From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 5490 invoked by alias); 30 Oct 2017 01:39:31 -0000 Mailing-List: contact zsh-workers-help@zsh.org; run by ezmlm Precedence: bulk X-No-Archive: yes List-Id: Zsh Workers List List-Post: List-Help: List-Unsubscribe: X-Seq: 41963 Received: (qmail 2884 invoked by uid 1010); 30 Oct 2017 01:39:31 -0000 X-Qmail-Scanner-Diagnostics: from park01.gkg.net by f.primenet.com.au (envelope-from , uid 7791) with qmail-scanner-2.11 (clamdscan: 0.99.2/21882. spamassassin: 3.4.1. Clear:RC:0(205.235.26.22):SA:0(0.8/5.0):. Processed in 1.931964 secs); 30 Oct 2017 01:39:31 -0000 X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on f.primenet.com.au X-Spam-Level: X-Spam-Status: No, score=0.8 required=5.0 tests=BAYES_00,DATE_IN_PAST_03_06, DKIM_ADSP_CUSTOM_MED,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM, HEADER_FROM_DIFFERENT_DOMAINS,NML_ADSP_CUSTOM_MED,RP_MATCHES_RCVD,SPF_PASS, T_DKIM_INVALID,T_FILL_THIS_FORM_SHORT autolearn=no autolearn_force=no version=3.4.1 X-Envelope-From: SRS0=Eh1t=B5=yahoo.co.uk=okiddle@bounces.park01.gkg.net X-Qmail-Scanner-Mime-Attachments: | X-Qmail-Scanner-Zip-Files: | X-Virus-Scanned: by amavisd-new at gkg.net Authentication-Results: amavisd4.gkg.net (amavisd-new); dkim=fail (2048-bit key) reason="fail (body has been altered)" header.d=yahoo.co.uk X-Greylist: domain auto-whitelisted by SQLgrey-1.8.0 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.co.uk; s=s2048; t=1509327551; bh=vs4rkx2eBdBAIeNbPfLr4NFPnkGt9JKbqQyrRtvM7YM=; h=From:To:Subject:Date:From:Subject; b=YG6lcMeZgxdJPcBWAzKid9K/9tuKcywtZbGsDu24iMe6s4OS7BnL8onrmKsL099VQyijGKnc5iK4ByyKMmTB1MrkRZtzcrGtoW9QDAa8q5DH/E9MJZDob9EwnhlogXpBlThNP+ixpfvfApDLdXHZCbgGSJNoeAyRwzQ7/oigVc9VEQNd8imqgrui/jzuNrK8Wt5i1tFOtu7DDFoDsejx2MiuMYwhYUDxmQE1IX5cMUTqK89klPECY617AFFy7SeKiI3Dap494Kdps2lQnlQdxndbDF1kUljpPhXK3U/oryzwA72/Ci1u5JMqk3AXQCs0QFxxnZSSi3DVum47WZ03NQ== X-YMail-OSG: .ClD.uUVM1nSByTXh4fs41ER97oyfPPPIrqiP2CalNdMc_s9LVM1d1KwJDF5pYX Kwi3weMeDeqTQftCGu7mOsb8t7kGw7yE4oJnaely9xK.NcTAEz91Bs4FPgjeJLgK7W4KGvGghgZ4 owbmD9JDIlUlhGFQ7iD4DpYsSAr6ezB771JmU7e_seeblR83h6IcrkOq2R28eUEgSW4XXXWte2Qn 1j9pDHk9XXVUMVozQNAaVROMs4jWC_HpTx8QEIwoehoGfl4A72CbaIV8._3KJ9Jwvp_gR6gclqoO vbKB_7i.KI2VxJarDFadudDmTU3xBC75.sasfXndwqWhQJxCP3J9VIKxttbMv8I0ywW35_11epQR OBCK59lQul9aV9O0zuIQiQmFKVy_QS5sqBa1RvCGmtNRtr.kH7ShbT8ud4FmVCYkfyGrgpVWoFKZ wQ_zTwjqD23L1BZiS_PUs8bB8UmGSTpY7rG7AIkrYwzRpYfg9uSgnWCU1KUIY3PPCxUGBQHoy_cG tL_VxvRfiR5T1qWa.c2dGKMTnrdxTp7RQiruH X-Yahoo-Newman-Id: 436787.28631.bm@smtp136.mail.ir2.yahoo.com X-Yahoo-Newman-Property: ymail-3 X-YMail-OSG: .ClD.uUVM1nSByTXh4fs41ER97oyfPPPIrqiP2CalNdMc_s 9LVM1d1KwJDF5pYXKwi3weMeDeqTQftCGu7mOsb8t7kGw7yE4oJnaely9xK. NcTAEz91Bs4FPgjeJLgK7W4KGvGghgZ4owbmD9JDIlUlhGFQ7iD4DpYsSAr6 ezB771JmU7e_seeblR83h6IcrkOq2R28eUEgSW4XXXWte2Qn1j9pDHk9XXVU MVozQNAaVROMs4jWC_HpTx8QEIwoehoGfl4A72CbaIV8._3KJ9Jwvp_gR6gc lqoOvbKB_7i.KI2VxJarDFadudDmTU3xBC75.sasfXndwqWhQJxCP3J9VIKx ttbMv8I0ywW35_11epQROBCK59lQul9aV9O0zuIQiQmFKVy_QS5sqBa1RvCG mtNRtr.kH7ShbT8ud4FmVCYkfyGrgpVWoFKZwQ_zTwjqD23L1BZiS_PUs8bB 8UmGSTpY7rG7AIkrYwzRpYfg9uSgnWCU1KUIY3PPCxUGBQHoy_cGtL_VxvRf iR5T1qWa.c2dGKMTnrdxTp7RQiruH X-Yahoo-SMTP: opAkk_CswBAce_kJ3nIPlH80cJI- From: Oliver Kiddle To: Zsh workers Subject: PATCH: update gnutls completion to 3.6.1 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <978.1509313440.1@thecus.kiddle.eu> Date: Sun, 29 Oct 2017 22:44:00 +0100 Message-ID: <979.1509313440@thecus.kiddle.eu> Just a bunch of option changes. Oliver diff --git a/Completion/Unix/Command/_gnutls b/Completion/Unix/Command/_gnutls index 0b307d9b7..2cd559843 100644 --- a/Completion/Unix/Command/_gnutls +++ b/Completion/Unix/Command/_gnutls @@ -35,16 +35,21 @@ case "$service" in '--priority=[specify TLS algorithms and protocols to enable]:(NORMAL PFS SECURE128 SECURE192 SUITEB128 SUITEB192 LEGACY PERFORMANCE NONE)' '--x509cafile=[specify certificate file to use]:file:_files' '--x509crlfile=[specify CRL file to use]:file:_files' - '--pgpkeyfile=[specify PGP key file to use]:file:_files' - '--pgpkeyring=[specify PGP key ring file to use]:file:_files' - '--pgpcertfile=[specify PGP public key (certificate) file to use]:file:_files' - '--x509keyfile=[specify X.509 key file to use]:file:_files' - '--x509certfile=[specify X.509 certificate file to use]:file:_files' - '--pgpsubkey=[specify PGP subkey to use]:sub key' + '*--x509keyfile=[specify X.509 key file to use]:file:_files' + '*--x509certfile=[specify X.509 certificate file to use]:file:_files' '(-l --list -p --port)'{-l,--list}'[print list of the supported algorithms/modes]' + ) + ;| + gnutls-cli|gnutls-serv|certtool) + args+=( '--provider=[specify PKCS #11 provider library]:provider:_files' ) ;| + gnutls-cli|certtool) + args+=( + '--verify-allow-broken[allow broken algorithms, such as MD5 for certificate verification]' + ) + ;| gnutls-cli) args+=( @@ -59,10 +64,11 @@ case "$service" in '(-s --starttls)'{-s,--starttls}'[start TLS on EOF or SIGALRM]' '--crlf[send CR LF instead of LF]' '--fastopen[enable TCP Fast Open]' - '(-f --fingerprint)'{-f,--fingerprint}'[send the openpgp fingerprint instead of the key]' "--print-cert[print peer's certificate in PEM format]" "--save-cert=[save peer's certificate chain in the specified file in PEM format]:file:_files" "--save-ocsp=[save peer's OCSP status response in the provided file]:file:_files" + '--save-server-trace=[save the server-side TLS message trace in the provided file]:file:_files' + '--save-client-trace=[save the client-side TLS message trace in the provided file]:file:_files' '--dh-bits=[specify minimum number of bits allowed for DH]:bits' '--srpusername[specify SRP username to use]:username' '--srppasswd[specify SRP password to use]:password' @@ -88,6 +94,8 @@ case "$service" in gnutls-serv) args+=( '--sni-hostname-fatal[send fatal alert on sni-hostname mismatch]' + '*--alpn=[specify ALPN protocol to be enabled by the server]:protocol' + '--alpn-fatal[send fatal alert on non-matching ALPN name]' '(-g --generate)'{-g,--generate}'[generate Diffie-Hellman parameters]' '(-q --quiet)'{-q,--quiet}'[suppress some messages]' "--nodb[don't use a resumption database]" @@ -97,10 +105,6 @@ case "$service" in '(-r --require-client-cert)'{-r,--require-client-cert}'[require a client certificate]' '--verify-client-cert[if a client certificate is sent then verify it]' '--dhparams=[specify DH params