mirror of
git://git.gnupg.org/gnupg.git
synced 2024-05-28 21:50:02 +02:00
2e821d77f7
is_disabled to cache_disabled_value, which now takes a pk and not just the keyid. This is for speed since there is no need to re-fetch a key when we already have that key handy. Cache the result of the check so we don't need to hit the trustdb more than once. * getkey.c (skip_disabled): New function to get a pk and call is_disabled on it. (key_byname): Use it here. * packet.h, getkey.c (skip_disabled), keylist.c (print_capabilities): New "pk_is_disabled" macro to retrieve the cached disabled value if available, and fill it in via cache_disabled_value if not available. * trustdb.c (get_validity): Cache the disabled value since we have it handy and it might be useful later. * parse-packet.c (parse_key): Clear disabled flag when parsing a new key. Just in case someone forgets to clear the whole key. * getkey.c (merge_selfsigs_main): Add an "if all else fails" path for setting a single user ID primary when there are multiple set primaries all at the same second, or no primaries set and the most recent user IDs are at the same second, or no signed user IDs at all. This is arbitrary, but deterministic. * exec.h, photoid.h: Add copyright message. * keylist.c (list_keyblock_print): Don't dump attribs for revoked/expired/etc uids for non-colon key listings. This is for consistency with --show-photos. * main.h, keylist.c (dump_attribs), mainproc.c (check_sig_and_print): Dump attribs if --attrib-fd is set when verifying signatures. * g10.c (main): New --gnupg option to disable the various --openpgp, --pgpX, etc. options. This is the same as --no-XXXX for those options. * revoke.c (ask_revocation_reason): Clear old reason if user elects to repeat question. This is bug 153. * keyedit.c (sign_uids): Show keyid of the key making the signature.
84 lines
3.1 KiB
C
84 lines
3.1 KiB
C
/* trustdb.h - Trust database
|
|
* Copyright (C) 1998, 1999, 2000, 2001, 2002, 2003
|
|
* Free Software Foundation, Inc.
|
|
*
|
|
* This file is part of GnuPG.
|
|
*
|
|
* GnuPG is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* GnuPG is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA
|
|
*/
|
|
|
|
#ifndef G10_TRUSTDB_H
|
|
#define G10_TRUSTDB_H
|
|
|
|
|
|
/* Trust values must be sorted in ascending order */
|
|
#define TRUST_MASK 15
|
|
#define TRUST_UNKNOWN 0 /* o: not yet calculated/assigned */
|
|
#define TRUST_EXPIRED 1 /* e: calculation may be invalid */
|
|
#define TRUST_UNDEFINED 2 /* q: not enough information for calculation */
|
|
#define TRUST_NEVER 3 /* n: never trust this pubkey */
|
|
#define TRUST_MARGINAL 4 /* m: marginally trusted */
|
|
#define TRUST_FULLY 5 /* f: fully trusted */
|
|
#define TRUST_ULTIMATE 6 /* u: ultimately trusted */
|
|
/* trust values not covered by the mask */
|
|
#define TRUST_FLAG_REVOKED 32 /* r: revoked */
|
|
#define TRUST_FLAG_SUB_REVOKED 64 /* r: revoked but for subkeys */
|
|
#define TRUST_FLAG_DISABLED 128 /* d: key/uid disabled */
|
|
#define TRUST_FLAG_PENDING_CHECK 256 /* a check-trustdb is pending */
|
|
|
|
/*-- trustdb.c --*/
|
|
void register_trusted_key( const char *string );
|
|
void check_trustdb (void);
|
|
void update_trustdb (void);
|
|
int setup_trustdb( int level, const char *dbname );
|
|
void init_trustdb( void );
|
|
void sync_trustdb( void );
|
|
|
|
const char *trust_value_to_string (unsigned int value);
|
|
int string_to_trust_value (const char *str);
|
|
|
|
void revalidation_mark (void);
|
|
int trustdb_pending_check(void);
|
|
|
|
int cache_disabled_value(PKT_public_key *pk);
|
|
|
|
unsigned int get_validity (PKT_public_key *pk, PKT_user_id *uid);
|
|
int get_validity_info (PKT_public_key *pk, PKT_user_id *uid);
|
|
const char *get_validity_string (PKT_public_key *pk, PKT_user_id *uid);
|
|
|
|
void list_trust_path( const char *username );
|
|
int enum_cert_paths( void **context, ulong *lid,
|
|
unsigned *ownertrust, unsigned *validity );
|
|
void enum_cert_paths_print( void **context, FILE *fp,
|
|
int refresh, ulong selected_lid );
|
|
|
|
unsigned int get_ownertrust (PKT_public_key *pk);
|
|
unsigned int get_min_ownertrust (PKT_public_key *pk);
|
|
int get_ownertrust_info (PKT_public_key *pk);
|
|
const char *get_ownertrust_string (PKT_public_key *pk);
|
|
|
|
void update_ownertrust (PKT_public_key *pk, unsigned int new_trust );
|
|
int clear_ownertrusts (PKT_public_key *pk);
|
|
|
|
/*-- tdbdump.c --*/
|
|
void list_trustdb(const char *username);
|
|
void export_ownertrust(void);
|
|
void import_ownertrust(const char *fname);
|
|
|
|
/*-- pkclist.c --*/
|
|
int edit_ownertrust (PKT_public_key *pk, int mode );
|
|
|
|
#endif /*G10_TRUSTDB_H*/
|