2007-04-27 Russ Allbery <rra@stanford.edu>

• VERSION.pm: PGP::Sign 0.20 released.
• t/basic.t: Add reasons for the skipped tests.
• t/locale.t: Likewise.
• t/pod.t: New check for POD formatting.

2007-04-22 Russ Allbery <rra@stanford.edu>

• makepm.PL: Unbuffer output since we're prompting the user.

2004-08-08 Russ Allbery <rra@stanford.edu>

• VERSION.pm: PGP::Sign 0.19 released.
• Sign.in: Remove e-mail addresses from HISTORY since the documentation is automatically put on the web.
• test.pl: Moved to...
• t/basic.t: ...here. Updated the search for the data directory accordingly. Print more information when detached signatures fail to verify.
• t/locale.t: New test.
• Sign.in (pgp_verify): Replaced verification code for GnuPG with code that uses --status-fd, so that it will work independent of locale. Documented limitations in the error reporting and recommended setting TMPDIR.

2004-08-04 Russ Allbery <rra@stanford.edu>

• VERSION.pm: PGP::Sign 0.18 released.
• debian/changelog: Add Debian packaging files.
• debian/compat: Likewise.
• debian/control: Likewise.
• debian/copyright: Likewise.
• debian/rules: Likewise.
• Makefile.PL: Also remove trustdb.gpg; GnuPG generates it automatically and the copy we were distributing contained nothing of interest.
• data/trustdb.gpg: Delete.

2002-06-28 Russ Allbery <rra@stanford.edu>

• VERSION.pm: PGP::Sign 0.17 released.
• Sign.in: Update CAVEATS to be slightly less optimistic about the chances of a major overhaul. Add a URL for RFC 2440 and this module's web site. Add a COPYRIGHT AND LICENSE section. Update the markup in the documentation.

2000-10-08 Russ Allbery <rra@stanford.edu>

• test.pl: Skip test 9 completely under GnuPG, as the whitespace behavior changes from release to release; GnuPG 1.0.2 is back to the previous behavior of releases before GnuPG 1.0.1.
• Makefile.PL: Added random_seed to @clean, created by GnuPG 1.0.2.

2000-02-12 Russ Allbery <rra@stanford.edu>

• VERSION.pm: PGP::Sign 0.16 released.
• Makefile.PL: Clean up all the additional junk created in data by running the test suite with PGP 6.5.
• makepm.PL: Also look for PGP 6.5, distinguish between PGP 2 and PGP 6 by checking its output when run without any arguments, and add the PGP6 PGPSTYLE.
• Sign.in: Added a waitpid() in pgp_verify() to avoid leaving zombies behind. Updated comments and documentation for the new support for PGP 6.5.2 and for the change to GnuPG so that it does the same whitespace munging as PGP.

2000-02-06 Russ Allbery <rra@stanford.edu>

• test.pl: The signature in test 9 now expected to fail on all versions of PGP, as the release GnuPG was changed to follow PGP in its handling of whitespace.

1999-06-13 Russ Allbery <rra@stanford.edu>

• VERSION.pm: PGP::Sign 0.15 released.
• Sign.in: Added a call to fcntl() to clear close-on-exec on the passphrase pipe in pgp_sign(), needed for Perl 5.005_03. Added a note to the documentation that PGP may want to write randseed.bin in its key ring directory.
• Makefile.PL: Sign.in and Sign.pm moved to the root directory, updated ABSTRACT.
• makepm.PL: Sign.in and Sign.pm moved to the root directory.

1999-02-10 Russ Allbery <rra@stanford.edu>

• VERSION.pm: PGP::Sign 0.14 released.
• PGP/Sign.in: Use long options with GnuPG rather than -bat, add --force-v3-sigs so that generated signatures will be compatible with PGP 5.0, and added documentation of this.
• makepm.PL: Search for gpg and pgps as well, set both PGPS and PGPV with prompts and guesses for each, prompt for and set PGPSTYLE, and pick up overrides to avoid interactivity from a file rather than from the command line.
• Makefile.PL: Added support for PGPS, PGPV, and PGPSTYLE settings on the command line, changed to guess a few things if not specified and to pass values to makepm.PL via a separate file rather than the command line. Ugly hack to fix Makefile dependencies removed, since it's no longer necessary.

