Page MenuHome GnuPG
Feed Advanced Search

Jul 9 2018

werner committed rG61562fe00027: gpg: Remove multiple subkey bindings during export-clean. (authored by werner).
gpg: Remove multiple subkey bindings during export-clean.
Jul 9 2018, 12:17 PM
werner closed T3804: --export-options export-minimal,export-clean includes multiple subkey binding signatures when only one is necessary as Resolved.

Fixed for 2.2.9.

Jul 9 2018, 12:17 PM · gnupg (gpg22)
werner committed rG76989d5bd89e: gpg: Remove multiple subkey bindings during export-clean. (authored by werner).
gpg: Remove multiple subkey bindings during export-clean.
Jul 9 2018, 12:15 PM
werner closed T3622: --export-options export-minimal,export-clean includes unusable subkeys as Resolved.

To be released with 2.2.9

Jul 9 2018, 10:46 AM · Feature Request, gnupg (gpg22)
werner committed rG8055f186a32e: gpg: Let export-clean remove expired subkeys. (authored by werner).
gpg: Let export-clean remove expired subkeys.
Jul 9 2018, 10:45 AM
werner committed rG046276db3a04: gpg: Split key cleaning function for clarity. (authored by werner).
gpg: Split key cleaning function for clarity.
Jul 9 2018, 10:45 AM
werner committed rG40bf383f72b5: gpg: Move key cleaning functions to a separate file. (authored by werner).
gpg: Move key cleaning functions to a separate file.
Jul 9 2018, 10:45 AM
werner committed rGc2fd65ec8498: gpg: Let export-clean remove expired subkeys. (authored by werner).
gpg: Let export-clean remove expired subkeys.
Jul 9 2018, 10:10 AM
werner committed rG6c3567196f7e: gpg: Split key cleaning function for clarity. (authored by werner).
gpg: Split key cleaning function for clarity.
Jul 9 2018, 10:10 AM
werner committed rG135e46ea480d: gpg: Move key cleaning functions to a separate file. (authored by werner).
gpg: Move key cleaning functions to a separate file.
Jul 9 2018, 10:10 AM

Jul 8 2018

werner added a comment to T4059: Errors while building from source on Cygwin (gnupg repo).

Some times I a curious and it seems that GnuPG can be used on 32 bit Cygwin. Thus I wonder what is going on on 64 bit Cygwin (which I don't know). It might be a HANDLE/socket issue where Windows is still using values which fit into a 32 bit integer but Cygwin might have changed that. Eventually we need to remove that assumption in GnuPG's code and this is why I won't have a problem to keep this bug open.

Jul 8 2018, 10:17 PM · Cygwin, gnupg, Bug Report
werner triaged T4058: Connect a TOR server not running on localhost. as Normal priority.
Jul 8 2018, 8:01 AM · Tor, gnupg, Feature Request
werner set the color for Tor to Pink.
Jul 8 2018, 8:01 AM
werner set the color for Cygwin to Checkered.
Jul 8 2018, 7:58 AM
werner set the color for Cygwin to Indigo.
Jul 8 2018, 7:57 AM
werner triaged T4059: Errors while building from source on Cygwin (gnupg repo) as Low priority.

Note that Cygwin is not a supported platform. Seems that the exec functions don't work on this 64 bit variant.

Jul 8 2018, 7:54 AM · Cygwin, gnupg, Bug Report
werner set the color for Cygwin to Red.
Jul 8 2018, 7:53 AM
werner triaged T4060: Add ability to mark critical notations as "recognized" during signature verification as Normal priority.

re: last question: Marking a notation as recognized does not mean gpg does do anything with it or that it demands this notation. The latter can be handled by the caller. For example, gpg knows about "preferred-email-encoding@pgp.com" but does not apply any semantic to it.

Jul 8 2018, 7:49 AM · gnupg, gpgme, Feature Request

Jul 6 2018

werner closed T4044: HTTP proxy not honoured as Invalid.

No problem. I am glad that it works.

Jul 6 2018, 5:14 PM · Bug Report, gpg4win
werner edited projects for T2917: --locate-key should re-fetch key via WKD if it is expired, added: gnupg (gpg22); removed gnupg.
Jul 6 2018, 9:10 AM · gnupg (gpg22), Bug Report
werner renamed T2917: --locate-key should re-fetch key via WKD if it is expired from wkd discovery should re-fetch key if it is expired to --locate-key should re-fetch key via WKD if it is expired.
Jul 6 2018, 9:09 AM · gnupg (gpg22), Bug Report
werner added a comment to T2917: --locate-key should re-fetch key via WKD if it is expired.

