Page MenuHome GnuPG
Feed Advanced Search

Advanced Search
Use Results
Hide Query

May 3 2021

• werner closed T1333: GPGSM rejects OCSP responder cert without keyUsage as Resolved.
May 3 2021, 3:52 PM · Bug Report, gnupg
• werner added a comment to T1333: GPGSM rejects OCSP responder cert without keyUsage.

RFC-5280 states in 4.2.1.3 for Key Usage:

May 3 2021, 2:30 PM · Bug Report, gnupg
• werner added a comment to T5359: Kleopatra: Loop in DeviceInfoWatcher with GnuPG 2.3 on Windows.

The error code is: No Readers Available. With the latest version you should have seen that string.

May 3 2021, 2:04 PM · Restricted Project, scd, Restricted Project, kleopatra
• werner added projects to T5416: [windows] Smartcards are less reliable under 2.3.1 (requires restarting gpg-agent.exe): gnupg (gpg23), scd, yubikey.

Meanwhile we did some more tests on Windows and so you many want to try our betas at

May 3 2021, 2:00 PM · yubikey, scd, gnupg (gpg23), Bug Report
• werner added a comment to T5359: Kleopatra: Loop in DeviceInfoWatcher with GnuPG 2.3 on Windows.

Can you please clarify this point: If you run on Unix with --disable-ccid-driver, do you get the same behavior as on Windows?

May 3 2021, 8:37 AM · Restricted Project, scd, Restricted Project, kleopatra

Apr 30 2021

• werner added a project to T5415: YubiKey no longer recognized in GnuPG 2.3.1 on macOS 10.15.7: MacOS.

Run gpg --debug ipc --card-status to quickly see the communication with the scdaemon.

Apr 30 2021, 10:47 AM · MacOS, yubikey, Bug Report

Apr 29 2021

• werner added inline comments to rKLEOPATRA1e77bdf6df5c: Search PKCS#15 keys on ldap servers.
Apr 29 2021, 6:56 PM
• werner committed rG7637d39fe20e: scd:p15: Update from current GnuPG 2.3 (authored by • werner).
scd:p15: Update from current GnuPG 2.3
Apr 29 2021, 4:52 PM
• werner committed rG96577e2e46e4: scd: Rewrite READKEY to allow for compressed points. (authored by • werner).
scd: Rewrite READKEY to allow for compressed points.
Apr 29 2021, 4:52 PM
• werner committed rG5b8593135fa6: common: Extend the openpgp_curve_to_oid function. (authored by • werner).
common: Extend the openpgp_curve_to_oid function.
Apr 29 2021, 4:52 PM
• werner committed rGf3c98b8cb5ad: common: New module to compute openpgp fingerprints (authored by • werner).
common: New module to compute openpgp fingerprints
Apr 29 2021, 4:52 PM
• werner committed rGc825117c5fa5: common: New function to uncompress an ECC public key. (authored by • werner).
common: New function to uncompress an ECC public key.
Apr 29 2021, 4:52 PM
• werner committed rG473e649ea1a6: common: New function cmp_canon_sexp. (authored by • werner).
common: New function cmp_canon_sexp.
Apr 29 2021, 4:52 PM
• werner committed rG72a7d45a230b: scd: Extend an internal function to also return the algo. (authored by • werner).
scd: Extend an internal function to also return the algo.
Apr 29 2021, 4:52 PM
• werner committed rG0eed0ced9bcd: scd: New function send_keyinfo to assist in backporting. (authored by • werner).
scd: New function send_keyinfo to assist in backporting.
Apr 29 2021, 4:52 PM
• werner committed rG91dd74f3d7e3: scd: New function for iso7816 PSO_CSV. (authored by • werner).
scd: New function for iso7816 PSO_CSV.
Apr 29 2021, 4:52 PM
• werner committed rG3db99b8861a7: scd: Minor changes to assist in backporting from 2.3 (authored by • werner).
scd: Minor changes to assist in backporting from 2.3
Apr 29 2021, 4:52 PM
• werner committed rG3ce69d838792: scd: Add new status codes. (authored by • werner).
scd: Add new status codes.
Apr 29 2021, 4:52 PM
• werner committed rG855d14d390e8: scd: Extend iso7816_select_path (authored by • werner).
scd: Extend iso7816_select_path
Apr 29 2021, 4:52 PM
• werner committed rGec9e8e0d6a1f: scd: Extend ISO binary and record reading functions. (authored by • werner).
scd: Extend ISO binary and record reading functions.
Apr 29 2021, 4:52 PM
• werner committed rG8d81fd7c01e8: scd: Fix PC/SC removed card problem (authored by • werner).
scd: Fix PC/SC removed card problem
Apr 29 2021, 9:16 AM

