Page MenuHome GnuPG

Gpg2.1 http-proxy configuration from 2.0 leads to configuration error
Closed, ResolvedPublic

Description

I've configured a keyserver in gpg.conf with a http-proxy:

keyserver hkp://keys.gnupg.net
keyserver-options http-proxy=esus.lan:12345

This worked with 2.0 but after upgrading to with 2.1 search fails with:

gpg: error searching keyserver: Configuration error
gpg: keyserver search failed: Configuration error

If I change it to:
keyserver-options http-proxy=http://esus.lan:12345

it works again. But if the behavior is changed we would need to migrate the
configuration on update which I'd rather avoid.

Details

Version
2.1.8

Event Timeline

Actually I plan to remove (or make them a NOP) all network options from
gpg.conf. This should all be configured in dirmngr.conf.

werner lowered the priority of this task from High to Normal.Sep 24 2015, 10:38 AM

Regardless of that, I find this is a regression. With my configuration I was
able to search on keyservers with 2.0.x and then with 2.1.x keyserver search no
longer works with the same configuration.

And it's probably easier to default to http protocol for a http-proxy in gnupg /
dirmngr again then it is for me to warn users in Kleopatra / Gpg4win that their
configuration no longer works with 2.1.

You've actually added code to handle the hostname:port string with rev: 54e55149

But this does not work as the parse_uri check before hat is called with
"no_scheme_check" and so already passes a hostname:port uri as valid and does
not go into the fallback code that adds the http scheme.

werner removed a subscriber: aheinecke.
werner removed a project: Restricted Project.