You forget that multiple OpenPGP smart cards might be plugged in. Although it's probably not likely that multiple empty cards are plugged in. (For comparison: The subkey action to move a key to a card allows the user to choose a suitable slot. I think it also offers non-empty slots, but I agree that for the "simple copy" it's better to offer only empty cards to prevent a disaster.)
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Apr 17 2024
Apr 17 2024
• werner lowered the priority of T6853: GpgTar: S/MIME decryption fails with input/output error from High to Normal.
Nobody uses gpgtar for S/MIME
• TobiasFella committed rKLEOPATRAc946372dd2c0: Don't show disabled certificates in signencryptwidget (authored by • TobiasFella).
Don't show disabled certificates in signencryptwidget
• ebo moved T6945: Addition to the Kleopatra Help Menu in VSD from Backlog to vsd-3.2.0 on the vsd32 board.
• TobiasFella committed rKLEOPATRA579a73ee616e: Show certificate status in CertificateDetailsDialog (authored by • TobiasFella).
Show certificate status in CertificateDetailsDialog
• TobiasFella committed rLIBKLEOd4f2dcec5b55: Fix showing keys as disabled / revoked / invalid (authored by • TobiasFella).
Fix showing keys as disabled / revoked / invalid
To clarify: this works for "Restart background processes" only, as was the aim of this ticket
Of course, it should be possible to toggle "disabled" in Kleopatra.
A (context) menu entry "disable certificate" (or "enable certificate") should be sufficient.
gpgme has a disabled flag (only set on the primary key) and taken from the --wwth-colon listing where it is the 'D' in the usage.
• werner committed rG2a0a706eb213: gpg: Mark disabled keys and add show-ownertrust list option. (authored by • werner).
gpg: Mark disabled keys and add show-ownertrust list option.
gpg: New command --quick-set-ownertrust.
• TobiasFella committed rKLEOPATRAf05470c65088: Add action for refreshing (multiple) keys to key list (authored by • TobiasFella).
Add action for refreshing (multiple) keys to key list
gpg: New command --quick-set-ownertrust.
• werner committed rG7d6ad2866722: gpg: Mark disabled keys and add show-ownertrust list option. (authored by • werner).
gpg: Mark disabled keys and add show-ownertrust list option.
• alexk added a parent task for T7091: Kleopatra: Simple copy key to card: T6785: Kleopatra: Improvements related to smart cards.
forgot to keep it open for test with gpg 2.4 branch versions...
• ebo moved T6827: GpgOL: Check S/MIME draft encrypt and use GPGME_ENCRYPT_ALWAYS_TRUST from QA to vsd-3.2.0 on the vsd32 board.
• ebo moved T7021: Kleopatra: restart gpg-agent after stopping it from WiP to vsd-3.2.0 on the vsd32 board.
restarting gpg-agent works in release version 3.2.2
Don't set a minimum kldap version
Don't overload qhash function
CarlSchwan committed rOJ1147c202f432: Use QString::arg with multiple arguments (authored by CarlSchwan).
Use QString::arg with multiple arguments
Remove unused variables
• ikloecker committed rKLEOPATRAf3513030965f: Show the About dialog ourselves (authored by • ikloecker).
Show the About dialog ourselves
• ikloecker moved T7090: Kleopatra: In the About dialog, the versions info for gpg is sometimes missing from Restricted Project Column to Restricted Project Column on the Restricted Project board.
• ebo triaged T7090: Kleopatra: In the About dialog, the versions info for gpg is sometimes missing as Normal priority.
GIT_SILENT: prepare 24.05 beta
GIT_SILENT: prepare 24.05 beta
l10n daemon script <scripty@kde.org> committed rMTP2d1fb098d130: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
l10n daemon script <scripty@kde.org> committed rLIBKLEO8ae046e7ec24: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
l10n daemon script <scripty@kde.org> committed rKLEOPATRA50f2dc555843: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
l10n daemon script <scripty@kde.org> committed rMTP35e6a995fe95: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
l10n daemon script <scripty@kde.org> committed rLIBKLEOb34d4f8488d2: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
l10n daemon script <scripty@kde.org> committed rKLEOPATRA1d8c15d59379: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
• gniibe committed rC003367b91272: cipher: Add Classic McEliece mceliece6688128f. (authored by jas).
cipher: Add Classic McEliece mceliece6688128f.
Apr 16 2024
Apr 16 2024
• werner committed rG2a71c3cf97c4: gpg: Make --with-subkey-fingerprint the default. (authored by • werner).
gpg: Make --with-subkey-fingerprint the default.
swdb: GnuPG 2.2.43
Fix some clazy issue
CarlSchwan committed rOJ983a0d01b6cb: Add some security observation about the communication (authored by CarlSchwan).
Add some security observation about the communication
CarlSchwan committed rOJf6c852258d7a: Remove not needed authentification between client and server (authored by CarlSchwan).
Remove not needed authentification between client and server
Add logging categories for server
Use CORS headers
CarlSchwan committed rOJ8e0d231b0b0c: Workaround CORS not being supported by WebSocket (authored by CarlSchwan).
Workaround CORS not being supported by WebSocket
Encrypt drafts
CarlSchwan committed rOJ0b7eeb40c64b: Mention in the UI that the draft feature encrypt the draft (authored by CarlSchwan).
Mention in the UI that the draft feature encrypt the draft
Add code compatibility with Qt 6.7
CarlSchwan committed rOJ3a1da7c46963: Unify setMessageCryptoFormat and setCryptoMessageFormat (authored by CarlSchwan).
