Page MenuHome GnuPG
Feed Advanced Search

Nov 16 2020

gniibe closed T4641: Libassuan: enable the environment to set compiler and linker flags for helper tools as Resolved.
Nov 16 2020, 7:28 AM · Restricted Project, libassuan, Feature Request
gniibe closed T4678: libassuan.pc missing include dir directive in cflags as Resolved.
Nov 16 2020, 7:27 AM · Restricted Project, libassuan
gniibe claimed T5134: GPG - will not sign nor verify the pin when using a contactless reader.

I don't see any problems in your PC/SC log, at all. If it is the failure of vendor's driver, we actually have no way to fix.

Nov 16 2020, 3:42 AM · Not A Bug, scd, Bug Report

Nov 13 2020

gniibe closed T5074: Leaking fd as Resolved.
Nov 13 2020, 7:17 AM · Restricted Project, gpgme, Bug Report
gniibe closed T4688: `make distcheck` fails trying to make `rst/gpgme-python-howto.rst` as Resolved.
Nov 13 2020, 7:17 AM · Restricted Project, gpgme, Bug Report

Nov 12 2020

gniibe added a comment to T4800: python-gpgme signature revokation assertion error: `gpg->cmd.code' failed.

Thanks for your report, but your excerpt is irrelevant.

Nov 12 2020, 9:11 AM · gpgme, Bug Report
gniibe closed T5046: Exporting secret keys via gpgme as Resolved.

Push the change.

Nov 12 2020, 5:15 AM · gpgme, Bug Report
gniibe committed rM3382ecb17eb5: core: Support exporting secret keys. (authored by gniibe).
core: Support exporting secret keys.
Nov 12 2020, 5:14 AM
gniibe claimed T5046: Exporting secret keys via gpgme.

Thank you.

Nov 12 2020, 5:10 AM · gpgme, Bug Report
gniibe committed rG2b2f21445c91: po: Update Japanese Translations. (authored by gniibe).
po: Update Japanese Translations.
Nov 12 2020, 5:02 AM
gniibe committed rM7139afc5cdc0: python: Fix a test for newer GnuPG (>= 2.3). (authored by gniibe).
python: Fix a test for newer GnuPG (>= 2.3).
Nov 12 2020, 3:17 AM
gniibe added a comment to T5100: OpenPGP app overwrites Yubikey serial number.

Let me describe current situation.

Nov 12 2020, 12:56 AM · Restricted Project, gnupg, scd, yubikey, kleopatra

Nov 11 2020

gniibe committed rM276f3390e18b: qt: Allow build with older GnuPG (< 2.2.18). (authored by gniibe).
qt: Allow build with older GnuPG (< 2.2.18).
Nov 11 2020, 4:01 AM
gniibe committed rGdd2703096f3e: gpg: Fix the previous commit. (authored by gniibe).
gpg: Fix the previous commit.
Nov 11 2020, 1:14 AM
gniibe added a comment to rGf9bbc751633f: gpg: In batch mode, delete-secret-key is not okay without --yes..

Thanks.
I didn't consider well about the test environment which uses special pinentry program.
I'll fix the line 155.

Nov 11 2020, 1:11 AM

Nov 10 2020

gniibe closed T3950: gnupg-2.2.6 fails to find correct library config programs when cross-compiling for ARM as Wontfix.

The feature (better cross compiling) was done in master.
We close this bug report as "Won't fix" since it will never been applied to 2.2.

Nov 10 2020, 6:48 AM · Feature Request
gniibe added a comment to T3950: gnupg-2.2.6 fails to find correct library config programs when cross-compiling for ARM.

In newer releases of libgpg-error, libksba, libassuan, libgcrypt, npth and ntbtls, we updated corresponding *.m4, so that we can use new gpgrt-config program only. And gpgrt-config command supports cross compiling and multiarch libraries.

Nov 10 2020, 6:45 AM · Feature Request
gniibe changed the status of T5086: GnuPG fails to generate keys on-card in versions 2.2.22 and 2.2.23 from Open to Testing.

For 2.2, rG61aea64b3c17: scd: Fix the use case of verify_chv2 by CHECKPIN. fixed this problem.

Nov 10 2020, 6:15 AM · Restricted Project, gnupg, Bug Report
gniibe added a comment to T4667: "gpg: deleting secret key failed: No pinentry" when in --batch mode with --pinentry=loopback.

Fixed in master.
(confirmation interaction is also fixed.)

Nov 10 2020, 6:11 AM · gnupg24, gnupg (gpg23), Bug Report
gniibe committed rGf9bbc751633f: gpg: In batch mode, delete-secret-key is not okay without --yes. (authored by gniibe).
gpg: In batch mode, delete-secret-key is not okay without --yes.
Nov 10 2020, 6:10 AM
gniibe changed the status of T4998: scdaemon: PC/SC "No such device" without reader-port from Open to Testing.
Nov 10 2020, 4:00 AM · Restricted Project, scd, Bug Report
gniibe changed the status of T4998: scdaemon: PC/SC "No such device" without reader-port, a subtask of T3300: scd: Support multiple readers by PC/SC driver, from Open to Testing.
Nov 10 2020, 4:00 AM · Restricted Project, gnupg (gpg23), scd
gniibe added a comment to T5120: Incompatible Ed25519 secret key (no-encryption).

Need another patch to export it:

diff --git a/g10/export.c b/g10/export.c
index 8dd0b07d7..339424e19 100644
--- a/g10/export.c
+++ b/g10/export.c
@@ -627,6 +627,57 @@ canon_pk_algo (enum gcry_pk_algos algo)
 }
Nov 10 2020, 3:41 AM · gnupg (gpg22), Bug Report
gniibe merged T3366: Secret keys won't delete into T3465: --pinentry-mode loopback with --delete-secret-keys.
Nov 10 2020, 2:39 AM · gnupg, Bug Report
gniibe merged task T3366: Secret keys won't delete into T3465: --pinentry-mode loopback with --delete-secret-keys.
Nov 10 2020, 2:39 AM · gnupg, Windows 32, gpg4win, Bug Report
gniibe added a comment to T3366: Secret keys won't delete.

It's fixed in master by T3465: --pinentry-mode loopback with --delete-secret-keys, with new confirmation interaction.
For 2.2, you can use --batch and --yes, see T4667: "gpg: deleting secret key failed: No pinentry" when in --batch mode with --pinentry=loopback.

Nov 10 2020, 2:39 AM · gnupg, Windows 32, gpg4win, Bug Report
gniibe committed rG9854369a729b: gpg: Fix agent_delete_key interaction. (authored by gniibe).
gpg: Fix agent_delete_key interaction.
Nov 10 2020, 2:31 AM
gniibe raised the priority of T5018: Export keys to secure card failure: gpg: KEYTOCARD failed: Unusable secret key from Low to Normal.
Nov 10 2020, 1:42 AM · Info Needed, Bug Report
gniibe claimed T5018: Export keys to secure card failure: gpg: KEYTOCARD failed: Unusable secret key.
Nov 10 2020, 1:42 AM · Info Needed, Bug Report
gniibe triaged T5018: Export keys to secure card failure: gpg: KEYTOCARD failed: Unusable secret key as Low priority.

Did you remove .gnupg entirely? Secret keys are stored in .gnupg/private-keys-v1.d. If it remained, you didn't import your secret keys.
If it was the case, I'd like to merge this report to T3391: cannot import subkey that was once marked to be on a card.

Nov 10 2020, 1:42 AM · Info Needed, Bug Report

Nov 9 2020

gniibe created T5122: Importing secret key with wrong passphrase may result GPG_ERR_MISSING_VALUE (should be able to be tried 3 times).
Nov 9 2020, 4:09 AM · gnupg
gniibe committed rGbf3a9377d147: gpg: Fix SOS handling when exporting SSH key with libgcrypt 1.8. (authored by gniibe).
gpg: Fix SOS handling when exporting SSH key with libgcrypt 1.8.
Nov 9 2020, 3:42 AM
gniibe committed rGba4f68416742: agent: Fix SOS handling with libgcrypt 1.8. (authored by gniibe).
agent: Fix SOS handling with libgcrypt 1.8.
Nov 9 2020, 3:42 AM
gniibe added a comment to T5055: APPCRASH with libKF5ConfigWidgets.dll.

The "Reliability History" says (in Chinese):

异常代码: c0000005
异常偏移: 0002b6c0

The error code c0000005 is something like SEGV on POSIX, I guess.
It occurred at the address 0002b6c0.

Nov 9 2020, 2:57 AM · Bug Report, gpg4win

Nov 5 2020

gniibe added a comment to T5121: a race condition between intr_cb call back and libusb_free_transfer in do_close_reader.

For SPR532, we need following.

Nov 5 2020, 8:47 AM · gnupg (gpg22), Restricted Project, scd
gniibe edited projects for T5121: a race condition between intr_cb call back and libusb_free_transfer in do_close_reader, added: Restricted Project, gnupg (gpg22); removed gnupg.
Nov 5 2020, 8:24 AM · gnupg (gpg22), Restricted Project, scd
gniibe changed the status of T5121: a race condition between intr_cb call back and libusb_free_transfer in do_close_reader, a subtask of T5065: scdaemon doesn't detect card removal after boot/resume (Identiv SPR332v2), from Open to Testing.
Nov 5 2020, 8:24 AM · Restricted Project, gnupg (gpg22), scd, Bug Report
gniibe changed the status of T5121: a race condition between intr_cb call back and libusb_free_transfer in do_close_reader from Open to Testing.
Nov 5 2020, 8:24 AM · gnupg (gpg22), Restricted Project, scd
gniibe added a parent task for T5121: a race condition between intr_cb call back and libusb_free_transfer in do_close_reader: T5065: scdaemon doesn't detect card removal after boot/resume (Identiv SPR332v2).
Nov 5 2020, 8:22 AM · gnupg (gpg22), Restricted Project, scd
gniibe added a subtask for T5065: scdaemon doesn't detect card removal after boot/resume (Identiv SPR332v2): T5121: a race condition between intr_cb call back and libusb_free_transfer in do_close_reader.
Nov 5 2020, 8:22 AM · Restricted Project, gnupg (gpg22), scd, Bug Report
gniibe committed rGf808012ac2cf: scd: Use lock_slot for apdu_send_direct. (authored by gniibe).
scd: Use lock_slot for apdu_send_direct.
Nov 5 2020, 8:19 AM
gniibe committed rG484bafda4dbf: scd: Internal CCID driver: Fix a race condition on close. (authored by gniibe).
scd: Internal CCID driver: Fix a race condition on close.
Nov 5 2020, 8:19 AM
gniibe created T5121: a race condition between intr_cb call back and libusb_free_transfer in do_close_reader.
Nov 5 2020, 12:43 AM · gnupg (gpg22), Restricted Project, scd

Nov 4 2020

gniibe added a comment to T5120: Incompatible Ed25519 secret key (no-encryption).

Applying following SOS-handling, the key can be handled.

diff --git a/g10/parse-packet.c b/g10/parse-packet.c
index 9cb254e24..be7fc6d67 100644
--- a/g10/parse-packet.c
+++ b/g10/parse-packet.c
@@ -188,6 +188,76 @@ mpi_read (iobuf_t inp, unsigned int *ret_nread, int secure)
 }
Nov 4 2020, 3:57 AM · gnupg (gpg22), Bug Report
gniibe added a comment to T5120: Incompatible Ed25519 secret key (no-encryption).

Note that there is no problem for encrypted key, because it is handled by opaque MPI.

Nov 4 2020, 3:21 AM · gnupg (gpg22), Bug Report
gniibe created T5120: Incompatible Ed25519 secret key (no-encryption).
Nov 4 2020, 3:21 AM · gnupg (gpg22), Bug Report
gniibe changed the status of T5116: GnuPG master shows an error when importing Ed25519 keys generated from Open to Testing.
Nov 4 2020, 3:14 AM · Restricted Project, gnupg, Bug Report
gniibe changed the status of T5116: GnuPG master shows an error when importing Ed25519 keys generated, a subtask of T5114: GnuPG fails to import back generated and exported EdDSA secret key., from Open to Testing.
Nov 4 2020, 3:14 AM · gnupg, Restricted Project, gpgagent, Bug Report

Nov 2 2020

gniibe committed rG8211d0bc3ba5: kbx: Don't put zero-byte for ECC. (authored by gniibe).
kbx: Don't put zero-byte for ECC.
Nov 2 2020, 7:35 AM
gniibe committed rG90c3d623ce37: gpg: Fix debug output for key_check_all_keysigs with opaque MPI. (authored by gniibe).
gpg: Fix debug output for key_check_all_keysigs with opaque MPI.
Nov 2 2020, 3:37 AM
gniibe committed rG029ba6dc961c: gpg: Fix check_signature2 for opaque MPI. (authored by gniibe).
gpg: Fix check_signature2 for opaque MPI.
Nov 2 2020, 3:37 AM
gniibe committed rG21d8927f794b: gpg: Change the API for checksum to use const qualifier. (authored by gniibe).
gpg: Change the API for checksum to use const qualifier.
Nov 2 2020, 3:37 AM
gniibe committed rG3151210e455f: gpg: Fix counting buffer size in check_signature2. (authored by gniibe).
gpg: Fix counting buffer size in check_signature2.
Nov 2 2020, 3:37 AM

Oct 30 2020

gniibe committed rG813e24108a13: gpg: Fix SOS handling with libgcrypt version <= 1.8. (authored by gniibe).
gpg: Fix SOS handling with libgcrypt version <= 1.8.
Oct 30 2020, 9:09 AM
gniibe added a comment to T5116: GnuPG master shows an error when importing Ed25519 keys generated.

One bug is fixed in rGdd4fb1c8f668: gpg: Fix first zero-byte case for SOS handling..

Oct 30 2020, 9:03 AM · Restricted Project, gnupg, Bug Report
gniibe committed rGdd4fb1c8f668: gpg: Fix first zero-byte case for SOS handling. (authored by gniibe).
gpg: Fix first zero-byte case for SOS handling.
Oct 30 2020, 7:23 AM
gniibe committed rC361a0588489c: ecc: Handle removed zeros at the beginning for Ed25519. (authored by gniibe).
ecc: Handle removed zeros at the beginning for Ed25519.
Oct 30 2020, 2:28 AM
gniibe changed the status of T5114: GnuPG fails to import back generated and exported EdDSA secret key. from Open to Testing.

Fixed in 2.2 branch.
Also, I found another issue of libgcrypt master, which is fixed in rC361a0588489c: ecc: Handle removed zeros at the beginning for Ed25519..
Further, I found different issue, and created T5116: GnuPG master shows an error when importing Ed25519 keys generated.

Oct 30 2020, 2:23 AM · gnupg, Restricted Project, gpgagent, Bug Report
gniibe committed rGba321b60bc3b: agent: Fix secret key import for Ed25519. (authored by gniibe).
agent: Fix secret key import for Ed25519.
Oct 30 2020, 2:22 AM
gniibe created T5116: GnuPG master shows an error when importing Ed25519 keys generated.
Oct 30 2020, 12:55 AM · Restricted Project, gnupg, Bug Report
gniibe added a comment to T5114: GnuPG fails to import back generated and exported EdDSA secret key..

I think that it may occur with eddsa secret keys generated with 2.2, too. (In the 50% probability)

Oct 30 2020, 12:51 AM · gnupg, Restricted Project, gpgagent, Bug Report

Oct 29 2020

gniibe added a comment to T5114: GnuPG fails to import back generated and exported EdDSA secret key..

IIUC, it is an issue of GnuPG 2.2.
The condition is where the secret 'd' starts by the first bit = 1 (that is, >= 0x80).
I located the bug in agent/cvt-openpgp.c. The function do_unprotect calls convert_secret_key with skey[1] as usual MPI (not opaque),
and gcry_sexp_build with "(d%m)" will put additional 0x00 at the beginning, which results 33-byte secret in R_KEY. Then, when gcry_pk_testkey is called with R_KEY, when it checks, because 32-byte is expected, it returns GPG_ERR_INV_OBJ. Then, do_unprotect returns GPG_ERR_BAD_PASSPHRASE.

Oct 29 2020, 8:58 AM · gnupg, Restricted Project, gpgagent, Bug Report
gniibe edited projects for T5114: GnuPG fails to import back generated and exported EdDSA secret key., added: gnupg (gpg22), gpgagent; removed gnupg (gpg23).
Oct 29 2020, 7:26 AM · gnupg, Restricted Project, gpgagent, Bug Report
gniibe added a comment to T5114: GnuPG fails to import back generated and exported EdDSA secret key..

With Debian's GnuPG 2.2.12, I got an error:

Oct 29 2020, 7:22 AM · gnupg, Restricted Project, gpgagent, Bug Report
gniibe claimed T5114: GnuPG fails to import back generated and exported EdDSA secret key..

With bata1449, I cannot reproduce it.
I can import by gpg --import key-uids-sec.pgp
I tested with Debian's libgcrypt, as well as libgcrypt master (4a50c6b8).

Oct 29 2020, 6:35 AM · gnupg, Restricted Project, gpgagent, Bug Report

Oct 28 2020

gniibe triaged T5100: OpenPGP app overwrites Yubikey serial number as Normal priority.
Oct 28 2020, 2:45 AM · Restricted Project, gnupg, scd, yubikey, kleopatra
gniibe committed rM089164a0c0d6: python: Handle the when case __doc__ is None. (authored by gniibe).
python: Handle the when case __doc__ is None.
Oct 28 2020, 1:12 AM
gniibe closed T5075: [python-gpgme] Traceback when running with python -OO as Resolved.

Pushed the change.

Oct 28 2020, 12:51 AM · gpgme, Python, Bug Report
gniibe claimed T5075: [python-gpgme] Traceback when running with python -OO.
Oct 28 2020, 12:30 AM · gpgme, Python, Bug Report

Oct 27 2020

gniibe added a comment to T5075: [python-gpgme] Traceback when running with python -OO.

IIUC, fix can be like this:

diff --git a/lang/python/src/core.py b/lang/python/src/core.py
index 996c3b0f..646bbc60 100644
--- a/lang/python/src/core.py
+++ b/lang/python/src/core.py
@@ -147,7 +147,12 @@ class GpgmeWrapper(object):
                     gpgme.gpg_raise_callback_exception(slf)
                 return result
Oct 27 2020, 8:31 AM · gpgme, Python, Bug Report
gniibe changed the status of T5100: OpenPGP app overwrites Yubikey serial number from Open to Testing.
Oct 27 2020, 6:43 AM · Restricted Project, gnupg, scd, yubikey, kleopatra
gniibe added a comment to T5100: OpenPGP app overwrites Yubikey serial number.

SCD commands:

  • DEVINFO
    • returns app apecific serialno
  • SERIALNO
    • returns app specific serialno
  • LEARN
    • returns canonical serialno
Oct 27 2020, 6:41 AM · Restricted Project, gnupg, scd, yubikey, kleopatra
gniibe committed rGe59d2b3632d8: scd: Handle canonical serialno and app specific serialno differently. (authored by gniibe).
scd: Handle canonical serialno and app specific serialno differently.
Oct 27 2020, 6:41 AM

Oct 26 2020

gniibe closed T5102: READCERT immediately after WRITECERT fails as Resolved.

Pushed the change.

Oct 26 2020, 6:32 AM · kleopatra, scd
gniibe committed rG8264b10d33e4: scd: Flush the cache when writing cert data object. (authored by gniibe).
scd: Flush the cache when writing cert data object.
Oct 26 2020, 6:32 AM
gniibe committed rGa153d0f76914: gpg: Fix double free on error. (authored by gniibe).
gpg: Fix double free on error.
Oct 26 2020, 6:01 AM
gniibe committed rG157f1de64e43: gpg,tools: Fix detecting OpenPGP card by serialno. (authored by gniibe).
gpg,tools: Fix detecting OpenPGP card by serialno.
Oct 26 2020, 6:01 AM
gniibe committed rG31def32eeed8: scd: Internal CCID driver thing only for SPR532. (authored by gniibe).
scd: Internal CCID driver thing only for SPR532.
Oct 26 2020, 3:42 AM

Oct 24 2020

gniibe committed rG3c6b5dfa2a23: scd: Internal CCID driver limiting only for SPR532. (authored by gniibe).
scd: Internal CCID driver limiting only for SPR532.
Oct 24 2020, 4:02 AM

Oct 23 2020

gniibe committed rG2d4de4b6f06c: scd: Handle Yubikey's multiple apps and serialno. (authored by gniibe).
scd: Handle Yubikey's multiple apps and serialno.
Oct 23 2020, 9:34 AM
gniibe committed rGc8cc35dd2c10: scd: Use app_get_serialno for app_getattr. (authored by gniibe).
scd: Use app_get_serialno for app_getattr.
Oct 23 2020, 8:26 AM
gniibe committed rG65c91e601ae9: scd: Don't overwrite serialno for Yubikey. (authored by gniibe).
scd: Don't overwrite serialno for Yubikey.
Oct 23 2020, 8:21 AM
gniibe committed rG41505f0ae544: scd,openpgp: Use app_get_serialno function to get SERIALNO. (authored by gniibe).
scd,openpgp: Use app_get_serialno function to get SERIALNO.
Oct 23 2020, 8:17 AM
gniibe updated the task description for T5109: Initial socket connection to server.
Oct 23 2020, 4:54 AM · gnupg24, gnupg (gpg23)
gniibe updated the summary of D510: Connection to gpg-agent/dirmngr/etc..
Oct 23 2020, 4:52 AM · gnupg
gniibe updated the diff for D510: Connection to gpg-agent/dirmngr/etc..

Only enabled for UNIX #ifdef/#else/#endif

Oct 23 2020, 4:52 AM · gnupg
gniibe edited projects for T5109: Initial socket connection to server, added: gnupg (gpg22); removed gnupg.
Oct 23 2020, 4:49 AM · gnupg24, gnupg (gpg23)
gniibe added a comment to T5109: Initial socket connection to server.

I had overlooked this fix rG044379772fc5: common: Fix the previous commit., after the commit of rGb1c56cf9e2bb: common: Use gnupg_spawn_process_fd to invoke gpg-agent/dirmngr..

Oct 23 2020, 4:46 AM · gnupg24, gnupg (gpg23)
gniibe updated the task description for T5109: Initial socket connection to server.
Oct 23 2020, 4:33 AM · gnupg24, gnupg (gpg23)
gniibe updated the task description for T5109: Initial socket connection to server.
Oct 23 2020, 4:33 AM · gnupg24, gnupg (gpg23)
gniibe created T5109: Initial socket connection to server.
Oct 23 2020, 4:31 AM · gnupg24, gnupg (gpg23)
gniibe created D510: Connection to gpg-agent/dirmngr/etc..
Oct 23 2020, 4:25 AM · gnupg

Oct 21 2020

gniibe added a comment to T5100: OpenPGP app overwrites Yubikey serial number.

I created this patch D509: Yubikey supports two (or more) apps, serial number problem.

Oct 21 2020, 7:53 AM · Restricted Project, gnupg, scd, yubikey, kleopatra
gniibe created D509: Yubikey supports two (or more) apps, serial number problem.
Oct 21 2020, 7:51 AM · gnupg

Oct 19 2020

gniibe added a comment to T5100: OpenPGP app overwrites Yubikey serial number.

No, the above patch makes OpenPGP app stop working.

Oct 19 2020, 9:34 AM · Restricted Project, gnupg, scd, yubikey, kleopatra
gniibe added a comment to T5100: OpenPGP app overwrites Yubikey serial number.

(I don't know well about Yubikey specific serial number.)

Oct 19 2020, 9:27 AM · Restricted Project, gnupg, scd, yubikey, kleopatra
gniibe claimed T5100: OpenPGP app overwrites Yubikey serial number.
Oct 19 2020, 6:41 AM · Restricted Project, gnupg, scd, yubikey, kleopatra
gniibe claimed T5102: READCERT immediately after WRITECERT fails.
Oct 19 2020, 6:37 AM · kleopatra, scd

Oct 9 2020

gniibe committed rG33cb1655f1b7: agent: Fix SEGV when debuging for cache enabled. (authored by gniibe).
agent: Fix SEGV when debuging for cache enabled.
Oct 9 2020, 6:59 AM
gniibe committed rG228836f79f64: gpg,ecc: Fix SOS handling when receiving from agent. (authored by gniibe).
gpg,ecc: Fix SOS handling when receiving from agent.
Oct 9 2020, 6:59 AM