We should close this. The recent fix in 2.2 and the forthcoming 2.3 does everything we want. In the meantiime or if further problems turn up, --ignore-cert is a good workaround.
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed Advanced Search
Advanced Search
Advanced Search
Sep 22 2022
Sep 22 2022
• werner changed the status of T4873: Enable AES GCM in FIPS mode, a subtask of T5870: libgcrypt: AEAD API for FIPS 140 (in future), from Open to Testing.
• werner changed the status of T5925: libassuan: Add assuan_sock_accept function to the API from Open to Testing.
• werner changed the status of T5975: Allow signature verification using specific RSA keys <2k in FIPS mode from Open to Testing.
• werner removed a project from T6013: Kleopatra: Email address of CA is not set as recipient when sending new CSR by email: Unknown Object (Project).
• werner removed a project from T6034: Kleopatra: Make links in label text accessible: Unknown Object (Project).
• werner changed the status of T6039: FIPS: Allow salt=NULL (or shorter salt) for HKDF from Open to Testing.
• werner removed a project from T6044: Kleopatra: Make information shown in pop-ups accessible: Unknown Object (Project).
• werner changed the status of T6048: Test suite fixes with --enable-pubkey-ciphers=ecc from Open to Testing.
• werner removed a project from T6067: dirmngr 2.2 does not ask keyservers for fingerprints: Unknown Object (Project).
• werner removed a project from T6095: Kleopatra: Fix accessibility of group configuration: Unknown Object (Project).
• werner removed a project from T6059: ntbtls: use of shorter hash for ECC: Unknown Object (Project).
• werner removed a project from T6062: Kleopatra: Kleopatra fails with error if signed data is not found: Unknown Object (Project).
• werner removed a project from T6064: Kleopatra: Allow queries to list all certificates on the server: Unknown Object (Project).
• werner changed the status of T6066: gcry_pk_hash_verify() does not work with explicitly specified hash algorithm from Open to Testing.
• werner removed a project from T6073: Kleopatra: Fix issues with high contrast resp. inverted color scheme: Unknown Object (Project).
• werner removed a project from T6080: Kleopatra: Make changing the expiration date accessible: Unknown Object (Project).
• werner removed a project from T6102: Kleopatra: Make Certifications dialog accessible: Unknown Object (Project).
• werner removed a project from T6104: Kleopatra: Make Subkeys Details dialog accessible: Unknown Object (Project).
• werner removed a project from T6118: Kleopatra: Bogus </item><item> in message when importing secret key with multiple user IDs: Unknown Object (Project).
• werner removed a project from T6083: Kleopatra: Sign/encrypt window size issue: Unknown Object (Project).
• werner removed a project from T6101: Kleopatra: Make self-test accessible: Unknown Object (Project).
• werner removed a project from T6103: Kleopatra: Make key selection dialog accessible: Unknown Object (Project).
• werner removed a project from T6108: Kleopatra: Information on storage location of OpenPGP key should be per subkey: Unknown Object (Project).
• werner changed the status of T6112: libgpg-error,w32: bidirectional Pipe support for estream from Open to Testing.
• werner removed a project from T6115: Kleopatra: On "revoke certification" do not offer keys which did not certify that certificate: Unknown Object (Project).
• werner removed a project from T6120: Kleopatra: Unify wording of (start and) end of validity period: Unknown Object (Project).
• werner removed a project from T6121: Kleopatra: add name suggestion for revocation certificate : Unknown Object (Project).
• werner changed the status of T6136: build failure with slibtool - error: undefined symbol: QGpgME::RevokeKeyJob::staticMetaObject from Open to Testing.
• werner removed a project from T6140: Kleopatra: F5 does not always work in smartcard dialog: Unknown Object (Project).
• werner removed a project from T6144: Kleopatra: Please Certify Dialog is no longer shown: Unknown Object (Project).
• werner removed a project from T6156: Kleopatra: Aborting password entry on certify leads to broken error message: Unknown Object (Project).
• werner added a comment to T6142: On Windows, gpg 2.3.7 thinks the certificates of major keyservers have expired.
• werner changed the status of T6142: On Windows, gpg 2.3.7 thinks the certificates of major keyservers have expired, a subtask of T5882: Cross signing certificate in X.509 support, from Open to Testing.
• werner changed the status of T6142: On Windows, gpg 2.3.7 thinks the certificates of major keyservers have expired from Open to Testing.
• werner removed a project from T6154: Kleopatra: Assert in CertifyCertificateCommand after setting ownertrust of key: Unknown Object (Project).
• werner removed a project from T6155: Kleopatra: Certify expired userids offered but leads to General Error: Unknown Object (Project).
• werner removed a project from T6163: Kleopatra: Fetch missing keys broken: Unknown Object (Project).
• werner removed a project from T6166: Kleopatra: Require either name or email when generating keys for OpenPGP smart card: Unknown Object (Project).
• werner removed a project from T6180: Kleopatra: "more details" in group edit opens information window in background: Unknown Object (Project).
• werner removed a project from T6188: kleopatra: notepad verify/decrypt button not always greyed out when it should be: Unknown Object (Project).
• werner removed a project from T6187: Kleopatra: Import of p12 file fails with "invalid crypto engine": Unknown Object (Project).
• werner removed a project from T6196: Kleopatra: Canceling encrypt operation in the notepad causes a bogus error message: Unknown Object (Project).
• werner changed the status of T6200: gnupg: GPG_ERR_SOURCE_DEFAULT should be defined from Open to Testing.
• werner removed a project from T6201: Kleopatra: Disable unusable actions in certificate details for remote keys: Unknown Object (Project).
• werner removed a project from T6202: Kleopatra: Suppress errors of WKD lookups: Unknown Object (Project).
