summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeLines
* doc: gpg(1): Escape minus characterHEADmasterAlejandro Colomar2022-05-22-1307/+1307
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This allows to portably search within the manual page (or info page), or also copy-paste directly from the rendered output. See man-pages(7): Generating optimal glyphs Where a real minus character is required (e.g., for num‐ bers such as -1, for man page cross references such as utf-8(7), or when writing options that have a leading dash, such as in ls -l), use the following form in the man page source: \- This guideline applies also to code examples. The use of real minus signs serves the following pur‐ poses: * To provide better renderings on various targets other than ASCII terminals, notably in PDF and on Uni‐ code/UTF-8‐capable terminals. * To generate glyphs that when copied from rendered pages will produce real minus signs when pasted into a terminal. Signed-off-by: Alejandro Colomar <alx.manpages@gmail.com>
* agent: Show "Label:" field of private key when prompt the insertion.NIIBE Yutaka2022-05-20-24/+27
| | | | | | | | | | * agent/findkey.c (prompt_for_card): Use "Label:" field. (agent_key_from_file): Use KEYMETA. -- GnuPG-bug-id: 5986 Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* agent: Move confirmation handling into findkey.c.NIIBE Yutaka2022-05-20-165/+151
| | | | | | | | | | | | | | | | | | * agent/agent.h (divert_tpm2_pksign, divert_tpm2_pkdecrypt): Fix API. (divert_pksign, divert_pkdecrypt): Likewise. * agent/divert-scd.c (ask_for_card): Remove. (divert_pksign, divert_pkdecrypt): Don't call ask_for_card. * agent/divert-tpm2.c (divert_tpm2_pksign, divert_tpm2_pkdecrypt): Remove DESC_TEXT argument. * agent/findkey.c (prompt_for_card): New (was: ask_for_card). (agent_key_from_file): Call prompt_for_card when it's a key on card. * agent/pkdecrypt.c (agent_pkdecrypt): Follow the change of API. * agent/pksign.c (agent_pksign_do): Likewise. -- Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* agent: Pop up dialog window for confirmation, when specified so.NIIBE Yutaka2022-05-19-0/+46
| | | | | | | | | * agent/findkey.c (agent_key_from_file): Support "Confirm:". -- GnuPG-bug-id: 5099 Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* agent: Supply GRIP=NULL for agent_key_from_file, for real use.NIIBE Yutaka2022-05-19-18/+19
| | | | | | | | | | | | * agent/findkey.c (agent_key_from_file): Change the semantics of GRIP. Now, it's NULL for use by PKDECRYPT and PKSIGN/PKAUTH. * agent/pkdecrypt.c (agent_pkdecrypt): Set GRIP=NULL. * agent/pksign.c (agent_pksign_do): Likewise. -- GnuPG-bug-id: 5099 Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* scd: Fix use of SCardListReaders for PC/SC.NIIBE Yutaka2022-05-17-1/+1
| | | | | | | | | | * scd/apdu.c (apdu_dev_list_start): Initialize NREADER. -- Reported-by: Ludovic Rousseau GnuPG-bug-id: 5979 Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* scd: Fail when no good algorithm attribute.NIIBE Yutaka2022-05-11-19/+30
| | | | | | | | | | | | | | * scd/app-openpgp.c (parse_algorithm_attribute): Return the error. (change_keyattr): Follow the change. (app_select_openpgp): Handle the error of parse_algorithm_attribute. -- This change allows following invocation of app_select_openpgp, which may work well (if the problem is device side for initial connection). GnuPG-bug-id: 5963 Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* scd:openpgp: New card vendor.Werner Koch2022-05-10-0/+1
| | | | | | | | -- BTW, we should add a function to read out the entire table so that you can ask scdaemon for that list. iirc, Kleopatra still uses a copy of the table.
* dirmngr: Fix for Windows.NIIBE Yutaka2022-05-10-4/+38
| | | | | | | | | | | | | * dirmngr/http.c (EHOSTUNREACH, EAFNOSUPPORT): Define when not available. [HTTP_USE_GNUTLS] (my_gnutls_read): Use recv for Windows. [HTTP_USE_GNUTLS] (my_gnutls_write): Use send for Windows. -- Reported-by: Eli Zaretskii GnuPG-bug-id: 5899 Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* tests: Enable tests with keyboxd only when it's configured.NIIBE Yutaka2022-05-10-12/+20
| | | | | | | | | | | | * tests/gpgscm/tests.scm (in-objdir): Move from... * g13/all-tests.scm: ... here. * tests/openpgp/all-tests.scm (keyboxd-enabled?): New. (tests): Enable when keyboxd-enabled?. -- GnuPG-bug-id: 5966 Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* scd:p15: Improve the displayed S/N for Technology Nexus cards.Werner Koch2022-05-06-3/+36
| | | | | | | | | * scd/app-p15.c (any_control_or_space_mem): New. (get_dispserialno): Add new code. -- This works with my test cards and now reflects what's printed on the front matter of the card.
