Interesting. That means to replace hundreds of scripts in an average organization :-(.
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed Advanced Search
Advanced Search
Advanced Search
Sep 23 2025
Sep 23 2025
Sep 22 2025
Sep 22 2025
Merge branch 'wk-master'
po: msgmerge
Post release updates
Release 2.6.5
Sep 19 2025
Sep 19 2025
Update gpgol to 2.6.5
msi: Fix installation of gpgconf.rnames
swdb: gpgol 2.6.5
msi: Fix installation of gpgconf.rnames
Update gpg4win-tools.
Sep 17 2025
Sep 17 2025
• werner updated the task description for T7771: GpgOL: not selected signed mail with very long subject causes high CPU load.
• werner committed rWbfdd98cb2118: Add two gpgme patches which may fix T7799 (authored by • werner).
Add two gpgme patches which may fix T7799
Sep 16 2025
Sep 16 2025
• werner changed the status of T7804: de-vs compliance not shown if also password encrypted from Open to Testing.
Backported to 2.2 but not yes tested with 2.2
• werner committed rG9f30a5fd8cb7: gpg: Fix de-vs compliance with OCB and additional password. (authored by • werner).
gpg: Fix de-vs compliance with OCB and additional password.
• werner committed rGd720c584f1f2: gpg: Make OCB mode compliant in de-vs mode. (authored by • werner).
gpg: Make OCB mode compliant in de-vs mode.
Release 2.2.48
• werner committed rGfde7315e33e7: tests: Add first test for --add-recipients (authored by • joshua).
tests: Add first test for --add-recipients
• werner added a comment to T7805: Permission denied on batch deletion of mixed (openpgp+smime) certs.
Can you please repeat this with gpg4win-5-beta using the keyboxd and also using the pubring.kbx (i.e. w/o use-keyboxd in common.conf)?
Sorry, I don't know Fedora packaging details. Please ask on gnupg-users for help if you want to build gpa yourself on that platform. This bug report is only read by very few people but on gnupg-users you can get the attention of several thousand users and developers.
Sep 14 2025
Sep 14 2025
Your first two issues are no issues. This is just usual output from a configure run.
Sep 5 2025
Sep 5 2025
• werner moved T7759: Kleopatra: Notepad encryption with S/MIME fails from Backlog to QA on the gpd5x board.
• werner changed the status of T7759: Kleopatra: Notepad encryption with S/MIME fails from Open to Testing.
Uses gpgme-2.0.0 with the above mentioned patches. I have seen no problems in my quick tests.
For the full fledged Windows installer see https://files.gpg4win.org/Beta/gpg4win-5.0.0-beta369/gpg4win-5.0.0-beta369.exe
Show with patches are applied
• werner committed rW87007e1049c2: Update Kleopatra due to a missing include. (authored by • werner).
Update Kleopatra due to a missing include.
• werner committed rW5a62ca6df0e8: Update the recent patches due to trailing spaces problems. (authored by • werner).
Update the recent patches due to trailing spaces problems.
Update poppler SO numbers.
• werner committed rW7cec2d1ebe46: Update Kleo, libkleo, gpg4win-tools, okular, and poppler (authored by • werner).
Update Kleo, libkleo, gpg4win-tools, okular, and poppler
Sep 4 2025
Sep 4 2025
Is that really the same bug? I would be interested in seeing a more detailed report. BTW, Windows or Linux? Used standard beta installer on Windows?
If this is indeed a bug it won't be fixed in gpg4win 4. Thus a test with gpg4win 5 beta is highly appreciated. It would also be interesting to see what what version of gpg comes with Git.
Update to GnuPG 2.5.12
Add two patches which may fix T7799
Sep 3 2025
Sep 3 2025
• werner triaged T7803: GpgOL: Security level icon not updated for encrypted mails when auto preview is disabled as High priority.
Note that disabling Auto-preview is not the default and has only been implemented to work around severe performance degradation with certain MalwareAnti-Virus software.
• werner committed rG6771ed4c1322: gpg: Fix de-vs compliance with OCB and additional password. (authored by • werner).
gpg: Fix de-vs compliance with OCB and additional password.
• werner committed rGa73c88817ce2: gpg: Make OCB mode compliant in de-vs mode. (authored by • werner).
gpg: Make OCB mode compliant in de-vs mode.
In contrast to gnupg22 master did not proper show OCB compliance - not everything has yet been forward ported. But we can do so now and test master by setting GNUPG_ASSUME_COMPLIANCE=de-vs
• werner edited projects for T7804: de-vs compliance not shown if also password encrypted, added: gnupg22; removed gnupg24.
Sep 2 2025
Sep 2 2025
web: GnuPG 2.5.12 announcement
• werner moved T7333: Allow gpg to auto-upload a new own key to LDAP servers from Backlog to QA on the gnupg26 board.
• werner moved T7333: Allow gpg to auto-upload a new own key to LDAP servers from Backlog to WiP on the gnupg22 board.
• werner moved T7730: gpg: retrieve a certificate from an LDAP server before sending it to the LDAP server from WIP to QA on the gnupg26 board.
• werner moved T7649: gnupg: Use KEM interface for encryption/decryption from WIP to QA on the gnupg26 board.
• werner moved T7491: Confusing additional pinentry on creation of new keypair with ADSK configured from WIP to QA on the gnupg26 board.
• werner moved T7742: Extend the LDAP scheme for non-NTDS installations from WIP to QA on the gnupg26 board.
• werner moved T7757: Kleopatra: Error "no data" on decryption of tar.gpg archive from Done to QA on the gnupg26 board.
swdb: gnupg 2.5.12
Post release updates
Release 2.5.12
po: msgmerge
po: Update German translation
doc: Document --add-recipients
• werner changed the status of T7799: gpg-agent crashes when using putty for ssh connection from Open to Testing.