1999-02-09 Russ Allbery <rra@stanford.edu>

• test.pl: Changed the testing key ID to "testing", added special casing on PGPSTYLE for testing signatures of whitespace-munged data against unmunged data since GnuPG will still consider the signature valid, added two new tests for version 3 and version 4 DSS signatures, and had GnuPG skip the PGP 2.6.2 RSA signature check.
• PGP/Sign.in: Added support for GnuPG and PGP 5.0. This involves a new PGPSTYLE global variable, support for separate programs for signing and verification, and lots of choosing between styles all over the code. The documentation has also been updated to reflect this support, including a long note about whitespace munging incompatibilities between different versions and warnings about potential future API changes for this module. Also added a SEE ALSO section and a thank you to the folks who send in GnuPG support originally.
• data/message.asc.v4: New file. Version 4 DSS signature.
• data/message.asc: New file. Version 3 DSS signature.
• data/pubring.gpg: New file. GnuPG key ring for testing.
• data/secring.gpg: New file.
• data/trustdb.gpg: New file.
• data/pubring.pkr: New file. PGP 5.0 key ring for testing. data/secring.pkr: New file.
• data/message.sig: Renamed from message.asc; this is the PGP 2.6.2 RSA signature.
• data/pubring.pgp: Change key ID of test key to testing, since GPG requires at least five characters in the key ID. data/secring.pgp: Likewise.

1998-12-04 Russ Allbery <rra@stanford.edu>

• VERSION.pm: PGP::Sign 0.13 released.
• Makefile.PL: Add two ugly hacks, one to let someone set the path to PGP on the command line of "perl Makefile.PL," and the second to strip the resulting extra dependency from the processPL section. Pass the path to PGP to makepm.PL on the command line if it's given.
• makepm.PL: Add support for accepting the path to PGP on the command line (and not prompting in that case).

1998-12-02 Russ Allbery <rra@stanford.edu>

• VERSION.pm: PGP::Sign 0.12 released.
• makepm.PL: The path to PGP that the user inputs should override any other path to PGP that we find.

1998-11-27 Russ Allbery <rra@stanford.edu>

• VERSION.pm: PGP::Sign 0.11 released.
• Makefile.PL: Added a MAN3PODS directive to prevent MakeMaker from generating a PGP::PGP::Sign man page, changed the formatting of the 5.005-only section.

1998-11-26 Russ Allbery <rra@stanford.edu>

• Makefile.PL: Added ABSTRACT and AUTHOR for Perl versions 5.005 and higher. This is for the PPD to go with a binary distribution, and for Perl Resource Kits.
• VERSION.pm: PGP::Sign 0.10 released.
• PGP/Sign.in: Modified to be PGP/Sign.in instead of Sign.pm, added special markers for the path to PGP and the version number, added support for $PGPPATH, fixed a bug in finding the PGP version number of a signature, cleaned up and reformatted the documentation, added a note about PGP environment variables, added bugs concerning our lack of support for PGP v5 and GPG, added a thank you to Andrew Ford in the history section of the documentation.
• Makefile.PL: Run makepm.PL to generate PGP/Sign.pm, tell MakeMaker where the actual module is, and get our version number from VERSION.pm now.
• makepm.PL: New file. Now generate PGP/Sign.pm automatically from this file, which finds and prompts for the path to PGP and grabs the version from VERSION.pm.
• VERSION.pm: New file. We now pull our release version number from here rather than the CVS revision of Sign.in.
• test.pl: New file. Added a reasonably good test suite that works with public and private key rings included with the distribution. Based on work by Andrew Ford.
• data/message: New file.
• data/message.asc: New file.
• data/pubring.pgp: New file.
• data/secring.pgp: New file.

1998-07-05 Russ Allbery <rra@stanford.edu>

• Sign.pm: PGP::Sign 0.9 released.
• Sign.pm: Fixed the way I was dealing with open3() file handles and $?. One needs to keep the PID and do an explicit waitpid(), or the status you get may be something random. Also cleaned things up a little and explicitly set $/ in case our calling program had it set to something odd.

1997-08-18 Russ Allbery <rra@stanford.edu>

• Sign.pm: PGP::Sign 0.8 released.
• Sign.pm (pgp_verify): Added a umask 077 (and restoration of umask on completion) since we're creating temporary files. (pgp_sign): Added a check to see if we got a signature at all.

1997-08-15 Russ Allbery <rra@stanford.edu>

• Sign.pm: PGP::Sign 0.7 released.
• Sign.pm (pgp_verify): Changed to use O_EXCL when opening /tmp files to avoid symlink attacks.
• Sign.pm: PGP::Sign 0.6 released.
• Sign.pm: Added output() to munge trailing spaces if $MUNGE is set, modified write_data() to send everything through output() rather than printing it directly, added documentation of the new behavior to the PODs.

1997-07-29 Russ Allbery <rra@stanford.edu>

• Sign.pm: Removed $ORS, which was a hack that we don't need any more. That work should be done by the client, and the client is capable of it. Added a pgp_error() function (not exported by default) to retrieve the error message, since that's a cleaner user interface. Changed the signature verification code to verify detached signatures, which means we now use temporary files. Added a $TMPDIR global variable to specify the directory in which to create temporary files. Changed the documentation to include notes about all of this.

1997-07-27 Russ Allbery <rra@stanford.edu>

• Sign.pm: Broke write_data() off into a separate function, added pgp_verify() and tested it, changed the documentation to mention it as well. Fixed a few minor bugs, made to use @ERROR correctly, added documentation.