Actually the --locate-key command differs from the implicit use of locate key code when encrypting to a mail address.
After importing the expired key and running for example

Jul 6 2018, 9:08 AM · gnupg (gpg22), Bug Report
werner committed rGb4599a0449ea: gpg: Allow decryption using several passphrases in may cases. (authored by werner).
gpg: Allow decryption using several passphrases in may cases.
Jul 6 2018, 8:38 AM
werner closed T4050: GnuPG fails to decrypt file encrypted with more than one password with any password but the first as Wontfix.

Won't fix for 2.2 or CFB encryption.

Jul 6 2018, 8:37 AM · gnupg (gpg22)
werner added a comment to T4050: GnuPG fails to decrypt file encrypted with more than one password with any password but the first.

My bad. I looked at the wrong working copy. Will pick that commit.

Jul 6 2018, 7:55 AM · gnupg (gpg22)

Jul 5 2018

werner closed T4046: GnuPG fails to verify signatures that have a issuer fingerprint but no issuer subpacket as Resolved.

Thanks. The entire getkey.c code better needs a complete overhaul for before we add v5 keys.

Jul 5 2018, 9:57 PM · gnupg (gpg22)
werner committed rG833738a31697: po: Add flag options for xgettext. (authored by werner).
po: Add flag options for xgettext.
Jul 5 2018, 9:54 PM
werner committed rG221af19351ad: gpg: Prepare for signatures with ISSUER_FPR but without ISSUER. (authored by werner).
gpg: Prepare for signatures with ISSUER_FPR but without ISSUER.
Jul 5 2018, 9:54 PM
werner committed rGcb71573f3762: po: Add flag options for xgettext. (authored by werner).
po: Add flag options for xgettext.
Jul 5 2018, 9:48 PM
werner committed rGf7526c7bc754: gpg: Prepare for signatures with ISSUER_FPR but without ISSUER. (authored by werner).
gpg: Prepare for signatures with ISSUER_FPR but without ISSUER.
Jul 5 2018, 9:04 PM
werner claimed T4046: GnuPG fails to verify signatures that have a issuer fingerprint but no issuer subpacket.
Jul 5 2018, 5:24 PM · gnupg (gpg22)
werner accepted D463: Add ctx flag for auto-key-locate.
Jul 5 2018, 5:23 PM
werner lowered the priority of T3101: GnuPG 2.2 cannot import secret keys from 1.4/2.0's secring.gpg directly (if it is expired by original expiration date) from High to Normal.

We have a workaround thus lowering the priority.

Jul 5 2018, 5:07 PM · workaround, gnupg, Bug Report
werner updated subscribers of T4050: GnuPG fails to decrypt file encrypted with more than one password with any password but the first.

It seems @gniibe fixed that en-passant in master. At least I can only replicate this with 2.2.

Jul 5 2018, 4:57 PM · gnupg (gpg22)
werner added a comment to T4036: gnupg 2.2.9 release.

next week?

Jul 5 2018, 4:48 PM · Release Info, gnupg
werner committed rG9ea9b9db7e1b: doc: Typo fix in a comment. (authored by werner).
doc: Typo fix in a comment.
Jul 5 2018, 9:50 AM
werner committed rGfaf3c70c7715: tools: Add experimental code for a pairing protocol (authored by werner).
tools: Add experimental code for a pairing protocol
Jul 5 2018, 9:50 AM
werner committed rE1ac63f630cbe: Remove leftover debug output from gpg-error. (authored by werner).
Remove leftover debug output from gpg-error.
Jul 5 2018, 9:21 AM
werner committed rE8a72604dc44d: po: Update Ukrainian translation. (authored by Yuri Chornoivan <yurchor@ukr.net>).
po: Update Ukrainian translation.
Jul 5 2018, 9:21 AM
werner added a comment to rEfe2f8fca3114: core: Initialize values in estream_format.

The comment is a bit misleading. It does not fix the crash because it all depends on the stack layout: printf takes the args from the stack and if there are not enough args pushed by the caller printf happily uses args which are the local vars from our printf function. Clearing a few vars there seems to have the effect that the args for the "%s" now points to a NULL. In fact you can't fix such crashes with any stdarg function on any platform I know. That is why gcc as a couple of helpful attributes to detect misuse of stdarg args at compile time (e.g. sentinel, printf).

Jul 5 2018, 9:20 AM
werner added a comment to T4022: too-large User ID packets result in dropping an entire certificate.

