Page MenuHome GnuPG
Feed All Stories

Sep 14 2017

werner closed T3407: libtool: compile: gcc -DHAVE_CONFIG_H -I. -I/prog/libgcrypt/libgcrypt-1.8.1/./cipher -I.. -I../src -I/prog/libgcrypt/libgcrypt-1.8.1/./src -g -O2 -fvisibility=hidden -Wall -MT keccak.lo -MD -MP -MF .deps/keccak.Tpo -c /prog/libgcrypt/libgcrypt-1.8.1/./cipher/keccak.c -fPIC -DPIC -o .libs/keccak.o /prog/libgcrypt/libgcrypt-1.8.1/./cipher/keccak_permute_32.h: In function 'keccak_f1600_state_permute32bi_bmi2': /prog/libgcrypt/libgcrypt-1.8.1/./cipher/keccak_permute_32.h:137: error: 'asm' operand requires impossible reload /prog/libgcrypt/libgcrypt-1.8.1/./cipher/keccak_permute_32.h:139: error: 'asm' operand requires impossible reload /prog/libgcrypt/libgcrypt-1.8.1/./cipher/keccak_permute_32.h:141: error: 'asm' operand requires impossible reload /prog/libgcrypt/libgcrypt-1.8.1/./cipher/keccak_permute_32.h:143: error: 'asm' operand requires impossible reload /prog/libgcrypt/libgcrypt-1.8.1/./cipher/keccak_permute_32.h:154: error: 'asm' operand requires impossible reload /prog/libgcrypt/libgcrypt-1.8.1/./cipher/keccak_permute_32.h:156: error: 'asm' operand requires impossible reload /prog/libgcrypt/libgcrypt-1.8.1/./cipher/keccak_permute_32.h:158: error: 'asm' operand requires impossible reload as Invalid.
Sep 14 2017, 2:02 PM · Bug Report
werner added a comment to T3407: libtool: compile: gcc -DHAVE_CONFIG_H -I. -I/prog/libgcrypt/libgcrypt-1.8.1/./cipher -I.. -I../src -I/prog/libgcrypt/libgcrypt-1.8.1/./src -g -O2 -fvisibility=hidden -Wall -MT keccak.lo -MD -MP -MF .deps/keccak.Tpo -c /prog/libgcrypt/libgcrypt-1.8.1/./cipher/keccak.c -fPIC -DPIC -o .libs/keccak.o /prog/libgcrypt/libgcrypt-1.8.1/./cipher/keccak_permute_32.h: In function 'keccak_f1600_state_permute32bi_bmi2': /prog/libgcrypt/libgcrypt-1.8.1/./cipher/keccak_permute_32.h:137: error: 'asm' operand requires impossible reload /prog/libgcrypt/libgcrypt-1.8.1/./cipher/keccak_permute_32.h:139: error: 'asm' operand requires impossible reload /prog/libgcrypt/libgcrypt-1.8.1/./cipher/keccak_permute_32.h:141: error: 'asm' operand requires impossible reload /prog/libgcrypt/libgcrypt-1.8.1/./cipher/keccak_permute_32.h:143: error: 'asm' operand requires impossible reload /prog/libgcrypt/libgcrypt-1.8.1/./cipher/keccak_permute_32.h:154: error: 'asm' operand requires impossible reload /prog/libgcrypt/libgcrypt-1.8.1/./cipher/keccak_permute_32.h:156: error: 'asm' operand requires impossible reload /prog/libgcrypt/libgcrypt-1.8.1/./cipher/keccak_permute_32.h:158: error: 'asm' operand requires impossible reload .

Please write a proper bug report. Pasting some compiler output into the TITLE field is not a proper bug report we will look at.

Sep 14 2017, 2:01 PM · Bug Report
werner triaged T3406: GnuPG should adopt and maintain the bash completion for gpg as Normal priority.

should be useful to create such completion stuff. No context specific completion but this is imho anyway a misfeature.