Apr 28 2021

• werner committed rG1f846823b397: scd:p15: Fix the name of a card. (authored by • werner).
scd:p15: Fix the name of a card.
Apr 28 2021, 7:53 PM
• werner committed rG178e4eb6555e: build: Allow running sign-release target from the dist dir. (authored by • werner).
build: Allow running sign-release target from the dist dir.
Apr 28 2021, 7:53 PM
• werner committed rGbb8e3996e44f: scd: Fix problem with reader list becoming empty. (authored by • werner).
scd: Fix problem with reader list becoming empty.
Apr 28 2021, 7:53 PM
• werner added a comment to T5414: Input/output error (218136625).

Please try to verify on the command line (cmd.exe):

Apr 28 2021, 11:37 AM · Support, gpg4win

Apr 27 2021

• werner renamed T5411: After upgrading from gpg4win 3.1.13 to gpg4win 3.1.15 GpgOL does not load, Outlook crashes. from After upgrading from gpg4win 3.1.13 to gpg4win 3.1.15 GnuOL does not load, Outlook crashes. to After upgrading from gpg4win 3.1.13 to gpg4win 3.1.15 GpgOL does not load, Outlook crashes..
Apr 27 2021, 2:39 PM · gpg4win, Support
• werner added a comment to T5412: Getting "Invalid digest algorithm", when trying to generate ECDH keys, in batch mode.

The curve is not defined to be used for ECDH (encryption); in fact it should in general only be used with the EdDSA
algorithm. You need to use "Key-Type: eddsa". Note that the EdDSA signing algorithm is different than the commonly used ECDSA signing algorithm.

Apr 27 2021, 2:39 PM · FAQ, gnupg, OpenPGP
• werner added a comment to rC060c378c050e: ecc: Check the input length for the point..

Can you please port this also to 1.8?

Apr 27 2021, 2:34 PM
• werner closed T5412: Getting "Invalid digest algorithm", when trying to generate ECDH keys, in batch mode as Resolved.
Apr 27 2021, 8:34 AM · FAQ, gnupg, OpenPGP
• werner edited projects for T5412: Getting "Invalid digest algorithm", when trying to generate ECDH keys, in batch mode, added: gnupg, FAQ; removed gnupg (gpg23), Bug Report.

You can't use ecdh with ed25519.

Apr 27 2021, 8:33 AM · FAQ, gnupg, OpenPGP
• werner claimed T5412: Getting "Invalid digest algorithm", when trying to generate ECDH keys, in batch mode.
Apr 27 2021, 8:14 AM · FAQ, gnupg, OpenPGP

Apr 26 2021

• werner committed rCa208f6af5033: doc: Clarify gcry_md_setkey for keyed BLAKE hashes. (authored by • werner).
doc: Clarify gcry_md_setkey for keyed BLAKE hashes.
Apr 26 2021, 8:13 PM
• werner committed rG99db4b0c7fd1: gpg: Do not use import-clean for LDAP keyserver imports. (authored by • werner).
gpg: Do not use import-clean for LDAP keyserver imports.
Apr 26 2021, 3:36 PM
• werner committed rG4fcfac6feb2a: gpg: Fix mailbox based search via AKL keyserver method. (authored by • werner).
gpg: Fix mailbox based search via AKL keyserver method.
Apr 26 2021, 3:36 PM
• werner triaged T5410: pinentry-gnome3 no longer functions in Wayland as Normal priority.

Please install the Gnome Key Ring prompter tool or use the plain GTK pinentry.

