Page MenuHome GnuPG
Feed All Stories

Nov 30 2020

aheinecke added a comment to T5155: GPGol: Will work for one user and not another on the same machine. Windows 10 Outlook 2016 GPGOL 2.4.8 (gpg4win-3.1.14).

In general there always might be problems with incompatibilities of other addins installed on a system.

Nov 30 2020, 4:23 PM · Bug Report
werner updated subscribers of T5141: GnuPG: Make quick-gen-key work for keys on PIV cards.
Nov 30 2020, 3:31 PM · gnupg (gpg23)
werner added a comment to T5141: GnuPG: Make quick-gen-key work for keys on PIV cards.

The error comes form using READKEY which is processed by gpg-agent. At this time the agent does not yet know the stub key and thus returns ENOENT. At the places before we used "SCD READKEY" which works directly with scdameon and does not need a stub file. We need to review the new(?) way of creating stub files, describe that and then fix this by either making sure tha the stub key is created first or that we use SCD READKEY there too.

Nov 30 2020, 3:30 PM · gnupg (gpg23)
ikloecker closed T5139: Kleopatra keypair creation wizard improvement as Resolved.

Done.

Nov 30 2020, 3:05 PM · Feature Request, kleopatra
ikloecker committed rKLEOPATRAf6527c5e5c96: Remove option to add email address to DN (authored by ikloecker).
Remove option to add email address to DN
Nov 30 2020, 3:03 PM
aheinecke added a comment to T5066: Multiple smartcard (reader) / app support in Kleopatra.

I am running in a setup where my GnuPG 2.3 is connected to a gpg-agent / scdaemon running at GnuPG 2.2.12.

Nov 30 2020, 2:18 PM · kleopatra
aheinecke committed rWacb4f933b067: web: Minor fix to NEWS (authored by aheinecke).
web: Minor fix to NEWS
Nov 30 2020, 12:06 PM
GPF awarded T2291: Smartcard interaction improvement (was: Shadowed private key design (for smartcard)) a Love token.
Nov 30 2020, 11:30 AM · Restricted Project, gnupg, Feature Request
ikloecker created T5161: scd: For NetKey cards KEYINFO with keygrip fails.
Nov 30 2020, 10:57 AM · Restricted Project, scd
aheinecke created T5160: Pinentry: Improved generate support.
Nov 30 2020, 10:57 AM · gpgagent, pinentry
aheinecke triaged T5091: Kleopatra: Close all tabs except this one as Wishlist priority.

Okay, I usually only keep hitting crl+w in that case. But I see the point when doing imports this can be annoying.

Nov 30 2020, 10:53 AM · kleopatra, Feature Request
aheinecke triaged T5082: Kleopatra crashed with qwindows.dll. as Normal priority.
Nov 30 2020, 10:52 AM · kleopatra, gpg4win, Bug Report
aheinecke changed the status of T5082: Kleopatra crashed with qwindows.dll. from Open to Testing.

there was an issue that has been fixed in 3.1.14 which was creating problems / crashes when the home directory of a user had a unicode character in it. So maybe your one user had such a username?

Nov 30 2020, 10:51 AM · kleopatra, gpg4win, Bug Report
werner committed rG806547d9d243: scd:nks: Minor additions to the basic IDLM application support. (authored by werner).
scd:nks: Minor additions to the basic IDLM application support.
Nov 30 2020, 10:19 AM
ikloecker added a comment to T5150: scd: For NetKey cards READKEY with keygrip fails.

Seems to work now. I'm not sure whether I should close this issue because it's marked for backport.

Nov 30 2020, 10:19 AM · backport, gnupg (gpg23), scd
ikloecker closed T5144: scd: Fails/crashes on SCD LEARN --keypairinfo for NetKey cards as Resolved.

Works now. Thanks.

Nov 30 2020, 10:05 AM · Restricted Project, gnupg (gpg23), scd
ikloecker closed T5144: scd: Fails/crashes on SCD LEARN --keypairinfo for NetKey cards, a subtask of T5128: Kleopatra: Generate OpenPGP public key for NetKey card key, as Resolved.
Nov 30 2020, 10:05 AM · kleopatra
jukivili added a comment to T5157: libgcrypt: ARM64 Builds on macOS fail.

