We should close this. The recent fix in 2.2 and the forthcoming 2.3 does everything we want. In the meantiime or if further problems turn up, --ignore-cert is a good workaround.
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed Advanced Search
Advanced Search
Advanced Search
Sep 22 2022
Sep 22 2022
• werner removed a project from T5956: Kleopatra: Disable backup secret key for smartcards: Restricted Project.
• werner removed a project from T5958: Kleopatra: Change passphrase is enabled even when it is impossible: Restricted Project.
• werner removed a project from T5969: Kleopatra: Support large magnification for OpenPGP certificate generation: Unknown Object (Project).
• werner removed a project from T6036: Kleopatra: Show focus indicator for (text) labels that got focus: Unknown Object (Project).
• werner removed a project from T6046: Kleopatra: Make certifying certificates accessible: Unknown Object (Project).
• werner removed a project from T6057: Kleopatra: Add option to disable automatic extraction of tar archives: Unknown Object (Project).
• werner changed the status of T5933: libgcrypt: Simply use BSS (not secure heap) for DRBG instance from Open to Testing.
• werner changed the status of T5919: libgcrypt tests/basic.c and tests/keygen.c occasionally fail with "error generating RSA key: Number is not prime" from Open to Testing.
• werner changed the status of T5891: EOPNOTSUPP is not defined in mingw.org's MinGW, fails compilation of libgcrypt-1.10.0 from Open to Testing.
• werner changed the status of T5811: libgcrypt: Remove random-daemon (server side) from Open to Testing.
• werner changed the status of T5822: libgcrypt: Remove GCRYCTL_ENABLE_M_GUARD support (was: _gcry_private_malloc returns 4-byte alignment memory when use_m_guard==1) from Open to Testing.
• werner changed the status of T5914: libassuan: Introduce use of gpgrt_get_syscall_clamp, no use of system_hooks for nPTH from Open to Testing.
• werner changed the status of T5918: Disable RSA PKCS #1.5 encryption in FIPS mode from Open to Testing.
• werner changed the status of T5922: libgpg-error: gpgrt_log_get_fd always returns -1 even if it's not tcp/socket., a subtask of T5921: No sharing of log_fd between child process, from Open to Testing.
• werner changed the status of T5922: libgpg-error: gpgrt_log_get_fd always returns -1 even if it's not tcp/socket. from Open to Testing.
• werner changed the status of T5973: libgcrypt: Minor test issues reported by coverity from Open to Testing.
• werner changed the status of T5976: libgcrypt build failure on HPPA 1.1 (./.libs/libgcrypt.so: undefined reference to `__udiv_qrnnd') from Open to Testing.
• werner removed a project from T5708: Kleopatra: Configure expiration date default in config: Unknown Object (Project).
• werner removed a project from T5579: libksba parallel build error (windows): Unknown Object (Project).
• werner removed a project from T5543: pinentry-qt: Accessibility switch to repeat on enter: Unknown Object (Project).
• werner removed a project from T4013: Certificate requests generated from Ed25519 keys are not compliant with draft-ietf-curdle-pkix: Unknown Object (Project).
• werner changed the status of T5748: Adding poll/ppoll to NPTH, a subtask of T2385: support more than 1024 fds., from Open to Testing.
• werner changed the status of T5890: EOPNOTSUPP is not defined in mingw.org's MinGW, fails compilation of libgpg-error-1.44 from Open to Testing.
• werner changed the status of T4873: Enable AES GCM in FIPS mode, a subtask of T5870: libgcrypt: AEAD API for FIPS 140 (in future), from Open to Testing.
• werner changed the status of T5925: libassuan: Add assuan_sock_accept function to the API from Open to Testing.
• werner changed the status of T5975: Allow signature verification using specific RSA keys <2k in FIPS mode from Open to Testing.
• werner removed a project from T6013: Kleopatra: Email address of CA is not set as recipient when sending new CSR by email: Unknown Object (Project).
• werner removed a project from T6034: Kleopatra: Make links in label text accessible: Unknown Object (Project).
• werner changed the status of T6039: FIPS: Allow salt=NULL (or shorter salt) for HKDF from Open to Testing.
• werner removed a project from T6044: Kleopatra: Make information shown in pop-ups accessible: Unknown Object (Project).
• werner changed the status of T6048: Test suite fixes with --enable-pubkey-ciphers=ecc from Open to Testing.
• werner removed a project from T6067: dirmngr 2.2 does not ask keyservers for fingerprints: Unknown Object (Project).
• werner removed a project from T6095: Kleopatra: Fix accessibility of group configuration: Unknown Object (Project).
• werner removed a project from T6059: ntbtls: use of shorter hash for ECC: Unknown Object (Project).
• werner removed a project from T6062: Kleopatra: Kleopatra fails with error if signed data is not found: Unknown Object (Project).
• werner removed a project from T6064: Kleopatra: Allow queries to list all certificates on the server: Unknown Object (Project).
• werner changed the status of T6066: gcry_pk_hash_verify() does not work with explicitly specified hash algorithm from Open to Testing.
• werner removed a project from T6073: Kleopatra: Fix issues with high contrast resp. inverted color scheme: Unknown Object (Project).
• werner removed a project from T6080: Kleopatra: Make changing the expiration date accessible: Unknown Object (Project).
• werner removed a project from T6102: Kleopatra: Make Certifications dialog accessible: Unknown Object (Project).
• werner removed a project from T6104: Kleopatra: Make Subkeys Details dialog accessible: Unknown Object (Project).
