Maybe related to https://dev.gnupg.org/T7813
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed Advanced Search
Advanced Search
Advanced Search
Oct 23 2025
Oct 23 2025
timegrid moved T7813: GpgOL: Message "Not all attachments can be shown, exceeds maximum size" incorrectly shown from QA to Done on the gpd5x board.
Looks good to me on gpg4win-5.0.0-beta395 @ win11
• ikloecker changed the status of T7870: Kleopatra: Menu item "View" displayed twice from Open to Testing.
This was a regression introduced by my fix to make F5 work again and to ensure that it's displayed in the View menu (which itself was a regression of the menu changes made with T7579: Kleopatra: improve menu items).
timegrid moved T7829: w32: daemon (gpg-agent/keyboxd/dirmngr) startup and connection race when there is a socket file already from QA to Done on the gpd5x board.
Looks good to me on gpg4win-5.0.0-beta395 @ win11 (gpg 2.5.13).
• ikloecker moved T7863: Kleopatra: the certificate list is not refreshed at the end of the deletion of multiple secret keys from Done to WIP on the gpd5x board.
The changes in libkleo and kleopatra are not included in gpg4win-5.0.0-beta395. Maybe the changes in gpg make the issue less likely. This should still be tested with the complete fix.
timegrid moved T7863: Kleopatra: the certificate list is not refreshed at the end of the deletion of multiple secret keys from QA to Done on the gpd5x board.
Looks good to me on gpg4win-5.0.0-beta395 @ win11
timegrid moved T7827: Kleopatra: Add workaround for locking issue on key generation from QA to Done on the gpd5x board.
Looks good to me on gpg4win-5.0.0-beta395 @ win11 (tested with/without keyboxd, 20 keygen rsa3072 each, with/without password)
timegrid moved T7803: GpgOL: Security level icon not updated for encrypted mails when auto preview is disabled from QA to Done on the gpd5x board.
Looks good to me on gpg4win-5.0.0-beta395 @ win11
timegrid moved T7771: GpgOL: not selected signed mail with very long subject causes high CPU load from QA to Done on the gpd5x board.
Looks good to me on gpg4win-5.0.0-beta395 @ win11
timegrid moved T7240: GpgOL: Config dialog not registering as closed from QA to Done on the gpd5x board.
Looks good to me on gpg4win-5.0.0-beta395 @ win11
Oct 22 2025
Oct 22 2025
• ebo moved T7829: w32: daemon (gpg-agent/keyboxd/dirmngr) startup and connection race when there is a socket file already from WIP to QA on the gpd5x board.
• ebo moved T7813: GpgOL: Message "Not all attachments can be shown, exceeds maximum size" incorrectly shown from WIP to QA on the gpd5x board.
• ebo moved T7240: GpgOL: Config dialog not registering as closed from WIP to QA on the gpd5x board.
• ebo moved T7771: GpgOL: not selected signed mail with very long subject causes high CPU load from WIP to QA on the gpd5x board.
• ebo moved T7803: GpgOL: Security level icon not updated for encrypted mails when auto preview is disabled from WIP to QA on the gpd5x board.
• ebo moved T7588: Kleopatra: Several problems with icons in high contrast modes from WIP to QA on the gpd5x board.
• ebo moved T7827: Kleopatra: Add workaround for locking issue on key generation from WIP to QA on the gpd5x board.
• ebo moved T7802: Kleopatra: Remember last used file system locations when saving or opening files from WIP to QA on the gpd5x board.
• ebo moved T7854: NVDA speaks name of list view or tree view two or three times from WIP to QA on the gpd5x board.
• ebo moved T7846: Kleopatra: Wrong focus/tab order in directory services configuration from WIP to QA on the gpd5x board.
• ebo moved T7859: Kleopatra: Make a few lists and tables more accessible from WIP to QA on the gpd5x board.
• ebo moved T7863: Kleopatra: the certificate list is not refreshed at the end of the deletion of multiple secret keys from WIP to QA on the gpd5x board.
• ebo moved T7862: Kleopatra: No feedback by screen readers if no certificates are found on server lookup from WIP to QA on the gpd5x board.
• ebo moved T7762: Kleopatra: Notepad: close message notification on revert from WIP to QA on the gpd5x board.
• ebo moved T7782: Kleopatra: convert the audit log link to a button from WIP to QA on the gpd5x board.
• ebo moved T7868: Kleopatra: config check box for AllowMarkTrusted not functional from WIP to QA on the gpd5x board.
I'd sad we keep it as it is now (unless we see a regression). The real and only correct solution is the use of a daemon to serialize access.
Still, there is a fundamental problem with keydb locking.
- It only assures no-data-corruption.
- When a process doing write access, another process reading the resource may encounter a problem (inconsistent data read), since data could be changed while accessing.
- Currently, write access may occur with keybox compress, this means that users are not safe to invoke multiple gpg/gpgsm simultaneously (to be sure).
- It would be: only keybox compress when users explicitly ask.
