summaryrefslogtreecommitdiff
path: root/usr.bin/signify
AgeCommit message (Collapse)Author
2014-03-07if message file is stdin, don't read passphrase from stdin, it won't work.Ted Unangst
too many features; this circus needs a lion tamer
2014-03-07allow reading input messages on a pipe. use at your own peril.Ted Unangst
2014-03-06allow password on stdin if it's not a tty. commonly requested.Ted Unangst
2014-03-06tweak; from jmc@ and yours trulyChristian Weisgerber
ok jmc@ tedu@
2014-03-05consistently say buflen so i know what length it isTed Unangst
2014-03-05when reading a message, add one byte so we can nul terminuate.Ted Unangst
simplify verifychecksums with the knowledge that input is a proper string.
2014-03-05tighten up code a littleTed Unangst
2014-03-05check calloc and free memory. noticed by jsg and lteo.Ted Unangst
tweak failure tracking
2014-03-04add -C checksum mode, which works with sha256 files in safe easy fashion.Ted Unangst
ok deraadt
2014-02-27use the real keys' namesTed Unangst
2014-01-22replace sensitive memsets with explicit_bzeroTed Unangst
2014-01-19do not truncate strlcpy/snprintf, fail hard and properTheo de Raadt
ok tedu
2014-01-19better error message for readpassphrase. from fritjof. ok deraadtTed Unangst
2014-01-17Add a new example showing how to verify bsd.rd with signify and the newLawrence Teo
sha256 -C option. suggested by deraadt@ help/OK jmc@ tedu@
2014-01-15pipes mean read/write may short out.Marc Espie
okay tedu@
2014-01-14most common pbkdf failure is no password, so check that first.Ted Unangst
prompted by fritjof
2014-01-14rearrange the bottom of main so it is less of a "zoo". ok deraadtTed Unangst
2014-01-14stick that last example in a display, and avoid linewrap;Jason McIntyre
2014-01-14this can be staticTed Unangst
2014-01-14stdlib.h for malloc. from FritjofTed Unangst
2014-01-14use a pipe, as intended, in the exampleChristian Weisgerber
2014-01-13premature, only wanted to commit n: -> nMarc Espie
2014-01-13duh, -n does not take argsMarc Espie
2014-01-13dang it!Ted Unangst
2014-01-13new day, new options. -m message and -x signature.Ted Unangst
this should be less confusing and more consistent in various modes. also support stdin/stdout where feasible. touch up usage to be helpful. ok deraadt
2014-01-12we only write to writable files, so use O_WRONLY.Ted Unangst
st_size is only meaningful for regular files, so check S_ISREG
2014-01-12add missing dash in -p optionRobert Peichaer
OK tedu@ jmc@
2014-01-12improve release directory exampleTheo de Raadt
2014-01-12subtly improve an exampleTheo de Raadt
2014-01-11Check the return value of fstat() in readmsg().Lawrence Teo
OK deraadt@ tedu@
2014-01-10sort optionsTheo de Raadt
2014-01-10-c comment, for people who don't like the default. ok deraadtTed Unangst
2014-01-10no Pp before or after Sh;Jason McIntyre
2014-01-10quiet time. printing verified was an artifact of development, to be sureTed Unangst
we didn't accidentally fall through main without doing anything, but tools should be quiet unless there's an error.
2014-01-10use a single positional argument instead of a creeping list of __prognameTed Unangst
2014-01-10a little more consistent with names, notably call signature files sigfilesTed Unangst
for short, instead of output.
2014-01-10base64.c workaround keeps sneaking back inTed Unangst
2014-01-10provide a small (very very) practical example for using signifyTheo de Raadt
ok tedu
2014-01-10change the listing of the options, because there is way too muchTheo de Raadt
befuddlement. sorry jmc ok tedu
2014-01-10at least for now, we're going to need some -Inspector magicTed Unangst
2014-01-09sync usage();Jason McIntyre
2014-01-09revert to O_EXCL for generating keys, so we don't erase them by accident.Marc Espie
internal code a bit yucky, can be fixed some more later. okay tedu@
2014-01-09oopsTed Unangst
2014-01-09change O_EXCL to O_TRUNC before deraadt kills me.Ted Unangst
2014-01-09copy secret key comment into signature. requested by deraadtTed Unangst
2014-01-09oops, re-adapt for the install mediaTheo de Raadt
2014-01-09-e embedded signatures. ok deraadtTed Unangst
2014-01-08fix logic/usage in VERIFYONLY caseMarc Espie
okay deraadt@
2014-01-08a few more blocks can use VERIFYONLYTheo de Raadt
2014-01-08allow building a VERIFYONLY version that's considerably smaller.Ted Unangst
most of the savings comes from eliminating the large constant table in ge25519.c. ok deraadt