Sep 14 2017, 1:59 PM · Feature Request
gniibe closed T3393: quick-key-manipulation.scm tests fail on reproducible-builds infrastructure. as Resolved.

Committed to both branches (master and 2.2), so, closing.

Sep 14 2017, 2:50 AM · Bug Report, gnupg (gpg22)

Sep 13 2017

bastl added a comment to T3408: keccak_permute_32.h : error: 'asm' operand requires impossible reload.

make shure you only use 2 registers !!! 32bit: eax, cl and 64bit rax, cl

Sep 13 2017, 10:33 PM · libgcrypt, Bug Report
bastl created T3408: keccak_permute_32.h : error: 'asm' operand requires impossible reload.
Sep 13 2017, 10:14 PM · libgcrypt, Bug Report
dkg renamed T3406: GnuPG should adopt and maintain the bash completion for gpg from GnuPG should adopt and maintain the bash completion to GnuPG should adopt and maintain the bash completion for gpg.
Sep 13 2017, 10:14 PM · Feature Request
bastl created T3407: libtool: compile: gcc -DHAVE_CONFIG_H -I. -I/prog/libgcrypt/libgcrypt-1.8.1/./cipher -I.. -I../src -I/prog/libgcrypt/libgcrypt-1.8.1/./src -g -O2 -fvisibility=hidden -Wall -MT keccak.lo -MD -MP -MF .deps/keccak.Tpo -c /prog/libgcrypt/libgcrypt-1.8.1/./cipher/keccak.c -fPIC -DPIC -o .libs/keccak.o /prog/libgcrypt/libgcrypt-1.8.1/./cipher/keccak_permute_32.h: In function 'keccak_f1600_state_permute32bi_bmi2': /prog/libgcrypt/libgcrypt-1.8.1/./cipher/keccak_permute_32.h:137: error: 'asm' operand requires impossible reload /prog/libgcrypt/libgcrypt-1.8.1/./cipher/keccak_permute_32.h:139: error: 'asm' operand requires impossible reload /prog/libgcrypt/libgcrypt-1.8.1/./cipher/keccak_permute_32.h:141: error: 'asm' operand requires impossible reload /prog/libgcrypt/libgcrypt-1.8.1/./cipher/keccak_permute_32.h:143: error: 'asm' operand requires impossible reload /prog/libgcrypt/libgcrypt-1.8.1/./cipher/keccak_permute_32.h:154: error: 'asm' operand requires impossible reload /prog/libgcrypt/libgcrypt-1.8.1/./cipher/keccak_permute_32.h:156: error: 'asm' operand requires impossible reload /prog/libgcrypt/libgcrypt-1.8.1/./cipher/keccak_permute_32.h:158: error: 'asm' operand requires impossible reload .
Sep 13 2017, 10:07 PM · Bug Report
dkg created T3406: GnuPG should adopt and maintain the bash completion for gpg.
Sep 13 2017, 9:42 PM · Feature Request
werner added a comment to T3388: Kleopatra does not offer ascii armor.

If you create a file without -a the standard suffix will be .asc. But if you use -o FILE, just must give the full filename..

Sep 13 2017, 8:36 PM · gpg4win, Bug Report
JochenSaalfeld committed rW6de883fdd773: Move lowering of required KF5 versions to mk-file (authored by JochenSaalfeld).
Move lowering of required KF5 versions to mk-file
Sep 13 2017, 11:59 AM
wilfriedh added a comment to T3388: Kleopatra does not offer ascii armor.

Just for information:
The gnupg version does allow .asc output.
As a workaround I created a batch file consisting of the lines

Sep 13 2017, 11:27 AM · gpg4win, Bug Report
werner committed rDcb36d1ae20c5: blog: Fix URL in the latest posting. (authored by werner).
blog: Fix URL in the latest posting.
Sep 13 2017, 10:25 AM
werner closed T3404: gpgv warns about "--compliance=gnupg mode" but does not support --compliance=gnupg as an argument as Resolved.

