Page MenuHome GnuPG
Feed All Stories

Jan 11 2018

Mak added a comment to T3662: GpgOL: encrypted PGP/Inline email fails when using exchange online.

I can also confirm that 2.0.6-beta9 fixes my issue with this too. Also with my own exchange server!

Jan 11 2018, 2:09 PM · gpg4win, gpgol
Mak added a comment to T3656: Outlook 2016 wont encrypt messages if S/MIME encrypt or Sign was activated.

But that's it.
With these Options set and explicitly unchecking Sign & Encrypt before sending I get the exact same behavior that you two describe. Mails are sent unencrypted.

Jan 11 2018, 2:07 PM · Bug Report, gpgol
werner added a comment to T3731: gcry_pk_genkey() segfaults for ecdsa 384.

Okay, so on Suse we have the same problem w/o the somewhat intrusive changes of Fedora. The inetresting thing is that segv code part is the same as used in Linux.

Jan 11 2018, 2:06 PM · libgcrypt, Bug Report
aheinecke added a comment to T3656: Outlook 2016 wont encrypt messages if S/MIME encrypt or Sign was activated.

But that's it.
With these Options set and explicitly unchecking Sign & Encrypt before sending I get the exact same behavior that you two describe. Mails are sent unencrypted.

Jan 11 2018, 2:05 PM · Bug Report, gpgol
Mak added a comment to T3656: Outlook 2016 wont encrypt messages if S/MIME encrypt or Sign was activated.

Yes, I also have this option enabled:

And no, I disable Signing and Encryption, before enabling PGP Encryption for the specific email

Jan 11 2018, 2:03 PM · Bug Report, gpgol
JHohmann added a comment to T3656: Outlook 2016 wont encrypt messages if S/MIME encrypt or Sign was activated.

Yes, I also have this option enabled:

Jan 11 2018, 2:01 PM · Bug Report, gpgol
Mak added a comment to T3656: Outlook 2016 wont encrypt messages if S/MIME encrypt or Sign was activated.

I have now also the error T3662
Will try also 2.0.6-beta9

Jan 11 2018, 1:59 PM · Bug Report, gpgol
aheinecke added a comment to T3656: Outlook 2016 wont encrypt messages if S/MIME encrypt or Sign was activated.
In T3656#109394, @Mak wrote:

Ahh, and yes I use a public personal s/mime cert to sign my mails. nothing else.

Jan 11 2018, 1:57 PM · Bug Report, gpgol
Mak added a comment to T3656: Outlook 2016 wont encrypt messages if S/MIME encrypt or Sign was activated.

OK, found the problem now. Its the smime settings. I have set them to sign all outgoing mails. And thats where the problem starts...


If I disable the option "Add digital signature to outgoing messages" I am able to encrypt outgoing messages.
Its not what I wan't, because I want to sing all messages, but hope it helps to find the cause of the error.
@JHohmann can you confirm, that this option is active on your side also?

Jan 11 2018, 1:56 PM · Bug Report, gpgol
werner triaged T3731: gcry_pk_genkey() segfaults for ecdsa 384 as High priority.
Jan 11 2018, 1:55 PM · libgcrypt, Bug Report
aheinecke committed rOa6eeeaaa902a: Fix w64 build (authored by aheinecke).
Fix w64 build
Jan 11 2018, 1:45 PM
aheinecke committed rO17c6532db77b: Increase Verbosity for issue3656 (authored by aheinecke).
Increase Verbosity for issue3656
Jan 11 2018, 1:33 PM
aheinecke committed rO754a37dfc007: Update NEWS (authored by aheinecke).
Update NEWS
Jan 11 2018, 1:33 PM
Mak added a comment to T3656: Outlook 2016 wont encrypt messages if S/MIME encrypt or Sign was activated.

Ahh, and yes I use a public personal s/mime cert to sign my mails. nothing else.

Jan 11 2018, 12:48 PM · Bug Report, gpgol
lukele added a comment to T3730: Add support to HTTP Basic Auth for Keyservers.

