summaryrefslogtreecommitdiffstats
path: root/sq
AgeCommit message (Collapse)Author
2022-05-06autocrypt, net: openpgp: Rewrite all usages of `Reader::new`.Wiktor Kwapisiewicz
2022-04-27sq: Improve dumping of KDF and KEK parameters.Justus Winter
2022-04-21sq: Bump itertools to 0.10.Nora Widdecke
- Removes a duplicate dependency, as itertools:0.10 is used by lalrpop:0.19.6, among others, anyway.
2022-04-19sq: update to use new Subplot releaseLars Wirzenius
Update subplotlib and subplot-build dependencies to the recent Subplot release. Subplot made a change that changes the document metadata, which requires dropping the "template" field and changing "functions" to "impls" in sq-subplot.md. Sponsored-by: pep.foundation
2022-04-12sq: explain FQDN in sq wkd generate helpLars Wirzenius
Sponsored-by: pep.foundation
2022-03-07sq: Check if certificate contains domain User ID before inserting.Wiktor Kwapisiewicz
This makes the `sq wkd generate --skip` work with keyrings that contain mixedn certificates some of which do not have the domain in User IDs.
2022-03-02sq: Display whether a certification is valid according to the policyNeal H. Walfield
- When `sq inspect` displays a certification, also display the hash algorithm, and whether the certification is valid according to the currently policy. - Recall: The standard policy rejects certifications that use SHA-1, but GnuPG doesn't. This makes is easier for users to understand why some certifications are ignored.
2022-03-02sq: Release 0.26.0.sq/v0.26.0Justus Winter
2022-03-01sq: fix requirement for bad signature to be _no_ outputLars Wirzenius
The word "no" was missing, making the requirement be the opposite of what was intended. Sponsored-by: pep.foundation
2022-02-28sq: Make test more robust.Justus Winter
- I now see "Expiration time: 2038-01-19 03:14:07 UTC" in the output, the exact timestamp that is given to --expires. However, I don't think it is a good idea to check for second-accurate times here, because that is OpenPGP's time resolution and there may be rounding issues.
2022-02-25sq: Use only assert_cmd.Nora Widdecke
- assert_cli has been deprecated for a long time, assert_cmd is the successor. - a4cfd15805a543a327d2242f9c0f2b653a11ee55 introduced assert_cmd to sq, in addition to assert_cli. It does not make sense to use two different crates for cli testing. - Closes #640.
2022-02-24sq: Clarify default features.Nora Widdecke
- State default features in terms of sq's features.
2022-02-24sq: Make the net feature mandatory.Nora Widdecke
- Closes #763
2022-02-24sq: Make the compression-deflate feature mandatory.Nora Widdecke
- Remove the compression feature, it is now redundant with compression-bzip2 as both add the bzip2 feature to buffered-reader and sequoia-openpgp, but compression-bzip2 is more explicit.
2022-02-16sq: Implement sq keyring filter --handle.Justus Winter
2022-02-03sq: improve subplot scenario on how to extract cert to fileLars Wirzenius
The new scenario is more explicit in how the verification is done rather than just checking the output is a public key block. Also, fix a tiny markup error in another scenario (missing _ to end italic section). Sponsored-by: NLnet Foundation; NGI Assure; European Commission
2022-02-01sq: improve Subplot scenario for "sq keyring join"Lars Wirzenius
Fixes #811 Sponsored-by: NLnet Foundation; NGI Assure; European Commission
2022-01-24sq: Simplify test.Neal H. Walfield
2022-01-24sq: Fix using multiple keys.Neal H. Walfield
- `get_keys` only returned a key for the first certificate. It should return a key for each certificate. - Fixes #750.
2022-01-24sq: When looking for a User ID, don't require that it be UTF-8.Neal H. Walfield
2022-01-24sq: Remove extraneous debugging output.Neal H. Walfield
2022-01-24sq: Improve the error message if a key is inappropriate.Neal H. Walfield
- If a key is inappropriate, include an explanation in the error message to simplify debugging.
2022-01-24sq: Add a --time option to sq certify.Neal H. Walfield
2022-01-24sq: Allow specifying the expiration in seconds.Neal H. Walfield
2022-01-24sq: Improve sq inspect's display of certifications.Neal H. Walfield
- Better distinguish multiple certifications. Previously just the issuers of the certification were shown and there can be more than one issuer subpacket per certification. - Also, when set, display the signature's creation time, its expiration time, and the trust depth & trust amount.
