Page MenuHome GnuPG
Feed All Stories

Oct 10 2022

ebo added a comment to T6090: Kleopatra: "Cancel" in the password dialog of "backup secret keys" has no effect.

Oct 10 2022, 2:20 PM · kleopatra, Restricted Project
ikloecker assigned T6090: Kleopatra: "Cancel" in the password dialog of "backup secret keys" has no effect to ebo.
Oct 10 2022, 11:54 AM · kleopatra, Restricted Project
ikloecker added a comment to T6090: Kleopatra: "Cancel" in the password dialog of "backup secret keys" has no effect.

Works here with gpg 2.3.8-beta58 on Linux. Maybe gpg 2.2 does not properly report the cancelled pinentry.

Oct 10 2022, 11:53 AM · kleopatra, Restricted Project
werner closed T4482: GPG: Error on sign-key with compliance de-vs because of SHA-1 usage, a subtask of T6063: GnuPG: Ignore invalid hash algorithm preferences when signing & encrypting combined, as Resolved.
Oct 10 2022, 11:23 AM · gnupg, Restricted Project
werner closed T4482: GPG: Error on sign-key with compliance de-vs because of SHA-1 usage as Resolved.
Oct 10 2022, 11:23 AM · OpenPGP, gnupg
werner added a subtask for T6063: GnuPG: Ignore invalid hash algorithm preferences when signing & encrypting combined: T4482: GPG: Error on sign-key with compliance de-vs because of SHA-1 usage.
Oct 10 2022, 11:17 AM · gnupg, Restricted Project
werner added a parent task for T4482: GPG: Error on sign-key with compliance de-vs because of SHA-1 usage: T6063: GnuPG: Ignore invalid hash algorithm preferences when signing & encrypting combined.
Oct 10 2022, 11:17 AM · OpenPGP, gnupg
werner triaged T6234: Implement access to smartcards via a generic pkcs#11 interface as Normal priority.
Oct 10 2022, 7:32 AM · gnupg, Feature Request, scd

Oct 9 2022

mlaurent committed rLIBKLEO04de3397bfde: Fix generate correct pri (authored by mlaurent).
Fix generate correct pri
Oct 9 2022, 12:42 PM
margirou added a comment to T5790: Cannot use "Retired Cert Key Mgm [1-20]” Slots on YubiKey.

@margirou:

Can you test the Patch, does it work for you ?

Kind regards,
Manon

Oct 9 2022, 11:39 AM · gnupg24, gnupg (gpg23), scd, Feature Request
l10n daemon script <scripty@kde.org> committed rKLEOPATRAd7bc3f661355: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
Oct 9 2022, 4:12 AM

Oct 8 2022

manonfgoo added a comment to T5790: Cannot use "Retired Cert Key Mgm [1-20]” Slots on YubiKey.

[Merging didn't work]

Oct 8 2022, 8:44 PM · gnupg24, gnupg (gpg23), scd, Feature Request
manonfgoo added a comment to T5790: Cannot use "Retired Cert Key Mgm [1-20]” Slots on YubiKey.

Can you test the Patch, does it work for you ?

Oct 8 2022, 8:41 PM · gnupg24, gnupg (gpg23), scd, Feature Request
manonfgoo created T6233: Extract Card Holder Information for the PIV card from the "Printed Information" Object.
Oct 8 2022, 8:33 PM · gnupg, scd, Feature Request
hamarituc added a watcher for Gentoo: hamarituc.
Oct 8 2022, 8:20 PM
jukivili closed T6232: Documentation refers to wrong the RFC for GCM-SIV cipher mode (GCRY_CIPHER_MODE_GCM_SIV) as Resolved.

Thanks. Fix has been pushed to master.

