summaryrefslogtreecommitdiff
path: root/security/gnupg2
AgeCommit message (Collapse)AuthorFilesLines
2015-01-15Fix executable name in gpgkey2ssh tool.wiz3-2/+19
From ISIHARA Takanori in PR 49576. Bump PKGREVISION.
2014-10-09Remove pkgviews: don't set PKG_INSTALLATION_TYPES in Makefiles.wiz1-3/+1
2014-08-16Update to 2.0.26:wiz2-7/+6
Noteworthy changes in version 2.0.26 (2014-08-12) ------------------------------------------------- * gpg: Fix a regression in 2.0.24 if a subkey id is given to --recv-keys et al. * gpg: Cap attribute packets at 16MB. * gpgsm: Auto-create the ".gnupg" home directory in the same way gpg does. * scdaemon: Allow for certificates > 1024 when using PC/SC.
2014-07-28Fix overlooked option name for previous.wiz2-3/+4
Found by jperkin.
2014-07-22Update to 2.0.25. Rename gpgsm option to gnupg2-gpgsm.wiz3-9/+12
Noteworthy changes in version 2.0.25 (2014-06-30) ------------------------------------------------- * gpg: Fix a regression in 2.0.24 if more than one keyid is given to --recv-keys et al. * gpg: Cap RSA and Elgamal keysize at 4096 bit also for unattended key generation. * gpgsm: Fix a DISPLAY related problem with --export-secret-key-p12. * scdaemon: Support reader Gemalto IDBridge CT30.
2014-06-24Update to 2.0.24, security fix:wiz2-8/+6
Noteworthy changes in version 2.0.24 (2014-06-24) ------------------------------------------------- * gpg: Avoid DoS due to garbled compressed data packets. * gpg: Screen keyserver responses to avoid importing unwanted keys from rogue servers. * gpg: The validity of user ids is now shown by default. To revert this add "list-options no-show-uid-validity" to gpg.conf. * gpg: Print more specific reason codes with the INV_RECP status. * gpg: Allow loading of a cert only key to an OpenPGP card. * gpg-agent: Make ssh support for ECDSA keys work with Libgcrypt 1.6. Noteworthy changes in version 2.0.23 (2014-06-03) ------------------------------------------------- * gpg: Reject signatures made using the MD5 hash algorithm unless the new option --allow-weak-digest-algos or --pgp2 are given. * gpg: Do not create a trustdb file if --trust-model=always is used. * gpg: Only the major version number is by default included in the armored output. * gpg: Print a warning if the Gnome-Keyring-Daemon intercepts the communication with the gpg-agent. * gpg: The format of the fallback key listing ("gpg KEYFILE") is now more aligned to the regular key listing ("gpg -k"). * gpg: The option--show-session-key prints its output now before the decryption of the bulk message starts. * gpg: New %U expando for the photo viewer. * gpgsm: Improved handling of re-issued CA certificates. * scdaemon: Various fixes for pinpad equipped card readers. * Minor bug fixes.
2014-02-12Recursive PKGREVISION bump for OpenSSL API version bump.tron1-2/+2
2014-01-01Recursive PKGREVISION bump for libgcrypt-1.6.0 shlib major bump.wiz1-1/+2
2013-10-26Remove obsolete --with-static-rnd=auto, as suggested by Andreas Gustafssonwiz1-2/+1
in PR 48345.
2013-10-05Update to 2.0.22:wiz2-6/+6
Noteworthy changes in version 2.0.22 (2013-10-04) ------------------------------------------------- * Fixed possible infinite recursion in the compressed packet parser. [CVE-2013-4402] * Improved support for some card readers. * Prepared building with the forthcoming Libgcrypt 1.6. * Protect against rogue keyservers sending secret keys.
2013-09-02Update to 2.0.21:wiz2-7/+6
Noteworthy changes in version 2.0.21 (2013-08-19) ------------------------------------------------- * gpg-agent: By default the users are now asked via the Pinentry whether they trust an X.509 root key. To prohibit interactive marking of such keys, the new option --no-allow-mark-trusted may be used. * gpg-agent: The command KEYINFO has options to add info from sshcontrol. * The included ssh agent does now support ECDSA keys. * The new option --enable-putty-support allows gpg-agent to act on Windows as a Pageant replacement with full smartcard support. * Support installation as portable application under Windows.
2013-07-15* .include "../../devel/readline/buildlink3.mk" with USE_GNU_READLINE=yesryoon1-2/+2
are replaced with .include "../../devel/readline/buildlink3.mk", and USE_GNU_READLINE are removed, * .include "../../devel/readline/buildlink3.mk" without USE_GNU_READLINE are replaced with .include "../../mk/readline.buildlink3.mk".
