summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorWerner Koch <wk@gnupg.org>2022-11-25 09:21:58 +0100
committerWerner Koch <wk@gnupg.org>2022-11-25 09:26:30 +0100
commitd70779bdc60c40c895dcdcb846c10a7b9703263b (patch)
treeaf444b06d79a66fb356bcf36056bf371d5d7f06f
parenttests: Fix to support --enable-all-tests and variants. (diff)
downloadgnupg2-d70779bdc60c40c895dcdcb846c10a7b9703263b.tar.xz
gnupg2-d70779bdc60c40c895dcdcb846c10a7b9703263b.zip
dirmngr: Silence ocsp debug output.
* dirmngr/ocsp.c (check_signature_core): No debug output -- Also typo and doc fixes.
-rw-r--r--dirmngr/ocsp.c7
-rw-r--r--doc/DETAILS4
-rw-r--r--sm/verify.c4
3 files changed, 11 insertions, 4 deletions
diff --git a/dirmngr/ocsp.c b/dirmngr/ocsp.c
index 0da96ba15..7267d623e 100644
--- a/dirmngr/ocsp.c
+++ b/dirmngr/ocsp.c
@@ -504,8 +504,11 @@ check_signature_core (ctrl_t ctrl, ksba_cert_t cert, gcry_sexp_t s_sig,
goto leave;
}
- gcry_log_debugsxp ("sig ", s_sig);
- gcry_log_debugsxp ("hash", s_hash);
+ if (DBG_CRYPTO)
+ {
+ gcry_log_debugsxp ("sig ", s_sig);
+ gcry_log_debugsxp ("hash", s_hash);
+ }
err = gcry_pk_verify (s_sig, s_hash, s_pkey);
if (err)
diff --git a/doc/DETAILS b/doc/DETAILS
index 70dabe0f8..9581f3032 100644
--- a/doc/DETAILS
+++ b/doc/DETAILS
@@ -1694,6 +1694,10 @@ Description of some debug flags:
- RFC-6337 :: ECC in OpenPGP
- RFC-7292 :: PKCS #12: Personal Information Exchange Syntax v1.1
- RFC-8351 :: The PKCS #8 EncryptedPrivateKeyInfo Media Type
+ - RFC-8550 :: S/MIME Version 4.0 Certificate Handling
+ - RFC-8551 :: S/MIME Version 4.0 Message Specification
+ - RFC-2634 :: Enhanced Security Services for S/MIME
+ - RFC-5035 :: Enhanced Security Services (ESS) Update
- draft-koch-openpgp-2015-rfc4880bis :: Updates to RFC-4880
diff --git a/sm/verify.c b/sm/verify.c
index 10d5d5c35..2e40c021f 100644
--- a/sm/verify.c
+++ b/sm/verify.c
@@ -634,8 +634,8 @@ gpgsm_verify (ctrl_t ctrl, int in_fd, int data_fd, estream_t out_fp)
/* FIXME: INFO_PKALGO correctly shows ECDSA but PKALGO is then
* ECC. We should use the ECDSA here and need to find a way to
- * figure this oult without using the bodus assumtion in
- * gpgsm_check_cms_signature that ECC is alwas ECDSA. */
+ * figure this out without using the bogus assumption in
+ * gpgsm_check_cms_signature that ECC is always ECDSA. */
fpr = gpgsm_get_fingerprint_hexstring (cert, GCRY_MD_SHA1);
tstr = strtimestamp_r (sigtime);