Another issue that comes in to mind is that current ARM/ARM64 HW feature detection most likely wont work on MacOS. Thus HW accelerated AES&SHA&GHASH implementation wont be used.

Nov 30 2020, 8:54 AM · toolchain, MacOS, libgcrypt, Bug Report
werner added a subtask for T5159: make check fails for libgcrypt on Apple Silicon / ARM Mac: T5157: libgcrypt: ARM64 Builds on macOS fail.
Nov 30 2020, 8:47 AM · Restricted Project, MacOS, libgcrypt, Bug Report
werner added a parent task for T5157: libgcrypt: ARM64 Builds on macOS fail: T5159: make check fails for libgcrypt on Apple Silicon / ARM Mac.
Nov 30 2020, 8:47 AM · toolchain, MacOS, libgcrypt, Bug Report
gniibe added projects to T5159: make check fails for libgcrypt on Apple Silicon / ARM Mac: MacOS, Info Needed.

IIUC, for the build of Homebrew, it is the issue of in: https://github.com/Homebrew/homebrew-core/commit/e7da1e2157b2e8373c3b39ea6398f51588ea537c

Nov 30 2020, 7:30 AM · Restricted Project, MacOS, libgcrypt, Bug Report
gniibe added a comment to T5159: make check fails for libgcrypt on Apple Silicon / ARM Mac.

Please have a look at T5024: libtool problem for some platforms for 'make check' (program built with -no-install won't work without installation), if make check works after the installation of libgcrypt.

Nov 30 2020, 7:11 AM · Restricted Project, MacOS, libgcrypt, Bug Report
gniibe added a comment to T5159: make check fails for libgcrypt on Apple Silicon / ARM Mac.

See T2056: libgcrypt: make check fails "random" test on OS X 10.11 with link error, if test with 'random' fails.

Nov 30 2020, 7:09 AM · Restricted Project, MacOS, libgcrypt, Bug Report
jukivili added a comment to T5157: libgcrypt: ARM64 Builds on macOS fail.

HAVE_COMPATIBLE_GCC_AMD64_PLATFORM_AS is never defined on ARM64 as it depends on "$mpi_cpu_arch" == "x86". Instead I think new check for GCC assembly ELF directives would be needed in configure.ac, similar to HAVE_GCC_ASM_CFI_DIRECTIVES check. Following check should work, but I have not yet tested it:

Nov 30 2020, 6:49 AM · toolchain, MacOS, libgcrypt, Bug Report
gniibe added a comment to T5159: make check fails for libgcrypt on Apple Silicon / ARM Mac.
Nov 30 2020, 2:51 AM · Restricted Project, MacOS, libgcrypt, Bug Report
gniibe added a comment to T5157: libgcrypt: ARM64 Builds on macOS fail.

ARM64 has been only tested on platforms which support ELF.

Nov 30 2020, 2:48 AM · toolchain, MacOS, libgcrypt, Bug Report

Nov 29 2020

s7r closed T5056: About Kleopatra showing unknown version number as Resolved.

I confirm I have tried with latest 3.1.14 on two different computers (Windows) where I had this "Unknown version" bug going on and they both properly show 3.1.14 version as it should.

Nov 29 2020, 7:49 PM · kleopatra
s7r added a comment to T5056: About Kleopatra showing unknown version number.
Nov 29 2020, 7:42 PM · kleopatra
jeffb255 added a comment to T5155: GPGol: Will work for one user and not another on the same machine. Windows 10 Outlook 2016 GPGOL 2.4.8 (gpg4win-3.1.14).

I am quite aware of that each user has there own keys and configurations.
I added a third user to the computer, configured them the same as the first user, and was not able to sign or encrypt any emails.
When I clicked on the lock nothing happened.

Nov 29 2020, 5:39 PM · Bug Report
patrick added a comment to T5157: libgcrypt: ARM64 Builds on macOS fail.

Yes, I did. Identical result.

Nov 29 2020, 5:12 PM · toolchain, MacOS, libgcrypt, Bug Report
werner added a comment to T5157: libgcrypt: ARM64 Builds on macOS fail.

Why the hell do they that? The standard compiler on a system is called cc which may translated to whatever the system installs for it. gcc is a specific implementation with certain properties. Di you try CC=clang to override this?

