(no title)

kbx/

• keybox.h (KEYBOX_FLAG_BLOB_SECRET, KEYBOX_FLAG_BLOB_EPHEMERAL):

New.

• keybox-update.c (keybox_compress): Use it here instead of a

magic constant.
sm/

• fingerprint.c (gpgsm_get_fingerprint): Add caching.

(gpgsm_get_fingerprint_string): Use bin2hexcolon().
(gpgsm_get_fingerprint_hexstring): Use bin2hex and allocate only
as much memory as required.
(gpgsm_get_keygrip_hexstring): Use bin2hex.

• certchain.c (gpgsm_validate_chain): Keep track of the

certificate chain and reset the ephemeral flags.

• keydb.c (keydb_set_cert_flags): New args EPHEMERAL and MASK.

Changed caller to use a mask of ~0. Return a proper error code if
the certificate is not available.