summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2022-02-11openpgp: Fix variable name.nora/820Nora Widdecke
2022-02-11openpgp: Deprecate {Fingerprint,KeyID}::Invalid.Nora Widdecke
2022-02-11openpgp: Fix subpacket parsing.Nora Widdecke
- Make IntendedRecipient and IssuerFingerprint roundtrippable. - When parsing an Intended Recipient or Issuer Fingerprint subpacket, the version field is only preserved ifs value is 4. The subpacket is stored as a Fingerprint, which has V4 and Invalid variants, but Invalid does not store an associated version. - Fix by adding a new Fingerprint::Unknown{version, fingerprint} variant, that replaces Fingerprint::Invalid. - Quickcheck found a case that demonstrates the issue, use that as a test. - Fixes #820.
2022-02-11openpgp: Add Fingerprint::Unknown and KeyID::Unknown.Nora Widdecke
- Fingerprint::Invalid does not store the fingerprint's version if sequoia does not support that version. - Add Fingerprint::Unknown{version, fp} that replaces Fingerprint::Invalid. - By symmetry, that requires adding KeyID::Unknown, too.
2022-02-11openpgp: Derive Debug.Nora Widdecke
- The custom Debug implementation of Fingerprint and KeyID hides the enum variant, which is inconvenient for debugging. - Fix by deriving Debug.
2022-02-08openpgp: Fix test.Justus Winter
- We cannot make that kind of assumption in a test.
2022-02-03sq: improve subplot scenario on how to extract cert to fileLars Wirzenius
The new scenario is more explicit in how the verification is done rather than just checking the output is a public key block. Also, fix a tiny markup error in another scenario (missing _ to end italic section). Sponsored-by: NLnet Foundation; NGI Assure; European Commission
2022-02-02doc: Update IRC network used by Sequoia PGP.Wiktor Kwapisiewicz
2022-02-01sq: improve Subplot scenario for "sq keyring join"Lars Wirzenius
Fixes #811 Sponsored-by: NLnet Foundation; NGI Assure; European Commission
2022-01-28ci: Fix comment on refs trigger.Wiktor Kwapisiewicz
2022-01-27ci: Cross-compile to arm and run via qemu.Justus Winter
The exact architecture is armv7-unknown-linux-gnueabihf.
2022-01-27openpgp: Make the test even less timing-sensitive.Justus Winter
- This is the most problematic part of the test, actually. - Fixes #777. Again.
2022-01-27openpgp: Make test less timing-sensitive.Justus Winter
- Previously, the test asserted that we can create at least SIG_BACKDATE_BY signatures, and at most 2 * SIG_BACKDATE_BY signatures. - The former may fail, presumably due to a corner case involving losing the sub-second precision of SystemTime. The latter may fail depending on CPU resources and scheduling. - Tame the test by demonstrating that we can override a couple of signatures. Drop the test for the maximum number of overrides. - Fixes #777.
2022-01-25ci: Add config snippet for ARM cross compile.Nora Widdecke
2022-01-24sq: Simplify test.Neal H. Walfield
2022-01-24sq: Fix using multiple keys.Neal H. Walfield
- `get_keys` only returned a key for the first certificate. It should return a key for each certificate. - Fixes #750.
2022-01-24sq: When looking for a User ID, don't require that it be UTF-8.Neal H. Walfield
2022-01-24sq: Remove extraneous debugging output.Neal H. Walfield
2022-01-24sq: Improve the error message if a key is inappropriate.Neal H. Walfield
- If a key is inappropriate, include an explanation in the error message to simplify debugging.
2022-01-24sq: Add a --time option to sq certify.Neal H. Walfield
2022-01-24sq: Allow specifying the expiration in seconds.Neal H. Walfield
2022-01-24sq: Improve sq inspect's display of certifications.Neal H. Walfield
- Better distinguish multiple certifications. Previously just the issuers of the certification were shown and there can be more than one issuer subpacket per certification. - Also, when set, display the signature's creation time, its expiration time, and the trust depth & trust amount.
2022-01-24sq: Add a --creation-time option to sq key generate.Neal H. Walfield
- Allow the user to explicitly set the key's creation time. - This is useful for: - obscuring the actual creation time. - testing.
