security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2024-11-12 21:58:50 +01:00
Code Activity
f2b01025c3
gnupg/dirmngr
History
Werner Koch 55b5928099
dirmngr: Change the default keyserver. 
* configure.ac (DIRMNGR_DEFAULT_KEYSERVER): Change to
keyserver.ubuntu.com.

* dirmngr/certcache.c (cert_cache_init): Disable default pool cert.
* dirmngr/http-ntbtls.c (gnupg_http_tls_verify_cb): Ditto.
* dirmngr/http.c (http_session_new): Ditto.

* dirmngr/server.c (make_keyserver_item): Use a different mapping for
the gnupg.net names.
--

Due to the unfortunate shutdown of the keyserver pool, the long term
defaults won't work anymore.  Thus it is better to change them.

For https access keyserver.ubuntu.com is now used because it can be
expected that this server can stand the load from newer gnupg LTS
versions.

For http based access the Dutch Surfnet keyserver is used.  However
due to a non-standard TLS certificate this server can not easily be
made the default for https.

Note: that the default server will be changed again as soon as a new
connected keyserver infrastructure has been established.

(cherry picked from commit 47c4e3e00a)
2021-08-24 18:09:56 +02:00
..
cdb.h headers: fix spelling 2018-10-25 16:53:05 -04:00
cdblib.c all: fix spelling and typos 2018-10-24 15:56:18 -04:00
certcache.c dirmngr: Change the default keyserver. 2021-08-24 18:09:56 +02:00
certcache.h dirmngr: Use system certs if --hkp-cacert is not used. 2017-09-18 22:49:05 +02:00
ChangeLog-2011 Fix spelling. 2017-02-21 13:11:46 -05:00
ChangeLog-2011-ks Remove the obsolete keyserver directory from the repo. 2015-04-20 18:20:45 +02:00
crlcache.c dirmgr: clean up memory on error code paths 2021-05-20 13:38:24 +02:00
crlcache.h move some file encodings to UTF-8 2016-09-17 15:57:31 +09:00
crlfetch.c dirmngr: Rewrite the LDAP wrapper tool 2021-06-16 12:58:32 +02:00
crlfetch.h dirmngr: Rewrite the LDAP wrapper tool 2021-06-16 12:58:32 +02:00
dirmngr_ldap.c dirmngr: Allow to pass no filter args to dirmngr_ldap. 2021-06-16 12:59:49 +02:00
dirmngr-client.c w32: Replace some fopen by es_fopen. 2020-11-11 15:23:22 +01:00
dirmngr-err.h Some work on porting dirmngr (unfinished) 2010-07-16 13:19:45 +00:00
dirmngr-status.h dirmngr: Print a WARNING status for DNS config problems. 2018-07-25 14:35:04 +02:00
dirmngr.c dirmngr: Fix build with --disable-ldap. 2021-06-16 13:06:40 +02:00
dirmngr.h dirmngr: Allow for non-URL specified ldap keyservers. 2021-06-16 12:25:13 +02:00
dns-stuff.c Require Libgcrypt 1.9 2021-01-19 10:33:03 +01:00
dns-stuff.h dirmngr: Use IPv4 or IPv6 interface only if available. 2019-11-12 20:35:12 +01:00
dns.c dns: Fix memory use-after-free. 2020-08-19 15:16:34 +09:00
dns.h dirmngr: dns: Fix allocation of string buffer in stack. 2020-05-20 19:44:38 +09:00
domaininfo.c dirmngr: Improve domaininfo cache update algorithm. 2019-04-02 13:22:32 +02:00
http-common.c dirmngr: Fix commit de6d8313 2017-03-03 17:17:26 +01:00
http-common.h dirmngr: Rearrange files to fix de6d831. 2017-03-02 18:35:03 +01:00
http-ntbtls.c dirmngr: Change the default keyserver. 2021-08-24 18:09:56 +02:00
http.c dirmngr: Change the default keyserver. 2021-08-24 18:09:56 +02:00
http.h dirmngr: Support pseudo URI scheme "opaque". 2021-06-16 11:54:47 +02:00
ks-action.c dirmngr: Allow for non-URL specified ldap keyservers. 2021-06-16 12:25:13 +02:00
