Mailing List Archive: GnuPG: devel

[Announce] Dirmngr 1.0.2 released

Index | Next | Previous | View Threaded

wk at gnupg

Jul 31, 2008, 5:51 AM

Post #1 of 3 (165 views)
Permalink

[Announce] Dirmngr 1.0.2 released

Hi!

We are pleased to announce the availability of Dirmngr version 1.0.2.

Dirmngr is a server for managing and downloading certificate
revocation lists (CRLs) for X.509 certificates and for downloading the
certificates themselves. Dirmngr also handles OCSP requests as an
alternative to CRLs. Although Dirmngr can be invoked on demand, it
should in general be installed as a system daemon.

Get it from:

ftp://ftp.gnupg.org/gcrypt/dirmngr/dirmngr-1.0.2.tar.bz2 (541k)
ftp://ftp.gnupg.org/gcrypt/dirmngr/dirmngr-1.0.2.tar.bz2.sig

or as a patch against the last beta version:

ftp://ftp.gnupg.org/gcrypt/dirmngr/dirmngr-1.0.1-1.0.2.diff.bz2 (144k)

SHA-1 checksums are:

55c82f918731f142cbe26d598a97c0c08bd7d1f8 dirmngr-1.0.2.tar.bz2
8d1482be8e8189aec726e0b20d66a3bcfd43e459 dirmngr-1.0.1-1.0.2.diff.bz2

Whats new in this release
=========================

* New option --url for the LOOKUP command and dirmngr-client.

* The LOOKUP command does now also consults the local cache. New
option --cache-only for it and --local for dirmngr-client.

* Port to Windows completed.

* Improved certificate chain construction.

* Support loading of PEM encoded CRLs via HTTP.

There is now also a collection of some useful certificates in the
doc/examples directory.

Documentation
=============

Dirmngr comes with man pages and as well as with a texinfo based
manual. Run "info dirmngr" to read the manual or run

make -C doc dirmngr.pdf

to build a printable version. If you have questions on the use of
Dirmngr, feel free to ask at gnupg-users[at]gnupg.org.

Support
=======

Improving Dirmngr is costly, but you can help! We are looking for
organizations that find Dirmngr useful and wish to contribute back.
You can contribute by reporting bugs, improve the software, or by
donating money.

Commercial support contracts for Dirmngr are available, and they help
finance continued maintenance. g10 Code GmbH, a Duesseldorf based
company owned and headed by GnuPG's principal author, is currently
funding Dirmngr development. We are always looking for interesting
development projects.

A service directory is available at:

http://www.gnupg.org/service.html

Thanks
======

We have to thank all the people who helped with this release. The
folks at Intevation helped a lot to track down bugs and to define new
features. Marcus Brinkmann is mainly responsible for completing the
Windows port.

Happy Hacking,

Werner

--
Die Gedanken sind frei. Auschnahme regelt ein Bundeschgesetz.

rdieter at math

Jul 31, 2008, 8:52 AM

Post #2 of 3 (151 views)
Permalink

Re: [Announce] Dirmngr 1.0.2 released [In reply to]

Werner Koch wrote:

> We are pleased to announce the availability of Dirmngr version 1.0.2.

build fails here (fedora 8):
...
gcc -I../jnlib -O2 -Wall -o dirmngr-client dirmngr-client.o b64enc.o
get-path.o no-libgcrypt.o ../jnlib/libjnlib.a -lassuan -lgpg-error
crlcache.o:
In function `start_sig_check':
/var/tmp/BUILD/dirmngr-1.0.2/src/crlcache.c:1448: undefined reference to
`gcry_md_debug'

I suspect there's a minimal build dep not satisfied, I'm currently using:
libassuan-1.0.4
libgcrypt-1.2.4
libgpg-error-1.5
libksba-1.0.2

-- Rex

_______________________________________________
Gnupg-devel mailing list
Gnupg-devel[at]gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-devel

wk at gnupg

Jul 31, 2008, 9:26 AM

Post #3 of 3 (152 views)
Permalink

Re: [Announce] Dirmngr 1.0.2 released [In reply to]

On Thu, 31 Jul 2008 17:52, rdieter[at]math.unl.edu said:

> In function `start_sig_check':
> /var/tmp/BUILD/dirmngr-1.0.2/src/crlcache.c:1448: undefined reference to
> `gcry_md_debug'

Ooops. However, this is easy to fix:

Index: src/crlcache.c
===================================================================
--- src/crlcache.c (revision 304)
+++ src/crlcache.c (working copy)
@@ -1445,7 +1445,13 @@
return err;
}
if (DBG_HASHING)
- gcry_md_debug (*md, "crl");
+ {
+#ifdef HAVE_GCRY_MD_DEBUG
+ gcry_md_debug (*md, "hash.cert");
+#else
+ gcry_md_start_debug (*md, "crl");
+#endif
+ }

ksba_crl_set_hash_function (crl, HASH_FNC, *md);
return 0;

Most developers today use libgcrypt 1.4 but I hesitated to make this a
requirement as too many installations are running 1.2.

Salam-Shalom,

Werner

--
Die Gedanken sind frei. Auschnahme regelt ein Bundeschgesetz.

_______________________________________________
Gnupg-devel mailing list
Gnupg-devel[at]gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-devel

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact lists@gossamer-threads.com