2022-12-16  Werner Koch  <wk@gnupg.org>

	Release 2.4.0.
	+ commit c0556edb80518720b0d884251685fe008c8f0429


	common: Fix translations in --help for gpgrt < 1.47.
	+ commit 30a98b0b2197709a1a89fda467951e2c269e6a26
	* common/mapstrings.c (map_static_macro_string): Add hack.

	gpg: Do not continue the export after a cancel for the primary key.
	+ commit 49d16f4f6edf872babf04ae383974d891871a33b
	* g10/export.c (do_export_one_keyblock): Handle a cancel for the
	primary key special.

	gpg: Replace use of PRIu64 in log_debug.
	+ commit f297803a67cd6cff0d766dfe86798bbca602c083
	* g10/cipher-aead.c (do_flush): Use %llu and a cast.
	* g10/decrypt-data.c (aead_underflow): Ditto.

	Update NEWS for 2.4.0.
	+ commit fc8b811283d73251ddc97c649f0babe3005bb20b


2022-12-16  NIIBE Yutaka  <gniibe@fsij.org>

	tests: Fix make check with GPGME.
	+ commit c19ea75f10d6278569619f90977ce7c820e9319d
	* tests/gpgme/Makefile.am: Create directories for logs.

2022-12-12  Werner Koch  <wk@gnupg.org>

	agent: Allow arguments to "scd serialno" in restricted mode.
	+ commit f9ea5dc831f9dd42877cd4e8bed9288b45250447
	* agent/command.c (cmd_scd): Allow it.

2022-12-09  Werner Koch  <wk@gnupg.org>

	scd:p15: Skip deleted records.
	+ commit 061efac03ff9b471138c76c61edb9f2c709a82ab
	* scd/app-p15.c (select_and_read_record): Special case deleted
	records.  Support 3 byte TLVs.
	(read_ef_prkdf): Skip deleted records.
	(read_ef_pukdf): Ditto.
	(read_ef_cdf): Ditto.
	(read_ef_aodf): Ditto.

2022-12-09  NIIBE Yutaka  <gniibe@fsij.org>

	build: Remove Windows CE support.
	+ commit f32d0c9c0ff7a62d17e6c46e0e21fe00be22c114
	* agent/Makefile.am [HAVE_W32CE_SYSTEM]: Remove.
	* am/cmacros.am [HAVE_W32CE_SYSTEM]: Remove.
	* autogen.sh: Remove W32ce_ variables.
	* configure.ac: Likewise.
	* dirmngr/Makefile.am (extra_bin_ldflags): Remove.
	* g10/Makefile.am [HAVE_W32CE_SYSTEM]: Remove.
	* kbx/Makefile.am: Likewise.
	* sm/Makefile.am (extra_bin_ldflags): Remove.
	* tools/Makefile.am (extra_bin_ldflags): Remove.

2022-12-06  Werner Koch  <wk@gnupg.org>

	wkd: Do not send/install/mirror expired user ids.
	+ commit 278f85d1bc6cd012b3b2e87536e50954b21d2d91
	* tools/gpg-wks.h (struct uidinfo_list_s): Add fields expired and
	revoked.
	* tools/wks-util.c (append_to_uidinfo_list): Add args expired and
	revoked.
	(set_expired_revoked): New.
	(wks_list_key): Set expired and revoked.
	(wks_cmd_install_key): Skip expired uids.
	* tools/gpg-wks-client.c (command_check): Print flags.
	(command_send): Ignore expired keys.
	(mirror_one_key): Ditto.

	* g10/export.c (do_export_stream): Silence warning.

2022-12-05  Werner Koch  <wk@gnupg.org>

	gpgsm: Print the revocation time also with --verify.
	+ commit 58819c024a11dd89b01dd00ab7becba64feec7c7
	* sm/certchain.c (is_cert_still_valid): Print revocation reason.

	gpgsm: Fix "problem re-searching certificate" case.
	+ commit 1c2bdd80b18fa43190ed7daff57a741e2a73cae2
	* sm/keydb.c (keydb_set_cert_flags): Fix error test.

	gpgsm: Print revocation date and reason in cert listings.
	+ commit b6abaed2b5f6a6e52069f370c61006abdc81cdf5
	* dirmngr/ocsp.c (ocsp_isvalid): Add args r_revoked_at and
	r_revocation_reason.
	* dirmngr/server.c (cmd_isvalid): Emit a new REVOCATIONINFO status.
	(cmd_checkocsp): Ditto.

	* sm/call-dirmngr.c (struct isvalid_status_parm_s): Add new fields.
	(isvalid_status_cb): Parse REVOCATIONINFO.
	(gpgsm_dirmngr_isvalid): Add args r_revoked_at and
	r_revocation_reason.

	* sm/gpgsm.h (struct server_control_s): Add fields revoked_art and
	revocation_reason.
	* sm/keylist.c (list_cert_raw): Print revocation date.
	(list_cert_std): Ditto.

	gpgsm: Silence the "non-critical certificate policy not allowed".
	+ commit 4f1b9e3abb337470e5e4809b3a7f2df33f5a63a4
	* sm/certchain.c (check_cert_policy): Print non-critical policy
	warning only in verbose mode.

	gpgsm: Always use the chain model if the root-CA requests this.
	+ commit 7fa1d3cc821dca1ea8e1c80a0bdd527177c185ee
	* sm/call-dirmngr.c (gpgsm_dirmngr_isvalid): Do not use
	option --force-default-responder.
	* sm/certchain.c (is_cert_still_valid): Rename arg for clarity.
	(gpgsm_validate_chain): Always switch to chain model.

2022-12-02  Werner Koch  <wk@gnupg.org>

	gpg: New export option "mode1003".
	+ commit 1a85ee9a431bd2243e0ad79ce5eefa78e274a491
	* agent/command.c (cmd_export_key): Add option --mode1003.
	(command_has_option): Ditto.
	* g10/build-packet.c (do_key): Implement mode 1003.
	* g10/parse-packet.c (parse_key): Ditto.
	* g10/options.h (EXPORT_MODE1003): New.o
	* g10/call-agent.c (agent_export_key): Add arg mode1003.
	* g10/export.c (parse_export_options): Add "mode1003"
	(secret_key_to_mode1003): New.
	(receive_seckey_from_agent): Add arg mode1003.
	(do_export_one_keyblock): Pass option down.

	gpg: Remove a mostly duplicated function.
	+ commit 1d88e14de751b19ae5637c4f6b0a1882c2f3b554
	* g10/export.c (receive_seckey_from_agent): Add arg r_key.
	(do_export_one_keyblock): Pass NULL for new arg.
	(receive_raw_seckey_from_agent): Remove.
	(export_secret_ssh_key): Use receive_seckey_from_agent.
	* g10/keygen.c (card_store_key_with_backup): Pass NULL for new arg.