Oct 8 2022, 2:51 PM · Documentation
jukivili committed rC94dcd2cf5cd1: doc: fix RFC reference for GCM-SIV (authored by jukivili).
doc: fix RFC reference for GCM-SIV
Oct 8 2022, 2:36 PM
jukivili committed rCf01d4b7a601f: mpi/longlong.h: i386: use tzcnt instruction for trailing zeros (authored by jukivili).
mpi/longlong.h: i386: use tzcnt instruction for trailing zeros
Oct 8 2022, 2:36 PM
jukivili committed rC38bd31bc46b9: mpi/longlong.h: x86-64: use tzcnt instruction for trailing zeros (authored by jukivili).
mpi/longlong.h: x86-64: use tzcnt instruction for trailing zeros
Oct 8 2022, 2:36 PM
jukivili committed rCd67f453d1b9d: mpi/longlong: fix generic smul_ppmm ifdef (authored by jukivili).
mpi/longlong: fix generic smul_ppmm ifdef
Oct 8 2022, 2:36 PM
jukivili committed rCaef0ddf4d37a: mpi/longlong: provide generic implementation using double word type (authored by jukivili).
mpi/longlong: provide generic implementation using double word type
Oct 8 2022, 2:36 PM
jukivili claimed T6232: Documentation refers to wrong the RFC for GCM-SIV cipher mode (GCRY_CIPHER_MODE_GCM_SIV).
Oct 8 2022, 2:11 PM · Documentation
l10n daemon script <scripty@kde.org> committed rKLEOPATRAb3a88177c6a9: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
Oct 8 2022, 12:57 PM

Oct 7 2022

werner changed the status of T6224: Mirror internal LDAP to a WKD from Open to Testing.
Oct 7 2022, 5:46 PM · Restricted Project, Feature Request, gnupg (gpg23)
werner committed rGa946343f1475: wkd: New command --mirror for gpg-wks-client. (authored by werner).
wkd: New command --mirror for gpg-wks-client.
Oct 7 2022, 5:46 PM
werner committed rG88042821d81b: wkd: Restrict gpg-wks-client --mirror to the given domains. (authored by werner).
wkd: Restrict gpg-wks-client --mirror to the given domains.
Oct 7 2022, 5:46 PM
werner committed rGcd020284c9cf: wkd: Implement --blacklist option for gpg-wks-client (authored by werner).
wkd: Implement --blacklist option for gpg-wks-client
Oct 7 2022, 5:46 PM
werner committed rGb18b9b972e2d: wkd: Silence gpg-wks-client diagnostics from gpg. (authored by werner).
wkd: Silence gpg-wks-client diagnostics from gpg.
Oct 7 2022, 5:45 PM
werner committed rG0a151548b623: wkd: Restrict gpg-wks-client --mirror to the given domains. (authored by werner).
wkd: Restrict gpg-wks-client --mirror to the given domains.
Oct 7 2022, 5:36 PM
werner committed rG4364283f757f: wkd: Silence gpg-wks-client diagnostics from gpg. (authored by werner).
wkd: Silence gpg-wks-client diagnostics from gpg.
Oct 7 2022, 5:36 PM
werner committed rG94d13f53a3b4: common: Protect against a theoretical integer overflow in tlv.c (authored by werner).
common: Protect against a theoretical integer overflow in tlv.c
Oct 7 2022, 5:36 PM
werner committed rGb0b4e24c4fa8: wkd: Implement --blacklist option for gpg-wks-client (authored by werner).
wkd: Implement --blacklist option for gpg-wks-client
Oct 7 2022, 5:36 PM
Atzeloss created T6232: Documentation refers to wrong the RFC for GCM-SIV cipher mode (GCRY_CIPHER_MODE_GCM_SIV).
Oct 7 2022, 4:49 PM · Documentation
manonfgoo updated the task description for T5790: Cannot use "Retired Cert Key Mgm [1-20]” Slots on YubiKey.
Oct 7 2022, 2:46 PM · gnupg24, gnupg (gpg23), scd, Feature Request
werner committed rGc300253181cf: common: Protect against a theoretical integer overflow in tlv.c (authored by werner).
