Yes, I think the service not active is the cause of the issue. But I don't really understand where this error is lost, I think this should be investigated because I would also expect it not to have a success on this line:
[3900] org.kde.pim.kleopatra: DeviceInfoWatcher::Worker::poll: context finished with Erfolg (code: 0, source: Quelle nicht angegeben)
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Mar 25 2021
Mar 25 2021
• aheinecke added a comment to T5359: Kleopatra: Loop in DeviceInfoWatcher with GnuPG 2.3 on Windows.
• ikloecker added a comment to T5359: Kleopatra: Loop in DeviceInfoWatcher with GnuPG 2.3 on Windows.
There are two things happening at the same time:
- ReaderStatusThread looks for smart cards by running SCD SERIALNO --all. This fails with "Service not active".
- DeviceInfoWatcher starts SCD DEVINFO --watch and then polls for results. Polling results in "finished with success". If this happens then DeviceInfoWatcher starts another SCD DEVINFO --watch. This is done because SCD DEVINFO --watch finishes with success when the last smartcard is removed. I have no idea why it exists immediately with success. Could this be related the "service not active" message? If yes, then I guess SCD DEVINFO --watch should probably also fail with "service not active" instead of starting without error and then finishing with success.
Btw this only occurs for some options:
• ikloecker moved T5361: Kleopatra: No icon for Smartcard Management from Restricted Project Column to Restricted Project Column on the Restricted Project board.
• ikloecker added a project to T5361: Kleopatra: No icon for Smartcard Management: Restricted Project.
• ikloecker committed rKLEOPATRA8c9c078913f7: Use the auth-sim-locked icon for smartcard management (authored by • ikloecker).
Use the auth-sim-locked icon for smartcard management
• aheinecke triaged T5362: Kleopatra: Add warning in compliance mode if gnupg version is not compliant as Normal priority.
• aheinecke committed rKLEOPATRA155aebbc58fd: Move tags tab to the back in appearanceconfig (authored by • aheinecke).
Move tags tab to the back in appearanceconfig
• aheinecke added a comment to T4974: timeout for pinentry too short for key-generation, losing previous entries.
pinentry-timeout is indeed used when it is not set to 0.
• aheinecke added a comment to T4974: timeout for pinentry too short for key-generation, losing previous entries.
In my opinion this is also a problem. Especially if you think about it for a while. The one minute timeout is too short and pinentry-timeout which I would expect here to be the config value to adjust this is not used.
Fixed with commit 4d95b7457d62bf785a2157bb2cfa002bde7ff8f5. It turned out the test the convert was already there, but its result was not used to decide whether to build the doc or not.
When testing under Windows "scd devinfo --watch" returns immediately with ERR 100663614 Service is not running <SCD>
Probably also if you would use PC/SC on Linux but I have not tested this.
• aheinecke added a comment to T5359: Kleopatra: Loop in DeviceInfoWatcher with GnuPG 2.3 on Windows.
The difference seems to be that "scd devinfo --watch" returns immediately with "Service not active"
• aheinecke triaged T5359: Kleopatra: Loop in DeviceInfoWatcher with GnuPG 2.3 on Windows as High priority.
build: Revert the previous commit.
I suppose that you installed the latest version of gpg4win. Please state the exact version you installed.
• gniibe committed rC52f6e9515988: build: Remove intermediate PDF files from EXTRA_DIST. (authored by • gniibe).
build: Remove intermediate PDF files from EXTRA_DIST.
gouttegd committed rS4d95b7457d62: build: Do not build doc if tools are missing. (authored by gouttegd).
build: Do not build doc if tools are missing.
Mar 24 2021
Mar 24 2021
I agree about checking for convert (but maybe just skip building the doc instead of aborting everything if convert cannot be found).
• werner committed rCc8c38757c428: ecc: Fix keygrip computation for compressed points. (authored by • werner).
ecc: Fix keygrip computation for compressed points.
• werner shifted T5328: On the (in)security of Elgamal in OpenPGP from the Restricted Space space to the S1 Public space.
• werner committed rG73bad368dacf: card: Add option --use-default-pin to command "login". (authored by • werner).
card: Add option --use-default-pin to command "login".
• werner committed rGc56926f77323: sm: Add a few more OIDs to the table for nicer keylistings (authored by • werner).
sm: Add a few more OIDs to the table for nicer keylistings
• werner committed rG964363e78821: scd:p15: Make $SIGNKEY et al determination more fault tolerant. (authored by • werner).
scd:p15: Make $SIGNKEY et al determination more fault tolerant.
