1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2025-07-03 22:56:33 +02:00
gnupg/g10
David Shaw fbc66185f8 This is the first half of revocation key / designated revoker
support.  That is, it handles all the data to mark a key as revoked if it
has been revoked by a designated revoker.  The second half (coming
later) will contain the code to make someones key your designated revoker
and to issue revocations for someone else.

Note that this is written so that a revoked revoker can still issue
revocations: i.e. If A revokes B, but A is revoked, B is still revoked.
I'm not completely convinced this is the proper behavior, but it matches
how PGP does it.  It does at least have the advantage of much simpler code
- my first version of this had lots of loop maintaining code so you could
chain revokers many levels deep and if D was revoked, C was not, which
meant that B was, and so on. It was sort of scary, actually.

This also changes importing to allow bringing in more revocation keys, and
exporting to not export revocation keys marked "sensitive".

The --edit menu information will show if a revocation key is present.
2002-02-28 21:01:25 +00:00
..
armor.c More Windows and autoconf fixes 2001-08-07 15:35:13 +00:00
build-packet.c fix off-by-one in building attribute subpackets 2002-01-06 03:52:14 +00:00
ChangeLog This is the first half of revocation key / designated revoker 2002-02-28 21:01:25 +00:00
cipher.c For --sig-policy-url and --cert-policy-url, clarify what is a sig and what 2002-02-10 00:18:54 +00:00
comment.c See ChangeLog: Wed Dec 23 13:34:22 CET 1998 Werner Koch 1998-12-23 12:41:40 +00:00
compress.c Applied Stefan's patches to support RISCOS. 2001-08-20 11:53:05 +00:00
dearmor.c Changed and added copyright notices 2001-03-08 14:33:24 +00:00
decrypt.c New command --decrypt-files. 2002-01-15 16:52:36 +00:00
delkey.c Move idea_cipher_warn to misc.c so gpgv.c doesn't need a stub 2002-01-09 19:59:26 +00:00
encode.c --pgp6 flag. This is not nearly as involved as --pgp2. In short, it 2002-01-29 01:12:00 +00:00
encr-data.c Implemented -cs and some fixes to the rfc1991 symmetric only mode 2001-08-20 19:10:34 +00:00
exec.c More comments about when to use IDEA in keygen.c 2002-01-27 05:56:35 +00:00
exec.h Add new photo ID files and modify gpgsplit to name attribute packets 2001-12-21 23:09:41 +00:00
export.c This is the first half of revocation key / designated revoker 2002-02-28 21:01:25 +00:00
filter.h Improved pipemode and tweaked handling of multiple signatures. 2001-04-05 12:21:43 +00:00
free-packet.c This is the first half of revocation key / designated revoker 2002-02-28 21:01:25 +00:00
g10.c * pkclist.c (check_signatures_trust): Always print the warning for 2002-02-14 11:51:00 +00:00
getkey.c This is the first half of revocation key / designated revoker 2002-02-28 21:01:25 +00:00
global.h Revamped the keyring code 2001-09-06 17:10:00 +00:00
gpgd.c Fixed copyright year lists according to CVS and ChangeLogs 2001-04-29 14:08:29 +00:00
gpgv.c * passphrase.c (passphrase_to_dek): Add tryagain_text arg to be 2002-01-20 18:33:04 +00:00
helptext.c Some compatibility polish for PGP2. Add a fake IDEA preference for v3 2002-01-22 20:39:10 +00:00
hkp.c Treat key lists internally as fingerprints when possible. All this is via 2002-02-26 01:00:12 +00:00
hkp.h Treat key lists internally as fingerprints when possible. All this is via 2002-02-26 01:00:12 +00:00
import.c This is the first half of revocation key / designated revoker 2002-02-28 21:01:25 +00:00
kbnode.c MDC feature support and other stuff 2001-08-30 16:39:23 +00:00
keydb.c * g10.c (main): Do not register the secret keyrings for certain 2002-01-05 18:57:54 +00:00
keydb.h For --sig-policy-url and --cert-policy-url, clarify what is a sig and what 2002-02-10 00:18:54 +00:00
keyedit.c This is the first half of revocation key / designated revoker 2002-02-28 21:01:25 +00:00
keygen.c More comments about when to use IDEA in keygen.c 2002-01-27 05:56:35 +00:00
keyid.c Add an outofband indicator to the keyserver protocol. 2001-12-28 16:34:01 +00:00