ks-action.h gpg: Lookup a missing public key of the current card via LDAP. 2021-04-16 20:21:23 +02:00
ks-engine-finger.c dirmngr: Print a WARNING status for DNS config problems. 2018-07-25 14:35:04 +02:00
ks-engine-hkp.c dirmngr: Fix regression in KS_GET for mail address pattern. 2021-06-21 09:32:16 +02:00
ks-engine-http.c dirmngr,gpg: Better diagnostic in case of bad TLS certificates. 2019-11-18 18:26:55 +01:00
ks-engine-kdns.c Remove -I option to common. 2017-03-07 20:25:54 +09:00
ks-engine-ldap.c build: Simplify for string.h and getopt.h. 2021-08-05 14:01:14 +09:00
ks-engine.h dirmngr: Allow redirection from https to http for CRLs 2018-04-25 12:38:04 +02:00
ldap-misc.c dirmngr: Rewrite the LDAP wrapper tool 2021-06-16 12:58:32 +02:00
ldap-misc.h dirmngr: Rewrite the LDAP wrapper tool 2021-06-16 12:58:32 +02:00
ldap-parse-uri.c dirmngr: Support new gpgNtds parameter in LDAP keyserver URLs. 2021-02-17 17:40:02 +01:00
ldap-parse-uri.h Remove -I option to common. 2017-03-07 20:25:54 +09:00
ldap-url.c dirmngr: Simplify strtok macro. 2014-03-07 19:00:31 +01:00
ldap-url.h Merged Dirmngr with GnuPG. 2010-06-09 16:53:51 +00:00
ldap-wrapper.c dirmngr: Rewrite the LDAP wrapper tool 2021-06-16 12:58:32 +02:00
ldap-wrapper.h dirmngr: Remove cruft from dirmngr_ldap 2019-11-11 20:49:04 +01:00
ldap.c dirmngr: Rewrite the LDAP wrapper tool 2021-06-16 12:58:32 +02:00
ldapserver.c dirmngr: Allow for non-URL specified ldap keyservers. 2021-06-16 12:25:13 +02:00
ldapserver.h dirmngr: Allow for non-URL specified ldap keyservers. 2021-06-16 12:25:13 +02:00
loadswdb.c common,agent,dirmngr,g10,tools: Fix split_fields API. 2020-09-18 10:20:23 +09:00
Makefile.am dirmngr: Rewrite the LDAP wrapper tool 2021-06-16 12:58:32 +02:00
misc.c dirmngr: Fix LDAP port parsing. 2018-11-05 09:00:02 +01:00
misc.h dirmngr: Rearrange files to fix de6d831. 2017-03-02 18:35:03 +01:00
OAUTHORS Nuked almost all trailing white space. 2011-02-04 12:57:53 +01:00
ocsp.c dirmgr: Avoid double free 2021-05-20 14:33:35 +02:00
ocsp.h Merged Dirmngr with GnuPG. 2010-06-09 16:53:51 +00:00
ONEWS Nuked almost all trailing white space. 2011-02-04 12:57:53 +01:00
server.c dirmngr: Change the default keyserver. 2021-08-24 18:09:56 +02:00
sks-keyservers.netCA.pem dirmngr: Add support for hkps keyservers. 2014-05-05 16:23:37 +02:00
t-dns-stuff.c dirmngr: Print a WARNING status for DNS config problems. 2018-07-25 14:35:04 +02:00
t-http-basic.c dirmngr: Avoid possible CSRF attacks via http redirects. 2018-11-22 22:36:07 +01:00
t-http.c dirmngr: Support pseudo URI scheme "opaque". 2021-06-16 11:54:47 +02:00
t-ldap-misc.c dirmngr: Rewrite the LDAP wrapper tool 2021-06-16 12:58:32 +02:00
t-ldap-parse-uri.c dirmngr: Rework of the LDAP code, part 1. 2019-11-26 13:09:35 +01:00
t-support.c dirmngr: Print a WARNING status for DNS config problems. 2018-07-25 14:35:04 +02:00
t-support.h dirmngr: Rewrite the LDAP wrapper tool 2021-06-16 12:58:32 +02:00
tls-ca.pem Move http module from common/ to dirmngr/. 2015-10-18 20:08:26 +02:00
validate.c sm,dirmngr: Restrict allowed parameters used with rsaPSS. 2020-04-15 11:06:59 +02:00
validate.h dirmngr: Add special treatment for the standard hkps pool to ntbtls. 2017-02-21 14:55:04 +01:00
w32-ldap-help.h Change all http://www.gnu.org in license notices to https:// 2016-11-05 12:02:19 +01:00
workqueue.c Spelling cleanup. 2020-02-18 18:07:46 -05:00