• werner committed rG5346da61c14d: gpg: No warning in quiet mode for S2K mode 0. (authored by • werner).
gpg: No warning in quiet mode for S2K mode 0.
I have a minimal reproducer:
diff --git a/tests/basic.c b/tests/basic.c index 9a7e33cc..73ae01db 100644 --- a/tests/basic.c +++ b/tests/basic.c @@ -6346,11 +6346,152 @@ do_check_ocb_cipher (int inplace) "033ac4d13c3decc4c62d7de718ace802" "140452dc850989f6762e3578bbb04be3" "1a237c599c4649f4e586b2de" + }, + { GCRY_CIPHER_AES, 12, "0F0E0D0C0B0A09080706050403020100", + "BBAA9988776655443322110D", + "000102030405060708090A0B0C0D0E0F1011121314151617" + "18191A1B1C1D1E1F2021222324252627", + /* test vector for checksumming */ + "01000000000000000000000000000000" + "02000000000000000000000000000000" + "04000000000000000000000000000000" + "08000000000000000000000000000000" + "10000000000000000000000000000000" + "20000000000000000000000000000000" + "40000000000000000000000000000000" + "80000000000000000000000000000000" + "00010000000000000000000000000000" + "00020000000000000000000000000000" + "00040000000000000000000000000000" + "00080000000000000000000000000000" + "00100000000000000000000000000000" + "00200000000000000000000000000000" + "00400000000000000000000000000000" + "00800000000000000000000000000000" + "00000100000000000000000000000000" + "00000200000000000000000000000000" + "00000400000000000000000000000000" + "00000800000000000000000000000000" + "00001000000000000000000000000000" + "00002000000000000000000000000000" + "00004000000000000000000000000000" + "00008000000000000000000000000000" + "00000001000000000000000000000000" + "00000002000000000000000000000000" + "00000004000000000000000000000000" + "00000008000000000000000000000000" + "00000010000000000000000000000000" + "00000020000000000000000000000000" + "00000040000000000000000000000000" + "00000080000000000000000000000000" + "00000000010000000000000000000000" + "00000000020000000000000000000000" + "00000000040000000000000000000000" + "00000000080000000000000000000000" + "00000000100000000000000000000000" + "00000000200000000000000000000000" + "00000000400000000000000000000000" + "00000000800000000000000000000000" + "00000000000100000000000000000000" + "00000000000200000000000000000000" + "00000000000400000000000000000000" + "00000000000800000000000000000000" + "00000000001000000000000000000000" + "00000000002000000000000000000000" + "00000000004000000000000000000000" + "00000000008000000000000000000000" + "02000000000000000000000000000000" + "04000000000000000000000000000000" + "08000000000000000000000000000000" + "10000000000000000000000000000000" + "20000000000000000000000000000000" + "40000000000000000000000000000000" + "80000000000000000000000000000000" + "00010000000000000000000000000000" + "00020000000000000000000000000000" + "00040000000000000000000000000000" + "00080000000000000000000000000000" + "00100000000000000000000000000000" + "00200000000000000000000000000000" + "00400000000000000000000000000000" + "00800000000000000000000000000000" + "00000100000000000000000000000000" + "00000200000000000000000000000000" + "00000400000000000000000000000000" + "00000800000000000000000000000000", + "01105c6e36f6ac480f022c51e31ed702" + "90fda4b7b783194d4b4be8e4e1e2dff4" + "6a0804d1c5f9f808ea7933e31c063233" + "2bf65a22b20bb13cde3b80b3682ba965" + "b1207c58916f7856fa9968b410e50dee" + "98b35c071163d1b352b9bbccd09fde29" + "b850f40e71a8ae7d2e2d577f5ee39c46" + "7fa28130b50a123c29958e4665dda9a5" + "e0793997f8f19633a96392141d6e0e88" + "77850ed4364065d1d2f8746e2f1d5fd1" + "996cdde03215306503a30e41f58ef3c4" + "400365cfea4fa6381157c12a46598edf" + "18604854462ec66e3