• werner changed the status of T6204: gpgme:python Fix setup.py, using pkg-config (not deprecated gpg-error-config and gpgme-config) from Open to Testing.
• werner changed the status of T6204: gpgme:python Fix setup.py, using pkg-config (not deprecated gpg-error-config and gpgme-config), a subtask of T5683: Deprecation of gpg-error-config, from Open to Testing.
• werner removed a project from T6090: Kleopatra: "Cancel" in the password dialog of "backup secret keys" has no effect: Unknown Object (Project).
• werner changed the status of T6205: GnuPG: Unknown encryption keys should not result in non-compliant encryption on decryption from Open to Testing.
• werner moved T6205: GnuPG: Unknown encryption keys should not result in non-compliant encryption on decryption from Restricted Project Column to Restricted Project Column on the Restricted Project board.
• werner committed rG05b7e4a405c8: gpg: Don't consider unknown keys as non-compliant while decrypting. (authored by • werner).
gpg: Don't consider unknown keys as non-compliant while decrypting.
Sep 21 2022
Sep 21 2022
• werner triaged T6214: Kleopatra allows to export a subkey which has only a stub. as Normal priority.
• werner committed rGed54fd53d1dc: tools: Need to set the dir for common.conf (authored by • werner).
tools: Need to set the dir for common.conf
Sep 20 2022
Sep 20 2022
No, it does not matter.
Sorry, you need to wait for gnupg 2.3.8. It's next on our shortlist.
Why? One underscrore followed by a lowercase letter is not a reserved symbol. It is common to use this for symbols which are not part of the public API but need to have global linkage. Also not all system have a way to limit the visibility and there we need to use them for internal symbols.
Sep 19 2022
Sep 19 2022
What is a partial CRL; I have never seen that and IIRC the specification for that was not complete.
• werner triaged T6212: The ssh keys are no longer returned in the order from control file after T5996 as Normal priority.
We want to get rid of sshcontrol but we could keep it as an optional configuration to sort keys. I won't say it is a bug, though.
Sep 16 2022
Sep 16 2022
• werner added a comment to T6209: GnuPG unable to interact with any keyserver throwing a "Not enabled" error.
The use of
• werner committed rG289fbc550d18: dirmngr: Fix CRL DP error fallback to other schemes. (authored by • werner).
dirmngr: Fix CRL DP error fallback to other schemes.
I just fixed a bug related to the DP. That might be related. See rG0c8299e2b56ef2e1
doc: Keep list of RFCs only in DETAILS
• werner committed rG0c8299e2b56e: dirmngr: Fix CRL DP error fallback to other schemes. (authored by • werner).
dirmngr: Fix CRL DP error fallback to other schemes.
• werner closed T1141: dirmngr does not try all CRL DPs if first fetchable CRL is too old as Resolved.
That particular bug seems to have been solved a long time ago. I stumbled upon up while fixing a DP bug today.
swdb: libksba 1.6.1
• werner triaged T6205: GnuPG: Unknown encryption keys should not result in non-compliant encryption on decryption as Normal priority.
What is the output of gpgconf --list-dirs ?
• werner added a comment to T6205: GnuPG: Unknown encryption keys should not result in non-compliant encryption on decryption.
Works as designed. Whether the design is a good choice is a different
question.
• werner committed rSd786c3834a1a: Add no-chain option. (authored by Damien Goutte-Gattat via Gnupg-devel <gnupg-devel@gnupg.org>).
Add no-chain option.
Sep 14 2022
Sep 14 2022
• werner committed rDa5a2a83e2d60: web: Point to currently implemented OpenPGP spec (authored by • werner).
web: Point to currently implemented OpenPGP spec
keyboxd has nothing to do with this, it merely makes the lookup of keys a bit faster. The computation of the WoT itself takes long and there is no shortcut for it. Fortunately most users don't have a deeply meshed WoT with dedicated revokers etc., thus for them things are fast in the standard configuration.
• werner committed rG50d12860ef21: tests: Restrict the use of gpgconf.ctl to make check. (authored by • werner).
tests: Restrict the use of gpgconf.ctl to make check.
If you run gpg --export-ownertrust you will notice that the trust has been set to ultimate (value is 6). However, due to the no-auto-check-trustdb in your gpg.conf that will valeu will only be shown after running gpg --check-trustdb. The value shown in the key listing is the computed value and the computation is done by --check-trustdb. I don't see a bug here.
• werner added a comment to T4779: GpgSM: "Invalid Object" error when importing .p12 certs with wrong passphrase.
I see what I can do
• werner added a project to T6014: Add support for relative redirect URI-references to dirmngr: gnupg (gpg23).
Sep 13 2022
Sep 13 2022
• werner awarded rKLEOPATRA805356a09949: Disable warnings about different signedness of pointer targets a Cup of Joe token.
Of course it could be refined to use the same host if there is only a relative URL.
That's for sure. See rGfa1b1eaa4241ff3 :
Sep 12 2022
Sep 12 2022
Sep 8 2022
Sep 8 2022
• werner committed rW2cc69035ad80: Do not create symlinks to VSD files without version number. (authored by • werner).
Do not create symlinks to VSD files without version number.
Sep 7 2022
Sep 7 2022
Kleopatra does searches in parallel. What you see in the second dialog might be a response from a Web Key Directory (i.e. search by mail address with lookup at the mail domain).
• werner committed rGabf7d3c54546: agent: Don't start in --supervised mode if no-autostart is enabled. (authored by • werner).
agent: Don't start in --supervised mode if no-autostart is enabled.
• werner committed rG0988e49c45d0: gpg: Support key flags for RENC, TIME, and GROUP. (authored by • werner).
gpg: Support key flags for RENC, TIME, and GROUP.