2022-12-02  NIIBE Yutaka  <gniibe@fsij.org>

	tests: Simplify fake-pinentry to use the option only.
	+ commit 0a93b5b96a3bfcca52a8288e9847f06e495b461e
	* tests/openpgp/fake-pinentry.c (parse_pinentry_user_data): New.
	(main): Don't use PINENTRY_USER_DATA env var.

	tests: Fix fake-pinentry for Windows.
	+ commit 7c6b014d3bc6ea4237dd46c99f3a3d570796851b
	* tests/openpgp/fake-pinentry.c (main): Override PINENTRY_USER_DATA,
	by the option.

	tests: Fix make check-all.
	+ commit 7663fdd983d2ebc4a4f86e4f2ec6d518e036b90f
	* Makefile.am (TESTS_ENVIRONMENT): Add GNUPG_IN_TEST_SUITE.

2022-12-01  Werner Koch  <wk@gnupg.org>

	agent: Fix import of protected v5 keys.
	+ commit e094616cb75d7a4b551ae3db9ea1d5073e3237b6
	* agent/cvt-openpgp.c (convert_from_openpgp_main): Take care of
	version 5 keys.

	gpgsm: Change default algo to AES-256.
	+ commit 2d8ac55d26e70f34c75ae892d84db90454b23c79
	* sm/gpgsm.c (DEFAULT_CIPHER_ALGO): Change.

2022-12-01  NIIBE Yutaka  <gniibe@fsij.org>

	tests: Put a workaround for semihosted environment.
	+ commit 1b434111a18680a97e9997af71c261058cabc5fa
	* tests/openpgp/defs.scm [*win32*]: Use --build-prefix option.

	tests: More fix for semihosted environment.
	+ commit 594c3274d669ddebd145bef33013a66d3e03e27d
	* common/all-tests.scm: Conditionalize by *win32*.
	* tests/cms/Makefile.am (GPGSM): Add missing GPGSM.
	* tests/pkits/Makefile.am (TESTS_ENVIRONMENT): Add EXEEXT.

	tests: Support semihosted environment.
	+ commit f182c284fb2c093f8dbfc6a4b815762f36cc5217
	* Makefile.am (check-all): Add EXEEXT.
	* agent/all-tests.scm: Append EXEEXT.
	* common/all-tests.scm: Likewise.
	* g10/all-tests.scm: Likewise.
	* g13/all-tests.scm: Likewise.

	tests: Fix tests under cms.
	+ commit a9a1ee8726335c28398b41d39a5881c0f9bcb5de
	* tests/cms/all-tests.scm: Remove merge mistake.

	tests,w32: Fix for semihosted environment.
	+ commit e1e26a49bf2c8c74360594ced29286c7dca468e9
	* tests/cms/Makefile.am (OLD_TESTS_ENVIRONMENT): Add EXEEXT.

2022-11-30  NIIBE Yutaka  <gniibe@fsij.org>

	w32: Fix for tests on semihosted environment.
	+ commit 50c65153605042863fda59fe2ec837f1a7b14658
	* Makefile.am (all-local): Make links with EXEEXT.

	w32: Fix gnupg_unsetenv.
	+ commit 8e8971403f7510f4d7c746fc0ffcdef73c0baf8b
	* common/sysutils.c (gnupg_unsetenv): Don't use nonstandard extension
	of "NAME", but "NAME=".

2022-11-29  Werner Koch  <wk@gnupg.org>

	wkd: New option --add-revocs and some fixes.
	+ commit c3f9f2d497b174ceb12c2dde35225a6ba016c835
	* tools/gpg-wks.h (opt): Add add_revocs.
	* tools/wks-util.c (wks_get_key): Add arg 'binary'.
	(wks_armor_key): New.
	(wks_find_add_revocs): New.
	(wks_cmd_install_key): Get key in binary mode and add revocations if
	enabled.
	* tools/gpg-wks-client.c (oAddRevocs): New.
	(opts): Add --add-revocs.
	(parse_arguments): Set option,
	(command_send): Get key in binary mode, add revocations if enabled,
	and explictly armor key.  Remove kludge to skip the Content-type line
	in no_encrypt mode.

	(mirror_one_keys_userid): Always filter the key to get rid of the
	armor as received from dirmngr.  Add revocations from the local
	keyring.

	wkd: Make use of --debug extprog.
	+ commit 34fafa50f19c708abc9119aa6369425c47317da5
	* tools/wks-util.c (debug_gpg_invocation): New.
	(get_key_status_cb): Enable debug output.
	(wks_get_key): Show gpg invocation.
	(wks_list_key): Ditto.
	(wks_filter_uid): Ditto.

2022-11-28  Werner Koch  <wk@gnupg.org>

	gpg: New export-filter export-revocs.
	+ commit c985b52e71a83d14099f00f80e3588bd3ad28b98
	* g10/options.h (EXPORT_REVOCS): New.
	* g10/export.c (export_select_filter): New.
	(struct export_filter_attic_s): Add field.
	(cleanup_export_globals): Cleanup.
	(parse_export_options): Add option "export-revocs".
	(parse_and_set_export_filter): Parse the select type.
	(do_export_revocs): New.
	(do_export_stream): Add a way to select things for export.

2022-11-28  NIIBE Yutaka  <gniibe@fsij.org>

	gpg: Fix double-free in gpg --card-edit.
	+ commit a4698d0fb20a11bcb5f5e4485ee334af02b48ee1
	* g10/card-util.c (change_name): Don't free ISONAME here.

2022-11-28  Werner Koch  <wk@gnupg.org>

	gpg: Make --require-compliance work with out --status-fd.
	+ commit 2aacd843ad6bab248f7d2bfc727d44a7f95811e5
	* g10/mainproc.c (proc_encrypted): Set complaince_de_vs also if
	require-compliance is set.

2022-11-25  Werner Koch  <wk@gnupg.org>

	gpg: New option --list-filter.
	+ commit 1324dc3490b02c4ff818655db1474c594f04e4ec
	* g10/gpg.c (oListFilter): New.
	(opts): Add --list-filter.
	(main): Parse oListFilter.
	* g10/keylist.c: Include init.h and recsel.h.
	(struct list_filter_s, list_filter): New.
	(release_list_filter): New.
	(cleanup_keylist_globals): New.
	(parse_and_set_list_filter): New.
	(list_keyblock): Implement --list-filter type "select".