It won't import that keyblock. We can fixup some trivial cases but there will always be ways to create a garbled keyblock and that is nothing we can fix. Better restore the keyblock from a backup or write a dedicated tool fsck-like tool.

Jul 5 2018, 9:04 AM · gnupg, Bug Report

Jul 4 2018

werner added a comment to T4054: libgpg-error, w32: logging crashes on unmatched %s on window.

Printing "(null)" is just coincidence because NULL is stored at the respective stack address on one platform.

Jul 4 2018, 8:04 PM · Windows, gpgrt
werner added a comment to D465: Fix uninitialized access to valutable_buffer.

The patch fixes a symptom of wrong format specs usage. What happens with %s with no supplied arg depends on the platform and what is currently on the stack. So it will always be incorrect and you can't do anything about it except for letting the gettext tools checking the PO files for correct format specifier usage. In the english version gcc does the check.

Jul 4 2018, 7:59 PM
werner added inline comments to rKLEOPATRA9e5fa86561ae: Handle no MDC for legacy algos gracefully.
Jul 4 2018, 2:13 PM
werner closed T4022: too-large User ID packets result in dropping an entire certificate as Resolved.

Fixed for master and 2.2.9.

Jul 4 2018, 10:19 AM · gnupg, Bug Report
werner committed rGcb6b925f94b4: gpg: Ignore too large user ids during import. (authored by werner).
gpg: Ignore too large user ids during import.
Jul 4 2018, 10:19 AM
werner committed rG5b47b4613221: indent: Fix indentation of read_block in g10/import.c (authored by werner).
indent: Fix indentation of read_block in g10/import.c
Jul 4 2018, 10:19 AM
werner added a parent task for T4036: gnupg 2.2.9 release: T4022: too-large User ID packets result in dropping an entire certificate.
Jul 4 2018, 10:17 AM · Release Info, gnupg
werner added a subtask for T4022: too-large User ID packets result in dropping an entire certificate: T4036: gnupg 2.2.9 release.
Jul 4 2018, 10:17 AM · gnupg, Bug Report
werner committed rG01cd66f9faf1: gpg: Ignore too large user ids during import. (authored by werner).
gpg: Ignore too large user ids during import.
Jul 4 2018, 10:15 AM
werner committed rG60e7e102a153: indent: Fix indentation of read_block in g10/import.c (authored by werner).
indent: Fix indentation of read_block in g10/import.c
Jul 4 2018, 10:15 AM
werner claimed T4022: too-large User ID packets result in dropping an entire certificate.
Jul 4 2018, 9:20 AM · gnupg, Bug Report
werner closed T3810: UI workshop as Wontfix.

We didn't found the time to organize it. There will be a OpenPGP summit this fall organized by Patrick, though

Jul 4 2018, 9:19 AM · Documentation, gnupg, UI, Verein
werner added a subtask for T4014: when verifying signatures, gpg and gpgv should ensure signing capabilities: T4036: gnupg 2.2.9 release.
Jul 4 2018, 9:16 AM · gpgv, gnupg, Bug Report
werner added a parent task for T4036: gnupg 2.2.9 release: T4014: when verifying signatures, gpg and gpgv should ensure signing capabilities.
Jul 4 2018, 9:16 AM · Release Info, gnupg
werner added a parent task for T4036: gnupg 2.2.9 release: T4018: gpg --with-colons --show-keys does not show revocation certificates.
Jul 4 2018, 9:15 AM · Release Info, gnupg
werner added a subtask for T4018: gpg --with-colons --show-keys does not show revocation certificates: T4036: gnupg 2.2.9 release.
Jul 4 2018, 9:15 AM · gnupg, Bug Report
werner closed T4018: gpg --with-colons --show-keys does not show revocation certificates as Resolved.

Will be released with 2.2.9

Jul 4 2018, 9:13 AM · gnupg, Bug Report
werner committed rG214b0077264e: gpg: Extra check for sign usage when verifying a data signature. (authored by werner).
gpg: Extra check for sign usage when verifying a data signature.
Jul 4 2018, 9:11 AM
werner committed rGef50fdf82a45: gpg: Extra check for sign usage when verifying a data signature. (authored by werner).
gpg: Extra check for sign usage when verifying a data signature.
Jul 4 2018, 9:11 AM
werner closed T4014: when verifying signatures, gpg and gpgv should ensure signing capabilities as Resolved.

Fix will also go into 2.2.9

Jul 4 2018, 9:10 AM · gpgv, gnupg, Bug Report
werner added a comment to T4044: HTTP proxy not honoured.