Nov 29 2020, 4:41 PM · toolchain, MacOS, libgcrypt, Bug Report
patrick added a comment to T5157: libgcrypt: ARM64 Builds on macOS fail.

And the arm64 cross-compiler:

Nov 29 2020, 3:06 PM · toolchain, MacOS, libgcrypt, Bug Report
patrick added a comment to T5157: libgcrypt: ARM64 Builds on macOS fail.

Sorry, I forgot to mention that Apple ships a gcc-wrapper for clang. It just accepts gcc command lines parameters and translates them to clang parameters.
Here is the output of gcc --version:

Nov 29 2020, 2:54 PM · toolchain, MacOS, libgcrypt, Bug Report
werner added a comment to T5157: libgcrypt: ARM64 Builds on macOS fail.

You say that you build using clang but the log shows that you invoke gcc.

Nov 29 2020, 1:22 PM · toolchain, MacOS, libgcrypt, Bug Report
werner added projects to T5157: libgcrypt: ARM64 Builds on macOS fail: libgcrypt, MacOS, toolchain.
Nov 29 2020, 1:21 PM · toolchain, MacOS, libgcrypt, Bug Report
werner closed T5158: E-Mails will not be decrypted as Resolved.
Nov 29 2020, 1:19 PM · Support
mbirth updated the task description for T5159: make check fails for libgcrypt on Apple Silicon / ARM Mac.
Nov 29 2020, 1:14 PM · Restricted Project, MacOS, libgcrypt, Bug Report
Laurent Montel <montel@kde.org> committed rLIBKLEO5c40c6df31ff: GIT_SILENT: prepare 5.16.0 (authored by Laurent Montel <montel@kde.org>).
GIT_SILENT: prepare 5.16.0
Nov 29 2020, 10:57 AM
Laurent Montel <montel@kde.org> committed rKLEOPATRAb74f6c32cafe: GIT_SILENT: prepare 5.16.0 (authored by Laurent Montel <montel@kde.org>).
GIT_SILENT: prepare 5.16.0
Nov 29 2020, 10:54 AM

Nov 28 2020

mbirth created T5159: make check fails for libgcrypt on Apple Silicon / ARM Mac.
Nov 28 2020, 11:43 PM · Restricted Project, MacOS, libgcrypt, Bug Report
Heinrich added a comment to T5158: E-Mails will not be decrypted.

The problem is meanwhile solved. Thanks a lot
Heinrich

Nov 28 2020, 3:48 PM · Support
Heinrich created T5158: E-Mails will not be decrypted.
Nov 28 2020, 3:00 PM · Support
patrick created T5157: libgcrypt: ARM64 Builds on macOS fail.
Nov 28 2020, 11:27 AM · toolchain, MacOS, libgcrypt, Bug Report

Nov 27 2020

werner closed T4427: Windows 10 update KB4489899 stops gpg-agent launching as Resolved.

No more problems reported, so I assume like @aheinecke that it has been resolved in Windows.

Nov 27 2020, 6:36 PM · Info Needed, Windows, gpgagent, Bug Report
werner claimed T4398: Rework Console and command line handling on Windows.
Nov 27 2020, 6:33 PM · Feature Request, gnupg (gpg23)
werner closed T5038: UTF-8 handling in the command line, a subtask of T4398: Rework Console and command line handling on Windows, as Resolved.
Nov 27 2020, 6:33 PM · Feature Request, gnupg (gpg23)
werner closed T5038: UTF-8 handling in the command line as Resolved.

This has been fixed for Unix on 2.2 and 2.3. The command line fix for Windows is a larger thing already tracked by T4398.

Nov 27 2020, 6:33 PM · gnupg
werner closed T5038: UTF-8 handling in the command line, a subtask of T1514: charset weirdness with non-ascii User IDs under non-UTF-8 locales, as Resolved.
Nov 27 2020, 6:33 PM · Bug Report, gnupg
werner renamed T4398: Rework Console and command line handling on Windows from Rework Console handling on Windows to Rework Console and command line handling on Windows.
Nov 27 2020, 6:31 PM · Feature Request, gnupg (gpg23)
werner closed T1514: charset weirdness with non-ascii User IDs under non-UTF-8 locales as Resolved.

