summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Preparing 1.9.17V1-9-17Werner Koch2005-06-206-201/+257
|
* gcc-4 defaults forced me to edit many many files to get rid of theWerner Koch2005-06-1669-348/+558
| | | | | | | char * vs. unsigned char * warnings. The GNU coding standards used to say that these mismatches are okay and better than a bunch of casts. Obviously this has changed now.
* New debugging optionhs, updates to the manual.Werner Koch2005-06-0723-81/+759
|
* 2005-06-04 Marcus Brinkmann <marcus@g10code.de>Marcus Brinkmann2005-06-042-25/+39
| | | | | | | | | | | * symcryptrun.c (main): Allow any number of arguments, don't use first argument as input file name. Pass extra arguments to confucius_main. (confucius_main): Accept new arguments argc and argv and pass them to confucius_process. (confucius_process): Accept new arguments argc and argv and pass them to the confucius process.
* * command.c (cmd_updatestartuptty): New.Werner Koch2005-06-0320-104/+459
| | | | | | | | | | | | | | | | | | | | * gpg-agent.c: New option --write-env-file. * gpg-agent.c (handle_connections): Make sure that the signals we are handling are not blocked.Block signals while creating new threads. * estream.c: Use HAVE_CONFIG_H and not USE_CONFIG_H! (es_func_fd_read, es_func_fd_write): Protect against EINTR. * gpg-agent.texi (Agent UPDATESTARTUPTTY): New. * scdaemon.c (handle_connections): Make sure that the signals we are handling are not blocked.Block signals while creating new threads. (handle_connections): Include the file descriptor into the name of the thread.
* Add stuff from gnulib.Werner Koch2005-06-0149-0/+4266
|
* * configure.ac (gl_INIT): Add gnulib stuff.Werner Koch2005-06-0134-486/+166
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | (fseeko, ftello, ttyname, isascii): Replaced the AC_REPLACE_FUNCS by a simple check. (putc_unlocked): Removed check. Not used. (strsep, mkdtemp, asprintf): Replaced checks by gnulib checks. (xsize): Added will probably come handy soon. (CFLAGS): Use -Wformat-security instead of -Wformat-nonliteral. Add --Wno-format-y2k. * gl/, gl/m4/: New. * gpg-agent.c: Include setenv.h. * Makefile.am (AM_CPPFLAGS): Added. * util.h: Add some includes for gnulib. (ttyname, isascii): Define them inline. * fseeko.c, ftello.c: Removed. * strsep.c, mkdtemp.c: Removed. * ttyname.c, isascii.c: Removed. * mkdtemp.c: Removed. * exec.c: Include mkdtemp.h * keybox-file.c (ftello) [!HAVE_FSEEKO]: New replacement function. Copied from ../common/ftello.c. * keybox-update.c (fseeko) [!HAVE_FSEEKO]: New replacement function. Copied from ../common/iobuf.c. * scdaemon.c: Include mkdtemp.h. * misc.c: Include setenv.h. * symcryptrun.c: Include mkdtemp.h.
* * agent.h (out_of_core): s/__inline__/inine. Noted by Ray Link.Werner Koch2005-05-3111-9/+60
| | | | | | | | | | | * dynload.h: s/__inline__/inline/. * tlv.c [GNUPG_MAJOR_VERSION==1]: Define constants instead of including a gnupg 1.4 header. * watchgnupg.c: Make sure that PF_LCOAL and AF_LOCAL are defines. Noted by Ray Link.
* 2005-05-28 Moritz Schulte <moritz@g10code.com>Moritz Schulte2005-05-283-1/+303
| | | | | | * gpgkey2ssh.c: New file. * Makefile.am (bin_PROGRAMS): Added gpgkey2ssh.
* * call-scd.c (inq_needpin): Skip leading spaces in of PINWerner Koch2005-05-2410-35/+121
| | | | | | | | | description. * divert-scd.c (getpin_cb): Enhanced to cope with description flags. * query.c (agent_askpin): Add arg PROMPT_TEXT. Changed all callers.