Thanks for having a look :)

Jan 11 2018, 12:43 PM · gnupg24, Feature Request
Mak added a comment to T3656: Outlook 2016 wont encrypt messages if S/MIME encrypt or Sign was activated.

My too, no outgoing rules.

Jan 11 2018, 12:39 PM · Bug Report, gpgol
asn added a comment to T3731: gcry_pk_genkey() segfaults for ecdsa 384.

The issue also occurs on openSUSE Tumbleweed:

Jan 11 2018, 12:37 PM · libgcrypt, Bug Report
asn added a comment to T3731: gcry_pk_genkey() segfaults for ecdsa 384.

libgpg-error is version 1.27: https://src.fedoraproject.org/rpms/libgpg-error/tree/f27
You can find the patches applied to libgcrypto here: https://src.fedoraproject.org/rpms/libgcrypt/tree/f27

Jan 11 2018, 12:33 PM · libgcrypt, Bug Report
JHohmann added a comment to T3656: Outlook 2016 wont encrypt messages if S/MIME encrypt or Sign was activated.

I do not have any rules configured that are applying to outgoing mails. (As far as I can see them with a non-administrative account)
Are there any group-policies, that might affect the behavior of Outlook regarding to GpgOL?

Jan 11 2018, 12:32 PM · Bug Report, gpgol
werner triaged T3730: Add support to HTTP Basic Auth for Keyservers as Normal priority.

Thanks for the patch. The "fixme" indicates that I probably was just too lazy to add and test support.

Jan 11 2018, 12:29 PM · gnupg24, Feature Request
aheinecke added a comment to T3656: Outlook 2016 wont encrypt messages if S/MIME encrypt or Sign was activated.

Another question: Any outgoing Filters (Email Rules)?

Jan 11 2018, 12:28 PM · Bug Report, gpgol
werner added a comment to T3731: gcry_pk_genkey() segfaults for ecdsa 384.

Thanks for the report. I have a few questions, though
Which version of libgpg-error are you using?
What are the changes Fedora made to libgcrypt (and libgpg-error)?
Which CPU, what compile options and which compiler version?
Can you repeat this with a stock libgcrypt and libgpg-error?

Jan 11 2018, 12:26 PM · libgcrypt, Bug Report
aheinecke added a comment to T3656: Outlook 2016 wont encrypt messages if S/MIME encrypt or Sign was activated.

@JHohmann Your log is similar in that I can see two Write events after the send of which there should only be one. Somehow we seem to do crypto on a copy mail object and another mail is acutally sent.

Jan 11 2018, 12:16 PM · Bug Report, gpgol
asn created T3731: gcry_pk_genkey() segfaults for ecdsa 384.
Jan 11 2018, 11:42 AM · libgcrypt, Bug Report
JHohmann added a comment to T3656: Outlook 2016 wont encrypt messages if S/MIME encrypt or Sign was activated.

I don't think that it is possible to create you an account.

Jan 11 2018, 10:34 AM · Bug Report, gpgol
Mak added a comment to T3656: Outlook 2016 wont encrypt messages if S/MIME encrypt or Sign was activated.

Quoted Text

Jan 11 2018, 10:29 AM · Bug Report, gpgol
aheinecke added a comment to T3656: Outlook 2016 wont encrypt messages if S/MIME encrypt or Sign was activated.

Any chance that I could get a temporary test account on your Server?

Jan 11 2018, 10:15 AM · Bug Report, gpgol
JHohmann added a comment to T3656: Outlook 2016 wont encrypt messages if S/MIME encrypt or Sign was activated.

We have the same problem.
Sent emails are not encrypted with gpg4win 3.0.2
Outlook 2016
Exchange 2010
Locale: German
Plugins: Skype, OneNote, Sophos

Jan 11 2018, 10:09 AM · Bug Report, gpgol
lukele added a comment to T3730: Add support to HTTP Basic Auth for Keyservers.

This diff should include all the changes necessary to add support:
https://gist.github.com/lukele/0973e64deb9d422a648e6fbbd55573ac

Jan 11 2018, 9:57 AM · gnupg24, Feature Request
Lloyd added a comment to T3662: GpgOL: encrypted PGP/Inline email fails when using exchange online.

