/mandos/trunk : changes

» Changes from revision 1316

To get this branch, use:

bzr branch
http://bzr.recompile.se/loggerhead/mandos/trunk

From Revision 957 to 938

expand all

Rev	Summary	Authors	Date
957	Use new header "Rules-Requires-Root" in debian/control Use new header "Rules-Requires-Root" in debian/control * debian/control (Source: mandos/Rules-Requires-Root): New; set to "binary-targets".	Teddy Hogeborn	6 years ago
956	Set executable permissions on new files Set executable permissions on new files * initramfs-tools-script-stop: Did "chmod +x". * mandos-to-cryptroot-unlock: - '' -	Teddy Hogeborn	6 years ago
955	Remove workaround for old mkinitramfs-kpkg Remove workaround for old mkinitramfs-kpkg * Makefile (install-client-nokey): Do not install "initramfs-tools-hook-conf". * debian/control (mandos-client/Depends): Add "(>= 0.99)" to dependency on "initramfs-tools", since that is the version which removed mkinitramfs-kpkg. * debian/mandos-client.dirs: Remove "usr/share/initramfs-tools/conf-hooks.d". * initramfs-tools-hook-conf: Removed.	Teddy Hogeborn	6 years ago
954	Move UMASK setting to more proper place Move UMASK setting to more proper place * Makefile (install-client-nokey): Also install new conf files "initramfs-tools-conf". * debian/mandos-client.dirs: Add "usr/share/initramfs-tools/conf.d". * initramfs-tools-conf: New file which sets UMASK. * initramfs-tools-hook: Change comment to correctly state new location of UMASK setting. * initramfs-tools-hook-conf: Remove UMASK setting.	Teddy Hogeborn	6 years ago
953	Adapt to changes in cryptsetup; use "cryptroot-unlock" progr... Adapt to changes in cryptsetup; use "cryptroot-unlock" program * Makefile (install-client-nokey): Also install new script files "mandos-to-cryptroot-unlock" and "initramfs-tools-script-stop". * debian/mandos-client.dirs: Add "usr/share/initramfs-tools/scripts/local-premount". * initramfs-tools-hook: Also copy "mandos-to-cryptroot-unlock". * initramfs-tools-script: Only modify keyscript setting in cryptroot file if the file exists, otherwise start "mandos-to-cryptroot-unlock" in background. * initramfs-tools-script-stop: New script to make sure plugin-runner has stopped before continuing. * mandos-to-cryptroot-unlock: New script to run plugin-runner and feed any password it gets into the "cryptroot-unlock" program.	Teddy Hogeborn	6 years ago
952	plugin-runner: More debug output plugin-runner: More debug output * plugin-runner.c (main): If --debug is used, show the name and PID of each plugin as it is started.	Teddy Hogeborn	6 years ago
951	mandos-client: Set system clock if necessary mandos-client: Set system clock if necessary * plugins.d/mandos-client.c (init_gpgme/import_key): If the system clock is not set, or set to january 1970, set the system clock to the more plausible value that is the mtime of the key file. This is required by GnuPG to be able to import the keys. (We can't pass the --ignore-time-conflict or the --ignore-valid-from options though GPGME.)	Teddy Hogeborn	6 years ago
950	mandos: Better error message if self-signature verification ... mandos: Better error message if self-signature verification fails * mandos (ClientHandler.fingerprint): If the verification of the self-signature fails, report the actual error message instead of a generic message.	Teddy Hogeborn	6 years ago
949	Linking flags correction Linking flags correction * Makefile (CFLAGS): Remove "$(GNUTLS_CFLAGS) $(AVAHI_CFLAGS) $(GPGME_CFLAGS)", since these libraries are not used by all programs. (plugins.d/mandos-client): Add "$(GNUTLS_CFLAGS) $(AVAHI_CFLAGS) $(GPGME_CFLAGS)".	Teddy Hogeborn	6 years ago
948	Minor code cleanup Minor code cleanup * plugins.d/mandos-client.c (pgp_packet_decrypt): Use a "for" statement instead of a "while" statement to move initialization and stepping into the for statement, and reduce loop variable name length.	Teddy Hogeborn	6 years ago
947	Check for and report GPGME key import errors Check for and report GPGME key import errors * plugins.d/mandos-client.c (init_gpgme/import_key): After gpgme_op_import(), call gpgme_op_import_result() to see if it worked. If not, print all available information.	Teddy Hogeborn	6 years ago
946	Remove duplicate "Mandos plugin mandos-client:" in error out... Remove duplicate "Mandos plugin mandos-client:" in error output * plugins.d/mandos-client.c (init_gpgme, pgp_packet_decrypt): Remove old hardcoded prefix, since it is now always printed by fprintf_plus().	Teddy Hogeborn	6 years ago
945	Print a boolean more readably in error message output Print a boolean more readably in error message output * plugins.d/mandos-client.c (pgp_packet_decrypt): If decryption fails, print wrong_key_usage as "Yes" or "No", not a number.	Teddy Hogeborn	6 years ago
944	Don't print NULL string pointers in error message output Don't print NULL string pointers in error message output * plugins.d/mandos-client.c (pgp_packet_decrypt): If decryption fails, don't print unsupported_algorithm if it is NULL.	Teddy Hogeborn	6 years ago
943	Merge from release branch Merge from release branch	Teddy Hogeborn	6 years ago
942	Mark fallthrough case with comment Mark fallthrough case with comment * plugin-runner.c (main/parse_opt): Mark case ARGP_KEY_ARG as falling through (in the case where the argument is not empty).	Teddy Hogeborn	6 years ago
941	Check return values from newly added close() calls Check return values from newly added close() calls * plugins.d/mandos-client.c (init_gnutls_global): Check return values from newly added close() calls.	Teddy Hogeborn	6 years ago
940	Client bug fix: Don't use leak sanitizer with leaking librar... Client bug fix: Don't use leak sanitizer with leaking libraries * Makefile (plugin-helpers/mandos-client): Remove "-fsanitize=leak" from CFLAGS.	Teddy Hogeborn	6 years ago
939	Client bug fixes: Fix file descriptor leaks Client bug fixes: Fix file descriptor leaks * plugin-helpers/mandos-client.c (init_gnutls_global, get_flags): Always close files and sockets after they are used.	Teddy Hogeborn	7 years ago
938	Correct comments Correct comments * plugin-helpers/mandos-client-iprouteadddel.c: Comment change only.	Teddy Hogeborn	7 years ago