The new unified compliance checker was not initialized. Fixed in the 2.2 branch.

Sep 13 2017, 9:23 AM · gnupg (gpg22), gpgv, Bug Report
werner committed rG006ca124ed95: gpgv: Initialize compliance checker. (authored by werner).
gpgv: Initialize compliance checker.
Sep 13 2017, 9:23 AM
werner committed rGPA69c777580bb9: Use the new gpgme_op_interact interface. (authored by werner).
Use the new gpgme_op_interact interface.
Sep 13 2017, 8:59 AM
werner committed rGPA7fb061b1d784: Fix listing of algorithm/keysize in the subkey window. (authored by werner).
Fix listing of algorithm/keysize in the subkey window.
Sep 13 2017, 7:55 AM
werner closed T3405: GPA Key ring lists all Algorithms as rsa4096 as Resolved.

Fixed in master.

Sep 13 2017, 7:54 AM · gpa, Bug Report

Sep 12 2017

aheinecke committed rW27f5592623f7: Update GnuPG to latest 2.2 branch (authored by aheinecke).
Update GnuPG to latest 2.2 branch
Sep 12 2017, 9:36 PM
werner committed rDf5fbb657f1c4: drafts,openpgp-webkey-service: Define keyword protocol-version (authored by werner).
drafts,openpgp-webkey-service: Define keyword protocol-version
Sep 12 2017, 6:44 PM
werner committed rG332c9eaa2a3c: wks: Add new policy flag protocol-version (authored by werner).
wks: Add new policy flag protocol-version
Sep 12 2017, 6:12 PM
werner committed rGa821b4f5567d: wks: Add hack for the broken posteo system (authored by werner).
wks: Add hack for the broken posteo system
Sep 12 2017, 6:12 PM
dkg added a comment to T3278: explicit key expiration date/time is interpreted as UTC, is echoed back using local time, confusion ensues.

I'm fine with (and i totally understand) wanting nothing but UTC in the machine interface and internal representations.

Sep 12 2017, 5:36 PM · gnupg24, gnupg (gpg23), Documentation, Bug Report
aheinecke committed rX011b0afb4012: Post release updates (authored by aheinecke).
Post release updates
Sep 12 2017, 5:05 PM
aheinecke committed rXdcdc405fa919: Release GpgEX 1.0.5 (authored by aheinecke).
Release GpgEX 1.0.5
Sep 12 2017, 5:05 PM
aheinecke committed rX293168f6c49c: Fix locale dir if installed under bin_64 (authored by aheinecke).
Fix locale dir if installed under bin_64
Sep 12 2017, 5:05 PM
patoberli added a comment to T3401: GPGOL causes Outlook 2016 to hang when signing and Kleopatra is not yet open.

I'm having the exact same issue, also Outlook 2016 and Beta 299.
[edit]
I want to add, my Outlook also often freezes by just changing the folder. Outlook will try to open a message when chaning the folder, but regardless if it's encrypted or not, Outlook might freeze.
I did not change any GpgOL default settings.

Sep 12 2017, 4:36 PM · gpgol, gpg4win, Bug Report
aheinecke committed rWbbe1c0b46d39: Update GnuPG to latest 2.2.x branch (authored by aheinecke).
Update GnuPG to latest 2.2.x branch
Sep 12 2017, 3:20 PM
aheinecke committed rW1a2e737aca34: Use released gpgol and gpgex versions (authored by aheinecke).
Use released gpgol and gpgex versions
Sep 12 2017, 3:20 PM
aheinecke committed rW257f3fbc0495: Update GnuPG to 2.2.1-beta2 (authored by aheinecke).
Update GnuPG to 2.2.1-beta2
Sep 12 2017, 3:20 PM
werner committed rG8b5a2474f21d: gpg: Fix "Fix key generation with only an email part". (authored by werner).
gpg: Fix "Fix key generation with only an email part".
Sep 12 2017, 2:47 PM
werner committed rG7d15ee88980f: tools: New function mime_maker_add_body_data. (authored by werner).
tools: New function mime_maker_add_body_data.
Sep 12 2017, 2:47 PM
werner committed rGc65a7bba7331: wks: Use unencrypted draft-1 mode for posteo.de (authored by werner).
wks: Use unencrypted draft-1 mode for posteo.de
Sep 12 2017, 2:47 PM
werner committed rGa172759b5088: tests: Fix a test which specifies expiration date. (authored by gniibe).
tests: Fix a test which specifies expiration date.
Sep 12 2017, 2:39 PM
werner committed rG827abe01a72a: scd: Fix for large ECC keys. (authored by gniibe).
scd: Fix for large ECC keys.
Sep 12 2017, 2:39 PM
dkg added a comment to T3398: fingerprint-based import screener is no defense against malice.

