Page MenuHome GnuPG
Feed Advanced Search

May 13 2025

werner closed T6941: gpgsm/dirmngr: support for end-entity certificates with an empty "Subject DN", a subtask of T7171: Allow for empty Subject in X.509, as Resolved.
May 13 2025, 3:00 PM · libksba, Bug Report, gnupg, S/MIME
werner closed T6941: gpgsm/dirmngr: support for end-entity certificates with an empty "Subject DN" as Resolved.

Meanwhile we have some support for an empty subject but gpgsm still prints an error notice. See the T7171 for more.

May 13 2025, 3:00 PM · gnupg26, S/MIME, Feature Request
werner added a subtask for T7171: Allow for empty Subject in X.509: T6941: gpgsm/dirmngr: support for end-entity certificates with an empty "Subject DN".
May 13 2025, 2:58 PM · libksba, Bug Report, gnupg, S/MIME
werner added a parent task for T6941: gpgsm/dirmngr: support for end-entity certificates with an empty "Subject DN": T7171: Allow for empty Subject in X.509.
May 13 2025, 2:58 PM · gnupg26, S/MIME, Feature Request
werner committed rG7c2e7bcc41ad: agent: We should use a macro for the keygrip len in new code. (authored by werner).
agent: We should use a macro for the keygrip len in new code.
May 13 2025, 9:55 AM

May 12 2025

werner committed rC67b8da4ef627: Remove occurrences of old FSF postal address. (authored by Collin Funk via Gcrypt-devel <gcrypt-devel@gnupg.org>).
Remove occurrences of old FSF postal address.
May 12 2025, 6:05 PM
werner committed rC93034d649124: Fix ungrammatical use of "allow to" (authored by Paul Eggert <eggert@cs.ucla.edu>).
Fix ungrammatical use of "allow to"
May 12 2025, 6:05 PM
werner committed rM905bd760a99a: Add GPGME_CREATE_GROUP flag for gpgme_op_createkey and _createsubkey. (authored by werner).
Add GPGME_CREATE_GROUP flag for gpgme_op_createkey and _createsubkey.
May 12 2025, 2:44 PM
werner committed rGedd01d8fc45e: gpg: Fully implement the group key flag. (authored by werner).
gpg: Fully implement the group key flag.
May 12 2025, 12:01 PM
werner committed rG924f09d1f3c8: gpg: Fully implement the group key flag. (authored by werner).
gpg: Fully implement the group key flag.
May 12 2025, 12:00 PM
werner committed rG8833a34bf087: gpg: Fully implement the group key flag. (authored by werner).
gpg: Fully implement the group key flag.
May 12 2025, 12:00 PM

May 9 2025

werner committed rD7a45397df2f7: We should no use the defunc k.gnupg.net anymore. (authored by werner).
We should no use the defunc k.gnupg.net anymore.
May 9 2025, 5:43 PM
werner committed rD36945e2d5259: Update information about gnupg people. (authored by werner).
Update information about gnupg people.
May 9 2025, 5:24 PM
werner set External Link to https://lists.gnupg.org/pipermail/gnupg-announce/2025q2/000492.html on T7586: Release GnuPG 2.5.6.
May 9 2025, 5:02 PM · gnupg, Release Info
werner committed rG727e125a4dc1: Update distsigkey (authored by werner).
Update distsigkey
May 9 2025, 4:45 PM
werner committed rGb5a763fff1f9: Update distsigkey (authored by werner).
Update distsigkey
May 9 2025, 4:45 PM
werner committed rGb361c25bcdcd: Update distsigkey (authored by werner).
Update distsigkey
May 9 2025, 4:45 PM
werner committed rD01116327613d: Update the signature keys. (authored by werner).
Update the signature keys.
May 9 2025, 4:44 PM
werner committed rD03bf599c03b7: Announce GnuPG 2.5.6 (authored by werner).
Announce GnuPG 2.5.6
May 9 2025, 3:42 PM
werner committed rW40e45e38b959: Also update the to-be-signed DLL name. (authored by werner).
Also update the to-be-signed DLL name.
May 9 2025, 10:11 AM
werner renamed T7645: Kleopatra: Encoding errors in signature verification audit log (timestamps) from Kleopatra: Encoding errors in signature verification audit log to Kleopatra: Encoding errors in signature verification audit log (timestamps).
May 9 2025, 9:26 AM · gnupg26, gpd5x, Bug Report
werner triaged T7645: Kleopatra: Encoding errors in signature verification audit log (timestamps) as Low priority.

