summaryrefslogtreecommitdiff
path: root/security/netpgpverify
AgeCommit message (Collapse)AuthorFilesLines
2022-04-03netpgpverify: add configure quirks to get strtoull on legacy platformstnn1-1/+8
2020-11-01netpgpverify: update to 20201101wiz4-6/+13
Merge: absorb issuer fingerprint (RFC4880bis 5.2.3.28) in libverify.c from jhigh from src/ While here, fix build with RELRO and a pkglint warning. Bump version to 20201101.
2020-05-04Rename files so that we pick up the correct header file.agc4-4/+21
Add the map file for the BSD Makefile's symbol exports.
2020-05-04Bump version of libnetpgpverify and netpgpverify to 20200504 for changesagc1-2/+2
brought over from src.
2020-05-04bring over changes from src - cast return valuesagc1-4/+6
2020-05-04bring over change from src - cast return valuesagc1-2/+2
2020-05-04Bring over change from src - properly cite authors of RFC 4880agc1-5/+12
2020-05-03Update netpgpverify and libnetpgpverify to version 20200503agc12-257/+276
ensure all exported functions use a unique prfix, so that they don't conflict with symbols (both data and text) in libcrypto. this works for statically linked binaries and libraries, rather then the version map which only works for dynalically-linked.
2020-01-18all: migrate several HOMEPAGEs to httpsrillig1-2/+2
pkglint --only "https instead of http" -r -F With manual adjustments afterwards since pkglint 19.4.4 fixed a few indentations in unrelated lines. This mainly affects projects hosted at SourceForce, as well as freedesktop.org, CTAN and GNU.
2019-10-03Bump netpgpverify and libnetpgpverify to 20191003 - fix problemagc2-3/+3
pointed out by mrg and gcc8: + don't read an automatic array element we haven't already written
2019-01-17Update netpgpverify and libnetpgpverify to 20190117agc2-36/+7
jperkin reported a bootstrapping failure in the newer pre-processor conditionals, so revert to the older, less comprehensive versions without gcc version level checks.
2019-01-16Update netpgpverify and libnetpgpverify to 20190111agc3-18/+109
Changes since previous version: + fuller emulation of openssl API, including BN_is_one() BN_mod_add() BN_mod_sub() BN_sub_word() BN_add_word() + provide all functions and macros with compatibility definitions
2018-03-11Provide PRIi64 definition where it doesn't exist (like IRIX).jmcneill1-0/+4
2017-10-19netpgpverify: Update to 20171019.jperkin2-10/+7
Changes since 20170201: + Don't overwrite error messages generated by time checks, now the correct error is printed instead of the generic "Signature does not match". + Remove extraneous newlines from time check errors. Ok'd agc@
2017-03-23Remove unused/empty distinfo files.joerg1-1/+0
2017-02-01update netpgpverify and libnetpgpverify to 20170201agc2-2/+6
+ make sure howmany() macro is defined pointed out by cube - thanks!
2016-08-28Update netpgpverify and libnetpgpverify to 20160828agc3-28/+34
+ bring over change from christos in src/crypto to check for the end of an ASCII-armored signature + no need for namespace protection in array.h any more, now that netpgp/verify.h now contains opaque structures + minor typo clean-up in a definition (benign, ignored by compiler)
2016-07-09Update netpgpverify and libnetpgpverify to 20160709agc2-8/+12
+ free resources associated with the cursor when verifying, gets rid of 2 more loss records under valgrind.
2016-07-09Update netpgpverify and libnetpgpverify to 20160708agc3-15/+25
+ clear and free bignums properly - helps immensely with plugging memory leaks
2016-07-08Update netpgpverify and libnetpgpverify to 20160707 to fix someagc2-18/+18
unusual build errors shown by old gcc versions (works fine for gcc-5.2.1 on ubuntu and gcc-5.3.0 on NetBSD 7.99.32) + use ULL suffix on unsigned 64bit constants, not UL + don't typedef the public structs twice - second time just define it without the typedef Fixes PR pkg/51327
2016-07-08Update netpgpverify and libnetpgpverify to 20160706agc2-3/+3
+ 20160705 introduced a bug whereby a key subid would match and verify fine, but, if formatted, would not display the correct subkey information. Fix to show the correct information in this case.
2016-07-08Update netpgpverify and libnetpgpverify to 20160705agc2-114/+236
External API changes ==================== + add a pgpv_cursor_close() function to free resources associated with a cursor Better memory management ======================== + restructure the way dynamic arrays are used, to avoid memory corruption issues and memory leaks - keep all dynamic arrays in the global data structure, and use indices in the other data structures to index them. Means lack of data localisation, but avoids stale pointers, and leaks. + make signer field of signature a uint8_t array, rather than a pointer + use our own version of strdup(3) - don't depend on it being available in standard library + keep track of whether litdata filenames and userid were allocated or not, and free memory in pgpv_close() if it was allocated + free up allocated resources which were allocated in pgpv_close()
2016-07-05Update netpgpverify and libnetpgpverify to 20160704agc3-14/+7
+ get rid of redundant PGPV_ARRAY definition in libverify.c, brought in when the definitions moved from verify.h + fix obuf_add_mem() to use a const void *, as any struct can be dumped using it + remove redundant NO_SUBKEYS definition - unused + add an (unused as yet) ARRAY_FREE() macro
2016-07-05Update netpgpverify and libnetpgpverify to 20160626agc4-258/+326
+ make the pgpv_t and pgpv_cursor_t structures opaque + add new accessor functions for fields in the pgpv_cursor_t struct + add new creation functions for the pgpv_t and pgpv_cursor_t structs
2016-06-30Update netpgpverify and libnetpgpverify to 20160625agc6-6/+50
+ Perform digest on correctly dash-escaped text, per RFC 4880. Problem pointed out by Dimitri John Ledkov, fixed in a different way (in case the last line is itself dash-escaped). + add test case
2016-06-30Update netpgpverify and libnetpgpverify to 20160624agc9-1017/+10
+ Get rid of the tiger digest - only specified in RFC 2440, not specified in RFC 4880.