I've changed the text of this report from "filter" to "screener" to match the preferred terminology. thanks for the clarification.

Sep 12 2017, 2:16 PM · gnupg24, gnupg (gpg23), Feature Request
dkg renamed T3398: fingerprint-based import screener is no defense against malice from fingerprint-based import filters are no defense against malice to fingerprint-based import screener is no defense against malice.
Sep 12 2017, 2:13 PM · gnupg24, gnupg (gpg23), Feature Request
aheinecke committed rO4d3ab575495c: Release GpgOL 2.2.0 (authored by aheinecke).
Release GpgOL 2.2.0
Sep 12 2017, 1:42 PM
aheinecke committed rOad0ff8eca95c: Update german translation (authored by aheinecke).
Update german translation
Sep 12 2017, 1:41 PM
aheinecke committed rO3234e47ec45f: Auto: Update translations (authored by aheinecke).
Auto: Update translations
Sep 12 2017, 1:41 PM
aheinecke committed rO600a2148f8ef: Increase Options dialog width (authored by aheinecke).
Increase Options dialog width
Sep 12 2017, 1:41 PM
werner added a comment to T3278: explicit key expiration date/time is interpreted as UTC, is echoed back using local time, confusion ensues.

[copied from gnupg-devel@]

Sep 12 2017, 9:56 AM · gnupg24, gnupg (gpg23), Documentation, Bug Report
werner triaged T3398: fingerprint-based import screener is no defense against malice as Normal priority.
Sep 12 2017, 9:49 AM · gnupg24, gnupg (gpg23), Feature Request
werner triaged T3405: GPA Key ring lists all Algorithms as rsa4096 as High priority.

I can replicate this even with master. Good catch.

Sep 12 2017, 9:48 AM · gpa, Bug Report
werner added projects to T3387: explorer context menu items do not start Kleopatra: gpg4win, gpgex.
Sep 12 2017, 9:46 AM · gpgex, gpg4win, Bug Report
werner triaged T3400: gpg-agent runtime option for s2k calibration time as Normal priority.
Sep 12 2017, 9:45 AM · gpgagent, Feature Request
werner edited projects for T3398: fingerprint-based import screener is no defense against malice, added: Feature Request, gnupg (gpg23); removed gnupg (gpg22), Bug Report.

I still consider the import screener (the term filter is used in a different way now) a big mess. Using the import feature to maintain the idea of a curated keyring is a bad idea because gpg has not been designed with this in mind. We spent so much time on this screener already and problems pop up again and again.