I think we have another report on this in the tracker. The problem is indeed the ugly Windows time functions to print a string. Let me only remind that until a few years, Windows had the opinion that Germany uses the Westeuropäische Zeit like Portugal or the UK.

May 9 2025, 9:25 AM · gnupg26, gpd5x, Bug Report
werner set the color for riscv to Checkered.
May 9 2025, 9:21 AM
werner added a project to T7647: cipher/simd-common-riscv.h missing from libgcrypt 1.11.1 tarball: riscv.
May 9 2025, 9:21 AM · riscv, libgcrypt, Bug Report
werner added a comment to T7647: cipher/simd-common-riscv.h missing from libgcrypt 1.11.1 tarball.

That is quite possible because we do not have a test system for RISC-V and the make release tarbegt is not abale to verify this.

May 9 2025, 9:21 AM · riscv, libgcrypt, Bug Report

May 8 2025

werner committed rW57f57e1b1339: Fix DLL name of libpoppler. (authored by werner).
Fix DLL name of libpoppler.
May 8 2025, 5:02 PM
werner committed rWc471e16de9cd: Two patches for gpgol 2.6.0 (authored by werner).
Two patches for gpgol 2.6.0
May 8 2025, 4:32 PM
werner committed rW9ef029f83c22: Update to gnupg-2.5.6, Kleopatra and Okular current snapshots (authored by werner).
Update to gnupg-2.5.6, Kleopatra and Okular current snapshots
May 8 2025, 4:31 PM
werner updated the task description for T7586: Release GnuPG 2.5.6.
May 8 2025, 3:43 PM · gnupg, Release Info
werner closed T7632: gnupg test suite fails to build on AIX. as Resolved.
May 8 2025, 3:32 PM · AIX, gnupg, Bug Report
werner closed T7638: gpg on Solaris does not print a signal description as Resolved.
May 8 2025, 3:32 PM · Solaris, gnupg, Bug Report
werner moved T4021: dirmngr: dirmngr/dns.c issue with 127.0.0.1 from WiP to QA on the gnupg24 board.
May 8 2025, 3:31 PM · gnupg24, dirmngr
werner closed T7576: keyboxd: Searching <email@Example.COM> as Resolved.
May 8 2025, 3:31 PM · gnupg, Bug Report
werner closed T7583: 2.5.5 removes sig on clean that 2.5.4 and earlier kept as Resolved.
May 8 2025, 3:30 PM · gnupg, Bug Report
werner closed T7547: signatures from revoked or expired keys show up as missing keys, a subtask of T7527: Keyring/keybox denial of service, as Resolved.
May 8 2025, 3:29 PM · OpenPGP, gnupg, Bug Report
werner closed T7547: signatures from revoked or expired keys show up as missing keys as Resolved.
May 8 2025, 3:29 PM · gnupg26, gnupg24, Bug Report
werner updated the task description for T7586: Release GnuPG 2.5.6.
May 8 2025, 3:29 PM · gnupg, Release Info
werner closed T6477: WKD redirects and dirmngr redirect rewriting as Resolved.
May 8 2025, 3:27 PM · gnupg24 (gnupg-2.4.3), wkd, dirmngr
werner committed rD306fa8e4255c: swdb: gnupg 2.5.6 (authored by werner).
swdb: gnupg 2.5.6
May 8 2025, 11:28 AM
werner committed rG806b0080bb34: Release 2.5.6 (authored by werner).
Release 2.5.6
May 8 2025, 11:18 AM
werner committed rGfe347b38814b: Post release updates (authored by werner).
Post release updates
May 8 2025, 11:18 AM
werner committed rG598296b9fc60: tests:gpgscm: Fix build error on AIX. (authored by Collin Funk via Gnupg-devel <gnupg-devel@gnupg.org>).
tests:gpgscm: Fix build error on AIX.
May 8 2025, 10:53 AM
werner committed rG8ba33fffe9f4: common: Add Solaris support to get_signal_name. (authored by Collin Funk via Gnupg-devel <gnupg-devel@gnupg.org>).
common: Add Solaris support to get_signal_name.
May 8 2025, 10:53 AM
werner committed rG1fea38669155: po: Fix misspelled italian translation for 'encrypted' (authored by Mattia Narducci via Gnupg-devel <gnupg-devel@gnupg.org>).
po: Fix misspelled italian translation for 'encrypted'
May 8 2025, 10:53 AM
werner added a comment to T6681: agent: Clean up main loop and better cache handling of expiration (was: Adding agent_timer API for monitoring something and passphrase cache).