Apr 26 2021, 2:17 PM · pinentry

Apr 25 2021

• werner committed rG100037ac0f55: gpg: Auto import keys specified with --trusted-keys. (authored by • werner).
gpg: Auto import keys specified with --trusted-keys.
Apr 25 2021, 8:04 PM
• werner committed rGcc5aa68b6310: scd:p15: Fix last commit and improve D-TRUST detection. (authored by • werner).
scd:p15: Fix last commit and improve D-TRUST detection.
Apr 25 2021, 4:39 PM
• werner committed rG21e3f750bd7d: scd:p15: Shorten the displayed s/n of RSCS cards (authored by • werner).
scd:p15: Shorten the displayed s/n of RSCS cards
Apr 25 2021, 3:04 PM
• werner committed rG3cbc66410d62: gpg: Replace an obsolete trustdb function. (authored by • werner).
gpg: Replace an obsolete trustdb function.
Apr 25 2021, 3:04 PM

Apr 23 2021

• werner committed rG0b875aa11adf: agent,w32: Silence the get_peercred failed diagnostic (authored by • werner).
agent,w32: Silence the get_peercred failed diagnostic
Apr 23 2021, 10:26 AM
• werner closed T5409: scdaemon: 'Operation not supported by device' error under macOS after upgrading to 2.3.1 as Resolved.

Please have a look at the log:

Apr 23 2021, 9:08 AM · MacOS, Support, scd
• werner committed rG84c2d97cca76: agent: Require verbose level 2 for handler started/terminated notices. (authored by • werner).
agent: Require verbose level 2 for handler started/terminated notices.
Apr 23 2021, 8:51 AM
• werner committed rG883f1a517362: doc: Typo fix (authored by • werner).
doc: Typo fix
Apr 23 2021, 8:51 AM
• werner committed rG50293ec2ebf2: gpg: Allow decryption w/o public key but with correct card inserted. (authored by • werner).
gpg: Allow decryption w/o public key but with correct card inserted.
Apr 23 2021, 8:51 AM

Apr 22 2021

• werner committed rG4237a2b0a509: speedo: Automatically select Authenticode signing cert. (authored by • werner).
speedo: Automatically select Authenticode signing cert.
Apr 22 2021, 11:34 AM
• werner triaged T5406: gnupg-2.3.1: 'make check' on all tests tries to use installed 'keyboxd' as Normal priority.
Apr 22 2021, 11:07 AM · gnupg (gpg23), Bug Report
• werner committed rGd36c4dc95b72: tests: Make sure that the build keyboxd is used. (authored by • werner).
tests: Make sure that the build keyboxd is used.
Apr 22 2021, 11:06 AM
• werner committed rG9e24f2a45ce8: scd: Fix PSO_CSV for 512 bit curves (authored by • werner).
scd: Fix PSO_CSV for 512 bit curves
Apr 22 2021, 11:06 AM
• werner changed the status of T5406: gnupg-2.3.1: 'make check' on all tests tries to use installed 'keyboxd' from Open to Testing.

You are right. The problem is that in a development version we use an envvar to locate the programs, so there is usually no problem because the software has already been installed and the final test doesn't catch this. We should add a version check to all components to catch such problems.

Apr 22 2021, 8:49 AM · gnupg (gpg23), Bug Report
• werner triaged T5408: gpgconf should? not list disabled components as Normal priority.

Given that we don't yet support TPM for Windows you should go ahead and apply this patch. tpm should also be removed from the list of components.

Apr 22 2021, 8:33 AM · Bug Report, Windows, gnupg (gpg23)

Apr 21 2021

• werner triaged T5407: gpg fails to import second secret key in .pfx (PKCS12) file as Normal priority.
Apr 21 2021, 9:09 PM · gnupg24, gnupg (gpg23), Feature Request, S/MIME
• werner committed rG2fce99d73a6a: card: New option --shadow for command list. (authored by • werner).
card: New option --shadow for command list.
Apr 21 2021, 9:04 PM
• werner committed rG8f2c9cb73538: agent: Silence error messages for READKEY --card (authored by • werner).
agent: Silence error messages for READKEY --card
Apr 21 2021, 9:04 PM
• werner committed rGec36eca08cdb: gpg: Allow fingerprint based lookup with --locate-external-key. (authored by • werner).
gpg: Allow fingerprint based lookup with --locate-external-key.
Apr 21 2021, 6:32 PM
• werner committed rGf79e9540ca64: keyboxd: Fix searching for exact mail addresses. (authored by • werner).
keyboxd: Fix searching for exact mail addresses.
Apr 21 2021, 2:40 PM
• werner committed rGd153e4936e05: gpg,sm: Ignore the log-file option from common.conf. (authored by • werner).
gpg,sm: Ignore the log-file option from common.conf.
Apr 21 2021, 2:40 PM
• werner added a comment to P11 (An Untitled Masterwork).