Sep 12 2017, 9:44 AM · gnupg24, gnupg (gpg23), Feature Request
werner added a project to T3388: Kleopatra does not offer ascii armor: gpg4win.
Sep 12 2017, 9:32 AM · gpg4win, Bug Report
werner triaged T3390: Showing complete OpenPGP key flags as Low priority.
Sep 12 2017, 9:31 AM · gnupg24, patch, Feature Request
werner triaged T3395: use swig to generate Perl bindings for gpgme as Normal priority.
Sep 12 2017, 9:31 AM · Feature Request, gpgme
werner triaged T3396: use swig to generate Ruby bindings for gpgme as Normal priority.
Sep 12 2017, 9:31 AM · Feature Request, gpgme
werner triaged T3397: gpg: --refresh-keys became extremely verbose and complaining as Low priority.
Sep 12 2017, 9:30 AM · gnupg (gpg22)
werner triaged T3394: "gpgconf --list-options gpg-agent" fails if bad option is present in ~/.gnupg/gpg-agent.conf as Normal priority.
Sep 12 2017, 9:30 AM · Documentation, Bug Report, gpgagent
werner triaged T3389: canonical OpenPGP certificate export as Normal priority.
Sep 12 2017, 9:29 AM · gnupg, Feature Request
werner added a project to T3401: GPGOL causes Outlook 2016 to hang when signing and Kleopatra is not yet open: gpg4win.
Sep 12 2017, 9:28 AM · gpgol, gpg4win, Bug Report
werner added a project to T3402: Kleopatra prompts for signing cert when sending signed email, even when told not to: gpg4win.
Sep 12 2017, 9:28 AM · gpg4win, Bug Report
werner added a project to T3403: Kleopatra cannot certify "for all to see" two times in a row: gpg4win.
Sep 12 2017, 9:27 AM · gpg4win, Bug Report
werner triaged T3404: gpgv warns about "--compliance=gnupg mode" but does not support --compliance=gnupg as an argument as Normal priority.
Sep 12 2017, 9:27 AM · gnupg (gpg22), gpgv, Bug Report

Sep 11 2017

JochenSaalfeld committed rWd0bbd4ed62a1: reformat version3 (authored by JochenSaalfeld).
reformat version3
Sep 11 2017, 2:31 PM
JochenSaalfeld committed rW9a681ec087f0: adding new pages and fill them with a bit of life (authored by JochenSaalfeld).
adding new pages and fill them with a bit of life
Sep 11 2017, 1:37 PM
werner committed rG384a3748d902: sm: Move qualified.txt from datadir into sysconfdir (authored by alonbl).
sm: Move qualified.txt from datadir into sysconfdir
Sep 11 2017, 12:54 PM
flarestarwingz created T3405: GPA Key ring lists all Algorithms as rsa4096.
Sep 11 2017, 12:17 PM · gpa, Bug Report
werner committed rG7089dcc54099: gpg: Fix key generation with only an email part. (authored by werner).
gpg: Fix key generation with only an email part.
Sep 11 2017, 11:33 AM
JochenSaalfeld committed rWe3e5367be7f5: slight restructure of support pages (authored by JochenSaalfeld).
slight restructure of support pages
Sep 11 2017, 9:44 AM

Sep 9 2017

dkg created T3404: gpgv warns about "--compliance=gnupg mode" but does not support --compliance=gnupg as an argument.
Sep 9 2017, 7:20 PM · gnupg (gpg22), gpgv, Bug Report
tbehrens created T3403: Kleopatra cannot certify "for all to see" two times in a row.
Sep 9 2017, 10:43 AM · gpg4win, Bug Report
tbehrens created T3402: Kleopatra prompts for signing cert when sending signed email, even when told not to.
Sep 9 2017, 10:15 AM · gpg4win, Bug Report
tbehrens created T3401: GPGOL causes Outlook 2016 to hang when signing and Kleopatra is not yet open.
Sep 9 2017, 10:04 AM · gpgol, gpg4win, Bug Report
dkg closed T3399: gpg-agent: add a configure option for default calibration time for s2k as Resolved.
Sep 9 2017, 12:46 AM · gpgagent, Feature Request
dkg claimed T3399: gpg-agent: add a configure option for default calibration time for s2k.
Sep 9 2017, 12:46 AM · gpgagent, Feature Request
dkg added a comment to T3399: gpg-agent: add a configure option for default calibration time for s2k.