Unify setMessageCryptoFormat and setCryptoMessageFormat
Note for devs: In most places we can probably use Key::isBad() which excludes all kinds of keys that are not valid for use (revoked, expired, disabled, ...).
When working on filters the "disabled" flag should be considered as well, see T7089.
• werner committed rWdc46e4849086: Include authenticode-sign.sh into the tarball. (authored by • werner).
Include authenticode-sign.sh into the tarball.
• werner committed rW5b13b943bac4: Allow to disable signing with authenticode-sign.sh. (authored by • werner).
Allow to disable signing with authenticode-sign.sh.
Post release updates
Release 3.2.2
gpgme-t6688.txt.gz33 KBDownload
This is the full GPGME log from how I can reproduce this now on windows with a KF6 build. If I repeat it the last lines look similar before the assert.• ebo triaged T7088: Do not allow local installation (without administrator rights) for VSD as Normal priority.
matheusmoreira added a comment to T5783: All s2k hardenings silently ignored when exporting private keys.
What is the current status of this issue?
Update Kleopatra and Libkleo
Update GnuPG for v3 to 2.2.43
Post release updates
Release 2.2.43
• ikloecker added a comment to T7078: Kleopatra: Add automatic offer of revocation certificate export to the revocation process.
+1 for Tobias proposal
• TobiasFella changed the status of T6749: Kleopatra: show only one error/information window for a certificate import from Open to Testing.
• TobiasFella changed the status of T7020: Kleopatra: add "Smart Card" tab to certificate detail view from Open to Testing.
• TobiasFella changed the status of T7020: Kleopatra: add "Smart Card" tab to certificate detail view, a subtask of T6785: Kleopatra: Improvements related to smart cards, from Open to Testing.
• TobiasFella committed rKLEOPATRA54fa5efb5e21: Port paperkey command away from GnuPGProcessCommand (authored by • TobiasFella).
Port paperkey command away from GnuPGProcessCommand
• TobiasFella committed rKLEOPATRA50667eee4d8d: Show only one dialog when failing to import keys (authored by • TobiasFella).
Show only one dialog when failing to import keys
• TobiasFella added a comment to T7078: Kleopatra: Add automatic offer of revocation certificate export to the revocation process.
I'd propose that we could:
- Always export the certificate and tell the user in the success dialog
- Have an extra button in the success dialog allowing the user to upload the certificate.
• aheinecke closed T6884: Okular: Qt6 version by end of february, a subtask of T6872: Prepare transition to Qt 6/KF6, as Resolved.
• aheinecke lowered the priority of T7086: Kleopatra: wrong protocol certificates not deselected after protocoll switch in notepad from Normal to Low.
• aheinecke triaged T7086: Kleopatra: wrong protocol certificates not deselected after protocoll switch in notepad as Normal priority.
No, if you then find out that you cant reach anyone in the protocol you should be able to get back.
• TobiasFella committed rKLEOPATRAc3548fcb90c5: Don't use Checkboxes to configure signing and encryption in SignEncryptWidget (authored by • TobiasFella).
Don't use Checkboxes to configure signing and encryption in SignEncryptWidget
Yes I have pcsc-shared in my scdaemon.conf.
I've just tried removing both pcsc-shared and disable-application piv and PIN caching worked as expected.
Are you using PC/SC shared mode? If so, it may be the case of T7041.
• gniibe committed rCeec1a576dbd0: cipher: Fix copyright notices for Kyber implementation. (authored by • gniibe).
cipher: Fix copyright notices for Kyber implementation.
l10n daemon script <scripty@kde.org> committed rMTPd9678bab4d78: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
l10n daemon script <scripty@kde.org> committed rKLEOPATRA10c52e1edf84: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
Apr 15 2024
Apr 15 2024
• werner edited projects for T5436: gpg-agent 2.3.1: PIN caching not working for decrypt operations, added: gnupg24; removed gnupg (gpg23).
I just wanted to report that I'm having this issue on Fedora 39, with GnuPG version 2.4.4.
I'm being asked for the PIN for every operation (Sign, Decrypt, Authenticate) I'm having this issue on 2 different laptops using YubiKey 5C NFC and YubiKey 5C Nano (Firmware version: 5.4.3).
I tried disabling PIV (disable-application piv) and then PIN caching started working again, so I just wanted to report this as it's marked as resolved.
Here comes a new test key along with its 3 secret parts (one for the primary and two for the composite Kyber subkey).
• ikloecker moved T7021: Kleopatra: restart gpg-agent after stopping it from Backlog to WiP on the vsd32 board.
Backported to VSD 3.2
• ikloecker committed rKLEOPATRA746d1700d83f: Restart gpg-agent instead of just shutting down the GnuPG daemons (authored by • ikloecker).
Restart gpg-agent instead of just shutting down the GnuPG daemons
• ikloecker committed rLIBKLEOf585cd971d35: Restart gpg-agent instead of just shutting down all GnuPG daemons (authored by • ikloecker).
Restart gpg-agent instead of just shutting down all GnuPG daemons
More comments
• ebo updated subscribers of T7086: Kleopatra: wrong protocol certificates not deselected after protocoll switch in notepad.
I think it would be the most logical solution to always clear the recipients after a switch of protocol. No restoration for other recipients necessary from my point of view.
• ikloecker added a comment to T7086: Kleopatra: wrong protocol certificates not deselected after protocoll switch in notepad.
So you want the other recipients to be cleared? What shall happen if the user switches the protocol again? Shall the previously selected other recipients be restored?