Do you have Tor or the Tor Browser running? Dirmngr will use them instead of a direct or proxy network connection. Di disable this behaviour put

no-use-tor

into dirmngr.conf. If that is not the case we need some more debug info. Put

log-file SOMEFILE
verbose
debug network,dns

into dirmngr.conf and post the log file (or send privately to wk@gnupg.org mentioning T4044 in the subject - no HTML please).

Jul 4 2018, 8:44 AM · Bug Report, gpg4win

Jul 3 2018

werner raised the priority of T4052: Cannot generate NIST-P or Brainpool-P subkeys without explicitly specifying the algorithm from Wishlist to Low.
Jul 3 2018, 6:27 PM · gnupg, Bug Report
werner closed T1173: gpg has no easy way to view the reason and description of revocation sigs as Resolved.

Backport done. To be released with 2.2.9.

Jul 3 2018, 12:34 PM · gnupg, Debian, Feature Request
werner committed rG04fb76684d8b: gpg: Print revocation reason for "rev" records. (authored by werner).
gpg: Print revocation reason for "rev" records.
Jul 3 2018, 12:33 PM
werner committed rGa8e24addcc4e: gpg: Print revocation reason for "rvs" records. (authored by werner).
gpg: Print revocation reason for "rvs" records.
Jul 3 2018, 12:33 PM
werner committed rG5c67ee160d49: gpg: Let --show-keys print revocation certificates. (authored by werner).
gpg: Let --show-keys print revocation certificates.
Jul 3 2018, 12:33 PM
werner triaged T4050: GnuPG fails to decrypt file encrypted with more than one password with any password but the first as High priority.
Jul 3 2018, 11:38 AM · gnupg (gpg22)

Jul 2 2018

werner committed rG8a915cd9faf0: agent: New commands PUT_SECRET and GET_SECRET. (authored by werner).
agent: New commands PUT_SECRET and GET_SECRET.
Jul 2 2018, 9:44 PM
werner triaged T4049: BUG in gpa - MUST everytime save private key to harddisk to export it as Normal priority.

I am not sure what you mean by “keybundle”. Is is a single keyblock or a selection of multiple keyblocks?

Jul 2 2018, 8:46 PM · Feature Request, gpa
werner committed rG58baf40af641: common: New function percent_data_escape. (authored by werner).
common: New function percent_data_escape.
Jul 2 2018, 8:35 PM
werner committed rG3978df943dc7: agent: Fix segv running in --server mode (authored by werner).
agent: Fix segv running in --server mode
Jul 2 2018, 8:35 PM
werner raised the priority of T2917: --locate-key should re-fetch key via WKD if it is expired from Normal to High.
Jul 2 2018, 10:39 AM · gnupg (gpg22), Bug Report

Jun 28 2018

werner triaged T4046: GnuPG fails to verify signatures that have a issuer fingerprint but no issuer subpacket as Normal priority.
Jun 28 2018, 9:11 PM · gnupg (gpg22)

Jun 24 2018

werner triaged T4042: RFC 4880 compliance as Normal priority.
Jun 24 2018, 9:50 PM · OpenPGP, gnupg

Jun 22 2018

werner added a comment to T3101: GnuPG 2.2 cannot import secret keys from 1.4/2.0's secring.gpg directly (if it is expired by original expiration date).

The problem here is that we we did not sync the pubring with the secring in old version (2.1 removed the secring concept also due to that syncing problem). Now if we migrate (or plainly import a secring.gpg), gpg does not see any updated self-signatures and this is the reason why outdated self-signatures are used.

Jun 22 2018, 9:16 AM · workaround, gnupg, Bug Report
werner raised the priority of T3101: GnuPG 2.2 cannot import secret keys from 1.4/2.0's secring.gpg directly (if it is expired by original expiration date) from Normal to High.
Jun 22 2018, 9:06 AM · workaround, gnupg, Bug Report
werner merged task T4039: gnupg 2.1+ does not recognize subkeys with extended expiration dates into T3101: GnuPG 2.2 cannot import secret keys from 1.4/2.0's secring.gpg directly (if it is expired by original expiration date).
Jun 22 2018, 9:04 AM · Bug Report
werner merged T4039: gnupg 2.1+ does not recognize subkeys with extended expiration dates into T3101: GnuPG 2.2 cannot import secret keys from 1.4/2.0's secring.gpg directly (if it is expired by original expiration date).
Jun 22 2018, 9:04 AM · workaround, gnupg, Bug Report

Jun 21 2018

werner changed the status of T1173: gpg has no easy way to view the reason and description of revocation sigs from Open to Testing.