common: Protect against a theoretical integer overflow in tlv.c
Oct 7 2022, 2:24 PM
werner committed rG2b2f8a1a0ca1: gpg: Show just keyserver and port with --send-keys. (authored by werner).
gpg: Show just keyserver and port with --send-keys.
Oct 7 2022, 2:24 PM
werner committed rG4cf8dc2d968f: dirmngr: Minor fix for baseDN fallback. (authored by werner).
dirmngr: Minor fix for baseDN fallback.
Oct 7 2022, 2:24 PM
werner committed rGa70a3204c24a: dirmngr: Support paged LDAP mode for KS_GET (authored by werner).
dirmngr: Support paged LDAP mode for KS_GET
Oct 7 2022, 2:24 PM
werner committed rG20cb9319d998: dirmngr: New options --first and --next for KS_GET. (authored by werner).
dirmngr: New options --first and --next for KS_GET.
Oct 7 2022, 2:24 PM
werner committed rG98fbac614105: dirmngr: Change interrogate_ldap_dn for better memory semantics. (authored by gniibe).
dirmngr: Change interrogate_ldap_dn for better memory semantics.
Oct 7 2022, 2:24 PM
werner committed rG73cc5e073ce9: dirnmgr: Fix the function prototype. (authored by gniibe).
dirnmgr: Fix the function prototype.
Oct 7 2022, 2:24 PM
werner committed rG5516f92224b6: dirmngr: Interrogate LDAP server when base DN specified. (authored by joeyberkovitz).
dirmngr: Interrogate LDAP server when base DN specified.
Oct 7 2022, 2:24 PM
werner committed rG615c9717c15a: dirmngr: Support gpgMailbox for mode MAILSUB and MAILEND. (authored by werner).
dirmngr: Support gpgMailbox for mode MAILSUB and MAILEND.
Oct 7 2022, 2:24 PM
werner committed rG44960e702ee3: dirmngr: Factor out interrogate_ldap_dn function. (authored by werner).
dirmngr: Factor out interrogate_ldap_dn function.
Oct 7 2022, 2:24 PM
werner committed rGfe7114ebf344: po: Fix wrong LF in the German translation (authored by werner).
po: Fix wrong LF in the German translation
Oct 7 2022, 11:54 AM
werner closed T6136: build failure with slibtool - error: undefined symbol: QGpgME::RevokeKeyJob::staticMetaObject as Resolved.
Oct 7 2022, 11:41 AM · gpgrt, gpgme, Bug Report
werner closed T5683: Deprecation of gpg-error-config as Resolved.
Oct 7 2022, 11:41 AM · gpgrt
werner closed T5912: libgpg-error: Drop WindowsCE support as Resolved.
Oct 7 2022, 11:40 AM · gpgrt
werner closed T5890: EOPNOTSUPP is not defined in mingw.org's MinGW, fails compilation of libgpg-error-1.44 as Resolved.
Oct 7 2022, 11:40 AM · gpgrt, Bug Report
werner closed T5922: libgpg-error: gpgrt_log_get_fd always returns -1 even if it's not tcp/socket., a subtask of T5921: No sharing of log_fd between child process, as Resolved.
Oct 7 2022, 11:39 AM · Bug Report, gnupg (gpg23)
werner closed T5922: libgpg-error: gpgrt_log_get_fd always returns -1 even if it's not tcp/socket. as Resolved.
Oct 7 2022, 11:39 AM · Bug Report, gpgrt
werner committed rEea031873aa96: Release 1.46 (authored by werner).
Release 1.46
Oct 7 2022, 11:39 AM
werner committed rEe08d87f06932: Post release updates (authored by werner).
Post release updates
Oct 7 2022, 11:39 AM
werner closed T6112: libgpg-error,w32: bidirectional Pipe support for estream as Resolved.
Oct 7 2022, 11:39 AM · Windows, gpgrt, Bug Report
werner closed T5923: Release Libgpg-error 1.46 as Resolved.
Oct 7 2022, 11:39 AM · Release Info, gpgrt
werner committed rD4ac00609b0ce: swdb: gpgrt 1.46 (authored by werner).
swdb: gpgrt 1.46
Oct 7 2022, 11:38 AM
Jakuje added a comment to T6217: sha3: wrong results for large inputs.

