Thanks for the patch but I think it is better to fix this in yat2m. I created a new tag for bugs related to it.

This is really a minor thing and and it is actually true if you also sign something.

BTW, fingerprints for X.509 are not well defined because you get a different one when changing the *unsigned" attributes. Not a common case but one should be aware of it.

No more octals .-)

In T5444#146395, @werner wrote:

You should anyway use --quick-gen-key.

Gpg4win is a community version and we may or may not apply Authenticode signatures. You can do that yourself, after having checked our OpenPGP release signature. You may however be interested in GnuPG Desktop, which comes with full support and also Authenticode signature.

Yes it does. I even tested it yesterday.

What is FlowCrypt?

Removing egrep from a Unix system will break all kind of stuff. I am not even sure whether old Unices support grep -E.

That error code is actually not an error code but it is the ERROR state from the Kleo SFM. We have seen that yesterday already.

2.2 is end-of-life

This might also be related to rGa7ec3792c5 (cf. T2982)

There is no well defined pripority for the CRL DPs. The code enumarates the DP and tries one after the other until it founds one. If you use --ignore-http_dp http DPs are skipped and with --ignore-ldap-dp LDAP DPs are ignored.

1.53 has been released this morning.

Note that 1.53 was released today which fixes a small regression:

We suggest the use of the keyboxd for a reason. The use of multiple keyrings has always been a problem and has been kept on demand from a couple of people. Eventually things change and for a new installation the use of the keyboxd is the suggested way to run GnuPG. Support for pubring.gpg and even pubring.kbx may eventually be removed - not now or in the next year but it may happen. You have been warned ;-)

We have done all of this and the rest of the work is now in T7593