Page MenuHome GnuPG
Feed Advanced Search

Jun 10 2021

gniibe added a comment to T5477: Translation Typo and I Want To Create PR.

Considering the history of the translation, I concluded that it should be:
把密钥导出到一个公钥服务器上
(the typo was G-A where B-A was expected.)

Jun 10 2021, 1:08 PM · gnupg, i18n, Bug Report
gniibe triaged T5477: Translation Typo and I Want To Create PR as Normal priority.
Jun 10 2021, 3:37 AM · gnupg, i18n, Bug Report
gniibe added a comment to T5477: Translation Typo and I Want To Create PR.

@guzhongren
This is not GitHub, so, if you want, you need to learn how to submit your change in the form of patch, by using git.

Jun 10 2021, 3:37 AM · gnupg, i18n, Bug Report

Jun 9 2021

werner assigned T5477: Translation Typo and I Want To Create PR to gniibe.

Clone and checkout the branch as usual with Git. There is no web editor etc like you might know from github. For your request we need to wait for someone to check your request.

Jun 9 2021, 7:31 PM · gnupg, i18n, Bug Report
werner closed T5285: GnuPG: 8Bit filenames can no longer be provided on the command line as Resolved.

Now also fixed for 2.2.28

Jun 9 2021, 10:42 AM · gnupg
werner added a comment to T5122: Importing secret key with wrong passphrase may result GPG_ERR_MISSING_VALUE (should be able to be tried 3 times).

Better don't backport this.

Jun 9 2021, 10:37 AM · gnupg
gniibe changed the status of T5122: Importing secret key with wrong passphrase may result GPG_ERR_MISSING_VALUE (should be able to be tried 3 times) from Open to Testing.

Fixed.
I'm not sure if it's worth backporting this to 2.2.

Jun 9 2021, 4:00 AM · gnupg
gniibe added a comment to T5122: Importing secret key with wrong passphrase may result GPG_ERR_MISSING_VALUE (should be able to be tried 3 times).

I encountered this bug last year, but I realized that it's hard to make a reproducible case.

Jun 9 2021, 3:53 AM · gnupg
gniibe renamed T5122: Importing secret key with wrong passphrase may result GPG_ERR_MISSING_VALUE (should be able to be tried 3 times) from Importing secret key with wrong passphrase results GPG_ERR_MISSING_VALUE (should be able to be tried 3 times) to Importing secret key with wrong passphrase may result GPG_ERR_MISSING_VALUE (should be able to be tried 3 times).
Jun 9 2021, 3:38 AM · gnupg
gniibe updated the task description for T5122: Importing secret key with wrong passphrase may result GPG_ERR_MISSING_VALUE (should be able to be tried 3 times).
Jun 9 2021, 3:36 AM · gnupg

Jun 7 2021

gniibe added a comment to T5442: Serial number detection of Yubikey 5 (Yubikey 5 doesn't work after updating to GnuPG 2.3.1).

In your log, it says:

usb_claim_interface failed: -3
Jun 7 2021, 4:46 AM · gnupg (gpg23), yubikey
gniibe added a comment to T5442: Serial number detection of Yubikey 5 (Yubikey 5 doesn't work after updating to GnuPG 2.3.1).

Sorry, I was wrong.

Jun 7 2021, 4:43 AM · gnupg (gpg23), yubikey

Jun 4 2021

werner added a comment to T5442: Serial number detection of Yubikey 5 (Yubikey 5 doesn't work after updating to GnuPG 2.3.1).

I need to see how we can pass the check permission notice up to gpg. This is a too common problem and thus serves some special treatment.

Jun 4 2021, 12:22 PM · gnupg (gpg23), yubikey
Suertzz added a comment to T5442: Serial number detection of Yubikey 5 (Yubikey 5 doesn't work after updating to GnuPG 2.3.1).

GPG Version :

Jun 4 2021, 11:58 AM · gnupg (gpg23), yubikey
Suertzz added a comment to T5442: Serial number detection of Yubikey 5 (Yubikey 5 doesn't work after updating to GnuPG 2.3.1).

I see your situation

Could you please help me to analyze what's going on?
Please add following lines to your scdaemon.conf to see CCID driver's debug output:

debug-ccid-driver
verbose
verbose
verbose

And share the debug output.