I can't see any documentation that a value of 0 disables the cache. The user might have used some undefined behaviour. For example in the old code we did a housecleaning when we were idle but the new code uses a timer and another thread for flushing the cache. We could open a feature request to entire disable the cache but I bet that we will get a lot of new bug reports because users will then need to enter their passphrase too often for one operation.

May 8 2025, 9:14 AM · keyboxd, gpgagent, gnupg26
werner updated the task description for T7165: Release Libgcrypt 1.11.0.
May 8 2025, 8:51 AM · Release Info, libgcrypt
werner triaged T7643: Release Libgcrypt 1.12.0 as Normal priority.
May 8 2025, 8:49 AM · Release Info, libgcrypt

May 7 2025

werner committed rDecb9d83b6db5: swdb: libgcrypt 1.11.1 (authored by werner).
swdb: libgcrypt 1.11.1
May 7 2025, 6:33 PM
werner closed T7165: Release Libgcrypt 1.11.0 as Resolved.
May 7 2025, 6:01 PM · Release Info, libgcrypt
werner committed rW7e0136936239: Update to libgcrypt 1.11.1 (authored by werner).
Update to libgcrypt 1.11.1
May 7 2025, 6:01 PM
werner committed rW67a34021ff41: Update to libgcrypt 1.11.1 (authored by werner).
Update to libgcrypt 1.11.1
May 7 2025, 6:00 PM
werner updated the task description for T7166: Release Libgcrypt 1.11.1.
May 7 2025, 5:55 PM · Release Info, libgcrypt
werner triaged T7642: Release Libgcrypt 1.11.2 as Low priority.
May 7 2025, 5:52 PM · Release Info, libgcrypt
werner changed the status of T7633: libgcrypt fails to build on NetBSD due to the systems bswap32 macro defintion. from Open to Testing.
May 7 2025, 2:48 PM · NetBSD, libgcrypt, Bug Report
werner changed the status of T7634: libgcrypt's test t-thread-local fails to link on some platforms. from Open to Testing.
May 7 2025, 2:47 PM · NetBSD, libgcrypt, Bug Report
werner added a comment to T6681: agent: Clean up main loop and better cache handling of expiration (was: Adding agent_timer API for monitoring something and passphrase cache).

Lucas Mülling commented yesterday on gnupg-devel:

May 7 2025, 11:40 AM · keyboxd, gpgagent, gnupg26

May 6 2025

werner committed rG581d8bd087f0: Update NEWS (authored by werner).
Update NEWS
May 6 2025, 4:13 PM
werner committed rG9589da97e2fc: gpgsm: Always print info about certs-only message. (authored by werner).
gpgsm: Always print info about certs-only message.
May 6 2025, 1:46 PM
werner committed rGe1576eee040f: scd:p15: Make signing work for Nexus cards. (authored by werner).
scd:p15: Make signing work for Nexus cards.
May 6 2025, 11:19 AM
werner added a comment to T7638: gpg on Solaris does not print a signal description.