I can confirm that this appears to be fixed in 2.0.6-beta9.

Jan 11 2018, 9:51 AM · gpg4win, gpgol
lukele added a comment to T3730: Add support to HTTP Basic Auth for Keyservers.

I absolutely agree this support doesn't particularly make sense. A user of GPG Suite reported the issue, since their internal keyserver requires basic auth. They couldn't exactly explain why, and I told them that it doesn't make much sense.

Jan 11 2018, 9:25 AM · gnupg24, Feature Request
werner added a comment to T3730: Add support to HTTP Basic Auth for Keyservers.

Why do you need this for a keyserver? Keys are public and in-house keyservers should be at a local address and there need to be strict provisions not to upload to a public keyserver. Maybe LDAP or the kDNS thing (which is currently disabled) would be better for such use cases.

Jan 11 2018, 9:16 AM · gnupg24, Feature Request
aheinecke committed rW4621700704c7: Fix source uninstaller (authored by aheinecke).
Fix source uninstaller
Jan 11 2018, 8:57 AM
aheinecke committed rW800737c3d58d: Fix kleo patch (authored by aheinecke).
Fix kleo patch
Jan 11 2018, 8:45 AM
aheinecke committed rW1c9fd401222c: Update gpgol to latest beta (authored by aheinecke).
Update gpgol to latest beta
Jan 11 2018, 8:09 AM
aheinecke committed rW080525b9728c: Update GnuPG to 2.2.4 (authored by aheinecke).
Update GnuPG to 2.2.4
Jan 11 2018, 8:09 AM
aheinecke committed rW059ed36cde61: Switch gpgme to released 1.10 version (authored by aheinecke).
Switch gpgme to released 1.10 version
Jan 11 2018, 8:09 AM
aheinecke committed rWa91cd7147ef9: Update libkleo and kleopatra (authored by aheinecke).
Update libkleo and kleopatra
Jan 11 2018, 8:09 AM
aheinecke committed rKLEOPATRAa6a9997aff5e: Minor version bump (authored by aheinecke).
Minor version bump
Jan 11 2018, 7:28 AM
lukele updated the task description for T3730: Add support to HTTP Basic Auth for Keyservers.
Jan 11 2018, 1:37 AM · gnupg24, Feature Request
lukele created T3730: Add support to HTTP Basic Auth for Keyservers.
Jan 11 2018, 1:36 AM · gnupg24, Feature Request

Jan 10 2018

dirk added a comment to T3576: Open PGP SmartCard V2.1 - decryption error: ERR 100663364 Missing item in object <SCD>.

I find your question confusing. I'm the reporter of this bug. All the efforts and tries of gniibe and myself are documented above.
Or do you refrer to something else ?

Jan 10 2018, 11:32 PM · Info Needed, scd, Bug Report
werner added a comment to T3576: Open PGP SmartCard V2.1 - decryption error: ERR 100663364 Missing item in object <SCD>.

Can you exactly explain how you tested this?

Jan 10 2018, 10:26 PM · Info Needed, scd, Bug Report
dirk added a comment to T3576: Open PGP SmartCard V2.1 - decryption error: ERR 100663364 Missing item in object <SCD>.

I also have the 2.1 Card which has this bug
Version ..........: 2.1
Manufacturer .....: ZeitControl

Jan 10 2018, 10:07 PM · Info Needed, scd, Bug Report
rjh committed rD43cbf5c1aeaa: Incorporate some changes from rms (authored by rjh).
Incorporate some changes from rms
Jan 10 2018, 9:33 PM
werner committed rG81d71818d054: gpg: Add stub function for encrypting AEAD. (authored by werner).
gpg: Add stub function for encrypting AEAD.
Jan 10 2018, 5:41 PM
werner committed rG8217cd49364b: gpg: Add option and preference framework for AEAD. (authored by werner).
gpg: Add option and preference framework for AEAD.
Jan 10 2018, 5:41 PM
werner committed rG4e2ba546cdcc: gpg: New option --force-aead (authored by werner).
gpg: New option --force-aead
Jan 10 2018, 5:41 PM
werner raised the priority of T3374: gpg recv-keys fail if first dns server end up with "Connection refused" from Normal to High.
Jan 10 2018, 4:11 PM · dns, dirmngr, Bug Report
aheinecke closed T3729: Gpg4win: Installer recreates desktop shortcuts on update, a subtask of T3607: Gpg4win 3.0.3, as Resolved.
Jan 10 2018, 2:33 PM · gpg4win
aheinecke closed T3729: Gpg4win: Installer recreates desktop shortcuts on update as Resolved.

