Page MenuHome GnuPG
Feed Advanced Search

Mon, Sep 15

gniibe updated the task description for T7811: gpgsm: Use KEM interface for decryption.
Mon, Sep 15, 7:21 AM · gnupg26
gniibe updated the task description for T7811: gpgsm: Use KEM interface for decryption.
Mon, Sep 15, 7:20 AM · gnupg26
gniibe lowered the priority of T7811: gpgsm: Use KEM interface for decryption from High to Normal.
Mon, Sep 15, 7:07 AM · gnupg26
gniibe triaged T7811: gpgsm: Use KEM interface for decryption as High priority.
Mon, Sep 15, 7:07 AM · gnupg26

Tue, Sep 9

gniibe claimed T7807: Please allow building pinentry against fltk 1.4.
Tue, Sep 9, 3:53 AM · pinentry, Bug Report

Tue, Sep 2

gniibe committed rG106d73de8685: agent:w32: Fix non-release of MAPSID. (authored by gniibe).
agent:w32: Fix non-release of MAPSID.
Tue, Sep 2, 7:04 AM
gniibe added a comment to T7799: gpg-agent crashes when using putty for ssh connection.

@m.eik Could you please enable debug option for gpg-agent and get the log output for the crash?

Tue, Sep 2, 6:53 AM · gpd5x, gpgagent, gpg4win
gniibe committed rG1b84d649eacf: dirmngr,gpg,scd,sm,tools: Minor fixes for es_free. (authored by gniibe).
dirmngr,gpg,scd,sm,tools: Minor fixes for es_free.
Tue, Sep 2, 6:35 AM
gniibe committed rGaba5c8f0cc6c: agent: Minor clean-up for use of es_free. (authored by gniibe).
agent: Minor clean-up for use of es_free.
Tue, Sep 2, 4:46 AM
gniibe claimed T7799: gpg-agent crashes when using putty for ssh connection.
Tue, Sep 2, 2:22 AM · gpd5x, gpgagent, gpg4win

Mon, Sep 1

gniibe added a comment to T7759: Kleopatra: Notepad encryption with S/MIME fails.

I fixed the problem (which I identified above) in gniibe/t7759 branch. There might be other causes/problems for the particular symptom, so, I don't know the fix resolves the symptom or not.

Mon, Sep 1, 4:16 AM · gnupg26, gpgme, kleopatra, gpd5x

Wed, Aug 27

gniibe claimed T7791: encryption fails with "Invalid Length" error when using Kyber1024 keys.

Thank you for the report.

Wed, Aug 27, 8:10 AM · PQC, gnupg26, Bug Report
gniibe added a comment to T7759: Kleopatra: Notepad encryption with S/MIME fails.

Similar situation could happen with gpgsm + gpg-agent, when gpg-agent is invoked by gpgsm.
(1) No gpg-agent.
(2) In gpgme, by engine-gpgsm, gpgsm is invoked with --logger.
(3) In gpgsm_keylist, it makes sure gpg-agent is available by GETINFO agent-check, using gpgsm_assuan_simple_command.
(4) In the server side, it tries to connect gpg-agent, invokes gpg-agent, and connect to the agent again.
(5) On Windows, it may takes time to invoke gpg-agent. And it may try to connect multiple times. Each trial may generate debug messages.
(6) When it takes too much time, the debug messages are too much. It may fill the pipe.
(7) And it blocks at log_string in my_libassuan_log_handler.
(8) ... it hangs.

Wed, Aug 27, 6:53 AM · gnupg26, gpgme, kleopatra, gpd5x
gniibe added a comment to T7759: Kleopatra: Notepad encryption with S/MIME fails.

Hypothetical scenario (gpgsm --server + dirmngr):
(0) It may hang when much debug messages are generated by libassuan to the pipe of --logger (diag_cb).
(1) In gpgme, by engine-gpgsm, gpgsm is invoked with --logger.
(2) If it's the case of standard gpgme interactions which uses gpgsm_io_event, no problem. Because the data on diag_cb is consumed well.
(3) In case of gpgsm_encrypt (or other commands), it uses gpgsm_assuan_simple_command which does not consume the data on diag_cb pipe at all.
(4) In particular, in set_recipients, gpgsm_assuan_simple_command is called by the number of recipients.
(5) IIUC, in the server side, dirmngr is used by the call chain of:

  • gpgsm_add_to_certlist
  • gpgsm_validate_chain...
  • gpgsm_dirmngr_isvalid

(6) In gpgsm_dirmngr_isvalid function, libassuan is used as client side, it generates debug messages.
(7) When there are many recipients, the debug message may be big enough to fill the pipe.
(8) When pipe is filled, it blocks by log_string in my_libassuan_log_handler, waiting the data in pipe is consumed.
(9) ... it hangs.

Wed, Aug 27, 5:12 AM · gnupg26, gpgme, kleopatra, gpd5x