One more nit regarding to the test is the format string for size_t which was using %d instead of %zu. This is fixed by the attached patch:

Oct 7 2022, 11:21 AM · libgcrypt, FIPS, Bug Report
werner committed rWdb4da16307ba: packages: Update libksba (authored by werner).
packages: Update libksba
Oct 7 2022, 11:10 AM
manonfgoo added a comment to T5790: Cannot use "Retired Cert Key Mgm [1-20]” Slots on YubiKey.

Here is the patch as file:

Oct 7 2022, 10:49 AM · gnupg24, gnupg (gpg23), scd, Feature Request
manonfgoo added a comment to T5790: Cannot use "Retired Cert Key Mgm [1-20]” Slots on YubiKey.

The patch applies with -p1 to the master brach, alternatively I could push a commit, but my user does not seam to be allowed to do so:

Oct 7 2022, 10:37 AM · gnupg24, gnupg (gpg23), scd, Feature Request
werner committed rD3ac196bbc0a8: swdb: Libksba 1.6.2 (authored by werner).
swdb: Libksba 1.6.2
Oct 7 2022, 10:32 AM
werner triaged T6231: Release Libgpg-error 1.47 as Low priority.
Oct 7 2022, 10:23 AM · Release Info, gpgrt
werner closed T6230: Release Libksba 1.6.2 (CVE-2022-3515) as Resolved.
Oct 7 2022, 10:21 AM · CVE, Release Info, libksba
werner committed rK43765244d1dd: Post release updates (authored by werner).
Post release updates
Oct 7 2022, 10:16 AM
werner committed rK29814959fe2b: Release 1.6.2 (authored by werner).
Release 1.6.2
Oct 7 2022, 10:16 AM
werner renamed T6210: Release LibKSBA 1.6.1 from Release Libksba 1.6.1 to Release LibKSBA 1.6.1.
Oct 7 2022, 10:05 AM · Release Info, libksba
werner created T6230: Release Libksba 1.6.2 (CVE-2022-3515).
Oct 7 2022, 10:03 AM · CVE, Release Info, libksba
werner committed rG64002ffdfc17: po: Fix wrong LF in the German translation (authored by werner).
po: Fix wrong LF in the German translation
Oct 7 2022, 9:54 AM
werner added a member for Contributor: manonfgoo.
Oct 7 2022, 9:39 AM
werner added a comment to T5790: Cannot use "Retired Cert Key Mgm [1-20]” Slots on YubiKey.

[Merging didn't work]

Oct 7 2022, 9:37 AM · gnupg24, gnupg (gpg23), scd, Feature Request
werner reopened T5790: Cannot use "Retired Cert Key Mgm [1-20]” Slots on YubiKey as "Open".
Oct 7 2022, 9:36 AM · gnupg24, gnupg (gpg23), scd, Feature Request
werner reopened T5790: Cannot use "Retired Cert Key Mgm [1-20]” Slots on YubiKey, a subtask of T6229: Include ability to use any/all of the keys stored on YubiKey's PIV applet ("retired" keys), as Open.
Oct 7 2022, 9:36 AM · yubikey, Feature Request
werner added a parent task for T5790: Cannot use "Retired Cert Key Mgm [1-20]” Slots on YubiKey: T6229: Include ability to use any/all of the keys stored on YubiKey's PIV applet ("retired" keys).
Oct 7 2022, 9:36 AM · gnupg24, gnupg (gpg23), scd, Feature Request
werner added a subtask for T6229: Include ability to use any/all of the keys stored on YubiKey's PIV applet ("retired" keys): T5790: Cannot use "Retired Cert Key Mgm [1-20]” Slots on YubiKey.
Oct 7 2022, 9:36 AM · yubikey, Feature Request
werner merged T5790: Cannot use "Retired Cert Key Mgm [1-20]” Slots on YubiKey into T6229: Include ability to use any/all of the keys stored on YubiKey's PIV applet ("retired" keys).
Oct 7 2022, 9:35 AM · yubikey, Feature Request
werner merged task T5790: Cannot use "Retired Cert Key Mgm [1-20]” Slots on YubiKey into T6229: Include ability to use any/all of the keys stored on YubiKey's PIV applet ("retired" keys).
Oct 7 2022, 9:35 AM · gnupg24, gnupg (gpg23), scd, Feature Request
werner merged T5790: Cannot use "Retired Cert Key Mgm [1-20]” Slots on YubiKey into T6229: Include ability to use any/all of the keys stored on YubiKey's PIV applet ("retired" keys).
Oct 7 2022, 9:34 AM · yubikey, Feature Request
werner merged task T5790: Cannot use "Retired Cert Key Mgm [1-20]” Slots on YubiKey into T6229: Include ability to use any/all of the keys stored on YubiKey's PIV applet ("retired" keys).
Oct 7 2022, 9:34 AM · gnupg24, gnupg (gpg23), scd, Feature Request
l10n daemon script <scripty@kde.org> committed rKLEOPATRA5dbc752a3cca: SVN_SILENT made messages (.desktop file) - always resolve ours (authored by l10n daemon script <scripty@kde.org>).
SVN_SILENT made messages (.desktop file) - always resolve ours
Oct 7 2022, 5:35 AM
gniibe committed rGd68a803c4760: gpg: Fix wrong use of FD2INT with iobuf_fdopen_nc. (authored by gniibe).
gpg: Fix wrong use of FD2INT with iobuf_fdopen_nc.
Oct 7 2022, 4:38 AM
l10n daemon script <scripty@kde.org> committed rLIBKLEO85645b636391: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
Oct 7 2022, 4:24 AM
l10n daemon script <scripty@kde.org> committed rKLEOPATRA7da3a77980a1: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
Oct 7 2022, 4:21 AM

Oct 6 2022

manonfgoo added a comment to T6229: Include ability to use any/all of the keys stored on YubiKey's PIV applet ("retired" keys).