I think this is now resolved, as of rG926d07c5fa05

Sep 9 2017, 12:45 AM · gpgagent, Feature Request
dkg committed rG926d07c5fa05: agent: compile-time configuration of s2k calibration. (authored by dkg).
agent: compile-time configuration of s2k calibration.
Sep 9 2017, 12:45 AM

Sep 8 2017

dkg created T3400: gpg-agent runtime option for s2k calibration time in the S1 Public space.
Sep 8 2017, 9:19 PM · gpgagent, Feature Request
dkg created T3399: gpg-agent: add a configure option for default calibration time for s2k.
Sep 8 2017, 9:17 PM · gpgagent, Feature Request
dkg committed rG73ff075204df: gpg: default to AES-256. (authored by dkg).
gpg: default to AES-256.
Sep 8 2017, 8:33 PM
dkg committed rG909fbca19678: gpg: default to 3072-bit RSA keys. (authored by dkg).
gpg: default to 3072-bit RSA keys.
Sep 8 2017, 5:38 PM
dkg committed rG7955262151a5: gpgsm: default to 3072-bit keys. (authored by dkg).
gpgsm: default to 3072-bit keys.
Sep 8 2017, 5:38 PM
dkg created T3398: fingerprint-based import screener is no defense against malice.
Sep 8 2017, 5:34 PM · gnupg24, gnupg (gpg23), Feature Request
dkg added a comment to T3389: canonical OpenPGP certificate export.

I am not proposing changing the order of the *hashed* subpackets in a signature. I'm proposing removing/changing/canonicalizing the *unhashed* subpackets in a signature. Sorry if i didn't make that clear enough in the initial message.

Sep 8 2017, 4:22 PM · gnupg, Feature Request
aheinecke closed T3230: kleopatra dies when given a path on the command line as Resolved.

The problem here is that libkleopatrarc did not exist. The error could be nicer but I would say this is a downstream issue that packagers have to make sure libkleopatra-data is installed when kleopatra is installed.
I've opened a debian bug for this some time ago: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=869647

Sep 8 2017, 3:40 PM · kleopatra
aheinecke committed rW411fafc7d53a: Update Kleopatra to latest master (authored by aheinecke).
Update Kleopatra to latest master
Sep 8 2017, 3:13 PM
attila.lendvai added a comment to T3391: cannot import subkey that was once marked to be on a card.

success, thank you for the help!

Sep 8 2017, 1:06 PM · Restricted Project, gpgagent, scd, gnupg, OpenPGP, Bug Report
gniibe claimed T3391: cannot import subkey that was once marked to be on a card.
Sep 8 2017, 12:48 PM · Restricted Project, gpgagent, scd, gnupg, OpenPGP, Bug Report
gniibe added a comment to T3391: cannot import subkey that was once marked to be on a card.

In GnuPG 2.1, secret keys are under control of gpg-agent. Currently, it is not deleted by gpg frontend.
Please run:

$ gpg -K --with-keygrip
Sep 8 2017, 12:48 PM · Restricted Project, gpgagent, scd, gnupg, OpenPGP, Bug Report
attila.lendvai updated the task description for T3391: cannot import subkey that was once marked to be on a card.
Sep 8 2017, 12:12 PM · Restricted Project, gpgagent, scd, gnupg, OpenPGP, Bug Report
werner added a comment to T3389: canonical OpenPGP certificate export.

But wait. Does my idea really help with comparing? I doubt it because a signature also includes a date and other variable stuff and thus they are already binary identical or it is a different signature.

Sep 8 2017, 11:38 AM · gnupg, Feature Request
werner added a comment to T3389: canonical OpenPGP certificate export.

Right we can't change the order of signature subpackets after they have been created. Given that we create subpackets by directly appending them to a memory buffer instead of keeping a list of subpackets to create, the least invasive method would be a function to shuffle that memory buffer right before the signature is computed.