* * Makefile.am: Do not build sc-copykeys anymore.Werner Koch2005-05-236-250/+73
| | | | | | * app-openpgp.c (app_openpgp_storekey, app_openpgp_readkey) (app_openpgp_cardinfo): Removed.
* (parse_ccid_descriptor): SCR335 FW version 5.14 isWerner Koch2005-05-232-22/+119
| | | | | | | | | | | | | | good. (do_close_reader): Never do a reset. The caller should instead make sure that the reader has been closed properly. The new retry code in ccid_slot_status will make sure that the readersatrts up fine even if the last process didn't closed the USB connection properly. (ccid_get_atr): For certain readers try switching to ISO mode. Thanks to Ludovic Rousseau for this hint and the magic numbers. (print_command_failed): New. (bulk_in): Use it here. Add new arg NO_DEBUG.
* * call-scd.c (start_scd): Don't test for an alive scdaemon here.Werner Koch2005-05-219-25/+101
| | | | | | | | | (agent_scd_check_aliveness): New. * gpg-agent.c (handle_tick): Test for an alive scdaemon. (handle_signal): Print thread info on SIGUSR1. * scdaemon.c (handle_signal): Print thread info on SIGUSR1.
* * protect-tool.c: New option --canonical.Werner Koch2005-05-2017-116/+961
| | | | | | | | | | | | | | | | | | | | | | | | (show_file): Implement it. * keyformat.txt: Define the created-at attribute for keys. * ccid-driver.c: Replaced macro DEBUG_T1 by a new debug level. (parse_ccid_descriptor): Mark SCR335 firmware version 5.18 good. (ccid_transceive): Arghhh. The seqno is another bit in the R-block than in the I block, this was wrong at one place. * scdaemon.c: New options --debug-ccid-driver and --debug-disable-ticker. * app-openpgp.c (do_genkey, do_writekey): Factored code to check for existing key out into .. (does_key_exist): .. New function. * gpg-connect-agent.c (add_definq, show_definq, clear_definq) (handle_inquire): New. (read_and_print_response): Handle INQUIRE command. (main): Implement control commands.
* Changed the scdaemon to handle concurrent sessions. AdjustedWerner Koch2005-05-1827-646/+1095
| | | | | gpg-agent accordingly. Code cleanups.
* (got_fatal_signal): Print the signal number if we can'tWerner Koch2005-05-132-4/+4
| | | | | | | get a name for it. (get_signal_name): Return NULL if no name is available. Fixed conditional for sys_siglist to the correct one.
* (got_fatal_signal): Print the signal number if we can'tWerner Koch2005-05-132-6/+39
| | | | | | get a name for it. (get_signal_name): Return NULL if no name is available.
* 2005-05-05 Moritz Schulte <moritz@g10code.com>Moritz Schulte2005-05-052-31/+32
| | | | | | | * command-ssh.c: Use ssh_key_grip(), where gcry_pk_get_keygrip() has been used before. (ssh_handler_sign_request): Removed unusued variable P.
* 2005-05-05 Moritz Schulte <moritz@g10code.com>Moritz Schulte2005-05-052-38/+91
| | | | | | | * command-ssh.c (ssh_key_to_buffer): Rename to ... (ssh_key_to_protected_buffer): ... this; change callers. Improved documentation.
* * app-p15.c (micardo_mse): New.Werner Koch2005-04-277-29/+175
| | | | | | | | | | | | | | (do_sign): Call it. * iso7816.c (iso7816_manage_security_env): Allow passing DATA as NULL to indicate an empty Lc. * tlv.c (find_tlv): Check that a found object fits into the buffer. (find_tlv_unchecked): New as replacement for the old non-checking variant. * app.c (select_application): Keep on using the non-checking variant. * app-openpgp.c (get_one_do, dump_all_do): Ditto.