2022-01-24sq: Add a --creation-time option to sq key generate.Neal H. Walfield
- Allow the user to explicitly set the key's creation time. - This is useful for: - obscuring the actual creation time. - testing.
2022-01-20sq: Implement sq revoke subkey.Neal H. Walfield
2022-01-20sq: Remove redundant predicate.Neal H. Walfield
- `str::starts_with` already checks that the string is not empty. Don't first check that the string is not empty.
2022-01-20sq: Improve sq revoke's error messages.Neal H. Walfield
- There may be a valid key, but not at the specified time. When no key is found and a time stamp is given, add a diagnostic that this might be the problem.
2022-01-20sq: Implement sq revoke userid.Neal H. Walfield
- Generalize the existing code to handle revoking both certificates and User IDs.
2022-01-20sq: Move revoke's argument parsing into the dispatch function.Neal H. Walfield
2022-01-20sq: Generalize cert_stub.Neal H. Walfield
- Generate `cert_stub` to optionally take a User ID. If a User ID is specified emit that instead of the primary User ID.
2022-01-20sq: Move revocation subcommand dispatch to the revoke module.Neal H. Walfield
2022-01-20sq: add scenarios for encrypt/decrypt/sign/verify/certifyLars Wirzenius
Also, tidy up some older stuff a bit. Sponsored-by: NLnet Foundation; NGI Assure; European Commission
2022-01-19sq: add scenarios to verify signing dataLars Wirzenius
Sponsored-by: NLnet Foundation; NGI Assure; European Commission
2022-01-19sq: add verification scenarios for encryption and decryptionLars Wirzenius
Sponsored-by: NLnet Foundation; NGI Assure; European Commission
2022-01-19sq: add verification scenarios for armor/dearmorLars Wirzenius
Sponsored-by: NLnet Foundation; NGI Assure; European Commission
2022-01-19sq: add placeholder scenario for "sq keyring split"Lars Wirzenius
Sponsored-by: NLnet Foundation; NGI Assure; European Commission
2022-01-19sq: verify that "sq keyring filter" worksLars Wirzenius
Sponsored-by: NLnet Foundation; NGI Assure; European Commission
2022-01-17sq: add test scenarios for "sq keyring"Lars Wirzenius
Sponsored-by: NLnet Foundation; NGI Assure; European Commission
2022-01-17sq: move all "sq key" scenarios under a common headingLars Wirzenius
Sponsored-by: NLnet Foundation; NGI Assure; European Commission
2022-01-14test: verify "sq key extract-cert"Lars Wirzenius
Sponsored-by: NLnet Foundation; NGI Assure; European Commission
2022-01-14sq: Improve sq inspect's output for revocation certificates.Neal H. Walfield
- Show the revocation certificate's human-readable revocation message, if any. - If the revocation certificate is a third-party revocation, then also show the first issuer.
2022-01-14sq: Make sq certify work with password-protected keys.Neal H. Walfield
- Use `get_certification_keys` to get the certification key. This also unlocks the key, if needed. Fixes #776. - Add `--private-key-store` as an option to also work with keys stored on a PKS.
2022-01-14test: verify more aspects of key generationLars Wirzenius
Verify more aspects of how sq generates keys. The scenarios now cover all ways of running "sq key generate". Sponsored-by: NLnet Foundation; NGI Assure; European Commission
2022-01-14docs: add section on the testing approach for sqLars Wirzenius
Sponsored-by: NLnet Foundation; NGI Assure; European Commission
2022-01-14sq: Implement sq revoke certificate.Neal H. Walfield
- Add support for revoking certificates to sq.
2022-01-13sq: Refactor helper function.Neal H. Walfield
- Generalize get_signing_keys to lookup other types of keys. - Rename it to get_keys, take a `KeyFlags` parameter, and implement get_signing_keys in terms of get_keys.
2022-01-13sq: Change function to also take a reference.Neal H. Walfield
- Change `get_signing_keys` to also take a `&Cert`, not just a `Cert`, by making it polymorphic over the element type. Specifically, change it to take a `Borrow<Cert>` instead of a `Cert`.
2022-01-03sq: Add missing test vectors.Justus Winter
- Previously, the tests for sq sign used test vectors from the openpgp crate. But, those are not bundled with the sq crate, breaking the test when using the crate's source tarball. - Fixes #787.