	* g10/import.c (impex_filter_getval): Add scope support and new
	property names "key-size", "algostr", "origin", "lastupd", and "url".

	dirmngr: Silence ocsp debug output.
	+ commit d70779bdc60c40c895dcdcb846c10a7b9703263b
	* dirmngr/ocsp.c (check_signature_core): No debug output

2022-11-24  NIIBE Yutaka  <gniibe@fsij.org>

	tests: Fix to support --enable-all-tests and variants.
	+ commit 1246e16432b4240ad81c0bd757d7458b609dfd96
	* tests/gpgscm/tests.scm (test::scm): Add VARIANT argument.
	(tests::new): Likewise.
	(open-log-file, report): Support VARIANT.
	* tests/gpgme/all-tests.scm (setup-c, setup-py): Follow the change.
	* tests/cms/all-tests.scm: Likewise.
	* tests/cms/run-tests.scm: Likewise.
	* tests/migrations/all-tests.scm: Likewise.
	* tests/migrations/run-tests.scm: Likewise.
	* tests/openpgp/all-tests.scm: Likewise.
	* tests/openpgp/run-tests.scm: Likewise.

	tests:w32: Fix for non-dot file name for Windows.
	+ commit 7071f3076287f2967ab512eed46b868970702fac
	* tests/migrations/from-classic.scm (assert-migrated): Handle the case
	on Windows.

	tests:gpgscm:w32: Fix for GetTempPath.
	+ commit 7fe524e1828ec80f1d776711614e5620a42779f8
	* tests/gpgscm/ffi.c (do_get_temp_path): Remove the last backslash.

	tests: Keep .log files in objdir.
	+ commit 1372b17731872d6db732b7623b27ea3e90db6331
	* tests/gpgscm/tests.scm (open-log-file): Keep the log file in objdir.

	tests: Use 233 for invalid value of FD.
	+ commit 7ab2e4386ffe6e435129f84860e1d90779268197
	* tests/openpgp/issue2941.scm: Use 233.

2022-11-18  NIIBE Yutaka  <gniibe@fsij.org>

	w32: Fix gnupg_tmpfile for possible failure.
	+ commit ce5bed2800e59d5866b60648ee6487e5fcb72012
	* common/sysutils.c (gnupg_tmpfile): Use different value for next
	attempt.

2022-11-17  Werner Koch  <wk@gnupg.org>

	scd: Redact --debug cardio output of a VERIFY APDU.
	+ commit 9f7ff43672478b213582125a7d288c96c5bb73b9
	* scd/apdu.c (pcsc_send_apdu) [DBG_CARD_IO]: Detect and redact a
	VERIFY.
	(send_apdu_ccid): Ditto.

2022-11-16  NIIBE Yutaka  <gniibe@fsij.org>

	common: Remove Windows CE support in common.
	+ commit 18a3ce1c9bd767e88d426cf618441a3313888473
	* common/Makefile.am (HAVE_W32CE_SYSTEM): Remove conditional build.
	(common_sources): Remove exechelp-w32ce.c.
	* common/asshelp.c [HAVE_W32CE_SYSTEM]: Remove the support.
	* common/common-defs.h [HAVE_W32CE_SYSTEM]: Likewise.
	* common/dotlock.c [HAVE_W32CE_SYSTEM]: Likewise.
	* common/exechelp-posix.c [HAVE_W32CE_SYSTEM]: Likewise.
	* common/exechelp-w32.c [HAVE_W32CE_SYSTEM]: Likewise.
	* common/gettime.c [HAVE_W32CE_SYSTEM]: Likewise.
	* common/exechelp-w32ce.c: Remove.
	* po/POTFILES.in: Update to remove common/exechelp-w32ce.c.

2022-11-15  Werner Koch  <wk@gnupg.org>

	gpgsm: Fix colon outout of ECC encryption certificates.
	+ commit f5c3f13609361dfeb03722161b1fc93f5a33dcae
	* sm/keylist.c (print_capabilities): Add arg algo and use it to check
	for ECC capabilities.
	(list_cert_colon): Call with algo.

	scd:nks: Fix ECC signing if key not given by keygrip.
	+ commit 2c4757352da6363842887f786e3bc26f27a40591
	* scd/app-nks.c (keygripstr_from_pk_file): Set r_algo if not in cache.

	dirmngr: Fix verification of ECDSA signed CRLs.
	+ commit 868dabb4027a03f4ce39be3c143b480bccde1a63
	* dirmngr/crlcache.c (finish_sig_check): Use raw value for the data.

2022-11-10  Werner Koch  <wk@gnupg.org>

	agent: Allow trustlist on Windows in Unicode homedirs.
	+ commit 80ccded0421e45098a839b713f38f709b7567a96
	* agent/trustlist.c (agent_marktrusted): Use gnupg_access.

	gpg: Fix verification of cleartext signatures with overlong lines.
	+ commit 976e9d608367f481f21ab13ec6125dc8ab3ad345
	* g10/armor.c (fake_packet): Indicate truncated lines by inserting a
	formfeed.
	(armor_filter): Replace assert by log_assert.

2022-11-09  NIIBE Yutaka  <gniibe@fsij.org>

	gpg: Move w32_system function.
	+ commit 8afa9735a6968ccd4be4e22a98d5b775df0c695a
	* g10/exec.h (w32_system): Not exposed.
	* g10/exec.c (w32_system): Move to ...
	* g10/photoid.c: here.

2022-11-04  Werner Koch  <wk@gnupg.org>

	gpg: New option --quick-update-pref.
	+ commit d40d23b233f0b2e6fc25937f1632ac5b9d4f61e5
	* g10/gpg.c (aQuickUpdatePref): New.
	(opts): Add --quick-update-pref.
	(main): Implement.
	* g10/keyedit.c (keyedit_quick_update_pref): New.
	(menu_set_preferences): Add arg 'unattended' and adjust caller.

	gpg: New list-options show-pref and show-pref-verbose.
	+ commit 811cfa34cb3e7166f0cf1f94565504dee21cd9f5
	* g10/options.h (LIST_SHOW_PREF): New.
	(LIST_SHOW_PREF_VERBOSE): New.
	* g10/gpg.c (parse_list_options): Add new options.
	* g10/keyedit.c (show_prefs): Factor code out to ...
	* g10/keylist.c (show_preferences): new.
	(list_keyblock_print): Call show_preferences.

	tests: Add tests to check that OCB is only used for capable keys.
	+ commit 1be272d04e767c467d4ad79ca3a1cb96ee9ce4e1
	* tests/openpgp/samplekeys/ed25519-cv25519-sample-2.asc: New.
	* tests/openpgp/samplekeys/ed25519-cv25519-sample-1.asc: Add AEAD
	preference.
	* tests/openpgp/defs.scm (tr:gpgstatus): New.
	(create-legacy-gpghome): Also import .key private keys.
	* tests/openpgp/encrypt.scm: Add OCB tests.