d3cf26d4723cb6a" + "9d801095048086a606fdb9192760889b" + "a8ce2e70e1b55a469137a9e2e6734565" + "283cb1e2c74f37e0854d03e33f8ba499" + "ef5d9af4edfce077c6280338f0a64286" + "2e6bc27ebd5a4c91b3778e22631251c8" + "c5bb75a10945597a9d6c274fc82d3338" + "b403a0a549d1375f26e71ef22bce0941" + "93ea87e2ed72fce0546148c351eec3be" + "867bb1b96070c377fff3c98e21562beb" + "475cfe28abcaaedf49981f6599b15140" + "ea6130d24407079f18ba9d4a8960b082" + "b39c57320e2e064f02fde88c23112146" + "1cac3655868aef584714826ee4f361fb" + "e6d692e1589cbb9dd3c74fa628df2a1f" + "3b0029b1d62b7e9978013ed3c793c1dd" + "1f184c8f7022a853cac40b74ac749aa3" + "f33f0d14732dfda0f2c3c20591bf1f5a" + "710ec0d0bca342baa5146068a78ff58c" + "66316312b7a98af35a0f4e92799b4047" + "f047ae61f25c28d232ce5c168cc745d6" + "6da13cb0f9e38a696635dba7a21571cf" + "cd64ec8cc33db7879f59a90d9edd00f6" + "a899e39ab36b9269a3ac04ebad9326bf" + "53cd9b400168a61714cd628a4056d236" + "bd8622c76daa54cb65f5db2fe03bafbe" + "0b23549ae31136f607293e8093a21934" + "74fd5e9c2451b4c8e0499e6ad34fafc8" + "ab77722a282f7f84b14ddebf7e696300" + "c1ef92d4a0263c6cca104530f996e272" + "f58992ff68d642b071a5848dc4acf2ae" + "28fb1f27ae0f297d5136a7a0a4a03e89" + "b588755b8217a1c62773790e69261269" + "19f45daf7b3ccf18e3fc590a9a0e172f" + "033ac4d13c3decc4c62d7de718ace802" + "140452dc850989f6762e3578bbb04be3" + "a8ae66427697167e85725b37b304baf0" + "56dbcef79fbb97cdfe1590e5f3d0bd1b" + "ce518f2f141960a1c80a4fe787b90b63" + "e7b0e0a0d8d522619130c544bb1abad0" + "b267c650e8916b5d7ececfeea7f0ad15" + "206a92581319946b138764f209109a20" + "0146b4cfb2ce8bd0db5c2cd5b495c56f" + "8f8a7934fe1f9add0674d4549080bf0d" + "01149ed18dbdccc5e54a3e7039546970" + "401ecc885902ee3dcfad504a68066f92" + "c779f1e1c48d37ba0e177ac652c1827b" + "f1f6723d533f0cdf36331e3ad1e1b1af" + "bc89a29c87fe3603353130d0dfbe1f29" + "13ad144e7c6515fb92005b6ece218b4f" + "baedc42d484fffee39df88041b49342a" + "6134cc7ca46d40d274c1ffafa98956e6" + "a492486989c4e328761c01798abcb09b" + "a42eb115334619daaeae9175f365fe9f" + "e5c3b254379d546005016784015f729f" + "4715ff6db16c5d16333e03fd" } }; gpg_error_t err = 0; gcry_cipher_hd_t hde, hdd; - unsigned char out[1024]; + unsigned char out[2048]; unsigned char tag[16]; int tidx;
Sorry, this is not a help line. Please use one of the the mailing lists or the gpg4win fori for ask for help.
gpg: Fix v5 signature for clearsign.
gpg: Support ECDH with v5 key.
Mar 23 2021
Mar 23 2021
I did a bit digging and it looks like the code path using accelerator is not hit because the test vecors have max ~48 blocks, but accelerator is involved only with 64 blocks and more if I read the code right. So we need 1) larger test vector to invoke this code path in libgcrypt 2) figure out what goes wrong there.
• ikloecker committed rLIBKLEO1b3ecd9a280e: Fix overriding of the sender's encryption keys (authored by • ikloecker).
Fix overriding of the sender's encryption keys
• ikloecker committed rLIBKLEO15ec596d67a9: Add helper for getting a test key (authored by • ikloecker).
Add helper for getting a test key
• ikloecker committed rLIBKLEOfeb787ba173a: Fix help of test application for key resolver (authored by • ikloecker).
Fix help of test application for key resolver
• ikloecker committed rLIBKLEOa6359957b1ef: Refactor update of icon and tooltip of filter button (authored by • ikloecker).
Refactor update of icon and tooltip of filter button
• ikloecker committed rLIBKLEO60fe2079cea4: Improve tooltips of filter button (authored by • ikloecker).
Improve tooltips of filter button
• ikloecker committed rLIBKLEObfed420f6d05: Use S/MIME if S/MIME only is possible and S/MIME is preferred (authored by • ikloecker).