file to use]:file:_files' - '--x509dsakeyfile=[specify alternative X.509 key file to use]:file:_files' - '--x509dsacertfile=[specify alternative X.509 certificate file to use]:file:_files' - '--x509ecckeyfile=[specify alternative X.509 key file to use]:file:_files' - '--x509ecccertfile=[specify alternative X.509 certificate file to use]:file:_files' '--srppasswd=[specify SRP password file to use]:file:_files' '--srppasswdconf=[specify SRP password configuration file to use]:file:_files' '--pskpasswd=[specify PSK password file to use]:file:_files' @@ -111,18 +115,31 @@ case "$service" in certtool) args+=( - '--infile:input file:_files ' + '(-q --generate-request)--infile:input file:_files ' '--outfile:output file:_files ' '(-s --generate-self-signed)'{-s,--generate-self-signed}'[generate a self-signed certificate]' '(-c --generate-certificate)'{-c,--generate-certificate}'[generate a signed certificate]' '--generate-proxy[generate a proxy certificate]' '--generate-crl[generate a CRL]' '(-u --update-certificate)'{-u,--update-certificate}'[update a signed certificate]' + '--fingerprint[print the fingerprint of the given certificate]' + '--key-id[print the key ID of the given certificate]' + '--v1[generate an X.509 version 1 certificate (with no extensions)]' + '--sign-params=[sign a certificate with a specific signature algorithm]:algorithm:(RSA-PSS)' '(-p --generate-privkey)'{-p,--generate-privkey}'[generate a private key]' - '(-q --generate-request)'{-q,--generate-request}'[generate a PKCS #10 certificate request]' + '(-q --generate-request --infile)'{-q,--generate-request}'[generate a PKCS #10 certificate request]' '(-e --verify-chain)'{-e,--verify-chain}'[verify a PEM encoded certificate chain]' '--verify[verify a PEM encoded certificate chain using a trusted list]' '--verify-crl[verify a CRL]' + '(--verify-email)--verify-hostname=[specify hostname to be used for certificate chain verification]:hostname:_hosts' + '(--verify-hostname)--verify-email=[specify email to be used for certificate chain verification]:email:_email_addresses' + '--verify-purpose=[specify a purpose OID to be used for certificate chain verification]' + '--p7-sign[sign using a PKCS #7 structure]' + '--p7-detached-sign[sign using a detached PKCS #7 structure]' + "--no-p7-include-cert[don't include signer's certificate will in the cert list]" + '--p7-time[include a timestamp in the PKCS #7 structure]' + '--p7-show-data[show embedded data in the PKCS #7 structure]' + '--p7-verify[verify the provided PKCS #7 structure]' '--generate-dh-params[generate PKCS #3 encoded Diffie Hellman parameters]' '--get-dh-params[get the included PKCS #3 encoded Diffie Hellman parameters]' '--dh-info[print information PKCS #3 encoded Diffie-Hellman parameters]' @@ -132,36 +149,44 @@ case "$service" in '--load-certificate:certificate file:_files' '--load-ca-privkey:certificate authority private key file:_files' '--load-ca-certificate:certificate authority certificate file:_files' - '--password:password' + '--load-crl=[load the provided CRL]:CRL' + '--load-data=[load auxiliary data]:data' + '--password=[specify password to use]:password' '--hex-numbers[big number in an easier format to