IJHack / QtPass
93%

DEFAULT BRANCH: main
Repo Added
Files 127
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH main
branch: SELECT
CHANGE BRANCH
x

coverage: 92.727% (+0.02%) from 92.705%
42702176309

push

github

web-flow 
Bind a signed .gpg-id to its store, not only to its folder (#2124)

* Bind a signed .gpg-id to its store, not only to its folder

#2050: one signing key may sign the recipient lists of several stores,
and an authentic list of one, copied into another at the same folder,
verified there too; with a higher generation it was accepted, and QtPass
encrypted that store's entries to the other store's recipients.

A list QtPass writes for a signed store now carries a third signed
comment line, "# QtPass-GpgId-Store: <id>", a random 128-bit id given
when the store's first signed list is written. Each device remembers the
id it first saw per store in the generation record (outside the store,
next to the generations; format 1 still, older readers ignore the new
"stores" object), and GpgIdGeneration::accept() refuses, as WrongStore:

- a list whose store line names another id, before the staleness check,
  so another store's older list never reaches the Users dialog as this
  folder's rollback;
- a new list without a store line once the store has an id. A list this
  device accepted before keeps working, and a headerless list (pass) is
  as before.

Writers take the id from GpgIdGeneration::storeIdFor(): the one this
device knows, else the one on the verified list being replaced (a device
joining a store takes its id over), else a new one. SECURITY.md has the
binding and its limits (first sight, pass-written lists); the CHANGELOG's
upgrade notes ask signed teams to update together, since a list saved by
2.0-rc3 or older is refused once a device knows the store's id.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Anne Jan Brouwer <brouwer@annejan.com>

* chore: update localization source references

make lupdate for the store-binding messages; location lines move only
for the files this branch changes, build-generated ones stripped.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Anne Jan Brouwer <brouwer@annejan.com... (continued)

129 of 136 new or added lines in 3 files covered. (94.85%)

2 existing lines in 1 file now uncovered.

10391 of 11206 relevant lines covered (92.73%)

403.37 hits per line

Relevant lines Covered
11206 RELEVANT LINES 10391 COVERED LINES
403.37 HITS PER LINE
Source Files on main

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
42702176309 main Bind a signed .gpg-id to its store, not only to its folder (#2124) * Bind a signed .gpg-id to its store, not only to its folder #2050: one signing key may sign the recipient lists of several stores, and an authentic list of one, copied into anot... push web-flow github
92.73
42699902081 gpgid/store-binding Merge 2c035ea88 into 9a24bec98 Pull #2124 web-flow github
92.73
42696377989 gpgid/store-binding Merge d2616fad8 into 9a24bec98 Pull #2124 web-flow github
92.73
42691851405 gpgid/store-binding Merge e0125fd3c into 9a24bec98 Pull #2124 web-flow github
92.71
42687050548 main Templates can mark secret fields; "Hide every field" (#2123) * Templates can mark secret fields; "Hide every field" The rest of #2054. A template marks the fields to hide like the password with a comment line, "# secret: pin, tan", in a section... push web-flow github
92.71
42684730867 feat/template-secret-marker Merge 7d05f46ad into bb0fad7a9 Pull #2123 web-flow github
92.71
42682832751 feat/template-secret-marker Merge 3c4aa9f5e into bb0fad7a9 Pull #2123 web-flow github
92.7
42679443593 feat/template-secret-marker Merge 8aad2fea4 into bb0fad7a9 Pull #2123 web-flow github
92.7
42677652072 feat/template-secret-marker Merge bfb172604 into bb0fad7a9 Pull #2123 web-flow github
92.7
41635856782 main tst_mainwindow: restyle the field frames synchronously in the palette test (#2121) * tst_mainwindow: restyle the field frames synchronously in the palette test fieldFrameBorderFollowsRuntimePaletteChange set the application palette and waited up... push web-flow github
92.67
See All Builds (2829)