2022-11-02  Werner Koch  <wk@gnupg.org>

	gpg: Make --list-packets work w/o --no-armor for plain OCB packets.
	+ commit 82c4f26b67e9eaaaae14e8d914fb6bb86dcbfb7e
	* g10/armor.c (is_armored): Add PKT_ENCRYPTED_AEAD.

	tests: Add symmetric decryption tests.
	+ commit e284f62b1c6d710eb0c22cb2924a98350766ed5b
	* tests/openpgp/decrypt-sym.scm: New.
	* tests/openpgp/samplemsgs/enc-sym-cfb-1.asc: New.
	* tests/openpgp/samplemsgs/enc-sym-cfb-2.asc: New.
	* tests/openpgp/samplemsgs/enc-sym-ocb-1.asc: New.
	* tests/openpgp/samplemsgs/enc-sym-ocb-2.asc: New.

	tests: Add tr:assert-same function.
	+ commit 9b24d8ab5018c20dc6c917b5a89b3b1fcda3e6f9
	* tests/gpgscm/tests.scm (tr:assert-same-string): New.
	* tests/openpgp/shell.scm: Option to drop into a REPL.

	agent: Avoid blanks in the ssh key's comment.
	+ commit bd612f23607d2c4d4adbe3a3ddc28a1711f5308b
	* agent/command-ssh.c (card_key_available): Replace blanks.

2022-11-02  NIIBE Yutaka  <gniibe@fsij.org>

	build: Update m4 files.
	+ commit 2c1aaed621918d3808e904a34ddcfcb79eb89d96
	* m4/ksba.m4: Update from libksba master.
	* m4/libassuan.m4: Update from libassuan master.
	* m4/libgcrypt.m4: Update from libgcrypt master.
	* m4/npth.m4: Update from npth master.
	* m4/ntbtls.m4: Update from npth master.

2022-10-31  Werner Koch  <wk@gnupg.org>

	gpg: Merge --rfc4880bis features into --gnupg.
	+ commit 4583f4fe2e11b3dd070066628c3f16776cc74f72
	* g10/gpg.c (oRFC4880bis): Remove.
	(opts): Make --rfc4880bis a Noop.
	(compliance_options): Make rfc4880bis to gnupg.
	(set_compliance_option): Remove rfc4880bis stuff.
	(main): Ditto.  Note that this now activates the --mimemode option.
	* g10/keygen.c (keygen_set_std_prefs): Remove rfc4880bis protection.
	(keygen_upd_std_prefs): Always announce support for v5 keys.
	(read_parameter_file): Activate the v4 and v5 keywords.

	gpg: Allow only OCB for AEAD encryption.
	+ commit 5a2cef801d3506bedd700db1a5d88b7a75c4083b
	* g10/gpg.c (opts): New option--force-ocb as alias for force-aead.
	Turn --aead-algo and --personal-aead-preferences into dummy options.
	(build_list_md_test_algo, build_list_aead_algo_name): Remove.
	(my_strusage): Remove output of AEAD algos.
	(main): Remove code from the --aead options.
	* g10/encrypt.c (encrypt_seskey): Make file local.
	(use_aead): Remove requirement for rfc4880bis.  Always return
	AEAD_ALGO_OCB.
	* g10/main.h (DEFAULT_AEAD_ALGO): Removed unused macro.
	* g10/misc.c (default_aead_algo): Remove.
	* g10/pkclist.c (select_aead_from_pklist): Return AEAD_ALGO_OCB or 0.
	(select_algo_from_prefs): Remove personal AEAD algo setting.
	* g10/keygen.c (keygen_set_std_prefs): Remove AEAD preference option
	parsing.
	* g10/options.h (opt): Remove def_aead_algo and personal_aead_prefs.

	gpg: New option --compatibility-flags.
	+ commit 03f04dfb9a03f0b10dfd7e01ee06df7495b95667
	* g10/gpg.c (oCompatibilityFlags): New.
	(opts): Add option.
	(compatibility_flags): New list.
	(main): Set flags and print help.
	* g10/options.h (opt): Add field compatibility_flags.

2022-10-28  Werner Koch  <wk@gnupg.org>

	gpgsm: Also announce AES256-CBC in signatures.
	+ commit b71a14238dd2e2a62111cba492a494f562da3f6c
	* sm/sign.c (gpgsm_sign): Add new capability.

	gpg: Fix trusted introducer for user-ids with only the mbox.
	+ commit 0ef54e644f1945337c5c492dbcad898baee83026
	* g10/trustdb.c (check_regexp): Kludge to match user-ids with only an
	mbox.

	gpg: Import stray revocation certificates.
	+ commit 7aaedfb10767c74f3e6868dd1563cbbf1282ab2f
	* g10/kbnode.c (new_kbnode2): New.
	* g10/import.c (delete_inv_parts): New arg r_otherrevsigs to store
	misplaced revocations.
	(import_revoke_cert): Allow to pass an entire list.
	(import_one): Import revocations found by delete_inv_parts.

2022-10-28  NIIBE Yutaka  <gniibe@fsij.org>

	agent: Automatically convert to extended key format by KEYATTR.
	+ commit ed6eb9019248dbbd36f16e5b412f5a115057bcfc
	* agent/command.c (cmd_keyattr): Reject when disabled extended key
	format.  Handle the case when key is in non-extended format.

2022-10-25  Werner Koch  <wk@gnupg.org>

	card: New commands "gpg" and "gpgsm".
	+ commit 9c4691c73e9ebd0126cf4c456b83b6ad6eeaed74
	* tools/gpg-card.c: Include exechelp.h
	(cmd_gpg): New.
	(enum cmdids): Add cmdGPG and cmdGPGSM.
	(cmds): Add commands "gpg" and "gpgsm"
	(dispatch_command, interactive_loop): Call them.

	card: Also show fingerprints of known X.509 certificates.
	+ commit f3198f9d705afe3cd26f4ee7ca42633e62fadc6a
	* tools/gpg-card.c (list_one_kinfo): Show fpr.

	scd:nks: Support non-ESIGN signing with the Signature Card v2.
	+ commit 8361e13ef212f5be35b613084916b5ebad2714c6
	* scd/app-nks.c (do_sign): Handle ECC for NKS cards

	gpgsm: Allow ECC encryption keys with just keyAgreement specified.
	+ commit 6bd0dd762c0d6b6860894152cb51e23b0a55bfba
	* sm/certlist.c (cert_usage_p): Allow keyAgreement for ECC.
	* sm/fingerprint.c (gpgsm_is_ecc_key): New.

	gpgsm: Use macro constants for cert_usage_p.
	+ commit 50efcf2eb0d158dd829f8cda90ac81d0b515d46d
	* sm/certlist.c (USE_MODE_): New.  Use them for easier reading.