We changed the fallback to utf-8 in 2.2 and 2.3 and thus this bug can be closed. On Windows there is still the problem with the command line. However, this is better tracked with T5038 and its related tasks.

Nov 27 2020, 6:30 PM · Bug Report, gnupg
werner added a parent task for T5038: UTF-8 handling in the command line: T4398: Rework Console and command line handling on Windows.
Nov 27 2020, 6:26 PM · gnupg
werner added a subtask for T4398: Rework Console and command line handling on Windows: T5038: UTF-8 handling in the command line.
Nov 27 2020, 6:26 PM · Feature Request, gnupg (gpg23)
werner removed a project from T5038: UTF-8 handling in the command line: backport.
Nov 27 2020, 6:23 PM · gnupg
werner added a comment to T5150: scd: For NetKey cards READKEY with keygrip fails.

Regarding a backport I think that I will eventually backport all app-*c to stable by source copying them. We have a quite stable internal API and thus it is easier to keep at least the card specific code in sync. I did some local work in this directory some time ago.

Nov 27 2020, 5:54 PM · backport, gnupg (gpg23), scd
werner committed rG7d7a50ba7231: common: Fix fallback handling to utf-8. (authored by gniibe).
common: Fix fallback handling to utf-8.
Nov 27 2020, 5:49 PM
werner lowered the priority of T3392: keyserver default should include pool onionbalance hkp://jirk5u4osbsr34t5.onion from Normal to Wishlist.
Nov 27 2020, 5:39 PM · Too Old, Keyserver, Feature Request, dirmngr
werner committed rGad469609b101: card: Let the APDU command prints a description of the status word. (authored by werner).
card: Let the APDU command prints a description of the status word.
Nov 27 2020, 11:28 AM
werner committed rG0e34683a6c4b: scd: New getinfo sub-command apdu_strerror. (authored by werner).
scd: New getinfo sub-command apdu_strerror.
Nov 27 2020, 11:28 AM
werner committed rG5804db1a13d2: card: Netkey improvement for passwd. (authored by werner).
card: Netkey improvement for passwd.
Nov 27 2020, 10:01 AM
werner added a project to T4614: GPG: Cancel on pinpad hangs decryption process for 20 seconds: backport.
Nov 27 2020, 7:58 AM · backport, Restricted Project, scd, gnupg
gniibe changed the status of T4614: GPG: Cancel on pinpad hangs decryption process for 20 seconds from Open to Testing.
Nov 27 2020, 7:21 AM · backport, Restricted Project, scd, gnupg
gniibe committed rGbb591222c3c5: scd:ccid-driver: Fix pinpad error handling for cancel/timeout. (authored by gniibe).
scd:ccid-driver: Fix pinpad error handling for cancel/timeout.
Nov 27 2020, 7:21 AM
gniibe added a comment to T4614: GPG: Cancel on pinpad hangs decryption process for 20 seconds.

Finally, with the physical device, I figure out what's going on.
The error handling in bulk_in in ccid-driver.c is not good for pinpad input.
It doesn't return an error when it is cancelled or timeout (for the user interaction).
And it calls libusb_clear_hald which causes screwed up situation.

Nov 27 2020, 7:17 AM · backport, Restricted Project, scd, gnupg
Laurent Montel <montel@kde.org> committed rLIBKLEO5da2e265783c: GIT_SILENT: prepare 5.16.0 (authored by Laurent Montel <montel@kde.org>).
GIT_SILENT: prepare 5.16.0
Nov 27 2020, 7:09 AM
Laurent Montel <montel@kde.org> committed rKLEOPATRA5b183dc175a2: GIT_SILENT: prepare 5.16.0 (authored by Laurent Montel <montel@kde.org>).
GIT_SILENT: prepare 5.16.0
Nov 27 2020, 7:05 AM

Nov 26 2020

werner added a comment to T5155: GPGol: Will work for one user and not another on the same machine. Windows 10 Outlook 2016 GPGOL 2.4.8 (gpg4win-3.1.14).

Recall that each user has their own keys and configuration. This seems to be a general question on how to use GpgOL. Please use the help resources listed at gpg4win.org instead of this bug tracker.

Nov 26 2020, 9:13 PM · Bug Report
werner reopened T4004: Curve25519 for Zeitcontrol card as "Open".
Nov 26 2020, 5:08 PM · Feature Request, scd
werner added a comment to T4004: Curve25519 for Zeitcontrol card.

