix a signal cleanup problem.

2009-05-26 09:29:02 +00:00

skclist.c

Improved detection of bad/invalid signer keys.

2009-08-06 20:12:00 +00:00

t-rmd160.c

Make gpg not depend on the RIPE-MD160 implementaion in Libgcrypt.

2008-12-11 17:44:52 +00:00

tdbdump.c

Marked all unused args on non-W32 platforms.

2008-10-20 13:53:23 +00:00

tdbio.c

Changes to --min-cert-level should cause a trustdb rebuild (issue 1366)

2012-01-19 23:03:56 -05:00

tdbio.h

Changes to --min-cert-level should cause a trustdb rebuild (issue 1366)

2012-01-19 23:03:56 -05:00

textfilter.c

Started to implement the audit log feature.

2007-11-19 16:03:50 +00:00

trustdb.c

Actually show translators comments in PO files

2012-08-24 10:33:28 +02:00

trustdb.h

Changes to --min-cert-level should cause a trustdb rebuild (issue 1366)

2012-01-19 23:03:56 -05:00

verify.c

Marked all unused args on non-W32 platforms.

2008-10-20 13:53:23 +00:00