6f03 = Data with specified length not supported.
Needs to be fixed in GnuPG :-(

Apr 21 2021, 12:40 PM
• werner committed rDe42d66786d9a: web: Update the news (authored by • werner).
web: Update the news
Apr 21 2021, 9:12 AM

Apr 20 2021

• werner added a comment to T5404: Kleopatra: OpenPGP LDAP keyserver configuration impossible for at least 2.3.

is more important

Apr 20 2021, 3:38 PM · kleopatra, Restricted Project
• werner updated the task description for T5386: Release GnuPG 2.3.1.
Apr 20 2021, 3:35 PM · gnupg (gpg23), Release Info
• werner reopened T5405: Release GnuPG 2.3.2 as "Open".
Apr 20 2021, 3:35 PM · gnupg (gpg23), Release Info
• werner closed T5386: Release GnuPG 2.3.1 as Resolved.
Apr 20 2021, 3:34 PM · gnupg (gpg23), Release Info
• werner closed T5405: Release GnuPG 2.3.2 as Resolved.
Apr 20 2021, 3:19 PM · gnupg (gpg23), Release Info
• werner updated the task description for T5405: Release GnuPG 2.3.2.
Apr 20 2021, 3:19 PM · gnupg (gpg23), Release Info
• werner committed rD62fd4a41f44c: swdb: GnuPG 2.3.1 (authored by • werner).
swdb: GnuPG 2.3.1
Apr 20 2021, 3:12 PM
• werner committed rGdefd5793b6b0: Post release updates (authored by • werner).
Post release updates
Apr 20 2021, 3:07 PM
• werner committed rGbc554b336f70: po: Auto update (authored by • werner).
po: Auto update
Apr 20 2021, 3:07 PM
• werner committed rGcf3986836160: po: Update German translation. (authored by • werner).
po: Update German translation.
Apr 20 2021, 3:07 PM
• werner committed rGcbbdb88627fe: Release 2.3.1 (authored by • werner).
Release 2.3.1
Apr 20 2021, 3:07 PM
• werner triaged T5405: Release GnuPG 2.3.2 as Normal priority.
Apr 20 2021, 3:06 PM · gnupg (gpg23), Release Info
• werner triaged T5403: Consider all Issuer subpackets when validating a signature as Low priority.
Apr 20 2021, 11:48 AM · OpenPGP, Feature Request
• werner committed rG45918813f059: Support log-file option from common.conf for all daemon. (authored by • werner).
Support log-file option from common.conf for all daemon.
Apr 20 2021, 10:58 AM
• werner committed rGb657d6c3bd81: gpgconf: Fix a diagnostic output. (authored by • werner).
gpgconf: Fix a diagnostic output.
Apr 20 2021, 10:58 AM
• werner committed rG51419d63415a: sm: New command --show-certs (authored by • werner).
sm: New command --show-certs
Apr 20 2021, 9:39 AM

Apr 19 2021

• werner committed rDf5aa73b8aae1: swdb: Release Libgcrypt 1.9.3 (authored by • werner).
swdb: Release Libgcrypt 1.9.3
Apr 19 2021, 11:35 PM
• werner committed rC8d3db6add149: Post release updates. (authored by • werner).
Post release updates.
Apr 19 2021, 11:14 PM
• werner committed rCcb7862720370: Release 1.9.3 (authored by • werner).
Release 1.9.3
Apr 19 2021, 11:14 PM
• werner closed T5305: Release Libgcrypt 1.9.3 as Resolved.
Apr 19 2021, 11:11 PM · Release Info, libgcrypt
• werner updated the task description for T5305: Release Libgcrypt 1.9.3.
Apr 19 2021, 11:11 PM · Release Info, libgcrypt
• werner triaged T5402: Release Libgcrypt 1.9.4 as Low priority.
Apr 19 2021, 11:02 PM · Release Info, libgcrypt
• werner triaged T5401: Imported ECC/Ed25519 subkey has unusable key file in private-keys-v1.d as Low priority.