2013-05-29Update to 2.0.20:wiz4-52/+8
Noteworthy changes in version 2.0.20 (2013-05-10) ------------------------------------------------- * Decryption using smartcards keys > 3072 bit does now work. * New meta option ignore-invalid-option to allow using the same option file by other GnuPG versions. * gpg: The hash algorithm is now printed for sig records in key listings. * gpg: Skip invalid keyblock packets during import to avoid a DoS. * gpg: Correctly handle ports from DNS SRV records. * keyserver: Improve use of SRV records * gpg-agent: Avoid tty corruption when killing pinentry. * scdaemon: Improve detection of card insertion and removal. * scdaemon: Rename option --disable-keypad to --disable-pinpad. * scdaemon: Better support for CCID readers. Now, the internal CCID driver supports readers without the auto configuration feature. * scdaemon: Add pinpad input for PC/SC, if your reader has pinpad and it supports variable length PIN input, and you specify --enable-pinpad-varlen option. * scdaemon: New option --enable-pinpad-varlen. * scdaemon: Install into libexecdir to avoid accidental execution from the command line. * Support building using w64-mingw32. * Assorted bug fixes.
2013-02-06PKGREVISION bumps for the security/openssl 1.0.1d update.jperkin1-2/+2
2013-02-01Reset MAINTAINER/OWNER (became observers)wiz1-2/+2
2013-01-15add patch from upstream to fix possible keyring corruptiondrochner3-3/+47
on import of corrupted keys (CVE-2012-6085), bump PKGREV from "Bug Hunting" per PR pkg/47442
2012-12-16recursive bump from cyrus-sasl libsasl2 shlib major bump.obache1-1/+2
2012-10-23Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.asau1-2/+1
2012-05-07Set BUILDLINK_ABI_DEPENDS correctly (with +=, not ?=)dholland1-2/+2
It turns out there were a lot of these.
2012-04-17update to 2.0.19drochner5-264/+8
changes: -cmd line UI improvements -Ukrainian translation
2011-11-16Add missing archivers/bzip2 buildlink.sbd1-2/+3
Bump PKGREVISION
2011-09-12fix configure check for libcurl, from John Marshall on the gnupg-develdrochner3-2/+17
mailing list bump PKGREV
2011-08-11Changes 2.0.18:adam2-7/+6
* Bug fix for newer versions of Libgcrypt. * Support the SSH confirm flag and show SSH fingerprints in ssh related pinentries. * Improved dirmngr/gpgsm interaction for OCSP. * Allow generation of card keys up to 4096 bit.
2011-05-18this pkg only installs binaries -- no need to propagate librarydrochner1-6/+1
dependencies
2011-05-05Fix buildling with Clangadam5-25/+22
2011-04-22recursive bump from gettext-lib shlib bump.obache2-2/+4
2011-01-20Changes 2.0.17:adam9-59/+40
* Allow more hash algorithms with the OpenPGP v2 card. * The gpg-agent now tests for a new gpg-agent.conf on a HUP. * Fixed output of "gpgconf --check-options". * Fixed a bug where Scdaemon sends a signal to Gpg-agent running in non-daemon mode. * Fixed TTY management for pinentries and session variable update problem.
2010-09-02Some fixes at update to 2.0.16.obache5-9/+25
* not using autogen.sh anymore, so remove some tools from USE_TOOLS. * patch-ak does not effect anymore for above reason, add patch-ao for it. this patch is required to avoid conflict with security/gnupg. Bump PKGREVISION.
2010-09-01update to 2.0.16drochner5-93/+10
changes: -bugfixes -New command --passwd for GPG -Make use of libassuan 2.0 which is available as a DSO -The gpg-agent commands KILLAGENT and RELOADAGENT are now available on all platforms
2010-08-03add patch from upstream to fix a possible use-after-free problemdrochner3-3/+19
(CVE-2010-2547), bump PKGREVISION
2010-05-30Mark as make-jobs-safe again; a comment said the problem was reportedwiz1-5/+1
upstream and supposedly fixed in 2.0.6 (pkgsrc is at 2.0.14 now). Multiple builds with 16 jobs showed no problem.
2010-02-03add a patch from upstream CVS to fix a bug which could make keysdrochner3-3/+47
unusable on passphrase changes bump PKGREVISION
2010-01-17Recursive PKGREVISION bump for jpeg update to 8.wiz1-1/+2
2010-01-15update to 2.0.14drochner2-10/+6
changes: * The default for --include-cert is now to include all certificates in the chain except for the root certificate. * Numerical values may now be used as an alternative to the debug-level keywords. * The GPGSM --audit-log feature is now more complete. * GPG now supports DNS lookups for SRV, PKA and CERT on W32. * New GPGSM option --ignore-cert-extension. * New and changed passphrases are now created with an iteration count requiring about 100ms of CPU work.