We now have update handling in the installer and this is the first thing the update handling fixes.

Jan 10 2018, 2:33 PM · gpg4win
aheinecke added a subtask for T3607: Gpg4win 3.0.3: T3729: Gpg4win: Installer recreates desktop shortcuts on update.
Jan 10 2018, 2:33 PM · gpg4win
aheinecke added a parent task for T3729: Gpg4win: Installer recreates desktop shortcuts on update: T3607: Gpg4win 3.0.3.
Jan 10 2018, 2:33 PM · gpg4win
aheinecke committed rW7a45576ec9c6: Add update handling to installer and uninstaller (authored by aheinecke).
Add update handling to installer and uninstaller
Jan 10 2018, 2:33 PM
BenM committed rD7794c9fb3888: GPG with PHP (authored by BenM).
GPG with PHP
Jan 10 2018, 2:27 PM
aheinecke created T3729: Gpg4win: Installer recreates desktop shortcuts on update.
Jan 10 2018, 2:21 PM · gpg4win
aheinecke closed T3597: Gpg4win: Show Readme in the installer only works for english and german as Resolved.

I understand now that README's for other languages are installed as aliases and added some missing ones.

Jan 10 2018, 2:05 PM · gpg4win
aheinecke closed T3597: Gpg4win: Show Readme in the installer only works for english and german, a subtask of T3607: Gpg4win 3.0.3, as Resolved.
Jan 10 2018, 2:05 PM · gpg4win
aheinecke committed rWc1ad59315f55: Add more aliases for README in other langs (authored by aheinecke).
Add more aliases for README in other langs
Jan 10 2018, 2:05 PM
aheinecke added a subtask for T3607: Gpg4win 3.0.3: T3597: Gpg4win: Show Readme in the installer only works for english and german.
Jan 10 2018, 2:05 PM · gpg4win
aheinecke added a parent task for T3597: Gpg4win: Show Readme in the installer only works for english and german: T3607: Gpg4win 3.0.3.
Jan 10 2018, 2:05 PM · gpg4win
joshchia added a comment to T3374: gpg recv-keys fail if first dns server end up with "Connection refused".

I'm using gnupg 2.2.4 and this problem repros for me, and it impacts downstream things like pacman-key (Arch Linux) quite insidiously, which fails with an misleading error message that would not point a regular user to this line of investigation.

Jan 10 2018, 1:48 PM · dns, dirmngr, Bug Report
aheinecke added a comment to T3424: GPG OL is crashing when sending message from a outlook profile created by gsuite tool.

For T3662 (PGP/Inline problem with Microsoft Exchange Online) I had to change the code used to send PGP/Inline.

Jan 10 2018, 1:24 PM · gpgol, Bug Report
JochenSaalfeld committed rW9f16e2ddfae9: minor stylistic imporovements (authored by JochenSaalfeld).
minor stylistic imporovements
Jan 10 2018, 1:19 PM
4537 created T3728: error: sign+encrypt failed: unusable public key.
Jan 10 2018, 1:09 PM · Support
aheinecke closed T3662: GpgOL: encrypted PGP/Inline email fails when using exchange online as Resolved.

I've changed the behavior now so that PGP/Inline also works with Exchange Online.