parse]' '--cprint[prints certain information is C-friendly format]' '--null-password[enforce a NULL password]' '--empty-password[enforce an empty password]' + '--key-type=[specify the key type to use on key generation]:key type' '(-i --certificate-info)'{-i,--certificate-info}'[print information on a certificate]' '--certificate-pubkey[print certificate public key]' '(-l --crl-info)'{-l,--crl-info}'[print information on a CRL]' '--crq-info[print information on a certificate request]' "--no-crq-extensions[don't use extensions in certificate requests]" '--p12-info[print information on a PKCS #12 structure]' + '--p12-name=[specify PKCS #12 friendly name to use]:name' '--p7-info[print information on a PKCS #7 structure]' '--smime-to-p7[convert S/MIME to PKCS #7 structure]' '(-k --key-info)'{-k,--key-info}'[print information on a private key]' - '--pgp-key-info[print information on a OpenPGP private key]' + '--p8-info[print information on a PKCS #8 structure]' + '--to-rsa[convert an RSA-PSS key to raw RSA format]' + '--bits=[specify number of bits for key generation]:bits' + '--curve=[specify the curve used for EC key generation]:curve' + '--sec-param=[specify the security level]:security level:(low legacy medium high ultra)' + '--to-p8[convert a given key to a PKCS #8 structure]' + '--provable[generate a private key or parameters from a seed using a provable method]' + '--verify-provable-privkey[verify a private key generated from a seed using a provable method]' + '--seed=[when generating a private key use the given seed]:seed (hex-encoded)' '--pubkey-info[print information on a public key]' - '--fix-key[regenerate the parameters in a private key]' '--to-p12[generate a PKCS #12 structure]' '(-8 --pkcs8)'{-8,--pkcs8}'[use PKCS #8 format for private keys]' - '--dsa[use DSA keys]' - '--hash:hash algorithm for signing:(MD5 SHA1 RMD160)' - '--export-ciphers[use weak encryption algorithms]' - '--inder[use DER format for input certificates and private keys]' - '--xml[use XML format for output certificates]' - '--outder[use DER format for output certificates and private keys]' - '--bits:number of bits for key generation' - '--sec-param[specify the security level]:security level:(low normal high ultra)' - '--disable-quick-random[use /dev/random for key generation, thus increasing the quality of randomness used]' - '--template:template file to use for non-interactive operation:_files' - '--pkcs-cipher[specify cipher to use for pkcs operations]:cipher:(3des 3des-pkcs12 aes-128 aes-192 aes-256 rc2-40 arcfour)' + '--hash=[specify hash algorithm for signing]:algorithm:(MD5 SHA1 RMD160)' + '--salt-size=[specify the RSA-PSS key default salt size]:size' + {--inder,--inraw}'[use DER format for input certificates and private keys]' + {--outder,--outraw}'[use DER format for output certificates and private keys]' + '--template=[specify template file to use for non-interactive operation]:file:_files' + '--stdout-info[print information to stdout instead of stderr]' + '--ask-pass[enable interaction for entering password when in batch mode]' + '--pkcs-cipher=[specify cipher to use for pkcs operations]:cipher:(3des 3des-pkcs12 aes-128 aes-192 aes-256 rc2-40 arcfour)' ) ;;