DANE has been an experimental thing and is imho dead.
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed Advanced Search
Advanced Search
Advanced Search
Jan 22 2022
Jan 22 2022
• werner changed the edit policy for T5593: Gpg4Win displayed 'PATH env variable too big' error during setup.
• werner triaged T5492: Kleopatra does not report error when calculating checksums and checksum file can not be written as Normal priority.
Implemented extended headers for filenames and linknames (on Unix).
• werner added projects to T5796: libgcrypt-1.9.4 build failure on ARM without NEON: libgcrypt, arm.
Jan 21 2022
Jan 21 2022
• werner triaged T5793: gpgsm: Wrong length when parsing octetstring in constructed encoding + definite length as Normal priority.
Jan 20 2022
Jan 20 2022
doc: Fixed type of an object member
Thanks
• werner closed T5738: The ref and unref operation is confusing while using gpg_key_t and gpg_xxx_result_t as Wontfix.
gpgme_key_t is a different kind of object than a gpgme_foo_result_t and thus has different properties.
• werner closed T5793: gpgsm: Wrong length when parsing octetstring in constructed encoding + definite length as Resolved.
Please try again with a recent version of GnuPG (2.2.33 or 2.3.4) and libksba (1.6.0) and reopen this bug if the problem persists.
• werner renamed T5764: Broken umlauts in the new Windows Terminal from Broken umlauts to Broken umlauts in the new Windows Terminal.
• werner triaged T5765: gnupg2 weird memory fault on NetBSD Loongson/mips64el N32 as Normal priority.
The bug with the long filenames has been fixed but it is not yet released. Release will be in gpg4win 4.0.1 See T5754.
• werner triaged T5782: Kleopatra: Smartcard unusable secret key until used via command line as Normal priority.
Jan 19 2022
Jan 19 2022
web: It's gnupg.org and not gnupg.com
• werner committed rDcb7a44a71b46: web: Add a separate signature_key.asc file (authored by • werner).
web: Add a separate signature_key.asc file
AFAICS, the last commit removes some tests. We should never remove a test just because FIPS does not allow it. The old tests need to be run in non-fips mode.
Jan 18 2022
Jan 18 2022
$ gpg --debug 0 --gpgconf-test gpg: reading options from '/etc/gnupg/gpg.conf' gpg: reading options from '/home/foo/.gnupg/gpg.conf' gpg: reading options from '[cmdline]' gpg: reading options from '/etc/gnupg/common.conf' gpg: reading options from '/home/foo/.gnupg/common.conf'
• werner changed the status of T5784: Prioritization of weak Brainpool-Curves, when de-vs aka VS-NfD mode is activated (compliance de-vs) from Resolved to Wontfix.
vitusb: We had this discussion on cryptography@ years ago. No need to start it again - or well, try it over there. This is a bug tracker and not a discussion forum.
• werner triaged T5702: Display prompt to user when YubiKey is waiting for touch confirmation as Low priority.
ikloecker: gpgconf.conf ist not anymore used since we have the global config files.
gpg: Print Yubikey version correctly.
This is related to the fix for T5100. We had to to remove the version number from the AID and gpg --card-status takes the version number from the AID. gpg-card was fixed for this but gpg --card-status not.
--apply-defaults is an obsolete option because we now have global config files. I would also like to get rid of --debug-level but that won't be easy. Using --debug LIST_OF_DEBUG_FLAGS is a more versatile way of specifying debug options.
• werner closed T5789: gpg --list-options [comp] has missing closing quotes for strings as Resolved.
Nope. The double quote indicates a string. See the man page.
• werner triaged T5790: Cannot use "Retired Cert Key Mgm [1-20]” Slots on YubiKey as Normal priority.
Jan 17 2022
Jan 17 2022
Sending a private key with just the local protection is not a good idea. It is better to export the key and then send it in an encrypted mail - for example in symmetric mode with a strong password.
• werner closed T5784: Prioritization of weak Brainpool-Curves, when de-vs aka VS-NfD mode is activated (compliance de-vs) as Resolved.
Please no holy wars on the type of curves. NIST as its opinon, Europe has its opinion, DJB has of course a different opinion. Please use the the cryptography ML for such political/technical discussions.
• werner changed the edit policy for T5783: All s2k hardenings silently ignored when exporting private keys.
• werner changed the edit policy for T5784: Prioritization of weak Brainpool-Curves, when de-vs aka VS-NfD mode is activated (compliance de-vs).
• werner added a project to T5782: Kleopatra: Smartcard unusable secret key until used via command line: kleopatra.
Jan 14 2022
Jan 14 2022
Jan 12 2022
Jan 12 2022
No, these are simply the technically available algorithms. I'll see what I can do.
gpgconf: Add command aliases -L -K -R.
gpgconf: Add command aliases -L -K -R.
