- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed Advanced Search
Advanced Search
Advanced Search
Oct 12 2022
Oct 12 2022
Oct 11 2022
Oct 11 2022
build: Remove potomo from repo.
Fixed in libgpg-error 1.46 and pinentry 1.2.1.
• gniibe closed T5892: t-cms-parser test program in libksba-1.6.0 needs to open files in binary mode for MS-Windows as Resolved.
Fixed in 1.6.1.
Fixed in 1.6.1.
• gniibe changed the status of T6047: Dirmngr - LDAP Schema V2 not used when Base DN is specified from Open to Testing.
Oct 7 2022
Oct 7 2022
• gniibe committed rGd68a803c4760: gpg: Fix wrong use of FD2INT with iobuf_fdopen_nc. (authored by • gniibe).
gpg: Fix wrong use of FD2INT with iobuf_fdopen_nc.
Oct 6 2022
Oct 6 2022
• gniibe committed rCefdc87b305ff: tests: Reproducer for short dklen in FIPS mode (authored by Jakuje).
tests: Reproducer for short dklen in FIPS mode
• gniibe committed rC6e832840a8b7: random: Extend the comment about FIPS specifics (authored by Jakuje).
random: Extend the comment about FIPS specifics
Oct 5 2022
Oct 5 2022
• gniibe committed rPTHe894f0197fb4: w32: Add comment for our intentional casting for TlsSetValue. (authored by • gniibe).
w32: Add comment for our intentional casting for TlsSetValue.
Oct 4 2022
Oct 4 2022
Also applied to 1.10 branch.
• gniibe committed rCa6a6e94027ab: random: Get maximum 32B of entropy at once in FIPS Mode (authored by Jakuje).
random: Get maximum 32B of entropy at once in FIPS Mode
Sep 29 2022
Sep 29 2022
• gniibe added a comment to T6002: scute w/ gpg23: Support multiple cards/tokens, major update with KEYGRIP.
Merged the changes in t6002 branch into master.
Applied and pushed the change from @joeyberkovitz in rG3257385378bb: dirmngr: Interrogate LDAP server when base DN specified..
• gniibe committed rG3257385378bb: dirmngr: Interrogate LDAP server when base DN specified. (authored by joeyberkovitz).
dirmngr: Interrogate LDAP server when base DN specified.
• gniibe committed rG4b2066afb498: dirmngr: Change interrogate_ldap_dn for better memory semantics. (authored by • gniibe).
dirmngr: Change interrogate_ldap_dn for better memory semantics.
Register DCO for Joey Berkovitz.
dirnmgr: Fix the function prototype.
Sep 28 2022
Sep 28 2022
Fix keyinfo listing.
• gniibe committed rS3bf758969ded: Do not launch gpg-agent if no-autostart is active. (authored by • werner).
Do not launch gpg-agent if no-autostart is active.
• gniibe committed rS1a87b2f26ad9: Add option to return leaf certificate only. (authored by gouttegd).
Add option to return leaf certificate only.
• gniibe committed rS819009a5a782: Avoid segv in case of a MISSING_KEY error. (authored by • werner).
Avoid segv in case of a MISSING_KEY error.
• gniibe committed rS9a61a3267f7d: Avoid endless loop due to bogus certificate chains. (authored by • werner).
Avoid endless loop due to bogus certificate chains.
Add configure option only-marked
Tweak for GetSlotList for Firefox.
• gniibe committed rS458eea3371ea: Don't use SCD READCERT, but just use gpgsm. (authored by • gniibe).
Don't use SCD READCERT, but just use gpgsm.
Fix sign/decrypt operation.
Allow SeedRandom.
Fix C_GetSlotInfo.
Fix slot_get_status.
• gniibe committed rS88e3e58fa237: First step for multiple device support, using the keygrip. (authored by • gniibe).
First step for multiple device support, using the keygrip.
