Stick to your channels and get back after you have learned basic some basic developer workflows.
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Jan 29 2021
Jan 29 2021
• werner changed Due Date from Sep 30 2020, 12:00 AM to Mar 31 2021, 12:00 AM on T4702: Deadline for the GnuPG 2.3.0 release.
• werner closed T5280: gnupg.org webpage advertises the use of insecure git:// protocol at various places as Invalid.
@hanno, this is a bug tracker and not yet another media for your rants.
Yeah looks like a duplicate. You may rename the bug to "Please implement some basic safety checks in a CI".
This should already be fixed in libgcrypt 1.9.1 by rCc6425a5537294dfe2beaafc9105f7af4ceac677f.
Same as https://dev.gnupg.org/T5277, thanks for the note.
This is likely the same as https://dev.gnupg.org/T5277. Do you configure with --disable-asm? If so: it should work without.
• werner changed External Link from https://lists.gnupg.org/pipermail/gnupg-announce/2021q1/000455.html to https://lists.gnupg.org/pipermail/gnupg-announce/2021q1/000456.html on T5275: Exploitable overflow in Libgcrypt 1.9.0.
• werner set External Link to https://lists.gnupg.org/pipermail/gnupg-announce/2021q1/000456.html on T5259: Release Libgcrypt 1.9.1.
Wouldn't it be better to move these failures as a single one into the configure script that it definitely can tell "This Mac has getentropy()"?
web: Fix a typo on the libgcrypt page.
Fix has been released. Keeping this in testing state for easier visibility of this task.
swdb: Libgcrypt 1.9.1
I applied the two patches on Mac OS X 10.5.8, Leopard, to random/rndlinux.c, resulting in this unified diff:
• werner changed the status of T5259: Release Libgcrypt 1.9.1, a subtask of T5157: libgcrypt: ARM64 Builds on macOS fail, from Open to Testing.
• werner changed the status of T5259: Release Libgcrypt 1.9.1, a subtask of T5243: libgcrypt "check if fips_is_operational and error return if not" patch for FIPS 140, from Open to Testing.
• werner changed the status of T5259: Release Libgcrypt 1.9.1, a subtask of T5251: Compile error on ARMv7 for libgcrypt , from Open to Testing.
• werner changed the status of T5259: Release Libgcrypt 1.9.1, a subtask of T5254: libgcrypt 1.9.0 fails make check (selftest), from Open to Testing.
Release done.
• werner changed the status of T5259: Release Libgcrypt 1.9.1, a subtask of T5159: make check fails for libgcrypt on Apple Silicon / ARM Mac, from Open to Testing.
• werner changed the status of T5259: Release Libgcrypt 1.9.1, a subtask of T5264: libgcrypt 1.9.0 does not compile on old Mac OS X, versions 10.5.8 (Leopard) and 10.4.11 (Tiger), both on PPC hardware, from Open to Testing.
• werner changed the status of T5259: Release Libgcrypt 1.9.1, a subtask of T5267: Ed25519 backward compatible private key support for preceding ZERO(s), from Open to Testing.
• werner changed the status of T5259: Release Libgcrypt 1.9.1, a subtask of T5257: 32 bit cross build fails on asm code in gcrypt 1.9.0, from Open to Testing.
• werner changed the status of T5259: Release Libgcrypt 1.9.1, a subtask of T5263: cipher/sha512.c: build failure without arm neon asm, from Open to Testing.
• werner changed the status of T5259: Release Libgcrypt 1.9.1, a subtask of T5255: libgcrypt: build "error: invalid operand for instruction" when compiling with Clang & LTO, from Open to Testing.
• werner changed the status of T5259: Release Libgcrypt 1.9.1, a subtask of T5271: libgcrypt 1.9.0 compilation fails on Ubuntu xenial, from Open to Testing.
• werner changed the status of T5259: Release Libgcrypt 1.9.1, a subtask of T5269: failure of modular inverse, from Open to Testing.
• werner changed the status of T5259: Release Libgcrypt 1.9.1, a subtask of T5268: macOS getentropy, from Open to Testing.
• werner changed the status of T5259: Release Libgcrypt 1.9.1, a subtask of T5275: Exploitable overflow in Libgcrypt 1.9.0, from Open to Testing.
Post release updates
Release 1.9.1
There is a question for me here if we should make the behavior of rKLEOPATRA5639dc833f92 the default.
bernhard committed rW795842b9b648: Add timezone to signing significate datetimes (authored by bernhard).
Add timezone to signing significate datetimes
• werner added a parent task for T5259: Release Libgcrypt 1.9.1: T5271: libgcrypt 1.9.0 compilation fails on Ubuntu xenial.
• werner added a subtask for T5271: libgcrypt 1.9.0 compilation fails on Ubuntu xenial: T5259: Release Libgcrypt 1.9.1.
• werner removed a subtask for T5259: Release Libgcrypt 1.9.1: T5271: libgcrypt 1.9.0 compilation fails on Ubuntu xenial.
• werner removed a parent task for T5271: libgcrypt 1.9.0 compilation fails on Ubuntu xenial: T5259: Release Libgcrypt 1.9.1.
• werner added a subtask for T5275: Exploitable overflow in Libgcrypt 1.9.0: T5259: Release Libgcrypt 1.9.1.