Jun 4 2021, 2:08 AM · gnupg (gpg23), yubikey
gniibe added a comment to T5442: Serial number detection of Yubikey 5 (Yubikey 5 doesn't work after updating to GnuPG 2.3.1).

Ah, I think that your problem was fixed in rG53bdc6288f9b: scd: Recover the partial match for PORTSTR for PC/SC. (to be 2.3.2).

Jun 4 2021, 2:02 AM · gnupg (gpg23), yubikey
gniibe triaged T5442: Serial number detection of Yubikey 5 (Yubikey 5 doesn't work after updating to GnuPG 2.3.1) as High priority.
Jun 4 2021, 1:58 AM · gnupg (gpg23), yubikey
gniibe claimed T5442: Serial number detection of Yubikey 5 (Yubikey 5 doesn't work after updating to GnuPG 2.3.1).
Jun 4 2021, 1:57 AM · gnupg (gpg23), yubikey
gniibe reopened T5442: Serial number detection of Yubikey 5 (Yubikey 5 doesn't work after updating to GnuPG 2.3.1) as "Open".

I see your situation

Jun 4 2021, 1:57 AM · gnupg (gpg23), yubikey
Suertzz added a comment to T5442: Serial number detection of Yubikey 5 (Yubikey 5 doesn't work after updating to GnuPG 2.3.1).

If possible, please let us know how you configure the permission to access CCID device with 2.2 (and with 2.3)?

Jun 4 2021, 1:40 AM · gnupg (gpg23), yubikey
gniibe added a comment to T5442: Serial number detection of Yubikey 5 (Yubikey 5 doesn't work after updating to GnuPG 2.3.1).

If possible, please let us know how you configure the permission to access CCID device with 2.2 (and with 2.3)?

Jun 4 2021, 1:32 AM · gnupg (gpg23), yubikey

Jun 2 2021

aheinecke raised the priority of T5424: GnuPG w32: Expand environment variables when reading registry paths from Normal to High.

Hi Werner, I need this for a potentional customer. And generally I need this in config, too. because in support we have to send customers configuration files which they do not need to edit and variables are important because of file system permissions. But most immedialtely I need this for homedir registry.

Jun 2 2021, 10:44 AM · gnupg (gpg22), Restricted Project
gniibe added a comment to T5369: GnuPG build on Apple with Clang.

jitterentropy is also used in Linux kernel, and some people use clang to build it these days. So, I checked the kernel's one. It is simply compiled -O0 by Makefile, and there's no pragma line now (as of v5.13).

Jun 2 2021, 3:16 AM · libgcrypt, MacOS, Bug Report

Jun 1 2021

werner reopened T5369: GnuPG build on Apple with Clang as "Open".

I don't think that it is a good idea to silence this warning. The pragma is esssential for proper random numbers and if clang hijacks a GCC's name space but implements something different it is better to have a warning than to fall into the pit full of dragons.

Jun 1 2021, 8:40 AM · libgcrypt, MacOS, Bug Report
gniibe closed T5369: GnuPG build on Apple with Clang as Resolved.

That warning could be silenced by surrounding pragma with #ifdef __OPTIMIZE__ (with should be supported by GCC and Clang).

Jun 1 2021, 4:09 AM · libgcrypt, MacOS, Bug Report

May 27 2021

gniibe added a comment to T5443: Debian ppc64el failure of 'make check with_valgrind=1'.

I test on ppc64 machine (POWER9, big endian).

May 27 2021, 4:38 AM · gnupg

May 24 2021

Jakuje created T5449: gnupg: Do not use SHA1 by default.
May 24 2021, 4:46 PM · gnupg24, gnupg (gpg23), Bug Report

May 21 2021

bernhard added a comment to T5285: GnuPG: 8Bit filenames can no longer be provided on the command line.

Could make --multifile work on windows 10, documenting the workaround here.

May 21 2021, 4:16 PM · gnupg

May 20 2021

gniibe updated the task description for T5443: Debian ppc64el failure of 'make check with_valgrind=1'.
May 20 2021, 6:17 AM · gnupg
gniibe added a comment to T5443: Debian ppc64el failure of 'make check with_valgrind=1'.

This is another test case for GNU C library's strncmp:

May 20 2021, 6:05 AM · gnupg
gniibe added a comment to T5443: Debian ppc64el failure of 'make check with_valgrind=1'.