2022-01-21openpgp: Fix parsing and serializing keys on 32-bit time_t systems.Justus Winter
- Previously, during parsing and serialization, OpenPGP's unsigned 32-bit timestamps were converted to Rust's SystemTime, which uses time_t. On platforms where that is a signed 32-bit value, the time was truncated. See #668. - One way to fix that is to make Rust's SystemTime independent of time_t. See https://github.com/rust-lang/rust/issues/44394. - The other way is not to convert to SystemTime at the API boundary. See https://gitlab.com/sequoia-pgp/sequoia/-/issues/806. - This fixes handling during parsing and serialization, but doesn't address the API issue. - Fixes #802.
2022-01-20openpgp: Fix decryption of AED messages using SKESK5.Justus Winter
- Previously, we used the cipher algorithm returned by SKESK5::decrypt, which always returns SymmetricAlgorithm::Unencrypted.
2022-01-20openpgp: Avoid unsafe, undefined behavior.Justus Winter
- Now that the chunk size is capped, just initialize the scratch vector.
2022-01-20sq: Implement sq revoke subkey.Neal H. Walfield
2022-01-20sq: Remove redundant predicate.Neal H. Walfield
- `str::starts_with` already checks that the string is not empty. Don't first check that the string is not empty.
2022-01-20sq: Improve sq revoke's error messages.Neal H. Walfield
- There may be a valid key, but not at the specified time. When no key is found and a time stamp is given, add a diagnostic that this might be the problem.
2022-01-20sq: Implement sq revoke userid.Neal H. Walfield
- Generalize the existing code to handle revoking both certificates and User IDs.
2022-01-20sq: Move revoke's argument parsing into the dispatch function.Neal H. Walfield
2022-01-20sq: Generalize cert_stub.Neal H. Walfield
- Generate `cert_stub` to optionally take a User ID. If a User ID is specified emit that instead of the primary User ID.
2022-01-20sq: Move revocation subcommand dispatch to the revoke module.Neal H. Walfield
2022-01-20sq: add scenarios for encrypt/decrypt/sign/verify/certifyLars Wirzenius
Also, tidy up some older stuff a bit. Sponsored-by: NLnet Foundation; NGI Assure; European Commission
2022-01-19sq: add scenarios to verify signing dataLars Wirzenius
Sponsored-by: NLnet Foundation; NGI Assure; European Commission
2022-01-19sq: add verification scenarios for encryption and decryptionLars Wirzenius
Sponsored-by: NLnet Foundation; NGI Assure; European Commission
2022-01-19openpgp: Fix crashes in the cleartext signature parser.Justus Winter
2022-01-19openpgp: Fix documentation.Justus Winter
2022-01-19sq: add verification scenarios for armor/dearmorLars Wirzenius
Sponsored-by: NLnet Foundation; NGI Assure; European Commission
2022-01-19sq: add placeholder scenario for "sq keyring split"Lars Wirzenius
Sponsored-by: NLnet Foundation; NGI Assure; European Commission
2022-01-19sq: verify that "sq keyring filter" worksLars Wirzenius
Sponsored-by: NLnet Foundation; NGI Assure; European Commission
2022-01-17sq: add test scenarios for "sq keyring"Lars Wirzenius
Sponsored-by: NLnet Foundation; NGI Assure; European Commission
2022-01-17sq: move all "sq key" scenarios under a common headingLars Wirzenius
Sponsored-by: NLnet Foundation; NGI Assure; European Commission
2022-01-17readme: Remove ffi and python bindings.Nora Widdecke
Closes #799
2022-01-17docker: Mention in README.md.Nora Widdecke
2022-01-17docker: Remove python dependencies.Nora Widdecke
2022-01-17docker: Build image and push to gitlab registry.Nora Widdecke
2022-01-14test: verify "sq key extract-cert"Lars Wirzenius
Sponsored-by: NLnet Foundation; NGI Assure; European Commission
2022-01-14sq: Improve sq inspect's output for revocation certificates.Neal H. Walfield
- Show the revocation certificate's human-readable revocation message, if any. - If the revocation certificate is a third-party revocation, then also show the first issuer.
2022-01-14sq: Make sq certify work with password-protected keys.Neal H. Walfield
- Use `get_certification_keys` to get the certification key. This also unlocks the key, if needed. Fixes #776. - Add `--private-key-store` as an option to also work with keys stored on a PKS.
generated by cgit v1.2.3 (git 2.25.1) at 2024-07-24 06:13:49 +0000