I'd sad we keep it as it is now (unless we see a regression). The real and only correct solution is the use of a daemon to serialize access.
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Today
Today
• werner committed rGdb9705ef594d: gpg: Avoid potential downgrade to SHA1 in 3rd party key signatures. (authored by • werner).
gpg: Avoid potential downgrade to SHA1 in 3rd party key signatures.
• werner committed rG8abc320f2a75: gpg: Error out on unverified output for non-detached signatures. (authored by • werner).
gpg: Error out on unverified output for non-detached signatures.
Update NEWS
• ebo moved T7223: GpgOL: Handle Outlook settings which allow users to disable automatically marking mails as read from Backlog to Done on the gpgol board.
Still, there is a fundamental problem with keydb locking.
- It only assures no-data-corruption.
- When a process doing write access, another process reading the resource may encounter a problem (inconsistent data read), since data could be changed while accessing.
- Currently, write access may occur with keybox compress, this means that users are not safe to invoke multiple gpg/gpgsm simultaneously (to be sure).
- It would be: only keybox compress when users explicitly ask.
- We could introduce a lock to read access... BUT naively adding a lock (both for read and write or read-multiple-write-one) results possible deadlock in gpgsm
- in gpgsm, gpgsm_walk_cert_chain and gpgsm_validate_chain access the resource of keydb in a way of:
- While it has a handle kh, by find_up routine, it may call keydb_store_cert by callback routine; The callback does write access to the resource opening another handle.
- Currently, it works because of no lock for read access and keydb_store_cert appends data at the end.
- in gpgsm, gpgsm_walk_cert_chain and gpgsm_validate_chain access the resource of keydb in a way of:
- Currently, write access may occur with keybox compress, this means that users are not safe to invoke multiple gpg/gpgsm simultaneously (to be sure).
• ebo moved T7461: Kleopatra: List newly generated OpenPGP certificate with validation from WIP to Done on the gpd5x board.
po: Update Japanese Translation.
• gniibe committed rG4a2dda2002c4: kbx,gpg,gpgsm: Add FP-close method for keydb to close before unlock. (authored by • gniibe).
kbx,gpg,gpgsm: Add FP-close method for keydb to close before unlock.
• gniibe committed rG3db6f9f080bc: gpgsm: Fix delete and store certificate locking glitches. (authored by • gniibe).
gpgsm: Fix delete and store certificate locking glitches.
• gniibe committed rG2d9e1295a1f4: gpg,gpgsm: Serialize write access to keybox/keyring to protect. (authored by • gniibe).
gpg,gpgsm: Serialize write access to keybox/keyring to protect.
• gniibe committed rGef42a1e218ce: gpg,gpgsm: No more internal-lock when KEEP_LOCK is enabled. (authored by • gniibe).
gpg,gpgsm: No more internal-lock when KEEP_LOCK is enabled.
• gniibe committed rGa0beed35d6c6: kbx,gpg,gpgsm: Introduce keybox_compress_when_no_other_users. (authored by • gniibe).
kbx,gpg,gpgsm: Introduce keybox_compress_when_no_other_users.
• gniibe changed the status of T7855: keybox/keydb locking issue in 2.6 , a subtask of T2196: keydb locking can result in deadlock in 2.2, from Open to Testing.
• gniibe changed the status of T7855: keybox/keydb locking issue in 2.6 , a subtask of T7827: Kleopatra: Add workaround for locking issue on key generation, from Open to Testing.
All changes in gniibe/t7855 are pushed into master.
l10n daemon script <scripty@kde.org> committed rKLEOPATRA36f59b82e49c: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
Yesterday
Yesterday
• ikloecker committed rKLEOPATRA6bfc490bbded: Don't process the docs on this old branch (authored by • ikloecker).
Don't process the docs on this old branch
• ikloecker moved T7868: Kleopatra: config check box for AllowMarkTrusted not functional from Backlog to WIP on the vsd34 board.
Backported for VSD 3.4 since this is clearly a regression introduced with T7350 and the fix is zero risk.
• ikloecker committed rKLEOPATRA867352e0e800: Remove "Allow to mark root certificates as trusted" check box (authored by • ikloecker).