This is the minimized test case.

May 20 2021, 6:02 AM · gnupg
gniibe updated the task description for T5443: Debian ppc64el failure of 'make check with_valgrind=1'.
May 20 2021, 5:45 AM · gnupg
gniibe triaged T5443: Debian ppc64el failure of 'make check with_valgrind=1' as Low priority.
May 20 2021, 5:44 AM · gnupg

May 19 2021

werner added a comment to T5442: Serial number detection of Yubikey 5 (Yubikey 5 doesn't work after updating to GnuPG 2.3.1).

Thanks for the well written report. We had another already, and thus I merged it into T5415.

May 19 2021, 9:24 PM · gnupg (gpg23), yubikey
werner merged task T5442: Serial number detection of Yubikey 5 (Yubikey 5 doesn't work after updating to GnuPG 2.3.1) into T5415: YubiKey no longer recognized in GnuPG 2.3.1 on macOS 10.15.7.
May 19 2021, 9:23 PM · gnupg (gpg23), yubikey
Suertzz created T5442: Serial number detection of Yubikey 5 (Yubikey 5 doesn't work after updating to GnuPG 2.3.1).
May 19 2021, 9:04 PM · gnupg (gpg23), yubikey

May 12 2021

werner closed T5434: gpg-agent should not use MD5 fingerprint for ssh keys as Resolved.
May 12 2021, 9:05 AM · gnupg, Bug Report
werner added a comment to T5434: gpg-agent should not use MD5 fingerprint for ssh keys.

Frankly, I am pretty sure that the new base64 encoding of the fingerprint leads to less diligent comparison of the fingerprint by the user. I don't understand why they did not used a truncated hex output or zBase32 .

May 12 2021, 8:51 AM · gnupg, Bug Report

May 11 2021

Jakuje created T5434: gpg-agent should not use MD5 fingerprint for ssh keys.
May 11 2021, 2:30 PM · gnupg, Bug Report

May 7 2021

dain added a comment to T5425: scdaemon.conf reader-port setting broken in 2.3.

Ah, great. Thanks!

May 7 2021, 1:16 PM · gnupg, Restricted Project, scd, Bug Report
gniibe added projects to T5425: scdaemon.conf reader-port setting broken in 2.3: scd, Restricted Project, gnupg.
May 7 2021, 6:05 AM · gnupg, Restricted Project, scd, Bug Report

May 6 2021

aheinecke edited projects for T5424: GnuPG w32: Expand environment variables when reading registry paths, added: gnupg; removed gpgagent.
May 6 2021, 12:15 PM · gnupg (gpg22), Restricted Project

May 3 2021

werner closed T1333: GPGSM rejects OCSP responder cert without keyUsage as Resolved.
May 3 2021, 3:52 PM · Bug Report, gnupg
Jakuje added a comment to T1333: GPGSM rejects OCSP responder cert without keyUsage.

Thank you for taking time to look into that. There are couple of issues in the CAcert bug tracker talking about the same issue but if, (I see right), the certs still miss the usage flags:

May 3 2021, 3:07 PM · Bug Report, gnupg
werner added a comment to T1333: GPGSM rejects OCSP responder cert without keyUsage.

RFC-5280 states in 4.2.1.3 for Key Usage:

May 3 2021, 2:30 PM · Bug Report, gnupg
Jakuje updated subscribers of T1333: GPGSM rejects OCSP responder cert without keyUsage.

Any chance looking into this @werner?

May 3 2021, 10:29 AM · Bug Report, gnupg
gniibe added a project to T5413: Unblock PIN by Reset Code: Restricted Project.
May 3 2021, 6:33 AM · Restricted Project, gnupg, scd

Apr 27 2021

werner added a comment to T5412: Getting "Invalid digest algorithm", when trying to generate ECDH keys, in batch mode.

The curve is not defined to be used for ECDH (encryption); in fact it should in general only be used with the EdDSA
algorithm. You need to use "Key-Type: eddsa". Note that the EdDSA signing algorithm is different than the commonly used ECDSA signing algorithm.

