summaryrefslogtreecommitdiff
path: root/src/leap/keymanager/openpgp.py
AgeCommit message (Collapse)Author
2016-07-29[feature] keymanager - background update keysZara Gebru
- refresh random key in random time - add get key by fingerprint - refactor nicknym methods to own file - tests - note this do not include a check for revoked key, since that need some changes in gnupg - Related: #6089
2016-06-20[feat] check key document versions and fail if it's unknownRuben Pollan
- Closes: #8165
2016-06-17[feat] improve duplicated active documents fixupRuben Pollan
Mostly for private keys we want to keep the latest one in the keyring. It would be desirable to check with one is set in nicknym, but this will need a big refactor that I'm not sure if it's worth it just for that. - Related: #6658, #8059
2016-06-01[feat] make get_all_keys aware of active addressesRuben Pollan
- Resolves: #8068
2016-06-01[refactor] move soledad document definitions to it's own fileRuben Pollan
2016-06-01[feat] remove keytype from build_key_from_dictRuben Pollan
2016-06-01[refactor] remove EncryptionKeyRuben Pollan
2016-06-01[refactor] move TempGPGWrapper to it's own fileRuben Pollan
2016-06-01[refactor] remove EncryptionSchemeRuben Pollan
2016-05-24Issue #287: add tests for binary key and refactorZara Gebru
2016-04-11[feat] reduce log level for encrypt/decrypt errorsRuben Pollan
* Related: #8022
2016-02-25[feat] Make EncryptionKey aware of the active addressRuben Pollan
2016-02-25[feat] Use fingerprints instead of key idsRuben Pollan
- Resolves: #7500
2016-02-25[feat] move validation, usage and audited date to the active documentRuben Pollan
- Resolves: #7485
2016-02-23[feat] defer decrypt, gen_key and encryptVictor Shyba
This commit put those gnupg operations to be run on external threads limited by the amount of cores present on user machine. Some gnupg calls spawn processes and communicating to them is a synchronous operation, so running outside of a reactor should improve response time by avoiding reactor locking.
2015-10-01[feat] self-repair the keyring if keys get duplicatedRuben Pollan
In some cases in the past keys got stored twice in different documents. Hopefully this issue is solved now, this tries to self-repair the keyring if encounters that. This is not really solving the problem, if it keeps happening we need to investigate the source. - Resolves: #7498
2015-09-24[refactor] refactor key parsingKali Kaneko
so that it can be tested without needing to instantiate the whole OpenPGPScheme object, that receives a soledad instance.
2015-09-21[feat] more verbosity in get_key wrong address logRuben Pollan
2015-08-17[style] pep8 fixKali Kaneko
2015-08-03[style] Re-added lambdas to openpgp on keymanagerBruno Wagner
2015-08-03[style] Fixed pep8 warningsBruno Wagner
Fixed pep8 warnings to prepare the keymanager for CI
2015-01-15upgrade key when signed by old keyRuben Pollan
2015-01-15On key update merge metadata correctlyRuben Pollan
2014-12-16Fix key generationRuben Pollan
2014-12-16Port to soledad new async APIRuben Pollan
2014-11-25Return signing key on signature verificationRuben Pollan
Don't throw an exception if verification fails
2014-11-19Fix commentsRuben Pollan
2014-11-19Implement multi uid supportRuben Pollan
2014-11-19Implement active key documentRuben Pollan
2014-11-10Use type instead of tags to get docs in openpgpRuben Pollan
For that that now the type is the class.__name__ instead of str(class)
2014-11-10Implement the new encryption-key soledad documentRuben Pollan
2014-11-06Use datetime for key expirationRuben Pollan
2014-11-04Merge keys when updating an exisiting keyRuben Pollan
This is needed to prevent roll back attacks where the attacker push us to accept a key with an old expiration date that could be use to push an untrusted key when after it's expiration.
2014-10-23Update doc string of OpenPGPScheme._temporary_gpgwrapperRuben Pollan
2014-10-23Basic validation levels supportRuben Pollan
2014-10-09Implement 'fetch_key' for ascii keysRuben Pollan
binary keys support is still missing
2014-08-27Fix call to python-gnupg verify_file() method (#6022).drebs
2014-07-25gpg.verify_file() gets the data as a filename not as a binary streamRuben Pollan
2014-01-17Remove unused imports, fix typo.Ivan Alejandro
2014-01-17Do not decode decrypted data, return as str.Ivan Alejandro
2013-12-10typoKali Kaneko
2013-12-09pep8 cleanupKali Kaneko
2013-11-25Improve exceptions names and handling.drebs
2013-11-25Fix error returns on openpgp backend.drebs
Also fix: - some docstrings. - variabled referenced without previous assignement.
2013-11-21Remove '+' suffix in email address.Ivan Alejandro
This allows us to support encrypt mails to 'test_user@provider.com' even if was sent to 'test_user+optional_string@provider.com'.
2013-11-21Do not check for a valid address, rely on client.Ivan Alejandro
An email address regexp that supports all (or almost) emails is really complex, and is_address uses a simpler one since we restrict the valid usernames and provider names. For that we rely on the email client to check whether the email address is valid or not.
2013-11-14Expose openpgp methods in keymanager.Ivan Alejandro
- parse_ascii_key - delete_key - put_key
2013-11-13Refactor code to support parsing ascii keys.Ivan Alejandro
2013-11-11Use 'utf-8' as default/fallback encoding.Ivan Alejandro
- Also reorder stdlib imports alphabetically :)
2013-11-04Remove key comment on OpenPGP key generation.drebs