Use S/MIME if S/MIME only is possible and S/MIME is preferred
Laurent Montel <montel@kde.org> committed rLIBKLEOda81a9c0cf71: GIT_SILENT: prepare 5.17.0 rc (authored by Laurent Montel <montel@kde.org>).
GIT_SILENT: prepare 5.17.0 rc
• werner closed T5341: gpgconf does not list default_pubkey_algo pseudo option anymore, a subtask of T5217: Kleopatra: Adapt to config changes in GnuPG master, as Resolved.
The flag value is now 144 and not 146, but that extra bit (value 2) did not make sense for the option. So I think things are okay now.
• werner committed rGa107b24ddb45: gpgconf: Fix listing of default_pubkey_algo. (authored by • werner).
gpgconf: Fix listing of default_pubkey_algo.
Support X25519 and X448.
Mar 22 2021
Mar 22 2021
gpgconf: Support use-keyboxd.
kbxd: Group the options.
• ikloecker committed rLIBKLEOc5f0aa65fca8: Do not remove all keys if OpenPGP only and S/MIME only are both possible (authored by • ikloecker).
Do not remove all keys if OpenPGP only and S/MIME only are both possible
doc: Fix option name.
Release 2.5.5.
Post release updates
• werner committed rDd28aac13abb4: swdb: New libassuan and libgpg-error releases (authored by • werner).
swdb: New libassuan and libgpg-error releases
I was also somewhat surprised to see that the max-cache-ttl options were rendered ineffective my moving the keys to a card.
po: Update all translations for TPM2d.
Release 1.42
Post release updates
core: Add GPG_ERR_SOURCE_TPM2D.
gpg: Support exporting Ed448 SSH key.
gpg: Fix exporting SSH key.
Mar 21 2021
Mar 21 2021
Mar 20 2021
Mar 20 2021
Mar 19 2021
Mar 19 2021
• ikloecker committed rLIBKLEOec81b2b53114: In mixed mode prefer recipient keys matching preferred protocol (authored by • ikloecker).
In mixed mode prefer recipient keys matching preferred protocol
• ikloecker committed rLIBKLEO5d64856ba00e: In mixed mode, use fixed protocols for the sender's keys (authored by • ikloecker).
In mixed mode, use fixed protocols for the sender's keys
• ikloecker committed rLIBKLEO1aa4ab483ff8: Show the sender's encryption key(s) separately (authored by • ikloecker).
Show the sender's encryption key(s) separately
• werner committed rD9a74eb1da537: web: Remove dev.gnupg.org downtime notice. (authored by • werner).
web: Remove dev.gnupg.org downtime notice.
• werner committed rG475644e04943: card: Support OpenPGP.1 and OpenPGP.2 for readcert and writecert. (authored by • werner).
card: Support OpenPGP.1 and OpenPGP.2 for readcert and writecert.
• werner committed rG37b1c5c2004c: scd:openpgp: Allow reading and writing user certs for keys 1 and 2 (authored by • werner).
scd:openpgp: Allow reading and writing user certs for keys 1 and 2
• werner committed rGbbdb48ec0ddd: scd:openpgp: Rename an internal variable. (authored by • werner).
scd:openpgp: Rename an internal variable.
Update protected headers structure
Test comment after server migration.
• werner committed rGd5fb5983232c: scd:openpgp: Small speedup reading card properties. (authored by • werner).
scd:openpgp: Small speedup reading card properties.
Laurent Montel <montel@kde.org> committed rLIBKLEO7f7a0a20a5e1: GIT_SILENT: add metainfo.yaml.license (authored by Laurent Montel <montel@kde.org>).
GIT_SILENT: add metainfo.yaml.license
Mar 18 2021
Mar 18 2021
• werner committed rG85082a83c2c1: scd:p15: Allow to use an auth object label with cmd CHECKPIN. (authored by • werner).
scd:p15: Allow to use an auth object label with cmd CHECKPIN.
scd:p15: New attribute CHV-LABEL.
• werner committed rG1ac189f2df6c: card: Print PIN descriptions and fix number of printed retry counters. (authored by • werner).
card: Print PIN descriptions and fix number of printed retry counters.
agent: Simplify a function.
• werner closed T5348: ECC public keys are not accepted by Facebook (Unknown PGP Public Key Error) as Resolved.
So Facebook simply does not support Ed25519 keys; there implementation is a bit limited. To be fair, there is no published RFC describing 25519 for OpenPGP; all major implementations work with drafts regarding 25519.