2022-10-24  NIIBE Yutaka  <gniibe@fsij.org>

	build: Update gpg-error.m4.
	+ commit b9d05774f565a895a41764310308984a33be3c84
	* m4/gpg-error.m4: Update from libgpg-error 1.46.

2022-10-20  NIIBE Yutaka  <gniibe@fsij.org>

	agent,common,dirmngr,tests,tools: Remove spawn PREEXEC argument.
	+ commit de01fb8131fd8d11de50e21b7351af99a3515a94
	* common/exechelp-posix.c (do_exec): Remove PREEXEC argument.
	(gnupg_spawn_process): Likewise.
	(gnupg_spawn_process_fd): Follow the change of do_exec.
	(gnupg_spawn_process_detached): Likewise.
	* common/exechelp-w32.c (gnupg_spawn_process): Remove PREEXEC.
	* common/exechelp.h (gnupg_spawn_process): Remove PREEXEC.
	* agent/genkey.c (do_check_passphrase_pattern): Follow the change.
	* common/exectool.c (gnupg_exec_tool_stream): Likewise.
	* dirmngr/ldap-wrapper.c (ldap_wrapper): Likewise.
	* tests/gpgscm/ffi.c (do_spawn_process): Likewise.
	* tools/gpgconf-comp.c (gc_component_check_options): Likewise.
	(retrieve_options_from_program): Likewise.
	* tools/gpgconf.c (show_versions_via_dirmngr): Likewise.
	* tools/gpgtar-create.c (gpgtar_create): Likewise.
	* tools/gpgtar-extract.c (gpgtar_extract): Likewise.
	* tools/gpgtar-list.c (gpgtar_list): Likewise.

2022-10-18  NIIBE Yutaka  <gniibe@fsij.org>

	gpg: Move NETLIBS after GPG_ERROR_LIBS.
	+ commit 0f13ccd0e070ef87380662fe54304a784fb2cd80
	* g10/Makefile.am (LDADD): Remove NETLIBS.
	(gpg_LDADD, gpgv_LDADD): Add NETLIBS after GPG_ERROR_LIBS.
	((t_keydb_LDADD, t_keydb_get_keyblock_LDADD): Likewise.
	(t_stutter_LDADD): Likewise.

2022-10-14  NIIBE Yutaka  <gniibe@fsij.org>

	gpg: Use GCRY_KDF_ONESTEP_KDF with newer libgcrypt in future.
	+ commit cf2d52cfc3ee4e557bdd093a29dc6409c1000b1a
	* g10/ecdh.c (derive_kek): Use GCRY_KDF_ONESTEP_KDF.

	common,w32: Fix struct stat on Windows.
	+ commit fe28e088a9c2d4945b720b045b4fa74d2de3d895
	* common/sysutils.c [HAVE_W32_SYSTEM] (gnupg_stat): Select
	appropriate structure.

	agent,w32: Support Win32-OpenSSH emulation by gpg-agent.
	+ commit c51139f2bc546c6bd4548e24a604f2178a2b8366
	* agent/agent.h (start_command_handler_ssh_stream): New.
	* agent/command-ssh.c (start_command_handler_ssh_stream): New.
	* agent/gpg-agent.c (oWin32OpenSSHSupport): New.
	(W32_DEFAILT_AGENT_PIPE_NAME): New.
	(main): Add oWin32OpenSSHSupport support.
	(win32_openssh_thread): New.
	(handle_connections): Spawn win32_openssh_thread.
	* configure.ac (NEED_GPGRT_VERSION): Require libgpg-error 1.46.

	common: Don't use FD2INT for POSIX-only code.
	+ commit 5f1ce6cef5fe2d4e0fa973316744f9a23af6a39c
	* common/iobuf.c [!HAVE_W32_SYSTEM] (iobuf_get_filelength): Use fp.

	dirmngr: Fix build with no LDAP support.
	+ commit 7011286ce6e1fb56c2989fdafbd11b931c489faa
	* dirmngr/server.c [USE_LDAP] (start_command_handler): Conditionalize.

2022-10-13  Werner Koch  <wk@gnupg.org>

	Release 2.3.8.
	+ commit 6f12f952dad1783710ded2f152f058065b5941fb


2022-10-13  Alexander Kulbartsch  <alexander.kulbartsch@gnupg.com>

	wkd: gpg-wks-client --send checks if build with sendmail support.
	+ commit 55eef71dbed7b98dc5b1a3750d10c8cb0df2cff2
	* tools/gpg-wks-client.c (main): Return GPG_ERR_NOT_IMPLEMENTED if
	gnupg was build without sendmail support.  (NAME_OF_SENDMAIL=="")

2022-10-12  Werner Koch  <wk@gnupg.org>

	agent: Introduce attribute "Remote-list" to KEYINFO.
	+ commit 1383aa475059e212fcd61c85046bfc80fcb8e708
	* agent/command.c (do_one_keyinfo): Add arg list_mode.  Check
	attribute Remote-list.
	(cmd_keyinfo): Change semantics to return nothing in restricted list
	mode.

2022-10-07  Werner Koch  <wk@gnupg.org>

	wkd: Implement --blacklist option for gpg-wks-client.
	+ commit b0b4e24c4fa80c10d310a229f5a0c65a57ad9393
	* tools/gpg-wks-client.c (blacklist_array, blacklist_array_len): New.
	(parse_arguments): Install blacklist.
	(read_file): New.
	(cmp_blacklist, add_blacklist, is_in_blacklist): New.
	(mirror_one_key): Check list.
	* tools/gpg-wks.h (opt): Remove field blacklist.

	wkd: Restrict gpg-wks-client --mirror to the given domains.
	+ commit 0a151548b623813d48516a4629b7c3884875a384
	* tools/gpg-wks-client.c (domain_matches_mbox): New.
	(mirror_one_key): Skip non-matching domains.
	(command_mirror): Change args to allow for several domains.

	wkd: Silence gpg-wks-client diagnostics from gpg.
	+ commit 4364283f757fceab454d48d461a9f88c31247a07
	* tools/gpg-wks-client.c (add_user_id): PAss --quiet to gpg unless we
	are running in double verbose mode.
	(decrypt_stream): Ditto
	(encrypt_response): Ditto.
	(mirror_one_keys_userid): Ditto.
	* tools/wks-util.c (wks_get_key): Ditto.
	(wks_list_key): Ditto.
	(wks_filter_uid): Ditto.

	common: Protect against a theoretical integer overflow in tlv.c.
	+ commit 94d13f53a3b4c49472db1b17f12844c94a69aba4
	* common/tlv.c (parse_ber_header): Protect agains integer overflow.