Remove "Allow to mark root certificates as trusted" check box
• ikloecker added a project to T7868: Kleopatra: config check box for AllowMarkTrusted not functional : vsd34.
• ikloecker changed the status of T7868: Kleopatra: config check box for AllowMarkTrusted not functional from Open to Testing.
Fixed. The check box has been removed from the "S/MIME Validation" tab.
• ikloecker committed rKLEOPATRAea04de31485c: Remove "Allow to mark root certificates as trusted" check box (authored by • ikloecker).
Remove "Allow to mark root certificates as trusted" check box
• ikloecker changed the status of T7863: Kleopatra: the certificate list is not refreshed at the end of the deletion of multiple secret keys from Open to Testing.
Fixed and backported for VSD 3.4
• ikloecker committed rKLEOPATRAf155859bbb4d: Fix missing update of certificate list after deleting keys (authored by • ikloecker).
Fix missing update of certificate list after deleting keys
m.eik triaged T7867: split current config dialog into first-time wizard and config editor as Normal priority.
• ikloecker committed rLIBKLEO7ad4536e0e16: Notify users of KeyCache when keys are removed (authored by • ikloecker).
Notify users of KeyCache when keys are removed
Fix config page order
• ebo moved T4785: GpgOL: "You have changed a copy of this Element" message in Outlook for S/MIME mails from Backlog to Triage on the gpgol board.
Another Kleopatra update
• ikloecker committed rKLEOPATRAaed06faef186: Fix action to reload certificate list (authored by • ikloecker).
Fix action to reload certificate list
That might be related to T2196 which has been hopefully fixed in 2.2.50 and also in the next 2.6. Closing this task.
That might be related to T2196 which has been hopefully fixed in 2.2.50 and also in the next 2.6. Closing this task.
• werner committed rW7a17bd0d39b3: Update kleo, libkleo, gpg4win-tools, and gpgoljs (authored by • werner).
Update kleo, libkleo, gpg4win-tools, and gpgoljs
Might there be a relation to T7842? But I would have thought that then all signed messages would be unaffected.
I applied it to the 2.4 branch but please do not continue to translate for 2.4. 2.6 (master) is the new target.
po: Update German translation
nl: Update Dutch translation
Revert "msi: Install versioninfo.txt"
• werner added a reverting change for rWe71929bce8ef: msi: Install versioninfo.txt: rW8a7287634530: Revert "msi: Install versioninfo.txt".
• werner changed the status of T7866: Allow separate LDAP keyserver for uploading from Open to Testing.
Implemented but not tested at all.
• werner committed rG31de5d0d8cd5: dirmngr: New LDAP keyserver flag "upload" (authored by • werner).
dirmngr: New LDAP keyserver flag "upload"
• gniibe changed the status of T7829: w32: daemon (gpg-agent/keyboxd/dirmngr) startup and connection race when there is a socket file already, a subtask of T7658: Okular: Dirmngr startup timeout on signature validation, from Open to Testing.
• gniibe changed the status of T7829: w32: daemon (gpg-agent/keyboxd/dirmngr) startup and connection race when there is a socket file already from Open to Testing.
• werner committed rG2b54dd035a32: w32: When deleting a private key retry up to 400ms. (authored by • werner).
w32: When deleting a private key retry up to 400ms.
• werner committed rGd61546521b71: common: Reformat some comments in iobuf.c (authored by • werner).
common: Reformat some comments in iobuf.c
GIT_SILENT: increase KF min version
mlaurent committed rLIBKLEO4cb899e9bd0a: GIT_SILENT: increase KF min version (authored by mlaurent).
GIT_SILENT: increase KF min version
• gniibe changed the status of T7805: Permission denied on batch deletion of mixed (openpgp+smime) certs from Open to Testing.
This issue should be fixed in 2.6, too.
gpg: Minor clean up for keydb_lock API.
• gniibe committed rG9fd630fb23b7: common,w32: Always use share mode readwrite for the keybox. (authored by • werner).
common,w32: Always use share mode readwrite for the keybox.