• werner removed a project from T6118: Kleopatra: Bogus </item><item> in message when importing secret key with multiple user IDs: Unknown Object (Project).
• werner removed a project from T6083: Kleopatra: Sign/encrypt window size issue: Unknown Object (Project).
• werner removed a project from T6101: Kleopatra: Make self-test accessible: Unknown Object (Project).
• werner removed a project from T6103: Kleopatra: Make key selection dialog accessible: Unknown Object (Project).
• werner removed a project from T6108: Kleopatra: Information on storage location of OpenPGP key should be per subkey: Unknown Object (Project).
• werner changed the status of T6112: libgpg-error,w32: bidirectional Pipe support for estream from Open to Testing.
• werner removed a project from T6115: Kleopatra: On "revoke certification" do not offer keys which did not certify that certificate: Unknown Object (Project).
• werner removed a project from T6120: Kleopatra: Unify wording of (start and) end of validity period: Unknown Object (Project).
• werner removed a project from T6121: Kleopatra: add name suggestion for revocation certificate : Unknown Object (Project).
• werner changed the status of T6136: build failure with slibtool - error: undefined symbol: QGpgME::RevokeKeyJob::staticMetaObject from Open to Testing.
• werner removed a project from T6140: Kleopatra: F5 does not always work in smartcard dialog: Unknown Object (Project).
• werner removed a project from T6144: Kleopatra: Please Certify Dialog is no longer shown: Unknown Object (Project).
• werner removed a project from T6156: Kleopatra: Aborting password entry on certify leads to broken error message: Unknown Object (Project).
• werner added a comment to T6142: On Windows, gpg 2.3.7 thinks the certificates of major keyservers have expired.
• werner changed the status of T6142: On Windows, gpg 2.3.7 thinks the certificates of major keyservers have expired, a subtask of T5882: Cross signing certificate in X.509 support, from Open to Testing.
• werner changed the status of T6142: On Windows, gpg 2.3.7 thinks the certificates of major keyservers have expired from Open to Testing.
• werner removed a project from T6154: Kleopatra: Assert in CertifyCertificateCommand after setting ownertrust of key: Unknown Object (Project).
• werner removed a project from T6155: Kleopatra: Certify expired userids offered but leads to General Error: Unknown Object (Project).
• werner removed a project from T6163: Kleopatra: Fetch missing keys broken: Unknown Object (Project).
• werner removed a project from T6166: Kleopatra: Require either name or email when generating keys for OpenPGP smart card: Unknown Object (Project).
• werner removed a project from T6180: Kleopatra: "more details" in group edit opens information window in background: Unknown Object (Project).
• werner removed a project from T6188: kleopatra: notepad verify/decrypt button not always greyed out when it should be: Unknown Object (Project).
• werner removed a project from T6187: Kleopatra: Import of p12 file fails with "invalid crypto engine": Unknown Object (Project).
• werner removed a project from T6196: Kleopatra: Canceling encrypt operation in the notepad causes a bogus error message: Unknown Object (Project).
• werner changed the status of T6200: gnupg: GPG_ERR_SOURCE_DEFAULT should be defined from Open to Testing.
• werner removed a project from T6201: Kleopatra: Disable unusable actions in certificate details for remote keys: Unknown Object (Project).
• werner removed a project from T6202: Kleopatra: Suppress errors of WKD lookups: Unknown Object (Project).
• werner changed the status of T6204: gpgme:python Fix setup.py, using pkg-config (not deprecated gpg-error-config and gpgme-config) from Open to Testing.
• werner changed the status of T6204: gpgme:python Fix setup.py, using pkg-config (not deprecated gpg-error-config and gpgme-config), a subtask of T5683: Deprecation of gpg-error-config, from Open to Testing.
• werner removed a project from T6090: Kleopatra: "Cancel" in the password dialog of "backup secret keys" has no effect: Unknown Object (Project).
• werner changed the status of T6205: GnuPG: Unknown encryption keys should not result in non-compliant encryption on decryption from Open to Testing.
• werner moved T6205: GnuPG: Unknown encryption keys should not result in non-compliant encryption on decryption from Restricted Project Column to Restricted Project Column on the Restricted Project board.
• werner committed rG05b7e4a405c8: gpg: Don't consider unknown keys as non-compliant while decrypting. (authored by • werner).
gpg: Don't consider unknown keys as non-compliant while decrypting.
Sep 21 2022
Sep 21 2022
• werner triaged T6214: Kleopatra allows to export a subkey which has only a stub. as Normal priority.
• werner committed rGed54fd53d1dc: tools: Need to set the dir for common.conf (authored by • werner).
tools: Need to set the dir for common.conf
Sep 20 2022
Sep 20 2022
No, it does not matter.
Sorry, you need to wait for gnupg 2.3.8. It's next on our shortlist.
Why? One underscrore followed by a lowercase letter is not a reserved symbol. It is common to use this for symbols which are not part of the public API but need to have global linkage. Also not all system have a way to limit the visibility and there we need to use them for internal symbols.
Sep 19 2022
Sep 19 2022
What is a partial CRL; I have never seen that and IIRC the specification for that was not complete.
• werner triaged T6212: The ssh keys are no longer returned in the order from control file after T5996 as Normal priority.
We want to get rid of sshcontrol but we could keep it as an optional configuration to sort keys. I won't say it is a bug, though.
Sep 16 2022
Sep 16 2022
• werner added a comment to T6209: GnuPG unable to interact with any keyserver throwing a "Not enabled" error.
The use of