Jan 10 2018, 12:45 PM · gpg4win, gpgol
aheinecke closed T3662: GpgOL: encrypted PGP/Inline email fails when using exchange online, a subtask of T3607: Gpg4win 3.0.3, as Resolved.
Jan 10 2018, 12:45 PM · gpg4win
aheinecke added a parent task for T3662: GpgOL: encrypted PGP/Inline email fails when using exchange online: T3607: Gpg4win 3.0.3.
Jan 10 2018, 12:45 PM · gpg4win, gpgol
aheinecke added a subtask for T3607: Gpg4win 3.0.3: T3662: GpgOL: encrypted PGP/Inline email fails when using exchange online.
Jan 10 2018, 12:45 PM · gpg4win
aheinecke committed rO39f1abce9009: Change PGP/Inline behavior (authored by aheinecke).
Change PGP/Inline behavior
Jan 10 2018, 12:40 PM
werner added a project to T3717: I am tired of errors like Connection Closed in DNS, Server Indicated a Failure, No Keyserver Available, and Not Enabled when trying to do something with a keyserver: Info Needed.
Jan 10 2018, 12:08 PM · Info Needed, Bug Report
aheinecke added a comment to T3656: Outlook 2016 wont encrypt messages if S/MIME encrypt or Sign was activated.
In T3656#109246, @Mak wrote:

I sent it to a user on a different Mailserver. On my setup its nothing special... Win 10 Enterprise N en, Office 365 Pro Plus en, Kaspersky Internet Security. Server Win 2012 R2 with Exchange Server 2013 and GFI Mailessentials.
I don't think there is anything special... :-(

Jan 10 2018, 10:15 AM · Bug Report, gpgol
aheinecke added a parent task for T3726: Kleopatra: Certificate Details blocked when CRL is fetched: T3607: Gpg4win 3.0.3.
Jan 10 2018, 9:50 AM · kleopatra
aheinecke added a subtask for T3607: Gpg4win 3.0.3: T3726: Kleopatra: Certificate Details blocked when CRL is fetched.
Jan 10 2018, 9:50 AM · gpg4win
aheinecke added a subtask for T3607: Gpg4win 3.0.3: T3727: Kleopatra: S/MIME Certificate info not updated if CRL check fails.
Jan 10 2018, 9:50 AM · gpg4win
aheinecke added a parent task for T3727: Kleopatra: S/MIME Certificate info not updated if CRL check fails: T3607: Gpg4win 3.0.3.
Jan 10 2018, 9:50 AM · kleopatra
aheinecke closed T3727: Kleopatra: S/MIME Certificate info not updated if CRL check fails as Resolved.

The status is now shown and updated.

Jan 10 2018, 9:50 AM · kleopatra
aheinecke renamed T3726: Kleopatra: Certificate Details blocked when CRL is fetched from Kleopatra: Cerrtificate Details blocked when CRL is fetched to Kleopatra: Certificate Details blocked when CRL is fetched.
Jan 10 2018, 9:49 AM · kleopatra
aheinecke closed T3726: Kleopatra: Certificate Details blocked when CRL is fetched as Resolved.

No longer blocks with that commit. Keylistjob is started in the background. As long as the keylistjob is running the validity is shown as "Updating..."

Jan 10 2018, 9:48 AM · kleopatra
aheinecke committed rKLEOPATRAaa753e946f83: Improve cert details for SMIME / CRL Fetching (authored by aheinecke).
Improve cert details for SMIME / CRL Fetching
Jan 10 2018, 9:44 AM
aheinecke reopened T3720: Crashes on Windows if homedir is a windows drive letter as "Open".

This is not with 2.0 but with 2.2.3 / current master.

Jan 10 2018, 9:32 AM · gnupg (gpg22), Windows
werner closed T3720: Crashes on Windows if homedir is a windows drive letter as Wontfix.

gnupg 2.0 reached EOL - there won't be any fixes.

Jan 10 2018, 9:15 AM · gnupg (gpg22), Windows
aheinecke created T3727: Kleopatra: S/MIME Certificate info not updated if CRL check fails.
Jan 10 2018, 9:14 AM · kleopatra
aheinecke created T3726: Kleopatra: Certificate Details blocked when CRL is fetched.
Jan 10 2018, 9:12 AM · kleopatra
bernhard created T3725: jabber.quux.de certificate ran out 2018-01-09 in the S1 Public space.
Jan 10 2018, 8:59 AM
aheinecke added a comment to T3720: Crashes on Windows if homedir is a windows drive letter.