* (symcryptrun): Added.Werner Koch2005-04-272-0/+96
|
* * configure.ac: Removed OpenSC detection and options.Werner Koch2005-04-2716-866/+2593
| | | | | | | | | | | | | | | | | | | * acinclude.m4: Ditto. * scdaemon.texi: Removed OpenSC specific options. * app-p15.c: New. Basic support for pkcs15 cards without OpenSC. There are quite a couple of things missing but at least I can use my old TCOS cards from the Aegypten-1 development for signing. * app.c (select_application): Detect pkcs15 applications. * Makefile.am (scdaemon_SOURCES): Removed card.c, card-common.h and card-p15.c because they are now obsolete. Added app-p15.c. Removed all OpenSC stuff. * command.c (do_reset, open_card, cmd_serialno, cmd_learn) (cmd_readcert, cmd_readkey, cmd_pksign, cmd_pkdecrypt): Removed all special cases for the old card.c based mechanisms. * scdaemon.c, apdu.c: Removed all special cases for OpenSC.
* post release version number updateWerner Koch2005-04-212-1/+5
|
* Preparing a releaseV1-9-16Werner Koch2005-04-216-215/+380
|
* (main): Optionally allow the input file as commandWerner Koch2005-04-212-1/+18
| | | | | line argument.
* * configure.ac: Do not build gpg by default.Werner Koch2005-04-2115-43/+97
| | | | | | | | | | | | * gpgsm.c: New options --{enable,disable}-trusted-cert-crl-check. * certchain.c (gpgsm_validate_chain): Make use of it. * certchain.c (gpgsm_validate_chain): Check revocations even for expired certificates. This is required because on signature verification an expired key is fine whereas a revoked one is not. * gpgconf-comp.c: Add gpgsm option disable-trusted-cert-crl-check.
* (gpgsm_validate_chain): Check revocations even forWerner Koch2005-04-213-7/+21
| | | | | | expired certificates. This is required because on signature verification an expired key is fine whereas a revoked one is not.
* .Werner Koch2005-04-205-11/+93
|
* (Agent Configuration): New section.Werner Koch2005-04-204-5/+101
|
* 2005-04-20 Moritz Schulte <moritz@g10code.com>Moritz Schulte2005-04-202-3/+5
| | | | | | * command-ssh.c (ssh_handler_request_identities): Removed debugging code (sleep call), which was commited unintenionally.
* 2005-04-19 Marcus Brinkmann <marcus@g10code.de>Marcus Brinkmann2005-04-192-28/+50
| | | | | * symcryptrun.c: Add --input option.
* * configure.ac: Require libksba 0.9.11.Werner Koch2005-04-1817-41/+302
| | | | | | | | | | | | sm/ * call-dirmngr.c (inq_certificate): Add new inquire SENDCERT_SKI. * certlist.c (gpgsm_find_cert): Add new arg KEYID and implement this filter. Changed all callers. * certchain.c (find_up_search_by_keyid): New helper. (find_up): Also try using the AKI.keyIdentifier. (find_up_external): Ditto.
* 2005-04-15 Marcus Brinkmann <marcus@g10code.de>Marcus Brinkmann2005-04-152-0/+17
| | | | | * symcryptrun.c (TEMP_FAILURE_RETRY): Define if not defined.
* 2005-04-15 Marcus Brinkmann <marcus@g10code.de>Marcus Brinkmann2005-04-154-19/+90
| | | | | | | | | | | | * configure.ac: Check for /usr/bin/shred and define SHRED. tools/ 2005-04-15 Marcus Brinkmann <marcus@g10code.de> * symcryptrun.c (remove_file): New function. (confucius_copy_file): Accept new argument PLAIN and shred the file if it is set on error.