2022-10-07  NIIBE Yutaka  <gniibe@fsij.org>

	gpg: Fix wrong use of FD2INT with iobuf_fdopen_nc.
	+ commit d68a803c4760415204fb3e7af4c0195ee2cd09ad
	* g10/decrypt.c (decrypt_message_fd): Use INPUT_FD directly.
	* g10/encrypt.c (encrypt_crypt): Use FILEFD directly.

2022-10-06  Werner Koch  <wk@gnupg.org>

	wkd: New command --mirror for gpg-wks-client.
	+ commit 7ccd489aa2e5c5ef6c4554c9f04dd74394b43409
	* tools/gpg-wks-client.c (aMirror,oBlacklist,oNoAutostart): New.
	(opts): Add ----mirror, --no-autostart, and --blacklist.
	(parse_arguments): Parse new options.
	(main): Parse common.conf.  Implement aMirror.
	(mirror_one_key_parm): New.
	(mirror_one_keys_userid, mirror_one_key): New.
	(command_mirror): New.

	* tools/gpg-wks.h (struct uidinfo_list_s): Add fields flags.
	* tools/wks-util.c (wks_cmd_install_key): Factor some code out to ...
	(wks_install_key_core): new.

	* tools/call-dirmngr.c (wkd_dirmngr_ks_get): New.

2022-10-05  Werner Koch  <wk@gnupg.org>

	dirmngr: Support paged LDAP mode for KS_GET.
	+ commit 7a01e806eac4cd7a65eaf3e17dcd2f117ec2d327
	* dirmngr/ks-engine-ldap.c (PAGE_SIZE): New.
	(struct ks_engine_ldap_local_s): Add several new fields.
	(ks_ldap_clear_state): Release them.
	(search_and_parse): Factored out from ks_ldap_get and extended to
	support the paged mode.
	(ks_ldap_get):  Implement the pages mode for --first and --next.
	* dirmngr/server.c (cmd_ks_get): Provide a dummy passphrase in --first
	mode.
	* dirmngr/Makefile.am (dirmngr_LDADD): Add LBER_LIBS.

2022-10-04  Werner Koch  <wk@gnupg.org>

	dirmngr: New options --first and --next for KS_GET.
	+ commit 4de98d4468f37bfb8352426830d5d5642ded7536
	* dirmngr/server.c (cmd_ks_get): Add option --first and --next.
	(start_command_handler): Free that new ldap state.
	* dirmngr/ks-engine-ldap.c (struct ks_engine_ldap_local_s): New.
	(ks_ldap_new_state, ks_ldap_clear_state): New.
	(ks_ldap_free_state): New.
	(return_one_keyblock): New.  Mostly factored out from ....
	(ks_ldap_get): here.  Implement --first/--next feature.

	* dirmngr/ks-action.c (ks_action_get): Rename arg ldap_only to
	ks_get_flags.
	* dirmngr/ks-engine.h (KS_GET_FLAG_ONLY_LDAP): New.
	(KS_GET_FLAG_FIRST): New.
	(KS_GET_FLAG_NEXT): New.

	* dirmngr/dirmngr.h (struct server_control_s): Add member
	ks_get_state.
	(struct ks_engine_ldap_local_s): New forward reference.

2022-09-30  Werner Koch  <wk@gnupg.org>

	gpg: Show just keyserver and port with --send-keys.
	+ commit 3390951ffd692fed61d5baa03385a66db3d95607
	* g10/call-dirmngr.c (ks_status_cb): Mangle the keyserver url

2022-09-29  Werner Koch  <wk@gnupg.org>

	dirmngr: Minor fix for baseDN fallback.
	+ commit 11aa5a93a754fe978d0f35d7fbeb4767b6b6df05
	* dirmngr/ks-engine-ldap.c (my_ldap_connect): Avoid passing data
	behind the EOS.
	(interrogate_ldap_dn): Stylistic change.

	gpg: Avoid to emit a compliance mode line if libgcrypt is non-compliant.
	+ commit 2e22184ba5ac85b1da0209c1a4c72e2459b5c6eb
	* g10/encrypt.c (check_encryption_compliance): Check gcrypt compliance
	before emitting an ENCRYPTION_COMPLIANCE_MODE status.

	gpg: Fix assertion failure due to errors in encrypt_filter.
	+ commit 46f9b0071f54191cbf05ae23b24961ac6f43de4e
	* common/iobuf.c (iobuf_copy): Use log_assert.  Explicitly cast error
	return value.
	* g10/build-packet.c (do_plaintext): Check for iobuf_copy error.

	* g10/encrypt.c (encrypt_filter): Immediately set header_okay.

	gpg: Make --require-compliance work for -se.
	+ commit a51067a21f688086bd8e44234a88ae367582cc76
	* g10/encrypt.c (encrypt_crypt, encrypt_filter): Factor common code
	out to ...
	(create_dek_with_warnings): new
	(check_encryption_compliance): and new.

	* g10/encrypt.c (encrypt_filter): Add the compliance check.

2022-09-29  NIIBE Yutaka  <gniibe@fsij.org>

	dirnmgr: Fix the function prototype.
	+ commit 530d709607e54465ce47c1fc7d2554ea3b0bea6b
	* dirmngr/ldap-wrapper.c (ldap_wrapper_wait_connections): It's with
	no arguments.

	dirmngr: Change interrogate_ldap_dn for better memory semantics.
	+ commit 4b2066afb4988c32a030330acf51b7b0dc190041
	* dirmngr/ks-engine-ldap.c (interrogate_ldap_dn): Return BASEDN found,
	memory allocated.
	(my_ldap_connect): Follow the change, removing needless allocation.

2022-09-29  Joey Berkovitz  <joeyberkovitz@gmail.com>

	dirmngr: Interrogate LDAP server when base DN specified.
	+ commit 3257385378bb3f19ebf089538f0efe2154487989
	* dirmngr/ks-engine-ldap.c (my_ldap_connect): interrogate LDAP
	server when basedn specified.