You are right, the new 3.4 cards support brainpool curves in addition to the nist curves.

Nov 26 2020, 5:08 PM · Feature Request, scd
werner created T5156: Automatically dismiss the popup 'please insert card with S/N...'.
Nov 26 2020, 5:04 PM · scd, gnupg
werner added a comment to T5100: OpenPGP app overwrites Yubikey serial number.

Sorry, I realized this myself this morning and did couple of fixes. rG7113263a00d8 does this all however I forgot to mention the bug number.

Nov 26 2020, 4:55 PM · Restricted Project, gnupg, scd, yubikey, kleopatra
werner committed rG7113263a00d8: agent: Fix YK s/n and prettify the request card prompt for Yubikeys (authored by werner).
agent: Fix YK s/n and prettify the request card prompt for Yubikeys
Nov 26 2020, 3:58 PM
ikloecker committed rKLEOPATRAc9ef9acbb0a0: Remove workaround for nice serial number of Yubikeys (authored by ikloecker).
Remove workaround for nice serial number of Yubikeys
Nov 26 2020, 3:36 PM
ikloecker added a comment to T5100: OpenPGP app overwrites Yubikey serial number.

Argh. The following patch replaces the previous patch. It fixes the calculation of the display serial number.

Nov 26 2020, 3:21 PM · Restricted Project, gnupg, scd, yubikey, kleopatra
ikloecker added a comment to T5100: OpenPGP app overwrites Yubikey serial number.

I think the calculation of the OpenPGP s/n is not correct. As you write, "Yubico seems to use the decimalized version of their S/N as the OpenPGP card S/N." This matches my observation for my Yubikey:
s/n printed on Yubikey: 9074582
Yubikey s/n (with our prefix): FF020001008A7796
OpenPGP AID: D2760001240102010006090745820000

Nov 26 2020, 2:45 PM · Restricted Project, gnupg, scd, yubikey, kleopatra
werner committed rG764c69a841ab: scd: Add special serialno compare for OpenPGP cards. (authored by werner).
scd: Add special serialno compare for OpenPGP cards.
Nov 26 2020, 12:18 PM
werner committed rGd784e763495c: scd: Do not try to use a non-enabled app after card switching. (authored by werner).
scd: Do not try to use a non-enabled app after card switching.
Nov 26 2020, 12:18 PM
vonreth committed rLIBKLEO4584fc9e1884: Fix ifdef, we don't use qt here (authored by vonreth).
Fix ifdef, we don't use qt here
Nov 26 2020, 11:41 AM
nitroalex added a comment to T4004: Curve25519 for Zeitcontrol card.

If you mean OpenPGP Card v3 standard, no it did not support cv25519 ed25519, but some other curves up until v3.4. So if there is a specific specification bringing this feature, can you might refer to the specific version? Otherwise, I think this task is still valid.
I remember the problem being the card manufacturers that are not interesting in cv25519 (yet).

Nov 26 2020, 10:06 AM · Feature Request, scd
gniibe added a comment to T3722: gpg "No name" error.

Or it might be related issue of name server access like in T3168: dirmngr: gpg: keyserver receive failed: No keyserver available.

Nov 26 2020, 7:56 AM · dns
werner added a project to T5150: scd: For NetKey cards READKEY with keygrip fails: backport.
Nov 26 2020, 7:55 AM · backport, gnupg (gpg23), scd
gniibe added a parent task for T3168: dirmngr: gpg: keyserver receive failed: No keyserver available: T3517: dirmngr: retry without SRV due to buggy routers.
Nov 26 2020, 7:51 AM · dns, dirmngr
gniibe added a subtask for T3517: dirmngr: retry without SRV due to buggy routers: T3168: dirmngr: gpg: keyserver receive failed: No keyserver available.
Nov 26 2020, 7:51 AM · Feature Request, dns, dirmngr
gniibe closed T3524: "GnuPG MiniHOWTO" English version page unavailable as Resolved.

As of November 2020, the redirect problem has gone.
And we addressed that as "Legacy GnuPG MiniHOWTO" in rDd51cd2013e66: web: Add warning notes to most HOWTOS..