2009-12-18kill the "idea" option -- gnupg2 uses libgcrypt which used to havedrochner4-28/+22
an "idea" option, but that was removed more than a year ago when it got updated from 1.2 to 1.4 The patch was was used on gnupg2 in the "idea" case was just a four-line memory initialization fix, there is no point in LICENSE restrictions due to this, so I've pulled it in as regular patch so that it doesn't get lost for the case someone fixes idea support in libgcrypt (which isn't hard).
2009-12-16don't install the gpg-zip.1 manpage, avoids CONFLICT with gnupg1,drochner4-5/+18
noticed by OBATA Akio per mail to pkgsrc-users. This makes most sense to me since gnupg2 doesn't install a gpg-zip intentionally. Since possible clients of gpg-zip should have a dependency on gnupg1, we can't take over easily. Once we are sure that gnupg2 can fully replace gnupg1, we might consider to install eg symlinks gpg->gpg2 etc and make gnupg1 obsolete, but this needs careful testing.
2009-12-16Add checksum for idea patch.wiz1-1/+4
2009-12-15update to 2.0.13drochner7-39/+73
changes: many fixes and improvements reviewed by John R. Shannon pkgsrc notes: -since S/MIME support is the biggest difference in functionality over gnupg1, enable it per default -- my tests (with the s/mime plugin of claws-mail) worked -left the build against a private libassuan with GNU-pth support alone for now, just updated libassuan to 1.0.5. We might build pkgsrc/libassuan against pkgsrc/pth at some point, but this needs to be checked for side effects. (As this pkg doesn't export a library which might propagate the pth dependency, the possibility of pthread-pth conflicts should be limited. Other uses of libassuan need to be checked.)
2009-06-14Remove @dirrm entries from PLISTsjoerg1-2/+1
2009-05-19Use standard location for LICENSE line (in MAINTAINER/HOMEPAGE/COMMENTwiz1-2/+2
block). Uncomment some commented out LICENSE lines while here.
2009-03-20Simply and speed up buildlink3.mk files and processing.joerg1-13/+6
This changes the buildlink3.mk files to use an include guard for the recursive include. The use of BUILDLINK_DEPTH, BUILDLINK_DEPENDS, BUILDLINK_PACKAGES and BUILDLINK_ORDER is handled by a single new variable BUILDLINK_TREE. Each buildlink3.mk file adds a pair of enter/exit marker, which can be used to reconstruct the tree and to determine first level includes. Avoiding := for large variables (BUILDLINK_ORDER) speeds up parse time as += has linear complexity. The include guard reduces system time by avoiding reading files over and over again. For complex packages this reduces both %user and %sys time to half of the former time.
2008-06-20Add DESTDIR support.joerg1-1/+2
2008-04-28Update to 2.0.9. Changes:shannonjr4-36/+36
* Enhanced gpg-connect-agent with a small scripting language. * New option --list-config for gpgconf. * Fixed a crash in gpgconf. * The envvars XAUTHORITY and PINENTRY_USER_DATA are now passed to the pinentry. * Fixed the auto creation of the key stub for smartcards. * Fixed a rare bug in decryption using the OpenPGP card. * Creating DSA2 keys is now possible. * New option --extra-digest-algo for gpgsm to allow verification of broken signatures. * Allow encryption with legacy Elgamal sign+encrypt keys with option --rfc2440.
2008-04-28Re: pkg/38508 (gnupg2 won't build)shannonjr1-3/+3
Builds without 'enable-maintainer-mode' being set
2008-01-18Per the process outlined in revbump(1), perform a recursive revbumptnn1-2/+2
on packages that are affected by the switch from the openssl 0.9.7 branch to the 0.9.8 branch. ok jlam@
2007-11-08Remove space between '=' and "idea" in "PKG_OPTIONS.libgcrypt+= idea".bjs1-2/+2
This was causing a build failure for gpgme if the package was built with the "idea" option.
2007-11-081) Added configuration arg so that PKG_SYSCONFDIR is honoredshannonjr2-2/+6
2) Added missing PLIST entry
2007-11-07Update to 2.0.7. This is maintenance release with a few minor enhancements.shannonjr4-20/+21
Changes: * Fixed encryption problem if duplicate certificates are in the keybox. * Add new options min-passphrase-nonalpha, check-passphrase-pattern, enforce-passphrase-constraints and max-passphrase-days to gpg-agent. * Add command --check-components to gpgconf. Gpgconf now uses the installed versions of the programs and does not anymore search via PATH for them.
2007-09-23Fix typo in comment.wiz1-2/+3
2007-09-23Update HOMEPAGE.wiz1-2/+2
generated by cgit v1.2.3 (git 2.39.1) at 2024-07-04 18:38:18 +0000