* 2005-04-15 Marcus Brinkmann <marcus@g10code.de>Marcus Brinkmann2005-04-154-2/+33
| | | | | | | | | | | | | | | * configure.ac: Add --enable-symcryptrun, disabled by default. Define automake variable BUILD_SYMCRYPTRUN. Check for openpty -lutil, define LIBUTIL_LIBS. tools/ 2005-04-15 Marcus Brinkmann <marcus@g10code.de> * Makefile.am: Define symcryptrun make variable depending on BUILD_SYMCRYPTUN. (bin_PROGRAMS): Add ${symcryptrun} instead symcryptrun. (symcryptrun_LDADD): Use $(LIBUTIL_LIBS) instead of -lutil.
* (retrieve_key_material): Rewritten. Return aWerner Koch2005-04-143-335/+446
| | | | | | | | | proper error code. (retrieve_next_token): Removed. (retrieve_fpr_from_card): Rewritten to make use of DO caching and to take the KEYNO as arg. (get_public_key): Renamed variable for clarity.
* Added missing fileWerner Koch2005-04-131-0/+63
|
* (confucius_mktmpdir): Changed to use mkdtmp(3).Werner Koch2005-04-112-22/+11
|
* * gpg-connect-agent.c (start_agent): Use PATHSEP_C instead of ':'.Werner Koch2005-04-112-2/+6
|
* * call-dirmngr.c (start_dirmngr): Use PATHSEP_C instead of ':'.Werner Koch2005-04-113-2/+7
| | | | | * call-agent.c (start_agent): Ditto.
* * app-openpgp.c (do_check_pin): Add hack to allow verification ofWerner Koch2005-04-115-90/+241
| | | | | | | | CHV3. (get_public_key): Don't use gcry functions to create S-expressions. (do_deinit, do_readkey, do_genkey, send_keypair_info): Adjust for above change.
* * sexputil.c: New.Werner Koch2005-04-113-1/+9
|
* typo fixesWerner Koch2005-04-112-2/+2
|
* 2005-04-11 Marcus Brinkmann <marcus@g10code.de>Marcus Brinkmann2005-04-112-7/+82
| | | | | * symcryptrun.c: Implement config file parsing.
* 2005-04-11 Marcus Brinkmann <marcus@g10code.de>Marcus Brinkmann2005-04-113-1/+860
| | | | | | | * Makefile.am (bin_PROGRAMS): Add symcryptrun. (symcryptrun_SOURCES, symcryptrun_LDADD): New variables. * symcryptrun.c: New file.
* 2005-04-11 Marcus Brinkmann <marcus@g10code.de>Marcus Brinkmann2005-04-112-1/+5
| | | | | * simple-pwquery.c (simple_pwquery): Use spwq_secure_free.
* 2005-04-03 Moritz Schulte <moritz@g10code.com>Moritz Schulte2005-04-092-60/+106
| | | | | | | | | | * command-ssh.c (ssh_request_spec): New member: secret_input. (REQUEST_SPEC_DEFINE): New argument: secret_input. (request_specs): Add secret_input flag. (request_spec_lookup): New function ... (ssh_request_process): ... use it here; depending on secret_input flag allocate secure or non-secure memory.
* 2005-03-29 Moritz Schulte <moritz@g10code.com>Moritz Schulte2005-03-292-14/+324
| | | | | | | | | * app-openpgp.c (retrieve_fpr_from_card): New function. (retrieve_next_token): New function. (retrieve_key_material): New function. (get_public_key): Implement retrival of key through expernal helper (gpg) in case the openpgp card is not cooperative enough.
* * certcheck.c: Fixed use of DBG_CRYPTO and DBG_X509.Werner Koch2005-03-173-56/+99
| | | | | | | | | * certchain.c (gpgsm_basic_cert_check): Dump certificates after a failed gcry_pk_verify. (find_up): Do an external lookup also for an authorityKeyIdentifier lookup. Factored external lookup code out to .. (find_up_external): .. new.
* Fixed description for dirmngr:honor-http-proxyWerner Koch2005-03-091-1/+1
|