* scd:p15: Fix the the sanity check of the displayed S/N.Werner Koch2022-05-06-2/+6
| | | | | | | | | * scd/app-p15.c (any_control_or_space): Fix loop. -- This check is only done to avoid printing wrongly encoded S/N for human consumption. e
* scd: Add workaround for ECC attribute on Yubikey.NIIBE Yutaka2022-05-06-1/+2
| | | | | | | | | | * scd/app-openpgp.c (parse_algorithm_attribute): Skip possibly bogus octet in a key attribute. -- GnuPG-bug-id: 5963 Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* scd:p15: Fix reading certificates without length info.Werner Koch2022-05-05-6/+23
| | | | | | * scd/app-p15.c (readcert_by_cdf): Do not use extended mode if the CDF object has no length info. Add debug output when reading a cert. (read_p15_info): No more need to disable extended mode for GeNUA cards.
* scd: New debug flags "card".Werner Koch2022-05-05-2/+5
| | | | | | | | | | * scd/scdaemon.c (debug_flags): Add "card". * scd/scdaemon.h (DBG_CARD_VALUE, DBG_CARD): New. -- Some information from parsing the card are often very helpful. However, the card_io triggered APDU dumps are in most cases too heavy. Thus this new debug flag.
* scd:openpgp: Fix a segv for cards supporting unknown curves.Werner Koch2022-05-05-2/+2
| | | | | | | * common/openpgp-oid.c (get_keyalgo_string): Do not strdup NULL. -- GnuPG-bug-id: 5963
* gpgscm: Fix handling an error for chdir.NIIBE Yutaka2022-05-02-1/+1
| | | | | | | | * tests/gpgscm/ffi.c (do_chdir): Use gpg_error_from_syserror. -- Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* tests: Fix plain invocation of "make check".NIIBE Yutaka2022-05-02-1/+2
| | | | | | | | | * tests/openpgp/run-tests.scm: Check if *args* is null or not. -- Fixes-commit: ba2f2085a95be47a06ac6ba75a4c7def7c6599b2 Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* tests: Add a test for Ed25519 keys for non-protected secret.NIIBE Yutaka2022-05-02-0/+69
| | | | | | | | | * tests/openpgp/issue5120.scm: New. -- GnuPG-bug-id: 5120, 5953 Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* kbx: Fix a race condition which results no status report.NIIBE Yutaka2022-04-27-11/+25
| | | | | | | | | | | | | | * kbx/keyboxd.h (kbxd_status_printf): New. * kbx/backend-support.c (be_return_pubkey): Use kbxd_status_printf. * kbx/kbxserver.c (kbxd_status_printf): New. * kbxd_start_command_handler (kbxd_start_command_handler): Don't use set_assuan_context_func, because the function pointer is shared by multiple threads. -- GnuPG-bug-id: 5948 Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* gpg: Look up user ID to revoke by UID hashIngo Klöcker2022-04-26-31/+93
| | | | | | | | | | | | | | * g10/keyedit.c (find_userid_by_namehash, find_userid): New. (keyedit_quick_revuid): Use find_userid() instead of iterating over the nodes of the keyblock. * tests/openpgp/quick-key-manipulation.scm: Add test for revoking a user ID specified by its hash. -- This makes it possible to specify the user ID to revoke as UID hash when calling --quick-revoke-uid. GnuPG-bug-id: 5936
* tests: Avoid auto-removal when test fails.NIIBE Yutaka2022-04-26-1/+4
| | | | | | | | | | | * tests/gpgscm/init.scm (*exit-status*): New. (exit): Set *exit-status*. * tests/gpgscm/tests.scm (mkdtemp-autoremove): Check exit-status and only remove the directory if not zero. -- Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* tests: Support single invocation with variant.NIIBE Yutaka2022-04-26-4/+26
| | | | | | | | * tests/openpgp/run-tests.scm: Add GPGSCM_TEST_VARIANT support. -- Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* dirmngr: Fix for C90 compiler.NIIBE Yutaka2022-04-26-1/+2
| | | | | | | | * dirmngr/dirmngr.c (main): Declaration before a statement. -- Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* tests: Let make check-all work again.NIIBE Yutaka2022-04-26-0/+1
| | | | | | | | * Makefile.am (TESTS_ENVIRONMENT): Add GNUPG_BUILD_ROOT. -- Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* tests: Use module_tests for testing agent/.NIIBE Yutaka2022-04-26-2/+4
| | | | | | | | | * agent/Makefile.am (module_test): New. * agent/all-tests.scm: Use module_tests instead of TESTS. -- Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* tests: Skip testsing g13 when it's not enabled.NIIBE Yutaka2022-04-26-7/+20
| | | | | | | | * g13/all-tests.scm: Skip the test by examining $objdir/Makefile. -- Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* tests: Fix check-all for tests/openpgp.NIIBE Yutaka2022-04-26-3/+2