2022-09-28  Werner Koch  <wk@gnupg.org>

	dirmngr: Fix lost flags during LDAP upload.
	+ commit 536b5cd6630506bb4bece61eb34b1d0a1c611231
	* dirmngr/ldapserver.c (ldapserver_parse_one): Turn LINE into a const.
	Use strtokenize instead of strtok style parsing.

	gpg: Silence some diagnostics.
	+ commit 1b0c17dfab5093dea378e4b2d4649cec5be0c84d
	* g10/parse-packet.c (enum_sig_subpkt): Show "buffer shorter than
	subpacket" only in debug mode.
	(parse_signature): Show "signature packet without timestamp / keyid"
	only in souble verbose mode.

	* g10/sig-check.c (check_signature_metadata_validity): Use ISO
	timestamp in UTC for the signature expired note.

	dirmngr: New server flag "areconly" (A-record-only)
	+ commit d65a0335e5cb947dc527d62eccf7c2a3cdbcc788
	* dirmngr/dirmngr.h (struct ldap_server_s): Add field areconly.
	* dirmngr/ldapserver.c (ldapserver_parse_one): Parse "areconly"
	* dirmngr/ks-engine-ldap.c (my_ldap_connect): Implement this flag.
	* dirmngr/dirmngr_ldap.c: Add option --areconly
	(connect_ldap): Implement option.
	* dirmngr/ldap.c (run_ldap_wrapper): Add and pass that option.

2022-09-26  Werner Koch  <wk@gnupg.org>

	dirmngr: Support gpgMailbox for mode MAILSUB and MAILEND.
	+ commit acabbc0078d809d8f636c59dcb8735ab55ddecf9
	* dirmngr/ks-engine-ldap.c (keyspec_to_ldap_filter): Use gpgMailbox if
	server supports this.

	gpg: Don't consider unknown keys as non-compliant while decrypting.
	+ commit 1b2ac21c4cf763be25bdd98c84d9b79b85a38315
	* g10/mainproc.c (proc_encrypted):  Change compliance logic.

2022-09-26  NIIBE Yutaka  <gniibe@fsij.org>

	dirmngr: Factor out interrogate_ldap_dn function.
	+ commit 993820c315216584e23d36299920007abfeb3a32
	* dirmngr/ks-engine-ldap.c (interrogate_ldap_dn): New.

2022-09-21  Werner Koch  <wk@gnupg.org>

	tools: Need to set the dir for common.conf.
	+ commit ed54fd53d1dc786c350b0c41e71afe349518f580
	* tools/gpg-connect-agent.c (main): Set dirs.
	* tools/gpg-card.c (main): Ditto.

2022-09-16  Werner Koch  <wk@gnupg.org>

	dirmngr: Fix CRL DP error fallback to other schemes.
	+ commit 0c8299e2b56ef2e1d241a7cf4bf630993e4ec39f
	* dirmngr/crlcache.c (crl_cache_reload_crl): Rework the double loop.
	Remove the unused issuername_uri stuff.

2022-09-16  NIIBE Yutaka  <gniibe@fsij.org>

	dirmngr:dns,doc,gpg: Fix for noreturn for C11.
	+ commit d5e29991c0c700d606d4ee4158cfd248bc1d3fd9
	* dirmngr/dns.c: Use __noreturn__.
	* doc/yat2m.c: Likewise.
	* g10/main.h: Likewise.

2022-09-15  NIIBE Yutaka  <gniibe@fsij.org>

	build: Use LDAP_DEPRECATED to detect ldap library.
	+ commit ddc6f7d194918791ac9dff0e5af4b80933189afd
	* m4/ldap.m4: Define LDAP_DEPRECATED when test.

2022-09-14  Werner Koch  <wk@gnupg.org>

	tests: Restrict the use of gpgconf.ctl to make check.
	+ commit 50d12860ef21e8480474fd94a0b4465d0339086d
	* common/homedir.c (unix_rootdir): Add ".enable" statement to
	gpgconf.ctl
	* tests/gpgconf.ctl.in: Use this statement.
	* tests/cms/Makefile.am (OLD_TESTS_ENVIRONMENT): Enable .enable.
	(TESTS_ENVIRONMENT): Ditto.
	* tests/gpgme/Makefile.am (TESTS_ENVIRONMENT): Ditto.
	* tests/migrations/Makefile.am (TESTS_ENVIRONMENT): Ditto.
	* tests/openpgp/Makefile.am (TESTS_ENVIRONMENT): Ditto.
	* tests/pkits/Makefile.am (TESTS_ENVIRONMENT): Ditto.
	* tests/tpm2dtests/Makefile.am (TESTS_ENVIRONMENT): Ditto.

2022-09-14  NIIBE Yutaka  <gniibe@fsij.org>

	common: Fix for GPG_ERR_SOURCE_DEFAULT check.
	+ commit e70e09c3d5e7f010f2b9a8c5749710e93ef223be
	* common/init.h: Remove GPG_ERR_SOURCE_UNKNOWN check.

	kbx: Fix for GPG_ERR_SOURCE_DEFAULT.
	+ commit d55728539f0edfa660dc24775d3dfd1471aebd3b
	* kbx/keybox-defs.h (GPG_ERR_SOURCE_DEFAULT): Define here, when not
	defined.
	* kbx/kbxutil.c: Let keybox-defs.h include gpg-error.h.

	dirmngr: Fix for USE_LDAP.
	+ commit 598884699dfc5966cd70f32c77fb454f26df63ff
	* dirmngr/ks-action.c [USE_LDAP] (ks_action_help): Recover variables.
	* dirmngr/server.c [USE_LDAP] (dirmngr/server.c): Likewise.

	common: Fix t-recsel.
	+ commit 0b532627e8323a0c7c28e8ed23afd849b7f8b853
	* common/t-recsel.c (main): Don't need to call init_common_subsystems.

	dirmngr:dns: Fixes for function prototypes.
	+ commit 23d7b7cfb0f9a0f57efe6f7b676a2c538f286b81
	* dirmngr/dns.c (dns_a_parse0, dns_a_push0, dns_a_cmp0): New.
	(dns_a_print0, dns_aaaa_parse0, dns_aaaa_cmp0): New.
	(dns_aaaa_print0, dns_mx_parse0, dns_mx_push0, dns_mx_cmp0): New.
	(dns_mx_print0, dns_mx_cname0, dns_ns_parse0, dns_ns_push0): New.
	(dns_ns_cmp0, dns_ns_print0, dns_ns_cname0, dns_cname_parse0): New.
	(dns_cname_push0, dns_cname_cmp0, dns_cname_print0): New.
	(dns_cname_cname0, dns_soa_parse0, dns_soa_push0): New.
	(dns_soa_cmp0, dns_soa_print0, dns_srv_parse0, dns_srv_push0): New.
	(dns_srv_cmp0, dns_srv_print0, dns_srv_cname0, dns_opt_parse0): New.
	(dns_opt_push0, dns_opt_cmp0, dns_opt_print0, dns_ptr_parse0): New.
	(dns_ptr_push0, dns_ptr_cmp0, dns_ptr_print0, dns_ptr_cname0): New.
	(dns_sshfp_parse0, dns_sshfp_push0, dns_sshfp_cmp0): New.
	(dns_sshfp_print0, dns_txt_parse0, dns_txt_push0, dns_txt_cmp0): New.
	(struct dns_rrtype): Add function prototypes.
	(dns_rrtypes): Use "0" variant of functions.
	(DNS_PRAGMA_PUSH, DNS_PRAGMA_POP): Remove.