• gniibe committed rG39cc15029017: build,common,g13,sm,tools: Require GpgRT 1.56. (authored by • gniibe).
build,common,g13,sm,tools: Require GpgRT 1.56.
common: New function gnupg_remove_ext.
• gniibe changed the status of T7805: Permission denied on batch deletion of mixed (openpgp+smime) certs, a subtask of T7855: keybox/keydb locking issue in 2.6 , from Open to Testing.
• gniibe changed the status of T7138: Windows (Semi-hosted environment): filename and network access, a subtask of T6508: Port GnuPG to 64-bit Windows, from Open to Testing.
• gniibe changed the status of T7138: Windows (Semi-hosted environment): filename and network access from Open to Testing.
• gniibe committed rG61ff3759e827: common,dirmngr:w32: Fix for semi-hosted environment. (authored by • gniibe).
common,dirmngr:w32: Fix for semi-hosted environment.
Pushed the change to gnupg master: rG61ff3759e827: common,dirmngr:w32: Fix for semi-hosted environment.
In libgpg-error, I pushed thread-safe version : rE0313b660f8bd: w32: Don't convert slash->backslash when it's under Wine.
I'm going to push similar code to gnupg master.
Mon, Oct 20
Mon, Oct 20
• ebo raised the priority of T7701: Draft: Kleopatra: Add information for verification results from Normal to High.
• alexk renamed T7831: Kleopatra: Configuration of the initial status of all checkboxes in the sign/encrypt dialog from Kleopatra: Configuration of the "start status" of all checkboxes in the sign/encrypt dialog to Kleopatra: Configuration of the initial status of all checkboxes in the sign/encrypt dialog.
• ebo raised the priority of T7790: Kleopatra: "no trusted certification" should have precedence over "expired" in signature verification from Normal to High.
svuorela committed rOJb016c75afd16: Split the ui file into the 4 pages it consists of (authored by svuorela).
Split the ui file into the 4 pages it consists of
svuorela committed rOJ1a4e22b62fc8: Round trip ui-file with designer. No expected changes. (authored by svuorela).
Round trip ui-file with designer. No expected changes.
• ebo moved T6568: Kleopatra: make table column headings accessible from Backlog to WIP on the gpd5x board.
• ikloecker changed the status of T7762: Kleopatra: Notepad: close message notification on revert, a subtask of T7412: Notepad improvements, from Open to Testing.
• ikloecker changed the status of T7762: Kleopatra: Notepad: close message notification on revert from Open to Testing.
I merged Tobias's MR
• ikloecker committed rWa7e0f7c1313d: qtbase: Adapt patch for CVE-2025-5455 to Qt 6.7 (authored by • ikloecker).
qtbase: Adapt patch for CVE-2025-5455 to Qt 6.7
• ebo moved T7782: Kleopatra: convert the audit log link to a button from Backlog to WIP on the gpd5x board.
• ebo changed the status of T7782: Kleopatra: convert the audit log link to a button from Open to Testing.
• ebo changed the status of T7588: Kleopatra: Several problems with icons in high contrast modes from Open to Testing.
• ebo changed the status of T7588: Kleopatra: Several problems with icons in high contrast modes, a subtask of T6932: Icons, darkmode and stuff, from Open to Testing.
• ikloecker committed rKLEOPATRA9682c5ec2ae0: Disable base widget while overlay is shown (authored by • ikloecker).
Disable base widget while overlay is shown
• ebo changed the status of T7334: Kleopatra: ADSK shown as "unknown recipient" from Open to Testing.
We need to check what the current status here is. This has been in the 5.0 Betas for a while, so testing with 5.0-Beta369 will work
Update gpgme-2.0.1 checksum
msi: Install versioninfo.txt
• ikloecker changed the status of T7862: Kleopatra: No feedback by screen readers if no certificates are found on server lookup from Open to Testing.
Fixed and backported for VSD 3.4
• ikloecker committed rKLEOPATRA7986094cb88d: Move focus from base widget to text overlay when overlay is shown (authored by • ikloecker).
Move focus from base widget to text overlay when overlay is shown
• ikloecker committed rKLEOPATRA1094d0978a0f: Make backported focus-moving change work as intended (authored by • ikloecker).
Make backported focus-moving change work as intended