- We could introduce a lock to read access... BUT naively adding a lock (both for read and write or read-multiple-write-one) results possible deadlock in gpgsm
- in gpgsm, gpgsm_walk_cert_chain and gpgsm_validate_chain access the resource of keydb in a way of:
- While it has a handle kh, by find_up routine, it may call keydb_store_cert by callback routine; The callback does write access to the resource opening another handle.
- Currently, it works because of no lock for read access and keydb_store_cert appends data at the end.
- in gpgsm, gpgsm_walk_cert_chain and gpgsm_validate_chain access the resource of keydb in a way of:
- Currently, write access may occur with keybox compress, this means that users are not safe to invoke multiple gpg/gpgsm simultaneously (to be sure).
• ebo moved T7461: Kleopatra: List newly generated OpenPGP certificate with validation from WIP to Done on the gpd5x board.
• gniibe changed the status of T7855: keybox/keydb locking issue in 2.6 , a subtask of T7827: Kleopatra: Add workaround for locking issue on key generation, from Open to Testing.
All changes in gniibe/t7855 are pushed into master.
Oct 21 2025
Oct 21 2025
• ikloecker moved T7868: Kleopatra: config check box for AllowMarkTrusted not functional from Backlog to WIP on the vsd34 board.
Backported for VSD 3.4 since this is clearly a regression introduced with T7350 and the fix is zero risk.
• ikloecker added a project to T7868: Kleopatra: config check box for AllowMarkTrusted not functional : vsd34.
• ikloecker changed the status of T7868: Kleopatra: config check box for AllowMarkTrusted not functional from Open to Testing.
Fixed. The check box has been removed from the "S/MIME Validation" tab.
• ikloecker changed the status of T7863: Kleopatra: the certificate list is not refreshed at the end of the deletion of multiple secret keys from Open to Testing.
Fixed and backported for VSD 3.4
• ebo moved T4785: GpgOL: "You have changed a copy of this Element" message in Outlook for S/MIME mails from Backlog to Triage on the gpgol board.
• gniibe changed the status of T7829: w32: daemon (gpg-agent/keyboxd/dirmngr) startup and connection race when there is a socket file already, a subtask of T7658: Okular: Dirmngr startup timeout on signature validation, from Open to Testing.
• gniibe changed the status of T7829: w32: daemon (gpg-agent/keyboxd/dirmngr) startup and connection race when there is a socket file already from Open to Testing.
• gniibe changed the status of T7805: Permission denied on batch deletion of mixed (openpgp+smime) certs, a subtask of T7855: keybox/keydb locking issue in 2.6 , from Open to Testing.
Oct 20 2025
Oct 20 2025
• ebo raised the priority of T7701: Draft: Kleopatra: Add information for verification results from Normal to High.
• alexk renamed T7831: Kleopatra: Configuration of the initial status of all checkboxes in the sign/encrypt dialog from Kleopatra: Configuration of the "start status" of all checkboxes in the sign/encrypt dialog to Kleopatra: Configuration of the initial status of all checkboxes in the sign/encrypt dialog.
• ebo raised the priority of T7790: Kleopatra: "no trusted certification" should have precedence over "expired" in signature verification from Normal to High.
• ebo moved T6568: Kleopatra: make table column headings accessible from Backlog to WIP on the gpd5x board.
• ikloecker changed the status of T7762: Kleopatra: Notepad: close message notification on revert from Open to Testing.
I merged Tobias's MR
• ebo moved T7782: Kleopatra: convert the audit log link to a button from Backlog to WIP on the gpd5x board.
• ebo changed the status of T7782: Kleopatra: convert the audit log link to a button from Open to Testing.
• ebo changed the status of T7588: Kleopatra: Several problems with icons in high contrast modes from Open to Testing.
• ebo changed the status of T7588: Kleopatra: Several problems with icons in high contrast modes, a subtask of T6932: Icons, darkmode and stuff, from Open to Testing.
• ebo changed the status of T7334: Kleopatra: ADSK shown as "unknown recipient" from Open to Testing.
We need to check what the current status here is. This has been in the 5.0 Betas for a while, so testing with 5.0-Beta369 will work
• ikloecker changed the status of T7862: Kleopatra: No feedback by screen readers if no certificates are found on server lookup from Open to Testing.
Fixed and backported for VSD 3.4
Oct 17 2025
Oct 17 2025
• ebo added a comment to T7863: Kleopatra: the certificate list is not refreshed at the end of the deletion of multiple secret keys .
With a GNUPG-Home on another Partition (on the VMs shared folder with the host) the auto refresh after deletion additionally doesn't work for public keys or S/MIME certificates.
Lastly, pushed a change into gniibe/t7855 branch.
rGf861b2a33f96: gpg,gpgsm: Fix thinko for FP closing under no lock.
Oct 16 2025
Oct 16 2025
• ebo updated the task description for T7863: Kleopatra: the certificate list is not refreshed at the end of the deletion of multiple secret keys .
• ikloecker moved T7862: Kleopatra: No feedback by screen readers if no certificates are found on server lookup from Backlog to WIP on the gpd5x board.