• gniibe committed rSf666690b817e: Second step for multiple device support. No monitoring cards. (authored by • gniibe).
Second step for multiple device support. No monitoring cards.
Remove $DISPSERIALNO support.
Fix NR_ATTR_CERT.
• gniibe committed rSfd72f517b923: Allow up to four cards (only use the first slot for now). (authored by • gniibe).
Allow up to four cards (only use the first slot for now).
Sep 27 2022
Sep 27 2022
• gniibe committed rC3c04b692de1e: kdf:pkdf2: Check minimum allowed key size when running in FIPS mode. (authored by tobhe).
kdf:pkdf2: Check minimum allowed key size when running in FIPS mode.
• gniibe committed rC857e6f467d0f: kdf:pkdf2: Require longer input when FIPS mode. (authored by • gniibe).
kdf:pkdf2: Require longer input when FIPS mode.
• gniibe changed the status of T6219: Ensure minimum key length for KDF in FIPS mode from Open to Testing.
Thank you for your report.
Sep 26 2022
Sep 26 2022
• gniibe committed rG993820c31521: dirmngr: Factor out interrogate_ldap_dn function. (authored by • gniibe).
dirmngr: Factor out interrogate_ldap_dn function.
To proceed, I pushed an initial part as rG993820c31521: dirmngr: Factor out interrogate_ldap_dn function., which doesn't change any behavior.
Then, the point of the change will be clearer.
• gniibe added a comment to T6160: pinentry Emacs support assumes socket location at ${TMPDIR}/emacs${UID}, fails to connect (need to respect XDG_RUNTIME_DIR).
pinentry-emacs is obsolete. It's for older Emacs (<= 25, IIUC) which had lisp/pinentry.el.
For Emacs 26 and newer, you can simply use epa-pinentry-mode having the value of loopback.
• gniibe changed the status of T5034: dev: Deprecate libassuan-config, libgcrypt-config, ksba-config, ntbtls-config, npth-config, and gpg-error-config from Open to Testing.
Sep 22 2022
Sep 22 2022
• gniibe committed rCc20022ffd4ad: fips: Skip PCT if RSA keygen test-parms specified (authored by neverpanic).
fips: Skip PCT if RSA keygen test-parms specified
Sep 21 2022
Sep 21 2022
Support ECC signature.
Fix wrong fix of off-by-one error.
Add constants from PKCS#11 3.0.
• gniibe committed rPTH61ae94a7489a: Revert "Don't use symbol/macro which starts with _." (authored by • gniibe).
Revert "Don't use symbol/macro which starts with _."
That's from my confusion. I'll revert.
m4: Fix detection of gpgrt's libdir.
Sep 20 2022
Sep 20 2022
Testing gpg-auth : There are two different use cases
- test with xsecurelock for screen lock
- test with pam-autoproto for login / gdm / etc.
• gniibe committed rPTH317885a6b11f: Don't use symbol/macro which starts with _. (authored by • gniibe).
Don't use symbol/macro which starts with _.
Here are pam_authproto.c with Makefile, so that you can compile it with libpam:
pam_authproto-2022-09-20.tar.gz4 KBDownload
Sep 19 2022
Sep 19 2022
@ikloecker Thank you for the pointer.
When people will use C23 compiler, there will be no problem (even with non-fixed version). That's good. :-)
Sep 16 2022
Sep 16 2022
Minor clean up.
Move function prototype to cipher.h.
Fix _gcry_err_code_to_errno.
More clean up.
Fix use of noreturn.
Pushed similar changes for GnuPG and libgcrypt (which are actually harmless as it is internal use, not exposed header).
• gniibe committed rGd5e29991c0c7: dirmngr:dns,doc,gpg: Fix for noreturn for C11. (authored by • gniibe).
dirmngr:dns,doc,gpg: Fix for noreturn for C11.
Sep 15 2022
Sep 15 2022
yat2m: Use __noreturn__ attribute.
Remove extra semicolons.