Apr 27 2021, 2:39 PM · FAQ, gnupg, OpenPGP
gniibe triaged T5413: Unblock PIN by Reset Code as Normal priority.
Apr 27 2021, 1:45 PM · Restricted Project, gnupg, scd
gniibe created T5413: Unblock PIN by Reset Code.
Apr 27 2021, 1:44 PM · Restricted Project, gnupg, scd
masoudbahar added a comment to T5412: Getting "Invalid digest algorithm", when trying to generate ECDH keys, in batch mode.

Thanks for the quick response Werner. I knew I could use it with quick-gen-key and I’ve updated my config file to have it as default.
But, just for my understanding, is there a reason ed25519 cannot be used with full-gen-key and gen-key in batch mode?

Apr 27 2021, 12:13 PM · FAQ, gnupg, OpenPGP
werner closed T5412: Getting "Invalid digest algorithm", when trying to generate ECDH keys, in batch mode as Resolved.
Apr 27 2021, 8:34 AM · FAQ, gnupg, OpenPGP
werner edited projects for T5412: Getting "Invalid digest algorithm", when trying to generate ECDH keys, in batch mode, added: gnupg, FAQ; removed gnupg (gpg23), Bug Report.

You can't use ecdh with ed25519.

Apr 27 2021, 8:33 AM · FAQ, gnupg, OpenPGP

Apr 26 2021

gniibe added a comment to T1756: gpg-agent doesn't accept ssh certificates.

Update:
It looks like OpenSSH version 8 now supports ssh-agent's handling REQUEST_IDENTITIES.

Apr 26 2021, 8:32 AM · gnupg, Feature Request

Apr 20 2021

gniibe abandoned D509: Yubikey supports two (or more) apps, serial number problem.
Apr 20 2021, 8:36 AM · gnupg
gniibe abandoned D510: Connection to gpg-agent/dirmngr/etc..

it's in 2.3.

Apr 20 2021, 8:34 AM · gnupg

Apr 16 2021

werner closed T2332: Cannot authenticate with LDAP keyserver as Resolved.

This has been fixed in version 2.2.16.

Apr 16 2021, 8:08 PM · gnupg, dirmngr, Bug Report

Apr 15 2021

werner triaged T5364: Kleopatra won't start as Normal priority.

gpg4win 3.1 has no full Unicode support. You may try to install the new GnuPG 2.3 version on top of gpg4win to fix this problem or wait until we have releases gpg4win 4 which will come with GnuPG 2.3.

Apr 15 2021, 9:14 AM · workaround, gnupg, Windows, kleopatra, Bug Report, gpg4win
gniibe closed T5100: OpenPGP app overwrites Yubikey serial number as Resolved.
Apr 15 2021, 4:42 AM · Restricted Project, gnupg, scd, yubikey, kleopatra
gniibe closed T4158: UIF (User Interaction Flag) DO support as Resolved.
Apr 15 2021, 4:09 AM · Restricted Project, Feature Request, scd, gnupg

Apr 13 2021

gniibe closed T3416: gpg should select available signing key on card (even with -u option) as Resolved.

Done in 2.3.0.

Apr 13 2021, 8:07 AM · Restricted Project, Feature Request, gnupg
gniibe closed T3416: gpg should select available signing key on card (even with -u option), a subtask of T2291: Smartcard interaction improvement (was: Shadowed private key design (for smartcard)), as Resolved.
Apr 13 2021, 8:07 AM · Restricted Project, gnupg, Feature Request
gniibe closed T4695: Remove SERIALNO as an identifier to select keys, a subtask of T2291: Smartcard interaction improvement (was: Shadowed private key design (for smartcard)), as Resolved.
Apr 13 2021, 8:06 AM · Restricted Project, gnupg, Feature Request
gniibe closed T4695: Remove SERIALNO as an identifier to select keys as Resolved.

Done in 2.3.0.

Apr 13 2021, 8:06 AM · Restricted Project, Feature Request, gnupg
gniibe closed T2291: Smartcard interaction improvement (was: Shadowed private key design (for smartcard)) as Resolved.

Done in 2.3.

Apr 13 2021, 8:05 AM · Restricted Project, gnupg, Feature Request

Apr 12 2021

aheinecke closed T3498: GPG: Batch keygen has no default expiry date as Resolved.

This was changed in kleopatra some time ago to also generate keys with 2y expiry. So the motivation for this issue is gone.

Apr 12 2021, 2:44 PM · gnupg

Apr 6 2021

jukivili added a comment to T5369: GnuPG build on Apple with Clang.