The install location does not have anything to do with that. I just always have my development installations directly under C: so that I can modify them without admin rights.

Jan 10 2018, 8:10 AM · gnupg (gpg22), Windows
aa added a comment to T3720: Crashes on Windows if homedir is a windows drive letter.

ok,
well I run "it" on Power Shell ( Debuggable Package Manager ) and I got ..

Jan 10 2018, 6:17 AM · gnupg (gpg22), Windows

Jan 9 2018

Mak added a comment to T3656: Outlook 2016 wont encrypt messages if S/MIME encrypt or Sign was activated.

I sent it to a user on a different Mailserver. On my setup its nothing special... Win 10 Enterprise N en, Office 365 Pro Plus en, Kaspersky Internet Security. Server Win 2012 R2 with Exchange Server 2013 and GFI Mailessentials.
I don't think there is anything special... :-(

Jan 9 2018, 11:28 PM · Bug Report, gpgol
jukivili committed rCb3ec0f752c92: Add ARMv8/AArch64 implementation of chacha20 (authored by jukivili).
Add ARMv8/AArch64 implementation of chacha20
Jan 9 2018, 8:08 PM
jukivili committed rCa00c5b2988ce: Add AES-NI acceleration for AES-XTS (authored by jukivili).
Add AES-NI acceleration for AES-XTS
Jan 9 2018, 8:08 PM
jukivili committed rCc9e9cb2eb6a1: AES-NI improvements for AMD64 (authored by jukivili).
AES-NI improvements for AMD64
Jan 9 2018, 8:08 PM
jukivili committed rC172ad09cbedc: New ChaCha implementations (authored by jukivili).
New ChaCha implementations
Jan 9 2018, 8:08 PM
jukivili committed rCb9a471ccf5f0: New Poly1305 implementations (authored by jukivili).
New Poly1305 implementations
Jan 9 2018, 8:08 PM
jukivili committed rCd39deb0a41db: mpi/ec: fix when 'unsigned long' is 32-bit but limb size is 64-bit (authored by jukivili).
mpi/ec: fix when 'unsigned long' is 32-bit but limb size is 64-bit
Jan 9 2018, 8:08 PM
werner added a comment to T3720: Crashes on Windows if homedir is a windows drive letter.

Do you mean that GnuPG installed to c:/gnupg/bin/ crashed if that mentioned --homedir is given but it does work if it is installed at the standard place? Please run "gpgconf --version" in both ways.

Jan 9 2018, 7:06 PM · gnupg (gpg22), Windows
walz added a comment to T3722: gpg "No name" error.
$ gpg-connect-agent --dirmngr 'getinfo dnsinfo' /bye
OK - Libdns stub resolver
Jan 9 2018, 6:51 PM · dns
aheinecke added a comment to T3616: Gpg4Win 3.0.2 hangs if replying to an encrypted message in Outlook 2010.

@hs could you please retest with 2.0.6-beta8 http://files.gpg4win.org/Beta/gpgol/ and attach the log file again.

Jan 9 2018, 4:24 PM · Info Needed, Bug Report, gpg4win
aheinecke committed rO08a7a0db7169: Cache recipients trough oom and add fallbacks (authored by aheinecke).
Cache recipients trough oom and add fallbacks
Jan 9 2018, 4:19 PM
aheinecke closed T2006: GPG OL: Mail clients cannot detect PGP decrypted message as encrypted mail has wrong "Content-Type" as Resolved.

As this is still waiting for info for two years and I can't reproduce with current GpgOL -> Resolved.

Jan 9 2018, 4:00 PM · Info Needed, Bug Report, gpgol
aheinecke closed T3602: Kleopatra: Using tmp directory to buffer decrypted file should be configurable as Resolved.

Implemented with: https://commits.kde.org/kleopatra/9d1ebcb1e5f6b44a745c7e947f2e8eaf88fff786

Jan 9 2018, 3:50 PM · Bug Report, gpg4win, kleopatra