	agent,dirmngr,gpg,scd: Clean up for modern compiler.
	+ commit 3d7dbf16618db4d0dc602daadbde098d4a14b528
	* agent/protect.c (agent_get_shadow_info_type): It's a write only
	variable, useful for debugging.
	* g10/key-check.c (key_check_all_keysigs): Likewise.
	* g10/keyedit.c (show_basic_key_info, menu_expire): Likewise.
	* scd/app-sc-hsm.c (read_ef_prkd): Likewise.
	* dirmngr/crlfetch.c (fetch_next_ksba_cert): Initialize the vars.
	* dirmngr/ks-action.c (ks_action_help): Remove unused variables.
	* dirmngr/server.c (make_keyserver_item): Likewise.
	* dirmngr/validate.c (check_cert_sig): Initialize the variable.
	* scd/app-p15.c (select_and_read_record): Likewise.
	* tests/gpgscm/scheme.c (scheme_init_new): A function with no args.

2022-09-13  NIIBE Yutaka  <gniibe@fsij.org>

	tools:gpg-auth: Enhance it to support use case for login.
	+ commit e133bcb1cdf24f44741b48934108b596f8be8055
	* tools/Makefile.am: gpg-auth is one in libexec_PROGRAMS.
	* tools/gpg-auth.c: Support use by root for login user.

	gpg,common,scd,sm: Function prototype fixes for modern compiler.
	+ commit 87d4338ed1d258817d02701127431dc4029fd722
	* common/gettime.c (gnupg_get_time): It has no arguments.
	* common/signal.c (gnupg_block_all_signals): Likewise.
	(gnupg_unblock_all_signals): Likewise.
	* common/utf8conv.c (get_native_charset): Likewise.
	* g10/cpr.c (is_status_enabled, cpr_enabled): Likewise.
	* g10/getkey.c (getkey_disable_caches): Likewise.
	* g10/keygen.c (ask_expiredate): Likewise.
	* g10/passphrase.c (have_static_passphrase): Likewise.
	(get_last_passphrase): Likewise.
	* g10/tdbio.c (tdbio_is_dirty, tdbio_sync): Likewise.
	(tdbio_get_dbname, open_db, tdbio_db_matches_options): Likewise.
	(tdbio_read_nextcheck): Likewise.
	* g10/trustdb.c (how_to_fix_the_trustdb): Likewise.
	* scd/scdaemon.c (scd_get_socket_name): Likewise.
	* sm/passphrase.c (have_static_passphrase): Likewise.

2022-09-09  Ingo Klöcker  <dev@ingo-kloecker.de>

	sm: Fix reporting of bad passphrase error.
	+ commit a47b3a4087349f3873eb04a83dc2a0f512cacf86
	* sm/minip12.c (p12_parse): Set badpass flag to result in ctx.

	Revert "common: Add a default OpenPGP ECC mapping."
	+ commit 07b0786939c8316130314dfadc4933077ff6e36d
	This reverts commit 8e63e813c7404e1dae1def98e0f45d148f71082d.

	The change broke adding existing ECDH encryption subkeys to a key.

2022-09-07  Werner Koch  <wk@gnupg.org>

	agent: Don't start in --supervised mode if no-autostart is enabled.
	+ commit abf7d3c54546d4200eb88924beefc4d6b0f2dc90
	* agent/gpg-agent.c (main): Print an error message if no-autostart is
	set in common.conf.

	gpg: Support key flags for RENC, TIME, and GROUP.
	+ commit 0988e49c45d0fb73d0b536aa027bd114f9dc65a7
	* g10/packet.h (PUBKEY_USAGE_RENC): New.
	(PUBKEY_USAGE_TIME): New.
	(PUBKEY_USAGE_GROUP): New.
	* g10/getkey.c (parse_key_usage): Set the new key flags.
	* g10/keyedit.c (show_key_with_all_names_colon): Show the new key
	flags.
	* g10/keyid.c (usagestr_from_pk): Ditto
	* g10/keylist.c (print_capabilities): Ditto.
	* g10/keygen.c (parse_usagestr): Parse line and set new flags.
	(quickgen_set_para): Show flags.

2022-09-06  NIIBE Yutaka  <gniibe@fsij.org>

	tools:gpg-auth: Support use of pinpad.
	+ commit dc9227ca577dc7e34ca45de54a4903aecf31fb64
	* tools/gpg-auth.c (getpin): Use comment.
	(inq_needpin): Support "POPUPPINPADPROMPT" protocol response.

	common: Fix to determine ECC curve for SSH.
	+ commit f7e0b0c8a56ae03b0c3214c247ae61a939802617
	* common/ssh-utils.c (ssh_public_key_in_base64): Use standard name for
	ECC curve.

2022-09-05  NIIBE Yutaka  <gniibe@fsij.org>

	tools:gpg-auth: Show SSH key comment when asking PIN.
	+ commit 7a22f764d51881d0dd2151633b7615c8db664a61
	* tools/gpg-auth.c (authenticate): Put key_list->comment to assuan
	user's pointer.
	(getpin): Show SSH key comment if any.

2022-09-02  NIIBE Yutaka  <gniibe@fsij.org>

	tools: Fix gpg-auth.
	+ commit 3e5f99e6483d4298effe3731d3b60bc7ffbacf04
	* tools/gpg-auth.c (my_strusage): Fix usage string.
	(main): Use gpg-agent to get scdaemon socket.
	(authenticate): Return GPG_ERR_NOT_FOUND when no success.
	(ga_scd_connect): Use DBG_IPC.
	(inq_needpin): Change API for getpin.
	(put_second_field_cb): New, to get the second field.
	(scd_get_pubkey): Use put_second_field_cb.
	(ga_filter_by_authorized_keys): Put NULL at the PREV->next.
	(getpin): Flush the standard output.
