gpg: Allow decryption w/o public key but with correct card inserted.
speedo: Automatically select Authenticode signing cert.
agent: Silence error messages for READKEY --card
common: Fix gnupg_wait_processes, by skipping invalid PID.
gpg: Allow fingerprint based lookup with --locate-external-key.
gpg: Lookup a missing public key of the current card via LDAP.
scd: Add option --info to emit KEYPAIRINFO by readkey command.
gpg: Minor restructuring of a function.
gpgconf: Do not i18n an empty string to the PO files meta data.
agent: Skip unknown unknown ssh curves seen on cards.
gpg: No warning in quiet mode for S2K mode 0.
scd: New option --pcsc-shared.
w32: Silence a compiler warning in dirmngr.c
RFC-5280 states in 4.2.1.3 for Key Usage:
The error code is: No Readers Available. With the latest version you should have seen that string.
Meanwhile we did some more tests on Windows and so you many want to try our betas at
Can you please clarify this point: If you run on Unix with --disable-ccid-driver, do you get the same behavior as on Windows?
Run gpg --debug ipc --card-status to quickly see the communication with the scdaemon.
scd:p15: Update from current GnuPG 2.3
scd: Rewrite READKEY to allow for compressed points.
common: Extend the openpgp_curve_to_oid function.
common: New module to compute openpgp fingerprints
common: New function to uncompress an ECC public key.
common: New function cmp_canon_sexp.
scd: Extend an internal function to also return the algo.
scd: New function send_keyinfo to assist in backporting.
scd: New function for iso7816 PSO_CSV.
scd: Minor changes to assist in backporting from 2.3
scd: Add new status codes.
scd: Extend iso7816_select_path
scd: Extend ISO binary and record reading functions.
scd: Fix PC/SC removed card problem
scd:p15: Fix the name of a card.
build: Allow running sign-release target from the dist dir.
scd: Fix problem with reader list becoming empty.
Please try to verify on the command line (cmd.exe):
• werner renamed
T5411: After upgrading from gpg4win 3.1.13 to gpg4win 3.1.15 GpgOL does not load, Outlook crashes. from
After upgrading from gpg4win 3.1.13 to gpg4win 3.1.15 GnuOL does not load, Outlook crashes. to
After upgrading from gpg4win 3.1.13 to gpg4win 3.1.15 GpgOL does not load, Outlook crashes..
The curve is not defined to be used for ECDH (encryption); in fact it should in general only be used with the EdDSA
algorithm. You need to use "Key-Type: eddsa". Note that the EdDSA signing algorithm is different than the commonly used ECDSA signing algorithm.
Can you please port this also to 1.8?
You can't use ecdh with ed25519.
doc: Clarify gcry_md_setkey for keyed BLAKE hashes.
gpg: Do not use import-clean for LDAP keyserver imports.
gpg: Fix mailbox based search via AKL keyserver method.
Please install the Gnome Key Ring prompter tool or use the plain GTK pinentry.
gpg: Auto import keys specified with --trusted-keys.
scd:p15: Fix last commit and improve D-TRUST detection.
scd:p15: Shorten the displayed s/n of RSCS cards
gpg: Replace an obsolete trustdb function.
agent,w32: Silence the get_peercred failed diagnostic
Please have a look at the log:
agent: Require verbose level 2 for handler started/terminated notices.
gpg: Allow decryption w/o public key but with correct card inserted.
speedo: Automatically select Authenticode signing cert.
tests: Make sure that the build keyboxd is used.
scd: Fix PSO_CSV for 512 bit curves
You are right. The problem is that in a development version we use an envvar to locate the programs, so there is usually no problem because the software has already been installed and the final test doesn't catch this. We should add a version check to all components to catch such problems.
Given that we don't yet support TPM for Windows you should go ahead and apply this patch. tpm should also be removed from the list of components.
card: New option --shadow for command list.
agent: Silence error messages for READKEY --card
gpg: Allow fingerprint based lookup with --locate-external-key.
keyboxd: Fix searching for exact mail addresses.
gpg,sm: Ignore the log-file option from common.conf.
6f03 = Data with specified length not supported.
Needs to be fixed in GnuPG :-(
• werner updated the task description for
T5386: Release GnuPG 2.3.1.
• werner updated the task description for
T5405: Release GnuPG 2.3.2.
po: Update German translation.
Support log-file option from common.conf for all daemon.
gpgconf: Fix a diagnostic output.
sm: New command --show-certs
swdb: Release Libgcrypt 1.9.3
You can't use an EdDSA as subkey for encryption. Encryption is the default for a subkey unless you provide key usage parameters. Yes, we could flag this as an error, but I won't give it high priority. I would anyway suggest to use
build: Fix build problems on macOS for gpgsm tests and gpg-card.
• werner committed
rG93c88d0af36b: build: Allow selection of TSS library. (authored by Damien Goutte-Gattat via Gnupg-devel <gnupg-devel@gnupg.org>).
build: Allow selection of TSS library.
Thanks, that was right in time for this weeks 2.3.1.