Right now we have

May 6 2025, 8:32 AM · Solaris, gnupg, Bug Report

May 5 2025

werner added a comment to T7620: gpgme_get_key fails to detect secret encryption subkey after key generation on card (until context is recreated).

I doubt that this is a gpgme problem. With a gpgme log we will be able see the exact commands send to gpg and replicate this on the command line.

May 5 2025, 5:45 PM · gnupg26, gnupg, Bug Report
werner committed rMa6e8f961436d: core: Fix regression for RSA in gpgme_pubkey_algo_string. (authored by werner).
core: Fix regression for RSA in gpgme_pubkey_algo_string.
May 5 2025, 5:31 PM
werner committed rM88dc25e2ebf5: Prepare NEWS for the next release (authored by werner).
Prepare NEWS for the next release
May 5 2025, 5:31 PM
werner committed rM5214a34ba766: Release 1.24.2 (authored by werner).
Release 1.24.2
May 5 2025, 5:31 PM
werner committed rM56a51df5096d: Post release updates. (authored by werner).
Post release updates.
May 5 2025, 5:31 PM
werner committed rMa4945675ece2: cpp: Ensure that all transitions go from one state to a different state (authored by ikloecker).
cpp: Ensure that all transitions go from one state to a different state
May 5 2025, 5:31 PM
werner committed rM64bb704a25ea: cpp: Validate the transition map (authored by ikloecker).
cpp: Validate the transition map
May 5 2025, 5:31 PM
werner committed rMe327305b9669: cpp: Add missing transition, remove two ignored (and wrong) transitions (authored by ikloecker).
cpp: Add missing transition, remove two ignored (and wrong) transitions
May 5 2025, 5:31 PM
werner changed the status of T3325: Allow encryption/signing in GPGME using a specified subkey from Open to Testing.
May 5 2025, 4:46 PM · gpgme
werner committed rMbfd320abfeaf: Allow signing using an exactly specified subkey. (authored by werner).
Allow signing using an exactly specified subkey.
May 5 2025, 4:45 PM
werner committed rMf2d40473b522: Change timestamp fields from signed to unsigned long. (authored by werner).
Change timestamp fields from signed to unsigned long.
May 5 2025, 4:45 PM
werner committed rM87d6da1188db: Mark the subkey used to find a key. (authored by werner).
Mark the subkey used to find a key.
May 5 2025, 4:45 PM
werner triaged T7627: gpgme(qt) testsuite error on 32bit archs with 64bit time_t as Normal priority.
May 5 2025, 4:41 PM · gpgme, Bug Report
werner added a comment to T7628: gpg uses "month" as a synonym for 30 days.

And the US administration might even change the definition of a year to, say, 100 months so that potus can rightfully keep his promise that there won't be more election in the foreseeable future ;-)

May 5 2025, 4:27 PM · gnupg, Bug Report
werner reopened T3325: Allow encryption/signing in GPGME using a specified subkey as "Open".
May 5 2025, 11:41 AM · gpgme
werner triaged T7631: Building libassuan on AIX warns about missing function declarations. as Normal priority.

But the function works and returns the peer's credentials?

May 5 2025, 11:13 AM · AIX, libassuan, Bug Report
werner triaged T7633: libgcrypt fails to build on NetBSD due to the systems bswap32 macro defintion. as High priority.
May 5 2025, 11:12 AM · NetBSD, libgcrypt, Bug Report
werner triaged T7632: gnupg test suite fails to build on AIX. as High priority.
May 5 2025, 11:12 AM · AIX, gnupg, Bug Report
werner triaged T7634: libgcrypt's test t-thread-local fails to link on some platforms. as High priority.
May 5 2025, 11:11 AM · NetBSD, libgcrypt, Bug Report
werner triaged T7638: gpg on Solaris does not print a signal description as Low priority.