• ikloecker triaged T7862: Kleopatra: No feedback by screen readers if no certificates are found on server lookup as Normal priority.
• ebo moved T7861: GpgOL: Autosecure + autoencryptUntrusted not working as expected in VSD versions from Backlog to Triage on the gpgol board.
• ebo triaged T7861: GpgOL: Autosecure + autoencryptUntrusted not working as expected in VSD versions as Normal priority.
• ikloecker renamed T7816: Kleopatra: Title of Certify dialog is incomplete for email-only user ID from Kleopatra: Title of Certify dialog is incomplete for email-only user ID to Draft: Kleopatra: Title of Certify dialog is incomplete for email-only user ID.
• ikloecker changed the status of T7854: NVDA speaks name of list view or tree view two or three times from Open to Testing.
Fixed and backported for VSD 3.4
• ikloecker moved T7846: Kleopatra: Wrong focus/tab order in directory services configuration from Backlog to WIP on the vsd34 board.
Backported for VSD 3.4
• ikloecker added a project to T7846: Kleopatra: Wrong focus/tab order in directory services configuration: vsd34.
• ikloecker changed the status of T7850: NVDA reads "X.509 Directory Services" twice from Open to Testing.
Backported for VSD 3.4
• ikloecker moved T7859: Kleopatra: Make a few lists and tables more accessible from Backlog to WIP on the vsd34 board.
• ikloecker moved T7859: Kleopatra: Make a few lists and tables more accessible from Backlog to WIP on the gpd5x board.
Backported for VSD 3.4
• ikloecker changed the status of T7859: Kleopatra: Make a few lists and tables more accessible from Open to Testing.
Fixed. When one of the lists/tables gets focus then NVDA should speak something like "<name of list> list" or "<name of table> tree view".
I pushed further changes into gniibe/t7855 branch.
rG2fe62809014e: gpg,gpgsm: Serialize write access to keybox/keyring to protect.
Oct 15 2025
Oct 15 2025
• ikloecker triaged T7859: Kleopatra: Make a few lists and tables more accessible as Normal priority.
• ikloecker renamed T6094: Kleopatra: Make prefilled name and email address for new certificates configurable from Draft: Kleopatra: Make prefilled name and email address for new certificates configurable to Kleopatra: Make prefilled name and email address for new certificates configurable.
• ikloecker added a comment to T6094: Kleopatra: Make prefilled name and email address for new certificates configurable.
Note: QGpgMEWKDLookupJob uses an Assuan transaction with dirmngr.
• ebo renamed T7831: Kleopatra: Configuration of the initial status of all checkboxes in the sign/encrypt dialog from Draft: Kleopatra: Configuration of the "start status" of all checkboxes in the sign/encrypt dialog to Kleopatra: Configuration of the "start status" of all checkboxes in the sign/encrypt dialog.
• ebo added a comment to T7831: Kleopatra: Configuration of the initial status of all checkboxes in the sign/encrypt dialog.
We had considered and rejected adding below the above configuration a marked section (like e.g. with a frame) showing the options in the order they appear in the sign/encrypt window:
- Sign as
- Encrypt for me
- Encrypt for others
- Encrypt with password
- Encrypt / Sign each file separately
For remaining changes in 2.2, I pushed changes into gniibe/t7855 branch.
rGbd65b06b74c2: gpg,gpgsm: Don't lock recursively when KEEP_LOCK is enabled.
rG423fd047da87: kbx,gpg,gpgsm: Add FP-close method for keydb to close before unlock.
rG966258ac5f99: gpgsm: Fix delete and store certificate locking glitches.
I pushed changes into gniibe/t7855 for compressing the keybox.
rG8cc2a0e0ffee: gpg: Minor clean up for keydb_lock API.
rGe4d3c3aa2220: kbx,gpg,gpgsm: Introduce keybox_compress_when_no_other_users.
rG3e441d5b299f: kbx,gpg,gpgsm: More changes for compressing the keybox.
Oct 14 2025
Oct 14 2025
Then, we need to integrate following commits of 2.2 into gniibe/t7855 branch:
rG43fe9073aa81: gpg,gpgsm: Tweak the locking of the pubring.kbx
rG8491aca73cff: gpg: Revert the always locking introduced with 43fe9073aa
rGad4a5117ab1c: gpgsm: Properly release the lock when compressing a pubring.
rG7962eca3a023: gpgsm: Change delete and store certificate locking glitches.
rG22f9c4a3b3c1: gpg: Release lock after close also in the compress code path.
I created gniibe/t7855 branch for this issue.
To start with, I forward-port/cherry-pick 2.2 commits to the branch:
rG39430d9f78dc: build,common,g13,sm,tools: Require GpgRT 1.56.
rGe71aca2a628d: common: New function gnupg_remove_ext.
rGe38c5f7d5873: w32:common: Take care of possible race on startup under Windows.
rG7bfd37e305c0: common,w32: Always use share mode readwrite for the keybox.
Oct 13 2025
Oct 13 2025
Oct 10 2025
Oct 10 2025