Note that rndjent.c is already build with -O0 as can be seen in example above. That warning could be silenced by surrounding pragma with #ifdef __OPTIMIZE__ (with should be supported by GCC and Clang).

Apr 6 2021, 10:20 PM · libgcrypt, MacOS, Bug Report
werner triaged T5369: GnuPG build on Apple with Clang as Low priority.
Apr 6 2021, 12:10 PM · libgcrypt, MacOS, Bug Report

Apr 1 2021

werner added a project to T5370: Apple M1 and Symbol not found: __gcry_mpih_mul_1: arm.
Apr 1 2021, 11:07 AM · arm, MacOS, gnupg, Bug Report
werner triaged T5370: Apple M1 and Symbol not found: __gcry_mpih_mul_1 as Normal priority.
Apr 1 2021, 11:02 AM · arm, MacOS, gnupg, Bug Report

Mar 30 2021

werner added a comment to T5370: Apple M1 and Symbol not found: __gcry_mpih_mul_1.

Do what ever you want with _gcry prefixed functions - this is never considered an API or ABI break. There are some exceptions for internal functions used by macros but those are clearly marked.

Mar 30 2021, 5:38 PM · arm, MacOS, gnupg, Bug Report
jukivili added a comment to T5370: Apple M1 and Symbol not found: __gcry_mpih_mul_1.

These functions are internal to library and, for example, on linux/windows builds are not externally available.

Mar 30 2021, 4:48 PM · arm, MacOS, gnupg, Bug Report

Mar 29 2021

JW added a comment to T5370: Apple M1 and Symbol not found: __gcry_mpih_mul_1.

This patch should work if configure properly detects need for extra underscore on C symbols:

Mar 29 2021, 6:12 PM · arm, MacOS, gnupg, Bug Report
jukivili added a comment to T5370: Apple M1 and Symbol not found: __gcry_mpih_mul_1.

This patch should work if configure properly detects need for extra underscore on C symbols:

Mar 29 2021, 4:55 PM · arm, MacOS, gnupg, Bug Report
JW updated the task description for T5369: GnuPG build on Apple with Clang.
Mar 29 2021, 1:59 AM · libgcrypt, MacOS, Bug Report
JW updated the task description for T5370: Apple M1 and Symbol not found: __gcry_mpih_mul_1.
Mar 29 2021, 1:59 AM · arm, MacOS, gnupg, Bug Report
JW updated the task description for T5369: GnuPG build on Apple with Clang.
Mar 29 2021, 1:58 AM · libgcrypt, MacOS, Bug Report
JW updated the task description for T5370: Apple M1 and Symbol not found: __gcry_mpih_mul_1.
Mar 29 2021, 1:57 AM · arm, MacOS, gnupg, Bug Report
JW added a comment to T5370: Apple M1 and Symbol not found: __gcry_mpih_mul_1.

Here's the patch I am using for the Apple M1: libgcrypt-darwin.patch. The patch is public domain so anyone is free to use it.

Mar 29 2021, 12:51 AM · arm, MacOS, gnupg, Bug Report
JW added a comment to T5370: Apple M1 and Symbol not found: __gcry_mpih_mul_1.

This is kind of a hack, but this patch:

Mar 29 2021, 12:03 AM · arm, MacOS, gnupg, Bug Report

Mar 28 2021

JW updated the task description for T5370: Apple M1 and Symbol not found: __gcry_mpih_mul_1.
Mar 28 2021, 10:40 PM · arm, MacOS, gnupg, Bug Report
JW created T5370: Apple M1 and Symbol not found: __gcry_mpih_mul_1.
Mar 28 2021, 10:36 PM · arm, MacOS, gnupg, Bug Report
JW updated the task description for T5369: GnuPG build on Apple with Clang.
Mar 28 2021, 10:31 PM · libgcrypt, MacOS, Bug Report
JW created T5369: GnuPG build on Apple with Clang.
Mar 28 2021, 10:10 PM · libgcrypt, MacOS, Bug Report
werner closed T5363: GnuPG 2.3 Windows localized gpgconf output broken as Resolved.
Mar 28 2021, 7:18 PM · Windows, gnupg
werner added a comment to T5363: GnuPG 2.3 Windows localized gpgconf output broken.

yep, Should be fixed in libgpg-error/src/w32-gettext.c unless we want a way to retrieve the meat data. We can also and faster fix this in gnupg proper.