We will do a new gpg4win beta soon.
News about the merch site.
Aug 29 2025
Aug 29 2025
Actually put gpgconf.rnames into the MSI
Prepare for 3.3.3
Actually put gpgconf.rnames into the MSI
• werner committed rG152e02bd87bb: gpg: Make --auto-upload also work for the --quick commands. (authored by • werner).
gpg: Make --auto-upload also work for the --quick commands.
gpg: Add option --no-auto-key-upload.
• werner committed rGf64a456271dd: gpg: Make --auto-upload also work for --edit-key (authored by • werner).
gpg: Make --auto-upload also work for --edit-key
re 1: Only if the option --auto-key-upload is used/configured.
re 2: Do not configure --auto-key-upload but give it on the command line.
re 3: Do not use --auto-key-upload - maybe I should add a --no-auto-key-upload option.
Aug 28 2025
Aug 28 2025
gpg: New option --auto-key-upload
Aug 27 2025
Aug 27 2025
@gniibe: Now that we use the KEM API, how do we proceed with this ticket?
• werner lowered the priority of T7618: gpgsm: Allow selecting keys by SHA2 fpr from Normal to Wishlist.
The problem here is that we don't have the sha-2 fingerprint in our SQL tables. Thus we would not only need to do a full table search but also parse the actual blob to compute the sha-2 fingerprint.
• werner lowered the priority of T6678: GPGSM: Add support for cert extension 2.5.29.54 Inhibit anyPolicy from Normal to Wishlist.
• werner changed the status of T7491: Confusing additional pinentry on creation of new keypair with ADSK configured from Open to Testing.
• werner committed rG1123be6ad659: gpg: Change the ADSK key binding time to the current time. (authored by • werner).
gpg: Change the ADSK key binding time to the current time.
• werner committed rG84c4a30342ea: gpg: Avoid second Pinentry pop-up for a configured ADSK during keygen. (authored by • werner).
gpg: Avoid second Pinentry pop-up for a configured ADSK during keygen.
We should change the key binding time from the ADSK creation time to the current time or the time the other self-signatures use.
• werner moved T7491: Confusing additional pinentry on creation of new keypair with ADSK configured from Backlog to WIP on the gnupg26 board.
• werner renamed T7491: Confusing additional pinentry on creation of new keypair with ADSK configured from Kleopatra: Confusing additional pinentry on creation of new keypair with ADSK configured to Confusing additional pinentry on creation of new keypair with ADSK configured .
I have done testing using my QES certificate with all combinations of the two options.
• werner committed rG7b133027ae86: agent: Enable "relax" in the trustlist by default and add "norelax" (authored by • werner).
agent: Enable "relax" in the trustlist by default and add "norelax"
• werner committed rG6a05d7f0e87f: gpgsm: Add option --no-qes-note and trustlist flag "noconsent". (authored by • werner).
gpgsm: Add option --no-qes-note and trustlist flag "noconsent".
• werner moved T7759: Kleopatra: Notepad encryption with S/MIME fails from Backlog to WIP on the gnupg26 board.
• werner committed rGdb794de62052: gpgsm: Change the debug flags used with --debug-level basic to expert. (authored by • werner).
gpgsm: Change the debug flags used with --debug-level basic to expert.
• werner changed the status of T7791: encryption fails with "Invalid Length" error when using Kyber1024 keys from Open to Testing.
Aug 26 2025
Aug 26 2025
• werner added a comment to T7771: GpgOL: not selected signed mail with very long subject causes high CPU load.
The culprit seems to be commit rO6cb4ccf4d8db03e9922984d9c5f5bf7f8806954d but a brief inspection does not show any problematic code. Thus this might be due to an Outlook peculiarity.
You may also specify a mail address in which case gpg tries to find the best matching key. For example the latest key with that mail address. See gnupg/g10/getkey.c:get_best_pubkey_byname
Aug 25 2025
Aug 25 2025
• werner closed T7792: Adding four additional options after selecting Kyber (encrypt only) when using addkey as Resolved.
Thanks for reporting/requesting.
• werner committed rG459f437c19a6: gpg: Allow to select the Kyber variant with --edit-key,addkey. (authored by • werner).
gpg: Allow to select the Kyber variant with --edit-key,addkey.
• werner triaged T7791: encryption fails with "Invalid Length" error when using Kyber1024 keys as High priority.
• werner triaged T7792: Adding four additional options after selecting Kyber (encrypt only) when using addkey as Normal priority.
• werner committed rG7cf19d055929: common: Add a wrapper around the W32 OutputDebugString function. (authored by • werner).
common: Add a wrapper around the W32 OutputDebugString function.
Aug 21 2025
Aug 21 2025
• werner committed rG48edcfdebc80: gpg: Fix list of possible algos for --edit-key. (authored by • werner).
gpg: Fix list of possible algos for --edit-key.
I see from your other report that you are running a proper libgcrypt. But I think I spotted the bug: ECC+Kyber should not be displayed when adding a key. It is used for creating a new key ECC as primary and Kyber as subkey.
• werner triaged T7768: Kleopatra: Improve notepad result messages for corrupted OpenPGP data as Low priority.
Nope: There are many different error codes returned, Kleopatra may want to map them to a common one.
Can you please try with gpg4win-5 beta: https://www.gpg4win.org/version5.html this makes it easier for us to see the reason. Deinstall gpg4win first and note that version5 is 64 bit and installed under Program Files (w/o (x86)). If it still does not work please add