The main problem here was that this all is not async-safe and thus I once implemented only the standard cases I could test easily.

May 5 2025, 11:11 AM · Solaris, gnupg, Bug Report
werner added a comment to T7611: WoT: adding a marginal trustsig reduces the validity of a downstream certificate.

For the records:

May 5 2025, 9:24 AM · Not A Bug, gnupg
werner added a comment to T7611: WoT: adding a marginal trustsig reduces the validity of a downstream certificate.

A bug tracker shall never be used for discussion because the audience is not as expected. Only very few people follow a certain bug but several hundreds are following discussion on gnupg-devel@. That is basic hacker knowledge.

May 5 2025, 9:14 AM · Not A Bug, gnupg
werner changed the status of T7583: 2.5.5 removes sig on clean that 2.5.4 and earlier kept from Open to Testing.
May 5 2025, 9:12 AM · gnupg, Bug Report

May 4 2025

werner closed T7611: WoT: adding a marginal trustsig reduces the validity of a downstream certificate as Resolved.

Heiko, I told you already in T7106 that it is not a good idea to re-open a ticket. If you really want to discuss stuff, take that to a mailing list.

May 4 2025, 8:06 PM · Not A Bug, gnupg

May 2 2025

werner committed rG9b7c067717d8: gpg: Fix another regression due to the T7547 fix. (authored by werner).
gpg: Fix another regression due to the T7547 fix.
May 2 2025, 12:07 PM
werner committed rG3ea8cab6a404: common: Fix logic for certain recsel conditions. (authored by werner).
common: Fix logic for certain recsel conditions.
May 2 2025, 12:07 PM
werner committed rG483f2ba02e70: gpg: Fix another regression due to the T7547 fix. (authored by werner).
gpg: Fix another regression due to the T7547 fix.
May 2 2025, 12:07 PM
werner added a comment to T7583: 2.5.5 removes sig on clean that 2.5.4 and earlier kept.

Yes, this is related to T7547. With my last fix for that I overlooked that we use PUBKEY_USAGE_CERT to internally request the primary key but that one is not set because in general USAGE_SIG means the same (except for some case in PGP7 mode).

May 2 2025, 11:03 AM · gnupg, Bug Report
werner added a project to T7589: Unable to export SSH keys for ED25519 keys generate on a SmartCard: ssh.
May 2 2025, 10:31 AM · gnupg, ssh, Bug Report
werner set the color for OpenBSD to Checkered.
May 2 2025, 10:30 AM
werner set the color for NetBSD to Checkered.
May 2 2025, 10:30 AM
werner added a project to T7632: gnupg test suite fails to build on AIX.: AIX.
May 2 2025, 10:30 AM · AIX, gnupg, Bug Report
werner added a project to T7634: libgcrypt's test t-thread-local fails to link on some platforms.: NetBSD.
May 2 2025, 10:29 AM · NetBSD, libgcrypt, Bug Report
werner added a project to T7633: libgcrypt fails to build on NetBSD due to the systems bswap32 macro defintion.: NetBSD.
May 2 2025, 10:29 AM · NetBSD, libgcrypt, Bug Report
werner set the color for NetBSD to Indigo.
May 2 2025, 10:28 AM
werner created OpenBSD.
May 2 2025, 10:28 AM
werner created NetBSD.
May 2 2025, 10:28 AM
werner added a project to T7631: Building libassuan on AIX warns about missing function declarations.: AIX.
May 2 2025, 10:26 AM · AIX, libassuan, Bug Report
werner triaged T7629: gcc 15 warns about -Wunterminated-string-initialization in gnupg as Low priority.
May 2 2025, 10:26 AM · gnupg, Bug Report
werner closed T7611: WoT: adding a marginal trustsig reduces the validity of a downstream certificate as Resolved.

> I'm not sure i understand why "the latest" should be preferred.

May 2 2025, 10:26 AM · Not A Bug, gnupg