You can't use an EdDSA as subkey for encryption. Encryption is the default for a subkey unless you provide key usage parameters. Yes, we could flag this as an error, but I won't give it high priority. I would anyway suggest to use

Apr 19 2021, 10:46 PM · gnupg26, Bug Report
• werner closed T5400: 2.3.0 build issue on macOS - missing LIBICONV in sm/Makefile.am and ctype.h in tools/gpg-card.c as Resolved.
Apr 19 2021, 8:31 PM · gnupg (gpg23), Bug Report
• werner committed rG5fe60576d50f: build: Fix build problems on macOS for gpgsm tests and gpg-card. (authored by • werner).
build: Fix build problems on macOS for gpgsm tests and gpg-card.
Apr 19 2021, 8:30 PM
• werner committed rG93c88d0af36b: build: Allow selection of TSS library. (authored by Damien Goutte-Gattat via Gnupg-devel <gnupg-devel@gnupg.org>).
build: Allow selection of TSS library.
Apr 19 2021, 8:30 PM
• werner added a project to T5400: 2.3.0 build issue on macOS - missing LIBICONV in sm/Makefile.am and ctype.h in tools/gpg-card.c: gnupg (gpg23).

Thanks, that was right in time for this weeks 2.3.1.

Apr 19 2021, 8:18 PM · gnupg (gpg23), Bug Report
• werner moved T5396: Remove USE_RANDOM_DAEMON support from libgcrypt from Backlog to For 1.10 on the libgcrypt board.
Apr 19 2021, 6:16 PM · libgcrypt
• werner moved T4894: FIPS: RSA/DSA/ECDSA are missing hashing operation from Backlog to For 1.10 on the libgcrypt board.
Apr 19 2021, 6:16 PM · FIPS, libgcrypt, Feature Request
• werner moved T3269: (Constant-time) modular reduction from Backlog to For 1.10 on the libgcrypt board.
Apr 19 2021, 6:14 PM · libgcrypt
• werner moved T5268: macOS getentropy from For 1.9 to Backlog on the libgcrypt board.
Apr 19 2021, 6:12 PM · libgcrypt, MacOS
• werner closed T4673: 2.3-only: Don't fallback to PC/SC on failure by the internal CCID driver, only use PC/SC when --disable-ccid is specified as Resolved.
Apr 19 2021, 5:56 PM · gnupg (gpg23), Restricted Project, scd, Feature Request
• werner closed T4735: Please provide an option to make --verify accept only signatures from specific trusted UID as Resolved.

aheinecke: I agree, we should not port everything back just because we could do that.

Apr 19 2021, 5:55 PM · gnupg (gpg23), Feature Request
• werner edited projects for T4921: Support import of PKCS#12 encoded ECC private keys., added: gnupg (gpg22); removed gnupg (gpg23).
Apr 19 2021, 5:52 PM · gnupg22 (gnupg-2.2.42), backport, Feature Request, S/MIME
• werner closed T5000: trustdb,keybox: Adding support of v5key as Resolved.
Apr 19 2021, 5:51 PM · Restricted Project, gnupg (gpg23)
• werner added a comment to T5000: trustdb,keybox: Adding support of v5key.

Has been released with 2.3.0 and we better open a new task if problems show up with v5 key. I am pretty sure that there will be a few v5 key problems after they get in real use.

Apr 19 2021, 5:51 PM · Restricted Project, gnupg (gpg23)
• werner closed T4398: Rework Console and command line handling on Windows, a subtask of T4417: Work needed for gnupg 2.3, as Resolved.
Apr 19 2021, 5:48 PM · gnupg (gpg23)
• werner closed T4398: Rework Console and command line handling on Windows as Resolved.

This has been released with 2.3.0 and no relevant problems have reported in the last two weeks, thus closing.

Apr 19 2021, 5:48 PM · Feature Request, gnupg (gpg23)
• werner committed rG86f446fd446f: gpg: Fix showpref to list AEAD feature. (authored by Damien Goutte-Gattat via Gnupg-devel <gnupg-devel@gnupg.org>).
gpg: Fix showpref to list AEAD feature.
Apr 19 2021, 1:19 PM
• werner committed rG8576c3475043: doc: Fix an example in README.ldap (authored by • werner).
doc: Fix an example in README.ldap
Apr 19 2021, 1:01 PM
• werner committed rGd13c5bc244ce: gpg,gpgsm: Move use-keyboxd to the new conf file common.conf (authored by • werner).
gpg,gpgsm: Move use-keyboxd to the new conf file common.conf
Apr 19 2021, 11:46 AM

Apr 18 2021

• werner added a comment to T5394: scute: Build failure with slibtool.

t-link does not do antthing useful, anyway. I don't think it is justified to add dlopen stuff. Running real test is anyway a manual action; for a full test automation we would need to emulate all supported cards.

Apr 18 2021, 7:40 PM · toolchain, Feature Request, scute
First
Prev
Next