- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
All Stories
Jan 10 2018
I understand now that README's for other languages are installed as aliases and added some missing ones.
I'm using gnupg 2.2.4 and this problem repros for me, and it impacts downstream things like pacman-key (Arch Linux) quite insidiously, which fails with an misleading error message that would not point a regular user to this line of investigation.
For T3662 (PGP/Inline problem with Microsoft Exchange Online) I had to change the code used to send PGP/Inline.
I've changed the behavior now so that PGP/Inline also works with Exchange Online.
In T3656#109246, @Mak wrote:I sent it to a user on a different Mailserver. On my setup its nothing special... Win 10 Enterprise N en, Office 365 Pro Plus en, Kaspersky Internet Security. Server Win 2012 R2 with Exchange Server 2013 and GFI Mailessentials.
I don't think there is anything special... :-(
The status is now shown and updated.
No longer blocks with that commit. Keylistjob is started in the background. As long as the keylistjob is running the validity is shown as "Updating..."
This is not with 2.0 but with 2.2.3 / current master.
gnupg 2.0 reached EOL - there won't be any fixes.
The install location does not have anything to do with that. I just always have my development installations directly under C: so that I can modify them without admin rights.
ok,
well I run "it" on Power Shell ( Debuggable Package Manager ) and I got ..
Jan 9 2018
I sent it to a user on a different Mailserver. On my setup its nothing special... Win 10 Enterprise N en, Office 365 Pro Plus en, Kaspersky Internet Security. Server Win 2012 R2 with Exchange Server 2013 and GFI Mailessentials.
I don't think there is anything special... :-(
Do you mean that GnuPG installed to c:/gnupg/bin/ crashed if that mentioned --homedir is given but it does work if it is installed at the standard place? Please run "gpgconf --version" in both ways.
$ gpg-connect-agent --dirmngr 'getinfo dnsinfo' /bye OK - Libdns stub resolver
@hs could you please retest with 2.0.6-beta8 http://files.gpg4win.org/Beta/gpgol/ and attach the log file again.
As this is still waiting for info for two years and I can't reproduce with current GpgOL -> Resolved.
This is strange, something in your setup must be different from other users. Any Idea what might be special for you? In your log it looks like only the send event for the encrypted mail is passed.
Where do you send your mails to, to another user on the same exchange server?
my <output> was the following...
FWIW, I ran the same test with three card versions:
I can confirm that PGP/MIME works ok for me.
What is the output of
gpg-connect-agent --dirmngr 'getinfo dnsinfo' /bye
and what is the content of your /etc/nsswitch.conf and /etc/resolv.conf ? Is there anything special in your /etc/hosts? Are you using any kind of non mainstream DNS resolver on your system or network?
I forwarded the bug report to the OpenPGP card author.
I think that 2.0 card is OK, 2.1, 2.2, and 3.3 card have this bug.
I disabled all my add-ins and tested it again. Still the same. Mails are sent unencrypted.
Tried also to send a plain text message
I attached the actual log file
Add-Ins are disabled...
Tried also with full disabled virus protection
and disabled hardware acceleration...