keylist.c This is the first half of revocation key / designated revoker 2002-02-28 21:01:25 +00:00
keyring.c lock only writable key rings and free unused iobuf 2002-01-02 17:49:29 +00:00
keyring.h Fixed the Read-Only keyring bug and changed the way the keydb interface 2001-10-18 11:56:03 +00:00
keyserver-internal.h (sigh). Missed one file. 2001-12-06 21:50:24 +00:00
keyserver.c Treat key lists internally as fingerprints when possible. All this is via 2002-02-26 01:00:12 +00:00
ks-proto.c Fixed copyright year lists according to CVS and ChangeLogs 2001-04-29 14:08:29 +00:00
ks-proto.h Fixed copyright year lists according to CVS and ChangeLogs 2001-04-29 14:08:29 +00:00
main.h Treat key lists internally as fingerprints when possible. All this is via 2002-02-26 01:00:12 +00:00
mainproc.c For --sig-policy-url and --cert-policy-url, clarify what is a sig and what 2002-02-10 00:18:54 +00:00
Makefile.am Photo ID support (actually generic "attribute packet" support, but there 2001-12-21 23:06:02 +00:00
mdfilter.c Changed and added copyright notices 2001-03-08 14:33:24 +00:00
misc.c Treat key lists internally as fingerprints when possible. All this is via 2002-02-26 01:00:12 +00:00
mkdtemp.c Some tweaks - copyleft info for mkdtemp.c, and header pruning in photoid.c 2001-12-25 18:04:09 +00:00
openfile.c Applied Stefan's patches to support RISCOS. 2001-08-20 11:53:05 +00:00
OPTIONS See ChangeLog: Wed Mar 22 13:50:24 CET 2000 Werner Koch 2000-03-22 12:45:04 +00:00
options.h For --sig-policy-url and --cert-policy-url, clarify what is a sig and what 2002-02-10 00:18:54 +00:00
options.skel * g10.c, options.h: New option --gpg-agent-info 2002-01-26 16:34:00 +00:00
packet.h This is the first half of revocation key / designated revoker 2002-02-28 21:01:25 +00:00
parse-packet.c This is the first half of revocation key / designated revoker 2002-02-28 21:01:25 +00:00
passphrase.c * g10.c, options.h: New option --gpg-agent-info 2002-01-26 16:34:00 +00:00
photoid.c Allow policy URLs with %-expandos in them. This allows policy URLs like 2002-02-05 00:04:24 +00:00
photoid.h Add new photo ID files and modify gpgsplit to name attribute packets 2001-12-21 23:09:41 +00:00
pipemode.c Improved pipemode and tweaked handling of multiple signatures. 2001-04-05 12:21:43 +00:00
pkclist.c * pkclist.c (check_signatures_trust): Always print the warning for 2002-02-14 11:51:00 +00:00
plaintext.c Applied Stefan's patches to support RISCOS. 2001-08-20 11:53:05 +00:00
pubkey-enc.c Treat key lists internally as fingerprints when possible. All this is via 2002-02-26 01:00:12 +00:00
pubring.asc See ChangeLog: Fri Nov 12 20:33:19 CET 1999 Werner Koch 1999-11-12 19:32:00 +00:00
revoke.c Nonrevocable key signature support via "nrsign". These sigs can expire, 2001-12-21 21:02:05 +00:00
seckey-cert.c * g10.c, options.h: New option --gpg-agent-info 2002-01-26 16:34:00 +00:00
seskey.c Added RSA key generation 2001-08-14 11:33:49 +00:00
sig-check.c Photo ID support (actually generic "attribute packet" support, but there 2001-12-21 23:06:02 +00:00
sign.c For --sig-policy-url and --cert-policy-url, clarify what is a sig and what 2002-02-10 00:18:54 +00:00
signal.c Applied Stefan's patches to support RISCOS. 2001-08-20 11:53:05 +00:00
skclist.c calculate time of next trustdb check 2001-09-28 17:00:00 +00:00
status.c Last changes before 1.0.6a snapshot release 2001-09-07 11:40:19 +00:00
status.h Last changes before 1.0.6a snapshot release 2001-09-07 11:40:19 +00:00
tdbdump.c make check does work again 2001-09-28 10:43:03 +00:00
tdbio.c Bugfix in photoid.c and keyserver.c 2001-12-29 04:43:11 +00:00
tdbio.h Revamped the trustDB 2001-09-24 16:03:14 +00:00
textfilter.c Changed and added copyright notices 2001-03-08 14:33:24 +00:00
trustdb.c Photo ID support (actually generic "attribute packet" support, but there 2001-12-21 23:06:02 +00:00
trustdb.h Encryption should work again 2001-09-27 16:22:23 +00:00
verify.c New command (encrypt-files). 2002-01-03 19:47:20 +00:00