• gniibe added a project to T6204: gpgme:python Fix setup.py, using pkg-config (not deprecated gpg-error-config and gpgme-config): Restricted Project.
Pushed the fix.
Note that non-in-tree build never been reliable (using the result of the configure, in tree).
So, I basically don't consider the use case of non-in-tree build.
Fix for modern compiler.
• gniibe committed rMae9258fbf3b9: build:python: Don't use gpg-error-config/gpgme-config. (authored by • gniibe).
build:python: Don't use gpg-error-config/gpgme-config.
• gniibe added a comment to T6204: gpgme:python Fix setup.py, using pkg-config (not deprecated gpg-error-config and gpgme-config).
Reviewing the build process, it's just better to use @...VAR...@ by configure (instead of invoke pkg-config again in setup.py).
• gniibe closed T5721: gpg22: Update *.m4 to prefer use of gpgrt-config and *.pc to *-config as Resolved.
build: Update gpg-error.m4.
• gniibe committed rGddc6f7d19491: build: Use LDAP_DEPRECATED to detect ldap library. (authored by • gniibe).
build: Use LDAP_DEPRECATED to detect ldap library.
• gniibe committed rG7a936505dcc4: build: Update .gitignore for translations under po/. (authored by • gniibe).
build: Update .gitignore for translations under po/.
Sep 14 2022
Sep 14 2022
Pushed changes.
• gniibe committed rGe70e09c3d5e7: common: Fix for GPG_ERR_SOURCE_DEFAULT check. (authored by • gniibe).
common: Fix for GPG_ERR_SOURCE_DEFAULT check.
kbx: Fix for GPG_ERR_SOURCE_DEFAULT.
Note that, we cannot use enum values in CPP constant expression like:
# if GPG_ERR_SOURCE_DEFAULT != GPG_ERR_SOURCE_KEYBOX
That's because CPP has no way to know enum values.
dirmngr: Fix for USE_LDAP.
common: Fix t-recsel.
• gniibe committed rG23d7b7cfb0f9: dirmngr:dns: Fixes for function prototypes. (authored by • gniibe).
dirmngr:dns: Fixes for function prototypes.
• gniibe committed rG3d7dbf16618d: agent,dirmngr,gpg,scd: Clean up for modern compiler. (authored by • gniibe).
agent,dirmngr,gpg,scd: Clean up for modern compiler.
Sep 13 2022
Sep 13 2022
• gniibe committed rG87d4338ed1d2: gpg,common,scd,sm: Function prototype fixes for modern compiler. (authored by • gniibe).
gpg,common,scd,sm: Function prototype fixes for modern compiler.
• gniibe committed rGe133bcb1cdf2: tools:gpg-auth: Enhance it to support use case for login. (authored by • gniibe).
tools:gpg-auth: Enhance it to support use case for login.
Sep 9 2022
Sep 9 2022
Here is a PAM module, which interact a spawned process using authproto protocol of xsecurelock.
pam_authproto.c13 KBDownload
• gniibe added a comment to T5699: libgpg-error 1.43 fails t-lock-single-thread test on x86_64 with musl and macOS.
Checking musl internal, it seems that we can detect a single threaded application by:
https://git.musl-libc.org/cgit/musl/tree/src/internal/libc.h#n22
Sep 8 2022
Sep 8 2022
Silence compiler warnings.
Silence compiler warnings.
• gniibe added a comment to T6193: Build failure with Clang 15 (pinentry-curses.c, error: call to undeclared function 'addnwstr' ...).
Could you please check what pkg-config --cflags ncurses returns?
In my environment (of Debian), it returns:
• gniibe committed rC37dc9f8fd00a: Silence compiler warnings for unused internal value. (authored by • gniibe).
Silence compiler warnings for unused internal value.
Fix function prototypes.
Fix secmem for modern C compiler.
Sep 7 2022
Sep 7 2022
Here is a list of possible issues: