- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Feb 2 2022
Feb 2 2022
• gniibe moved T5512: Implement service indicators from Next to Ready for release on the FIPS board.
Feb 1 2022
Feb 1 2022
• werner committed rD87c005211f03: swdb: Libgcrypt 1.10.0 non-public release (authored by • werner).
swdb: Libgcrypt 1.10.0 non-public release
Prepare master for future work
Here is the output of --list-packets of the offending key, anonymised:
- off=0 ctb=99 tag=6 hlen=3 plen=418 :public key packet: version 4, algo 17, created 985690138, expires 0 pkey[0]: [1024 bits] pkey[1]: [160 bits] pkey[2]: [1024 bits] pkey[3]: [1023 bits] keyid: <KEY_ID>
- off=421 ctb=b4 tag=13 hlen=2 plen=35 :user ID packet: "XXXXXXXXXXXXX"
- off=458 ctb=88 tag=2 hlen=2 plen=120 :signature packet: algo 17, keyid <KEY_ID> version 4, created 1629537425, md5len 0, sigclass 0x13 digest algo 2, begin of digest a8 22 hashed subpkt 33 len 21 (issuer fpr v4 <XXXXXXXXXXXXXX><KEY_ID>) hashed subpkt 2 len 4 (sig created 2021-08-21) hashed subpkt 27 len 1 (key flags: 23) hashed subpkt 11 len 4 (pref-sym-algos: 9 8 7 2) hashed subpkt 21 len 5 (pref-hash-algos: 8 9 10 11 2) hashed subpkt 22 len 3 (pref-zip-algos: 2 3 1) hashed subpkt 30 len 1 (features: 01) hashed subpkt 23 len 1 (keyserver preferences: 80) subpkt 16 len 8 (issuer key ID <KEY_ID>) data: [158 bits] data: [159 bits]
- off=580 ctb=b9 tag=14 hlen=3 plen=525 :public sub key packet: version 4, algo 16, created 985690139, expires 0 pkey[0]: [2048 bits] pkey[1]: [2 bits] pkey[2]: [2046 bits] keyid: YYYYYYYYYYYYYYY
- off=1108 ctb=88 tag=2 hlen=2 plen=63 :signature packet: algo 17, keyid <KEY_ID> version 3, created 985690139, md5len 5, sigclass 0x18 digest algo 2, begin of digest 94 e5 data: [159 bits] data: [156 bits]
This code
• werner committed rG57d546674d08: dirmngr: Avoid initial delay on the first keyserver access. (authored by • werner).
dirmngr: Avoid initial delay on the first keyserver access.
• werner committed rGdde88897e2c5: dirmngr: Avoid initial delay on the first keyserver access. (authored by • werner).
dirmngr: Avoid initial delay on the first keyserver access.
• werner committed rGd426ed66ac04: gpg: Set --verbose and clear --quiet in debug mode. (authored by • werner).
gpg: Set --verbose and clear --quiet in debug mode.
sm: Partly revert last commit.
• werner committed rG51edea995d35: gpg,sm: Set --verbose and clear --quiet in debug mode. (authored by • werner).
gpg,sm: Set --verbose and clear --quiet in debug mode.
erlandm renamed T5809: Expire subkey violates assertion "! sig->hashed" from Expire subkey violates asserion "! sig->hashed" to Expire subkey violates assertion "! sig->hashed".
Thanks, Werner. This was originally reported by Alejandro Masino.
• aheinecke committed rW6a738876e5c2: Also sign additional files for NSIS package (authored by • aheinecke).
Also sign additional files for NSIS package
Update Kleopatra and dependencies
• gniibe committed rE433aba9e778e: build,tests: Fix detection of have_lock_optimization. (authored by • gniibe).
build,tests: Fix detection of have_lock_optimization.
• gniibe added a comment to T5699: libgpg-error 1.43 fails t-lock-single-thread test on x86_64 with musl and macOS.
Pushed the change in rE433aba9e778e: build,tests: Fix detection of have_lock_optimization..
• gniibe added a comment to T5699: libgpg-error 1.43 fails t-lock-single-thread test on x86_64 with musl and macOS.
@marv Thank you for your report.
Jan 31 2022
Jan 31 2022
ikloecker moved T5808: gpgme: Add support for importing keys given by key id from a keyserver from Restricted Project Column to Restricted Project Column on the Restricted Project board.
ikloecker triaged T5808: gpgme: Add support for importing keys given by key id from a keyserver as Normal priority.
marv added a comment to T5699: libgpg-error 1.43 fails t-lock-single-thread test on x86_64 with musl and macOS.
Hey gniibe,
Thanks
• werner committed rC217bf0a0e7be: rsa: Fix regression in not returning an error for prime generation. (authored by • werner).
rsa: Fix regression in not returning an error for prime generation.
• werner triaged T5807: Extend Authenticode signatures to more (all) Gpg4win binaries and libraries as Normal priority.
ikloecker moved T5805: Kleopatra or GnuPG: Auto retrieve signers key from Restricted Project Column to Restricted Project Column on the Restricted Project board.
• gniibe committed rCcb9df21fcbb0: cipher: Initialize values not to confuse static analyzers (authored by Jakuje).
cipher: Initialize values not to confuse static analyzers
• gniibe committed rC904e168bdb2a: random: Avoid dereference of the ec before checking for NULL (authored by Jakuje).
random: Avoid dereference of the ec before checking for NULL
fips: Remove unused assignment
• gniibe committed rC0f38e6a877f1: cipher: Remove dead code in for the siv mode (authored by Jakuje).
cipher: Remove dead code in for the siv mode
• aheinecke reassigned T5805: Kleopatra or GnuPG: Auto retrieve signers key from • werner to ikloecker.
As this hinders the trusted-introducer setup in Keyserver centric deployments we should treat this with high priority.
• gniibe committed rC77512c510bf7: kdf: Fix computation by big-endian machine. (authored by • gniibe).
kdf: Fix computation by big-endian machine.
• gniibe committed rC7dc488ae036a: ciper/blake2: Make sure to clean up the stack. (authored by • gniibe).
ciper/blake2: Make sure to clean up the stack.
• gniibe added projects to T5797: New API for modern password hash function: Feature Request, Restricted Project.
Jan 30 2022
Jan 30 2022
jukivili committed rC409f69167983: kdf/argon2: use BLAKE2b hash_buffers function instead of _gcry_md_* (authored by jukivili).
kdf/argon2: use BLAKE2b hash_buffers function instead of _gcry_md_*
jukivili committed rC54369c66bedd: kdf: handle errors from thread dispatch/wait functions (authored by jukivili).
kdf: handle errors from thread dispatch/wait functions
jukivili committed rC03a0eedefe3e: tests/t-kdf: few changes to pthread example and fix win32/win64 builds (authored by jukivili).
tests/t-kdf: few changes to pthread example and fix win32/win64 builds
jukivili committed rCc5aead8aebc7: Rename KDF job functions and function types (authored by jukivili).
Rename KDF job functions and function types
Jan 29 2022
Jan 29 2022
Heiko Becker <heiko.becker@kde.org> committed rKLEOPATRAb997ef60255c: GIT_SILENT Upgrade release service version to 21.12.2. (authored by Heiko Becker <heiko.becker@kde.org>).
GIT_SILENT Upgrade release service version to 21.12.2.
Heiko Becker <heiko.becker@kde.org> committed rKLEOPATRA9aeae3ef75be: GIT_SILENT Update Appstream for new release (authored by Heiko Becker <heiko.becker@kde.org>).
GIT_SILENT Update Appstream for new release
Heiko Becker <heiko.becker@kde.org> committed rKLEOPATRAfec935205dea: GIT_SILENT Update Appstream for new release (authored by Heiko Becker <heiko.becker@kde.org>).
GIT_SILENT Update Appstream for new release
Jan 28 2022
Jan 28 2022
Thanks for the report. To keep things easy the empty comment is now translated to "(none)".
• werner committed rG2331900d1cc0: ssh: Fix adding an ed25519 key with a zero length comment. (authored by • werner).
ssh: Fix adding an ed25519 key with a zero length comment.
• werner committed rG934a60de6b88: ssh: Fix adding an ed25519 key with a zero length comment. (authored by • werner).
ssh: Fix adding an ed25519 key with a zero length comment.
• werner closed T5800: gpgconf: Ignores keyserver option in gpgsm.conf, a subtask of T5732: Backport option reading in gpgconf to 2.2, as Resolved.
• werner committed rG34ea19aff99f: gpg: Allow --dearmor to decode all kinds of armor files. (authored by • werner).
gpg: Allow --dearmor to decode all kinds of armor files.
kdf: Change new KDF API.
• aheinecke added a comment to T5777: Kleopatra: Remove all external links which would open a browser.
Wow! That is a great idea. Thanks!
• werner updated the task description for T5803: outlook restarts on adding a address to a new email.
• gniibe committed rC6467287ba121: cipher: Implement variable-length hash function for Argon2. (authored by • gniibe).
cipher: Implement variable-length hash function for Argon2.
• gniibe committed rC4cbbd87e2af0: kdf: Implement Argon2 KDF using blake2b_vl_hash function. (authored by • gniibe).
kdf: Implement Argon2 KDF using blake2b_vl_hash function.
engel97 renamed T5804: Using empty passphrase key pair, gpg2.3.4 fails to decrypt with error "No passphrase given" on a gpg1.4/2.0 keyring format even though the secret keys migration was successful from Using empty passphrase key pair, gpg2.3.4 fails to decrypt with error "No secret key" on a gpg1.4/2.0 keyring format even though the secret keys migration was successful to Using empty passphrase key pair, gpg2.3.4 fails to decrypt with error "No passphrase given" on a gpg1.4/2.0 keyring format even though the secret keys migration was successful .
Jan 27 2022
Jan 27 2022
ikloecker committed rLIBKLEOb49d0fb3a6b0: Also exclude deprecated gpgsm/keyserver option for GnuPG 2.2.34+ (authored by ikloecker).
Also exclude deprecated gpgsm/keyserver option for GnuPG 2.2.34+
ikloecker changed the status of T5777: Kleopatra: Remove all external links which would open a browser from Open to Testing.
I have added a setting which can be used to block URLs with certain schemes.
ikloecker committed rKLEOPATRA333fe62582a9: Allow URLs with certain schemes to be blocked by Kleopatra (authored by ikloecker).
Allow URLs with certain schemes to be blocked by Kleopatra
gpgsm: Retire the new --ldapserver.
gpgconf: Tweak the use of ldapserver.
• werner committed rGed798a97f54f: gpgconf: Teach --show-config the legacy gpgconf.conf. (authored by • werner).
gpgconf: Teach --show-config the legacy gpgconf.conf.
• werner committed rG977b61ddab0c: gpgconf: Return again "keyserver" for gpgsm. (authored by • werner).
gpgconf: Return again "keyserver" for gpgsm.
swdb: Release gpgrt 1.44
ikloecker changed the status of T5791: Kleopatra: Make settings read-only if corresponding GnuPG config entries or KConfigXT entries are read-only from Open to Testing.
ikloecker added a comment to T5791: Kleopatra: Make settings read-only if corresponding GnuPG config entries or KConfigXT entries are read-only.
This should now work for all settings in Kleopatra's configuration dialog.
ikloecker committed rLIBKLEOdbe78f2cd0eb: Explicitly exclude deprecated gpgsm/keyserver option from config UI (authored by ikloecker).
Explicitly exclude deprecated gpgsm/keyserver option from config UI
build: Fixes for make distcheck
• werner committed rE663b91fe91af: Add Turkish translations (authored by Emir SARI <emir_sari@icloud.com>).
Add Turkish translations
Post release updates
Release 1.44
ikloecker changed the status of T5801: Kleopatra: Add support for the new dirmngr/ldapserver option to configure X.509 servers from Open to Testing.
This change adds support for the new "ldapserver" option of dirmngr.
The now deprecated "keyserver" option of gpgsm is still read, but
changes are always written to the new option (and the old option is
cleared). This change removes support for the ancient "LDAP Server"
pseudo-option which new versions of gpgconf no longer support.