./security/netpgpverify, Standalone PGP and ssh signature verification utility

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]


Branch: CURRENT, Version: 20170201, Package name: netpgpverify-20170201, Maintainer: agc

netpgpverify is a standalone program to verify a PGP signature
on a file or document. Both RSA and DSA signatures are supported,
as are binary and document signatures.

netpgpverify is compliant with RFC 4880.


Required to build:
[pkgtools/cwrappers]

Version history: (Expand)


CVS history: (Expand)


   2017-03-23 14:07:25 by Joerg Sonnenberger | Files touched by this commit (11)
Log message:
Remove unused/empty distinfo files.
   2017-02-01 19:09:26 by Alistair G. Crooks | Files touched by this commit (2) | Package updated
Log message:
update netpgpverify and libnetpgpverify to 20170201

+ make sure howmany() macro is defined

pointed out by cube - thanks!
   2016-08-29 01:23:40 by Alistair G. Crooks | Files touched by this commit (3) | Package updated
Log message:
Update netpgpverify and libnetpgpverify to 20160828

+ bring over change from christos in src/crypto to check for
the end of an ASCII-armored signature

+ no need for namespace protection in array.h any more, now
that netpgp/verify.h now contains opaque structures

+ minor typo clean-up in a definition (benign, ignored by compiler)
   2016-07-09 19:44:44 by Alistair G. Crooks | Files touched by this commit (2) | Package updated
Log message:
Update netpgpverify and libnetpgpverify to 20160709

+ free resources associated with the cursor when verifying,
gets rid of 2 more loss records under valgrind.
   2016-07-09 19:18:24 by Alistair G. Crooks | Files touched by this commit (3) | Package updated
Log message:
Update netpgpverify and libnetpgpverify to 20160708

+ clear and free bignums properly - helps immensely with plugging
memory leaks
   2016-07-08 19:45:41 by Alistair G. Crooks | Files touched by this commit (2) | Package updated
Log message:
Update netpgpverify and libnetpgpverify to 20160707 to fix some
unusual build errors shown by old gcc versions (works fine for
gcc-5.2.1 on ubuntu and gcc-5.3.0 on NetBSD 7.99.32)

+ use ULL suffix on unsigned 64bit constants, not UL

+ don't typedef the public structs twice - second time just define it
without the typedef

Fixes PR pkg/51327
   2016-07-08 18:21:10 by Alistair G. Crooks | Files touched by this commit (2) | Package updated
Log message:
Update netpgpverify and libnetpgpverify to 20160706

+ 20160705 introduced a bug whereby a key subid would match and verify
fine, but, if formatted, would not display the correct subkey
information.  Fix to show the correct information in this case.
   2016-07-08 17:56:47 by Alistair G. Crooks | Files touched by this commit (2) | Package updated
Log message:
Update netpgpverify and libnetpgpverify to 20160705

External API changes
====================
+ add a pgpv_cursor_close() function to free resources associated with
a cursor

Better memory management
========================
+ restructure the way dynamic arrays are used, to avoid memory
corruption issues and memory leaks - keep all dynamic arrays in the global
data structure, and use indices in the other data structures to index them.
Means lack of data localisation, but avoids stale pointers, and leaks.

+ make signer field of signature a uint8_t array, rather than a pointer

+ use our own version of strdup(3) - don't depend on it being
available in standard library

+ keep track of whether litdata filenames and userid were allocated or not,
and free memory in pgpv_close() if it was allocated

+ free up allocated resources which were allocated in pgpv_close()