Mar 28 2021, 10:32 AM · Windows, gnupg

Mar 25 2021

ikloecker added a comment to T5363: GnuPG 2.3 Windows localized gpgconf output broken.

Example from gpg.c:

ARGPARSE_s_n (oQuiet,	  "quiet",   N_("be somewhat more quiet")),
[...]
ARGPARSE_s_n (oNoGreeting, "no-greeting", "@"),

The quiet option has a human readable description, but the no-greeting option does not have one. Consequently, gpgconf --list-options gpg gives the following result:

[...]
quiet:0:0:be somewhat more quiet:0:0::::
no-greeting:0:3::0:0::::1
[...]
Mar 25 2021, 5:15 PM · Windows, gnupg
ikloecker added a comment to T5363: GnuPG 2.3 Windows localized gpgconf output broken.

For comparison, on an English Linux system the options also look wrong, i.e. all options that are problematic in the German translation are "raw" option names enclosed in double quotes. It seems that the untranslated description of the options is already missing.

Mar 25 2021, 5:04 PM · Windows, gnupg
aheinecke added a comment to T5363: GnuPG 2.3 Windows localized gpgconf output broken.

Btw this only occurs for some options:

Mar 25 2021, 3:16 PM · Windows, gnupg
aheinecke triaged T5363: GnuPG 2.3 Windows localized gpgconf output broken as Normal priority.
Mar 25 2021, 3:14 PM · Windows, gnupg

Mar 16 2021

werner closed T4702: Deadline for the GnuPG 2.3.0 release as Resolved.

Things are working out nicely and thus I am convinced that we will miss that whooshing sound the deadline would make as it fly by.

Mar 16 2021, 4:53 PM · Restricted Project, gpg4win, gnupg
werner closed T4702: Deadline for the GnuPG 2.3.0 release, a subtask of T4362: Replace the exec funtions for photoids in gpg by our standard exec functions., as Resolved.
Mar 16 2021, 4:53 PM · gnupg, Feature Request

Mar 8 2021

werner added a comment to T4702: Deadline for the GnuPG 2.3.0 release.

We have used this task for more than the usual release info, thus the new title. We will use
T5343 for the 2.3.0 release info.

Mar 8 2021, 10:01 PM · Restricted Project, gpg4win, gnupg
werner renamed T4702: Deadline for the GnuPG 2.3.0 release from Release GnuPG 2.3.0 to Deadline for the GnuPG 2.3.0 release.
Mar 8 2021, 9:59 PM · Restricted Project, gpg4win, gnupg

Feb 18 2021

gniibe added a comment to T1756: gpg-agent doesn't accept ssh certificates.

I'm sorry, if my wording sounded harsh.

Feb 18 2021, 1:50 AM · gnupg, Feature Request

Feb 17 2021

whites11 added a comment to T1756: gpg-agent doesn't accept ssh certificates.

I understand this is kind of an edge case, but having the possibility to use signed ssh keys would be very useful to me.

??? Do you understand how ssh keys are handled by ssh client and ssh-agent?

Feb 17 2021, 9:48 AM · gnupg, Feature Request
gniibe added a comment to T1756: gpg-agent doesn't accept ssh certificates.

I understand this is kind of an edge case, but having the possibility to use signed ssh keys would be very useful to me.

Feb 17 2021, 9:47 AM · gnupg, Feature Request

Feb 13 2021

szszszsz-nitrokey added a comment to T1621: Support multiple cards (not just readers).

Could you tell what is the status of this ticket? Is it planned for the development?
For some users usage is problematic when there are other readers recognized, provided by the OS or hardware platform, and ordered before the target device which in turn blocks access to it.

Feb 13 2021, 6:20 PM · gnupg, Feature Request

Feb 11 2021

werner removed a parent task for T4362: Replace the exec funtions for photoids in gpg by our standard exec functions.: T4417: Work needed for gnupg 2.3.
Feb 11 2021, 11:05 AM · gnupg, Feature Request
werner removed a parent task for T4344: Periodic check of own keys with the WKD: T4417: Work needed for gnupg 2.3.
Feb 11 2021, 11:05 AM · wkd, gnupg, Feature Request