2016-06-30Update netpgpverify and libnetpgpverify to 20160623agc3-61/+61
+ remove use of asprintf and vasprintf from libverify. Inspired by work from Dimitri John Ledkov. Should allow building on Linux without superfluous definitions. + also free the BIGNUM struct in PGPV_BN_clear() - from Dimitri John Ledkov
2016-06-23Update netpgpverify and libnetpgpverify to 20160622 during freeze to fixagc2-37/+36
PR/51262 + take a bit of a step backwards, and don't use stdbool.h, just to appease Solaris 10 compiler
2016-06-15Update netpgpverify and libnetpgpverify to 20160617agc2-4/+5
+ don't assume memory will be NUL-terminated when printing
2016-06-15Update netpgpverify and libnetpgpverify to 20160616agc5-4/+24
+ bring over joerg's printflike change from the netpgpverify version in src/crypto + add a test for cleartext signatures with version information to complement the one with no version information
2016-06-15Update netpgpverify and libnetpgpverify to 20160615:agc2-14/+10
Simplify the method of finding the end of the versioning information in the signature - back up to the "\n" character at the end of the signature start: "-----BEGIN PGP SIGNATURE-----\n" and then find the "\n\n" character sequence to denote the start of the signature itself. The previous version worked, but this is more efficient.
2016-06-14Update netpgpverify (and libnetpgpverify) to 20160614agc5-9/+32
+ handle signatures created by gpg with "--no-emit-version", don't assume there will always be a version string. + add a test for above Fixes security PR/51240. Thanks to xnox@ubuntu.com for reporting the error
2016-06-03Update netpgpverify to 20160313agc2-2/+3
+ minor cosmetic change to bn.h to also define BN_mod_sub, missed in previous
2016-02-19Remove an item from the netpgpverify/libnetpgpverify TODO list:agc5-77/+193
+ get rid of calls to snprintf which simply add the returned value to the number of characters used so far. This practice is unsafe. Instead, use a dynamic buffer and grow its size to accommodate the contents. + add USE_ARG definition to some files which use it but don't check to see that it's been defined pkgsrc changes: + Bump version number to 20160214 + Use the same method as libnetpgpverify for finding the version number from the sources.
2015-11-03Update netpgpverify to 20151103agc3-4/+7
Changes since previous version: + fix a bug where SHA512 case was missed in the digest_get_prefix() function. Bug and fix from Felix Lange.
2015-10-01Update netpgpverify to 20150930.agc4-4/+161
Changes since 20150919: + fixed minor bug in BN_rand() function - used field wasn't set + added BN_gcd() function + added translation layer in header file, so that library can be called as a BIGNUM/BN_* replacement if USE_BN_INTERFACE is defined at compile-time
2015-09-25Update netpgpverify, and libnetpgpverify, from version 20150911 toagc5-7/+4
version 20150919 Changes: + get rid of unnecessary header inclusion (sys/syslog.h), which gives problems on HP/UX and is unused from Tobias Nygren
2015-09-12Update netpgpverify to version 20150911.agc3-6/+11
Changes since previous version (20150901) + Apparently, OS X 10.4 does not have an implementation of le32dec(). Instead, unroll the inline function. Bug report from Sevan - thanks!
2015-09-06Fix up a few more symbol renames, now -Wimplicit-function-declaration clean.jperkin2-5/+5
2015-09-06Deal with systems defining swap16/swap32 as macros.joerg1-0/+3
2015-09-02Complete the SHA* symbol renaming. Ride previous bump. Ok agc.jperkin1-16/+16
2015-09-01Update netpgpverify to 20150901agc19-540/+540
+ rename all the symbols I could fine which could conflict with those in libcrypto. requested by joerg
2015-08-17Portability fixes. Add a test target and additional tests.jperkin12-22/+78
Reviewed by agc.
2015-02-05forcibly disable tools build when running the testing script - found whenagc1-1/+1
testing the src/ version, benign for pkgsrc. ride previous version bump.
2015-02-05appease compiler warning police - initialise a variable in case it's otherwiseagc1-0/+1
"used uninitialised". ride previous version bump.
2015-02-05Update netpgpverify (and libnetpgpverify) to version 20150205agc7-29/+58
+ recognise signatures made by subkeys as well as by primary keys + print out the relevant key which signed the file, even if it's a subkey and not the primary key itself. + keep the same API as before with many thanks to Jonathan Perkin
2015-02-04The test file for the "one key" test has embedded CVS Identifiers, soagc3-1/+89
work around this.
2015-02-04add a minimalist shell script to make a tarball of the sources - requestedagc1-0/+11
by various people.
2015-02-03Update netpgpverify, and libnetpgpverify, to 20150204agc1-2/+2
+ dump the huge output to /dev/null so that we can see what's happening with the other tests in testit.sh + fix from jperkin@, don't try to be clever when selecting the only key id in a keyring + add a test for single key (non-ssh) pubring
2015-02-03Update netpgpverify, and libnetpgpverify, to 20150204agc6-7/+7
+ dump the huge output in testing script to /dev/null so that we can see what's happening with the other tests in testit.sh + fix from jperkin@, don't try to be clever when selecting the only key id in a keyring + add a test for single key (non-ssh) pubring
generated by cgit v1.2.3 (git 2.39.1) at 2025-04-25 01:41:54 +0000