I don't know about pinentry-mac but it seems to be another name for
one our our regular pinentry variants.
Rename the file and you are done.
common,w32: Improve HKCU->HKLM fallback
Thanks for diving into the history of that code.
web: Add missing news entries
Jan 11 2022
Jan 11 2022
• werner committed rD2222a2835941: blog: Fix last blog to make clear that we are talking about OS software. (authored by • werner).
blog: Fix last blog to make clear that we are talking about OS software.
• werner moved T5759: Rename rndlinux module to rndoldlinux from Next to Ready for release on the FIPS board.
• werner moved T5747: Provide a way to request non-FIPS service in FIPS mode from Next to Ready for release on the FIPS board.
• werner moved T5600: Provide module name/version API for FIPS 140-3 from Next to Ready for release on the FIPS board.
Yes, we should introduce an INDICATOR_KDF thing.
The primary version of that script is in libgpg-error. Thus it needs to be fixed therefirst.
Jan 10 2022
Jan 10 2022
We use GetConsoleOutputCP but fallback to GetACP if the former fails. For some reasons one of the functions seems to return 437.
Given that you are already using libgcrypt 1.9, can you please try gnupg 2.3.4.
That is annoying enough that we should do a new release. I close this bug, though.
• werner committed rGbf4cf04a54bb: gpgtar: List and extract using extended headers. (authored by • werner).
gpgtar: List and extract using extended headers.
• werner committed rGec69ceab2615: gpgtar: Create extended header for long file names (authored by • werner).
gpgtar: Create extended header for long file names
• werner changed the status of T5751: Please remove pgp.surf.nl from default dirmngr config from Open to Testing.
For the next release I'll change the gnupg.net mappings to use the Ubuntu server also for non-TLS connections.
• werner committed rGd445e1936526: dirmngr: Map all gnupg.net addresses to the Ubuntu keyserver. (authored by • werner).
dirmngr: Map all gnupg.net addresses to the Ubuntu keyserver.
Jan 9 2022
Jan 9 2022
• werner committed rG3a1c556b2c3a: gpgtar: Create extended header for long file names (authored by • werner).
gpgtar: Create extended header for long file names
• werner committed rG99a8b1f13831: gpgtar: List and extract using extended headers. (authored by • werner).
gpgtar: List and extract using extended headers.
Jan 8 2022
Jan 8 2022
See T5758. The workaround is not to set a reader-port.
Jan 5 2022
Jan 5 2022
Jan 4 2022
Jan 4 2022
Jan 3 2022
Jan 3 2022
• werner committed rG4d52ba943127: doc: Fix the title of the man pages to GnuPG 2.3 (authored by • werner).
doc: Fix the title of the man pages to GnuPG 2.3
po: Fix German translation
doc: Typo fixes.
• werner closed T5226: gpgtar: Windows decrypting a gpgtar archive with 8bit filename leads to wrong name as Resolved.
We have full Unicode support on the command line since 2.2.28 (2021-06-10)
• werner committed rWbd8757e83af5: appimage: Use env(1) to start with parameters. (authored by • werner).
appimage: Use env(1) to start with parameters.
blog: s/Greenbone/GreenShield/
Jan 2 2022
Jan 2 2022
blog: A new Future for GnuPG
Dec 30 2021
Dec 30 2021
• werner changed the status of T5732: Backport option reading in gpgconf to 2.2 from Open to Testing.
Backport done but diligent testing is required.
• werner committed rGc4153f7021af: build: Fixes recent commits to still build with gpgrt 1.27. (authored by • werner).
build: Fixes recent commits to still build with gpgrt 1.27.
• werner committed rGc69c51bce0f0: gpgconf: Do not list ignored options and mark forced options as r/o. (authored by • werner).
gpgconf: Do not list ignored options and mark forced options as r/o.
• werner committed rG42785d7c8a52: gpgconf: Do not list ignored options and mark forced options as r/o. (authored by • werner).
gpgconf: Do not list ignored options and mark forced options as r/o.
• werner committed rGbf284fdf22f4: dirmngr: Re-group the options in the --help output. (authored by • werner).
dirmngr: Re-group the options in the --help output.
• werner committed rG5fb71a8e039c: gpgsm: Re-group the options in the --help output. (authored by • werner).
gpgsm: Re-group the options in the --help output.
• werner committed rGf7bde071ccc8: gpg: Re-group the options in the --help output. (authored by • werner).
gpg: Re-group the options in the --help output.
• werner committed rG7f9791e16789: scd: Re-group the options in the --help output. (authored by • werner).
scd: Re-group the options in the --help output.
• werner committed rG593402711523: gpgconf: Take care of --homedir when reading/updating options. (authored by • werner).
gpgconf: Take care of --homedir when reading/updating options.
• werner committed rG7e535503a9c6: agent: Re-group the options in the --help output. (authored by • werner).
agent: Re-group the options in the --help output.