Jan 8 2018
$ gpg --debug-level guru --search-keys CEB167EFB5722BD6 $ cat dirmngr.log 2018-01-08 20:06:37 dirmngr[1085.0] permanently loaded certificates: 141 2018-01-08 20:06:37 dirmngr[1085.0] runtime cached certificates: 0 2018-01-08 20:06:37 dirmngr[1085.0] trusted certificates: 141 (140,0,0,1) 2018-01-08 20:06:37 dirmngr[1085.6] handler for fd 6 started 2018-01-08 20:06:37 dirmngr[1085.6] DBG: chan_6 -> # Home: /home/walz/.gnupg 2018-01-08 20:06:37 dirmngr[1085.6] DBG: chan_6 -> # Config: /home/walz/.gnupg/dirmngr.conf 2018-01-08 20:06:37 dirmngr[1085.6] DBG: chan_6 -> OK Dirmngr 2.2.4 at your service 2018-01-08 20:06:37 dirmngr[1085.6] connection from process 1084 (1000:100) 2018-01-08 20:06:37 dirmngr[1085.6] DBG: chan_6 <- GETINFO version 2018-01-08 20:06:37 dirmngr[1085.6] DBG: chan_6 -> D 2.2.4 2018-01-08 20:06:37 dirmngr[1085.6] DBG: chan_6 -> OK 2018-01-08 20:06:37 dirmngr[1085.6] DBG: chan_6 <- KS_SEARCH -- CEB167EFB5722BD6 2018-01-08 20:06:37 dirmngr[1085.6] DBG: dns: libdns initialized 2018-01-08 20:06:37 dirmngr[1085.6] DBG: dns: getsrv(_pgpkey-https._tcp.hkps.pool.sks-keyservers.net) -> 0 records 2018-01-08 20:06:37 dirmngr[1085.6] DBG: dns: resolve_dns_name(hkps.pool.sks-keyservers.net): No name 2018-01-08 20:06:37 dirmngr[1085.6] resolving 'hkps.pool.sks-keyservers.net' failed: No name 2018-01-08 20:06:37 dirmngr[1085.6] number of system provided CAs: 156 2018-01-08 20:06:37 dirmngr[1085.6] DBG: dns: resolve_dns_name(hkps.pool.sks-keyservers.net): No name 2018-01-08 20:06:37 dirmngr[1085.6] resolving 'hkps.pool.sks-keyservers.net' failed: No name 2018-01-08 20:06:37 dirmngr[1085.6] can't connect to 'hkps.pool.sks-keyservers.net': host not found 2018-01-08 20:06:37 dirmngr[1085.6] error connecting to 'https://hkps.pool.sks-keyservers.net:443': No name 2018-01-08 20:06:37 dirmngr[1085.6] command 'KS_SEARCH' failed: No name 2018-01-08 20:06:37 dirmngr[1085.6] DBG: chan_6 -> ERR 167772380 No name <Dirmngr> 2018-01-08 20:06:37 dirmngr[1085.6] DBG: chan_6 <- BYE 2018-01-08 20:06:37 dirmngr[1085.6] DBG: chan_6 -> OK closing connection 2018-01-08 20:06:37 dirmngr[1085.6] handler for fd 6 terminated
That is likely "host not found" or "domain not found". Maybe a problem with your resolver. Please add
I believe that this was fixed in T3658 which reported more clearly what was attempted to verify and what failed.
Indeed, thanks for the note. I added the variable only later on for the check of protocol unknown and overlooked to update the setProtocol call.
I've updated the code accordingly.
I can reproduce the issue but only for PGP/Inline, encrypted only mails. PGP/MIME works finde. This allows for an easy workaround (sending PGP MIME) so Prio down to Normal.
All e-mails I tried to open with 2.0.6-beta7 gpgol.dll were readable and showed the correct content in my environment, now. Great!
@aheinecke thanks for the fix. But I have a suggestion for the code(I only looked at the diff):
While trying to reproduce another bug I've set up an account with Exchange Online. With that account I had similar behavior with empty mails shown. The behavior also matched to the logging of the last mail in your log.
In the folder %APPDATA%\gnupg create a file named gpg.conf (or edit it if it exists) and put the line "ignore-mdc-error" in there. This should globally set this option and gpgol will also respect this.
Fixed for 2.2.5. Thanks for the report.
You might want to look at: https://wiki.gnupg.org/TroubleShooting#Passphrase_on_the_command_line
Can you please run debugview ( https://technet.microsoft.com/en-us/sysinternals/debugview.aspx ) and attach or paste any lines here that start with "org.kde.pim" when you try to encrypt the folder?
Thank you for your report. I can reproduce this problem. Kleopatra correctly looks for the signature file but then fails to set the protocol. This results in an internal error.
Prio High as this makes GpgOL unusable in such a setup.
I give this high priority as sending unencrypted is pretty much a worst case scenario. :-o
In T3714#109045, @Lloyd wrote:I appreciate the dangers. Whilst I try and persuade the sender to deal with the issue at their end, is there anyway to include this option in GpgOL on a temporary basis?
Jan 7 2018
I have attached a small patch to show this two additional key flags with "--list-keys":