summaryrefslogtreecommitdiff
path: root/usr.bin/signify
AgeCommit message (Collapse)Author
2014-01-22replace sensitive memsets with explicit_bzeroTed Unangst
2014-01-19do not truncate strlcpy/snprintf, fail hard and properTheo de Raadt
ok tedu
2014-01-19better error message for readpassphrase. from fritjof. ok deraadtTed Unangst
2014-01-17Add a new example showing how to verify bsd.rd with signify and the newLawrence Teo
sha256 -C option. suggested by deraadt@ help/OK jmc@ tedu@
2014-01-15pipes mean read/write may short out.Marc Espie
okay tedu@
2014-01-14most common pbkdf failure is no password, so check that first.Ted Unangst
prompted by fritjof
2014-01-14rearrange the bottom of main so it is less of a "zoo". ok deraadtTed Unangst
2014-01-14stick that last example in a display, and avoid linewrap;Jason McIntyre
2014-01-14this can be staticTed Unangst
2014-01-14stdlib.h for malloc. from FritjofTed Unangst
2014-01-14use a pipe, as intended, in the exampleChristian Weisgerber
2014-01-13premature, only wanted to commit n: -> nMarc Espie
2014-01-13duh, -n does not take argsMarc Espie
2014-01-13dang it!Ted Unangst
2014-01-13new day, new options. -m message and -x signature.Ted Unangst
this should be less confusing and more consistent in various modes. also support stdin/stdout where feasible. touch up usage to be helpful. ok deraadt
2014-01-12we only write to writable files, so use O_WRONLY.Ted Unangst
st_size is only meaningful for regular files, so check S_ISREG
2014-01-12add missing dash in -p optionRobert Peichaer
OK tedu@ jmc@
2014-01-12improve release directory exampleTheo de Raadt
2014-01-12subtly improve an exampleTheo de Raadt
2014-01-11Check the return value of fstat() in readmsg().Lawrence Teo
OK deraadt@ tedu@
2014-01-10sort optionsTheo de Raadt
2014-01-10-c comment, for people who don't like the default. ok deraadtTed Unangst
2014-01-10no Pp before or after Sh;Jason McIntyre
2014-01-10quiet time. printing verified was an artifact of development, to be sureTed Unangst
we didn't accidentally fall through main without doing anything, but tools should be quiet unless there's an error.
2014-01-10use a single positional argument instead of a creeping list of __prognameTed Unangst
2014-01-10a little more consistent with names, notably call signature files sigfilesTed Unangst
for short, instead of output.
2014-01-10base64.c workaround keeps sneaking back inTed Unangst
2014-01-10provide a small (very very) practical example for using signifyTheo de Raadt
ok tedu
2014-01-10change the listing of the options, because there is way too muchTheo de Raadt
befuddlement. sorry jmc ok tedu
2014-01-10at least for now, we're going to need some -Inspector magicTed Unangst
2014-01-09sync usage();Jason McIntyre
2014-01-09revert to O_EXCL for generating keys, so we don't erase them by accident.Marc Espie
internal code a bit yucky, can be fixed some more later. okay tedu@
2014-01-09oopsTed Unangst
2014-01-09change O_EXCL to O_TRUNC before deraadt kills me.Ted Unangst
2014-01-09copy secret key comment into signature. requested by deraadtTed Unangst
2014-01-09oops, re-adapt for the install mediaTheo de Raadt
2014-01-09-e embedded signatures. ok deraadtTed Unangst
2014-01-08fix logic/usage in VERIFYONLY caseMarc Espie
okay deraadt@
2014-01-08a few more blocks can use VERIFYONLYTheo de Raadt
2014-01-08allow building a VERIFYONLY version that's considerably smaller.Ted Unangst
most of the savings comes from eliminating the large constant table in ge25519.c. ok deraadt
2014-01-08reduce size by using equivalent code from libc instead of naclTed Unangst
ok deraadt
2014-01-08no tomfoolery: mark the comment as untrusted, and enforce it.Ted Unangst
usability: add random key fingerprints to detect sig/pubkey mismatch feedback espie naddy
2014-01-06tedu unused macro.Marc Espie
okay tedu@
2014-01-03don't initialize declared variable with a function callTed Unangst
2014-01-03replace hand rolled strchr with strchrTed Unangst
2014-01-03let signify have an actual parameters: the file to sign/verifyMarc Espie
clarify SYNOPSIS, as options are highly dependent on the mode. okay tedu@, usage suggestion by jmc@
2014-01-03terminate b64 encoded lines. decoding happily skips \n.Marc Espie
okay tedu@
2014-01-02display proper error messages for read/write.Marc Espie
after a lot of bickering with tedu... "fine, fix it" tedu@
2014-01-01revert to mostly lowercase options, with uppercase for actions.Ted Unangst
ok deraadt espie naddy. wth man tweaks from jmc
2013-12-31zap an erroneous space in "input .sig" (should be input.sig, with .sig notJason McIntyre
marked up;