Nov 26 2020, 7:42 AM · Bad link, gpgweb
gniibe merged task T3722: gpg "No name" error into T3517: dirmngr: retry without SRV due to buggy routers.
Nov 26 2020, 7:31 AM · dns
gniibe merged T3722: gpg "No name" error into T3517: dirmngr: retry without SRV due to buggy routers.
Nov 26 2020, 7:31 AM · Feature Request, dns, dirmngr
gniibe added a comment to T3722: gpg "No name" error.

This must be an issue of SRV record retrieval.
Merging.

Nov 26 2020, 7:31 AM · dns
gniibe merged task T3574: gpg-agent doesn't pick up ssh certificates into T1756: gpg-agent doesn't accept ssh certificates.
Nov 26 2020, 7:20 AM · Bug Report
gniibe merged T3574: gpg-agent doesn't pick up ssh certificates into T1756: gpg-agent doesn't accept ssh certificates.
Nov 26 2020, 7:20 AM · gnupg, Feature Request
gniibe closed T4004: Curve25519 for Zeitcontrol card as Resolved.

Support was added in version 3 card.

Nov 26 2020, 7:17 AM · Feature Request, scd
gniibe merged task T4817: dirmgr keys.openpgp.org:443 Address family not supported by protocol into T4977: dirmngr not working with linux kernel parameter ipv6.disable=1.
Nov 26 2020, 7:15 AM · Bug Report
gniibe merged T4817: dirmgr keys.openpgp.org:443 Address family not supported by protocol into T4977: dirmngr not working with linux kernel parameter ipv6.disable=1.
Nov 26 2020, 7:15 AM · Restricted Project, gnupg (gpg22), dirmngr, Bug Report
gniibe added a comment to T4817: dirmgr keys.openpgp.org:443 Address family not supported by protocol.

Because the original problem of EAFNOSUPPORT has been fixed, I am going to close this bug.

Nov 26 2020, 7:14 AM · Bug Report
gniibe added a comment to T4152: command 'KS_GET' failed: Operation not permitted.

It is likely that EPERM (Operation not permitted) occurs by a system call connect(2) if you have some firewall rule(s) which forbids network access.
The dirmngr use libdns resolver which directly connects name servers.
If this is the case, you can use `--standard-resolver\ to use system's standard DNS resolver instead.

Nov 26 2020, 6:50 AM · Bug Report
gniibe closed T4153: no dirmngr.log created after previous command 'KS_GET' failed: Operation not permitted as Invalid.

The log file specified in .gnupg/dirmngr.conf is created at the start of dirmngr.
dirmngr is invokded by the first call of gpg, and it keeps running and handle next request from second invocation of gpg.
So, nothing is problem.

Nov 26 2020, 6:47 AM · Not A Bug
gniibe added a comment to T5055: APPCRASH with libKF5ConfigWidgets.dll.

On Debian, please see: /usr/share/doc/g++-mingw-w64-i686-win32/README.Debian

Nov 26 2020, 6:15 AM · Bug Report, gpg4win
gniibe added a comment to T5055: APPCRASH with libKF5ConfigWidgets.dll.

IIUC, the error occurred when Kleo is exiting and a destructor (in libKF5ConfigWidgets) is called with null pointer.

Nov 26 2020, 3:57 AM · Bug Report, gpg4win
andfox added a comment to T5055: APPCRASH with libKF5ConfigWidgets.dll.

Version 3.1.14 released 2020-11-25
Kleopatra / GnuPG: Unicode home directories are now supported. (T5055)

Nov 26 2020, 2:54 AM · Bug Report, gpg4win
gniibe merged T4640: Outdated text and links at <http://git.gnupg.org/> into T4963: Update GnuPG versions listed on https://git.gnupg.org/.
Nov 26 2020, 2:31 AM · gpgweb, Bug Report
gniibe merged task T4640: Outdated text and links at <http://git.gnupg.org/> into T4963: Update GnuPG versions listed on https://git.gnupg.org/.
Nov 26 2020, 2:31 AM · gpgweb, Bug Report
gniibe added a comment to T4640: Outdated text and links at <http://git.gnupg.org/>.

Fixed in rDf810f0bc5b13: git.gnupg.org: Update entry page.

Nov 26 2020, 2:31 AM · gpgweb, Bug Report