| | | | | | | | | | * tests/openpgp/Makefile.am: Revert the change by DISABLE_REGEXP. * tests/openpgp/all-tests.scm: Likewise. -- Fixes-commit: ba247a114c75a84473c11c1484013b09fbb9bcd1 Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* Post release updatesWerner Koch2022-04-25-1/+8
| | | | --
* Release 2.3.6Werner Koch2022-04-25-1/+15
|
* po: Auto updateWerner Koch2022-04-25-464/+573
| | | | --
* po: Fixed two fuzzies in the Japanese translationWerner Koch2022-04-25-23/+26
| | | | --
* po: Update German translationWerner Koch2022-04-25-36/+30
| | | | --
* gpg: Avoid NULL ptr access due to corrupted packets.Werner Koch2022-04-25-6/+13
| | | | | | | | | * g10/parse-packet.c (parse_signature): Do not create an opaque MPI with NULL and length > 0 (parse_key): Ditto. -- GnuPG-bug-id: 5940, 5946
* sm: Use gpg_err_code() instead of -1Todd Zullinger2022-04-25-1/+1
| | | | | | | | | | | | | | | | | | | | | | | * sm/verify.c (gpgsm_verify): use gpg_err_code instead of 'rc == -1' comparison. -- In ed6ebb696e (sm: Implement initial support for keyboxd., 2020-09-10), the return of keydb_search() was changed to use gpg_err_code(). Adjust gpgsm_verify() to use it. This provides a nicer error message to users when a certificate is not found -- the same error that is seen from 2.2. Prior to this change, when a cert was not found, gpgsm output: gpgsm: failed to find the certificate: Not found as opposed to the more human-readable message from 2.2: gpgsm: certificate not found They now return the same message. Signed-off-by: Todd Zullinger <tmz@pobox.com>
* Deprecate the --supervised options.Werner Koch2022-04-25-7/+11
| | | | | | | | * agent/gpg-agent.c (main): Mark --supervised as deprecated. * dirmngr/dirmngr.c (main): Ditto. -- The supervised thing causes more trouble than it pretends to solve.
* gpg: Emit an ERROR status as hint for a bad passphrase.Werner Koch2022-04-25-8/+20
| | | | | | | | | | | | | | * g10/mainproc.c (proc_symkey_enc): Issue new error code. (proc_encrypted): Ditto. -- This allows GPGME to return a better error message than "bad session key" to the user. Technically we could get run into these errors also in other cases but this more unlikley. For the command line use we don't do anything to not change the expected output of the command line interface. GnuPG-bug-id: 5943
* common:iobuf: Exclude cases with IOBUF_INPUT_TEMP/IOBUF_OUTPUT_TEMP.NIIBE Yutaka2022-04-25-4/+7
| | | | | | | | | | * common/iobuf.c (iobuf_read): Handle a case with IOBUF_INPUT_TEMP. (iobuf_write): Handle a case with IOBUF_OUTPUT_TEMP. -- GnuPG-bug-id: 5941 Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* scd: Fix hard-coded constant for RSA auth.NIIBE Yutaka2022-04-25-3/+9
| | | | | | | | | | | | * scd/app-openpgp.c (do_auth): Allow larger data for RSA-4096. -- OpenPGPcard specification says that it will be rejected by the card when it's larger. We have been the check on host side too, but it was written when it only had a support for RSA-2048. Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* gpg: Fix line end in error messageIngo Klöcker2022-04-22-1/+1
| | | | | | | | | * g10/keyedit.c (menu_adduid): Move linefeed character to the format string. -- This fixes a literal '\n' in the error message and a missing line feed after the error message.
* agent: Not writing password into file.NIIBE Yutaka2022-04-22-35/+20
| | | | | | | | | | * agent/genkey.c (do_check_passphrase_pattern): Use stream to invoke pattern check program. -- GnuPG-bug-id: 5917 Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* scd: Don't inhibit SSH authentication for larger data if it can.NIIBE Yutaka2022-04-22-0/+5
| | | | | | | | | * scd/app-openpgp.c (do_auth): Use command chaining if available. -- GnuPG-bug-id: 5935 Signed-off-by: NIIBE Yutaka <gniibe@fsij.org>
* Post release updatesWerner Koch2022-04-21-1/+7
| | | | --
* Release 2.3.5Werner Koch2022-04-21-1/+127
|
* po: Auto updateWerner Koch2022-04-21-945/+1486
| | | | --
* speedo: Fix authenticode signingWerner Koch2022-04-21-0/+29
| | | | --
* dirmngr: Fix MakefileWerner Koch2022-04-21-1/+1
| | | | | -- Fixes-commit: 89dc9f1e6916ebd123852534b8cada2fc3555688
* po: Update Simplified Chinese Translation.NIIBE Yutaka2022-04-21-20/+17
| | | | | | | -- Reviewed-by: NIIBE Yutaka <gniibe@fsij.org> Signed-off-by: bobwxc <bobwxc@yeah.net>
* po: Update German translationWerner Koch2022-04-20-1/+5
| | | | --
* dirmngr: Changes to the linking order.Werner Koch2022-04-20-11/+15
| | | | | | * dirmngr/Makefile.am: Tweak library order. -- (cherry picked from commit 3c79ff34c417bfc392008eca1970b86bec54d6c3)
generated by cgit v1.2.3 (git 2.39.1) at 2024-06-17 15:21:34 +0000