Done for master. Needs backport.

Jun 21 2018, 8:38 PM · gnupg, Debian, Feature Request
werner committed rG592deeddb9bf: gpg: Print revocation reason for "rev" records. (authored by werner).
gpg: Print revocation reason for "rev" records.
Jun 21 2018, 8:37 PM
werner committed rGb7cd2c2093ae: gpg: Print revocation reason for "rvs" records. (authored by werner).
gpg: Print revocation reason for "rvs" records.
Jun 21 2018, 8:37 PM
werner raised the priority of T1173: gpg has no easy way to view the reason and description of revocation sigs from Normal to High.
Jun 21 2018, 3:24 PM · gnupg, Debian, Feature Request
werner added a comment to T4018: gpg --with-colons --show-keys does not show revocation certificates.

I implemented it in master and if you agree I will backport it to stable. This is the new output:

Jun 21 2018, 3:20 PM · gnupg, Bug Report
werner committed rG386b9c4f25b2: gpg: Let --show-keys print revocation certificates. (authored by werner).
gpg: Let --show-keys print revocation certificates.
Jun 21 2018, 3:20 PM
werner committed rG7e9aa307f76c: build: Remove duplicates from AC_CHECK_FUNCS (authored by werner).
build: Remove duplicates from AC_CHECK_FUNCS
Jun 21 2018, 1:09 PM
werner added a comment to T3996: Undefined reference to GpgME::Data::seek(long, int) on MinGW.

Not really. off_t is a real portability problem and this why we moved that problem out of the GPGME ABI to the application. Thus the application needs to care about mapping gpgme_off_t to whatever off_t it uses. Without that we can't provide a stable _and_ toolchain independent ABI.

Jun 21 2018, 9:28 AM · Windows, C++, gpgme, Bug Report

Jun 20 2018

werner added a comment to T4031: gpg-check-pattern.1 in Debian generates warnings from test-groff .

We should include the man page then in texi format into tools.texi

Jun 20 2018, 7:02 PM · Debian, gnupg, Bug Report

Jun 19 2018

werner closed T3755: TLS hostname verification using hostname from DNS instead of supplied hostname as Resolved.
Jun 19 2018, 1:34 PM · gnupg (gpg22), dns, dirmngr
werner committed rG08147f8bbdca: wks: Take name of sendmail from configure. (authored by werner).
wks: Take name of sendmail from configure.
Jun 19 2018, 8:08 AM

Jun 18 2018

werner triaged T4031: gpg-check-pattern.1 in Debian generates warnings from test-groff as Normal priority.

Thanks for forwarding.

Jun 18 2018, 9:21 PM · Debian, gnupg, Bug Report
werner removed a parent task for T3810: UI workshop: T3932: [GPA] Add option to wrap lines.
Jun 18 2018, 4:26 PM · Documentation, gnupg, UI, Verein
werner removed a subtask for T3932: [GPA] Add option to wrap lines: T3810: UI workshop.
Jun 18 2018, 4:26 PM · gpa, Feature Request
werner added a subtask for T3932: [GPA] Add option to wrap lines: T3810: UI workshop.
Jun 18 2018, 4:26 PM · gpa, Feature Request
werner added a parent task for T3810: UI workshop: T3932: [GPA] Add option to wrap lines.
Jun 18 2018, 4:26 PM · Documentation, gnupg, UI, Verein
werner raised the priority of T3443: Install gpg 1.4 as gpg1 from High to Unbreak Now!.
Jun 18 2018, 10:09 AM · Feature Request

Jun 15 2018

steve awarded T3902: Use the term password instead of passphrase a Like token.
Jun 15 2018, 3:22 PM · gnupg24, FAQ, Documentation

Jun 14 2018

werner triaged T4024: "Clean" does not remove superseded subkey signatures as Normal priority.
Jun 14 2018, 7:36 PM · gnupg
werner triaged T4025: `gpg --with-sig-list --show-keys` does not show all the signature packets from stdin as Low priority.

--shows-keys is not a debug command to show the inetrnals of an OpenPGP message. It does the same as creating an empty homedir, importing the keys and running -k. Thus there is no way to get to the internals of an OpenPGP messages.

Jun 14 2018, 7:34 PM
werner closed T4023: gnupg 2.2.8 make errors as Resolved.

See T4012 for a patch to build with an older libgpg-error.

Jun 14 2018, 3:57 PM · Bug Report