Home GnuPG
Diffusion GnuPG def8f5f3d28b

gpg,gpgsm: Hide password in debug output also for asked passwords.

Description

gpg,gpgsm: Hide password in debug output also for asked passwords.

* g10/call-agent.c (agent_get_passphrase): Call
assuan_begin_confidential and assuan_end_confidential.
* sm/call-agent.c (gpgsm_agent_ask_passphrase): Ditto.

The drawback of this solution is that we don't see any IPC lines from
the assuan_transact. Everything else would require larger changes to
libassuan.

Details

Provenance
wernerAuthored on Nov 14 2023, 3:08 PM
Parents
rGe6cedba11900: gpgsm: Re-introduce the bad passphrase hint for pkcs#12.
Branches
Unknown
Tags
Unknown
Tasks
T6654: gpgsm: p12 passphrase visible in debug output