• werner added a parent task for T5259: Release Libgcrypt 1.9.1: T5275: Exploitable overflow in Libgcrypt 1.9.0.
jukivili committed rC512c0c752769: hash-common: fix heap overflow when writing more data after final (authored by jukivili).
hash-common: fix heap overflow when writing more data after final
dkg added a comment to T4679: WKD spec should document exactly when a client should fall back from "advanced" to "direct" URL.
See also https://gitlab.com/openpgp-wg/webkey-directory/-/issues/3 which is the same issue.
I linked all related tasks for the release of 1.9.1, so that making release notes can be easier and recording information here.
• gniibe added a parent task for T5259: Release Libgcrypt 1.9.1: T5257: 32 bit cross build fails on asm code in gcrypt 1.9.0.
• gniibe added a parent task for T5271: libgcrypt 1.9.0 compilation fails on Ubuntu xenial: T5259: Release Libgcrypt 1.9.1.
• gniibe added a subtask for T5259: Release Libgcrypt 1.9.1: T5271: libgcrypt 1.9.0 compilation fails on Ubuntu xenial.
Jan 28 2021
Jan 28 2021
Patch lets it build on xenial for me, thank you.
Patch for this bug is available here, "attachment-0001.bin": https://lists.gnupg.org/pipermail/gcrypt-devel/2021-January/005079.html
I committed the partial result docker container, so I can restart it for investigation. So:
The groups are read from kleopatragroupsrc (located in the default location(s) for configuration files, e.g. next to kleopatrarc). The format is
[Group-<group id>] Name=<group name> Keys=<fingerprint>,<fingerprint>,...
where group id is a unique identifier for the group (can be identical to group name), group name is the (display) name of the group (which should also be unique for practical reasons), fingerprint is the fingerprint of a key in the group. Everything has to be UTF-8-encoded.
• werner committed rG6e258babe7cc: Include the library version in the compliance checks. (authored by • werner).
Include the library version in the compliance checks.
• werner committed rG90c514868ff5: Include the library version in the compliance checks. (authored by • werner).
Include the library version in the compliance checks.
• werner committed rG1e197c29ed95: scd:p15: Make file selection more robust. (authored by • werner).
scd:p15: Make file selection more robust.
scd: Define new status word
• werner committed rG5bcbc8cee310: scd:p15: Factor the commonKeyAttributes parser out. (authored by • werner).
scd:p15: Factor the commonKeyAttributes parser out.
• werner committed rCaa3f595341eb: Add a compliance keyword to gcry_get_config. (authored by • werner).
Add a compliance keyword to gcry_get_config.
• ikloecker committed rKLEOPATRA2d8a67f2195c: Tell KeyCache to read key groups from kleopatragroupsrc (authored by • ikloecker).
Tell KeyCache to read key groups from kleopatragroupsrc
Implement BCC splits of Mails
Laurent Montel <montel@kde.org> committed rLIBKLEOfbc81934c643: GIT_SILENT: add CMAKE_EXPORT_COMPILE_COMMANDS (authored by Laurent Montel <montel@kde.org>).
GIT_SILENT: add CMAKE_EXPORT_COMPILE_COMMANDS
Laurent Montel <montel@kde.org> committed rKLEOPATRA6939878c27b3: GIT_SILENT: add CMAKE_EXPORT_COMPILE_COMMANDS (authored by Laurent Montel <montel@kde.org>).
GIT_SILENT: add CMAKE_EXPORT_COMPILE_COMMANDS
Bump library version
• ikloecker committed rLIBKLEO166cc951f5eb: Optionally, read groups from a file (authored by • ikloecker).
Optionally, read groups from a file
Valodim added a comment to T4163: hkps://hkps.pool.sks-keyservers.net has to many bad servers to be a good default.
The last server of the HKPS pool dropped off for several hours yesterday, during which hkps.pool.sks-keyservers.net could not be resolved.
• aheinecke moved T5228: GpgOL: Combined S/MIME and OpenPGP operation from Restricted Project Column to Restricted Project Column on the Restricted Project board.
• aheinecke added a subtask for T4702: Deadline for the GnuPG 2.3.0 release: T5273: Release Gpg4win 4.x.x.
Fix CreateProcess call of GpgEX
• aheinecke added parent tasks for T5273: Release Gpg4win 4.x.x: T5272: GpgEx: Incorrect spawn of UI Server can cause a c:\Program.exe to be executed, T5241: Allow selection of groups as recipients for file encryption, T5240: Allow selection of groups implicitly defined by tags, T5239: Add UI for managing groups, T5228: GpgOL: Combined S/MIME and OpenPGP operation, T5216: Kleopatra: Fix handling of UNC paths, T5217: Kleopatra: Adapt to config changes in GnuPG master.
• aheinecke added a subtask for T5216: Kleopatra: Fix handling of UNC paths: T5273: Release Gpg4win 4.x.x.
• aheinecke added a subtask for T5217: Kleopatra: Adapt to config changes in GnuPG master: T5273: Release Gpg4win 4.x.x.
• aheinecke added a subtask for T5228: GpgOL: Combined S/MIME and OpenPGP operation: T5273: Release Gpg4win 4.x.x.
• werner changed the status of T5263: cipher/sha512.c: build failure without arm neon asm from Open to Testing.
• werner renamed T5254: libgcrypt 1.9.0 fails make check (selftest) from libgcrypt 1.9.0 fails make check to libgcrypt 1.9.0 fails make check (selftest).