The other key slots are claimed to be used for expired or archived keys as you rightfully mention. We need to figure out the real world semantic behind this before we can repurpose such keys.

Oct 6 2022, 10:44 PM · yubikey, Feature Request
manonfgoo added a comment to T6229: Include ability to use any/all of the keys stored on YubiKey's PIV applet ("retired" keys).

Pleaee have a look at https://dev.gnupg.org/T5790, i added a patch.

Oct 6 2022, 10:30 PM · yubikey, Feature Request
manonfgoo added a comment to T5790: Cannot use "Retired Cert Key Mgm [1-20]” Slots on YubiKey.

Attached you find a patch to this issue. This Patch sets the "keypair" attribute to the keys 0x82 to 0x95 unconditionaly.

Oct 6 2022, 10:29 PM · gnupg24, gnupg (gpg23), scd, Feature Request
werner triaged T6229: Include ability to use any/all of the keys stored on YubiKey's PIV applet ("retired" keys) as Low priority.

The other key slots are claimed to be used for expired or archived keys as you rightfully mention. We need to figure out the real world semantic behind this before we can repurpose such keys.

Oct 6 2022, 6:44 PM · yubikey, Feature Request
werner committed rG7ccd489aa2e5: wkd: New command --mirror for gpg-wks-client. (authored by werner).
wkd: New command --mirror for gpg-wks-client.
Oct 6 2022, 6:40 PM
margirou created T6229: Include ability to use any/all of the keys stored on YubiKey's PIV applet ("retired" keys).
Oct 6 2022, 5:53 PM · yubikey, Feature Request
werner accepted rCa6a6e94027ab: random: Get maximum 32B of entropy at once in FIPS Mode.

That's more than sufficient. Thanks.

Oct 6 2022, 3:07 PM
hefee created T6228: TOFU data are not updated when creating an encrypted message.
Oct 6 2022, 1:47 PM · gpgme, TOFU
gniibe committed rCefdc87b305ff: tests: Reproducer for short dklen in FIPS mode (authored by Jakuje).
tests: Reproducer for short dklen in FIPS mode
Oct 6 2022, 7:12 AM
gniibe committed rC6e832840a8b7: random: Extend the comment about FIPS specifics (authored by Jakuje).
random: Extend the comment about FIPS specifics
Oct 6 2022, 7:11 AM
l10n daemon script <scripty@kde.org> committed rKLEOPATRA4d4d4a78ae07: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
Oct 6 2022, 4:11 AM

Oct 5 2022

werner closed T6142: On Windows, gpg 2.3.7 thinks the certificates of major keyservers have expired as Resolved.
Oct 5 2022, 4:20 PM · workaround, gnupg, Keyserver, Bug Report
werner closed T6142: On Windows, gpg 2.3.7 thinks the certificates of major keyservers have expired, a subtask of T5882: Cross signing certificate in X.509 support, as Resolved.
Oct 5 2022, 4:20 PM
werner committed rK4b7d9cd4a018: Detect a possible overflow directly in the TLV parser. (authored by werner).
Detect a possible overflow directly in the TLV parser.
Oct 5 2022, 4:12 PM
werner committed rG7a01e806eac4: dirmngr: Support paged LDAP mode for KS_GET (authored by werner).
dirmngr: Support paged LDAP mode for KS_GET
Oct 5 2022, 3:16 PM
werner committed rKe11e17620189: Post release updates (authored by werner).
Post release updates
Oct 5 2022, 2:17 PM
werner committed rKd3c1e063d708: Release 1.6.1 (authored by werner).
Release 1.6.1
Oct 5 2022, 2:17 PM
gniibe committed rPTHe894f0197fb4: w32: Add comment for our intentional casting for TlsSetValue. (authored by gniibe).
w32: Add comment for our intentional casting for TlsSetValue.
Oct 5 2022, 9:27 AM