Sep 8 2017, 11:32 AM · gnupg, Feature Request
gniibe triaged T3393: quick-key-manipulation.scm tests fail on reproducible-builds infrastructure. as Normal priority.
Sep 8 2017, 9:20 AM · Bug Report, gnupg (gpg22)
dkg added a comment to T3389: canonical OpenPGP certificate export.

I thoroughly agree that this is not required by the specs.

Sep 8 2017, 8:30 AM · gnupg, Feature Request
werner triaged T3392: keyserver default should include pool onionbalance hkp://jirk5u4osbsr34t5.onion as Normal priority.

Do you mean this?

Sep 8 2017, 8:18 AM · Too Old, Keyserver, Feature Request, dirmngr
werner added a comment to T3394: "gpgconf --list-options gpg-agent" fails if bad option is present in ~/.gnupg/gpg-agent.conf.

The only mitigation I can see for this is a better error message.

Sep 8 2017, 7:59 AM · Documentation, Bug Report, gpgagent
werner added a comment to T3389: canonical OpenPGP certificate export.

That is not required by the specs. Another way is to provide a tool to compare keys. That seems to be easier to me. Also consider the cases that there are new new packets or signature subpackets with unknown properties to the current implementations. What about different encodings in signed key material?

Sep 8 2017, 7:56 AM · gnupg, Feature Request
gniibe committed rG17f764dd4972: tests: Fix a test which specifies expiration date. (authored by gniibe).
tests: Fix a test which specifies expiration date.
Sep 8 2017, 7:37 AM
dkg added a comment to T3278: explicit key expiration date/time is interpreted as UTC, is echoed back using local time, confusion ensues.

I think any existing script that assumes UTC should add an explicit Z suffix. (that is, i don't think the breakage is a big deal, and anyone writing scripts that needs this kind of precision will be more likely be thankful that we have a sensible, normalized interface).

Sep 8 2017, 7:30 AM · gnupg24, gnupg (gpg23), Documentation, Bug Report
gniibe added a comment to T3278: explicit key expiration date/time is interpreted as UTC, is echoed back using local time, confusion ensues.

It is pretty much confusing. When a user specify in YYYY-MM-DD format with no hh:mm:ss, it is interpreted as local time (noon of that day).
When a user adding Thh:mm:ss, it is UTC.

Sep 8 2017, 7:15 AM · gnupg24, gnupg (gpg23), Documentation, Bug Report
gniibe added a comment to T3278: explicit key expiration date/time is interpreted as UTC, is echoed back using local time, confusion ensues.

While I confirmed that GnuPG interprets YYYY-MM-DDThh:mm:ss in UTC (which should be interpret as local time according to ISO-8601), I don't know how we can fix this.
If I change the interpretation of GnuPG (possibly supporting the format with Z suffix and timezone), it may break existing script which assumes UTC.

Sep 8 2017, 6:44 AM · gnupg24, gnupg (gpg23), Documentation, Bug Report
gniibe claimed T3278: explicit key expiration date/time is interpreted as UTC, is echoed back using local time, confusion ensues.

Bug confirmed in rGa766a37290cf: Print keyid in gpg --list-packets..

Sep 8 2017, 6:24 AM · gnupg24, gnupg (gpg23), Documentation, Bug Report
gniibe added a comment to T3393: quick-key-manipulation.scm tests fail on reproducible-builds infrastructure..

When Thhmmzz is specified, no adding 12 hours, that's the intention of the code, I suppose.
However, the implementation is wrong, since the beginning (not supporting "Z" or timezone for ISO-8601. interpret the string as UTC).
I will take that, too.

Sep 8 2017, 6:23 AM · Bug Report, gnupg (gpg22)
dkg created T3397: gpg: --refresh-keys became extremely verbose and complaining in the S1 Public space.
Sep 8 2017, 6:14 AM · gnupg (gpg22)
dkg added a comment to T3393: quick-key-manipulation.scm tests fail on reproducible-builds infrastructure..

Is it possible that this is related to T3278 ?

Sep 8 2017, 6:11 AM · Bug Report, gnupg (gpg22)