Page MenuHome GnuPG
Feed All Stories

Nov 11 2021

aheinecke committed rO76b43345cdd3: Do not abort if updating HTML Body fails (authored by aheinecke).
Do not abort if updating HTML Body fails
Nov 11 2021, 6:05 PM
aheinecke committed rOd245f6513fd4: Improve ReadAsPlain detection (authored by aheinecke).
Improve ReadAsPlain detection
Nov 11 2021, 6:05 PM
aheinecke committed rO23e3fd7da386: Fix fallback logic in set_body (authored by aheinecke).
Fix fallback logic in set_body
Nov 11 2021, 6:05 PM
aheinecke committed rOb400af8e4f7d: Avoid using bultin gettext function name (authored by aheinecke).
Avoid using bultin gettext function name
Nov 11 2021, 6:05 PM
aheinecke committed rO7205a22c41dc: Use explicit extern declaration for opt struct (authored by aheinecke).
Use explicit extern declaration for opt struct
Nov 11 2021, 6:05 PM
aheinecke committed rO8a0477251ddd: Ignore deprecated copy warnings (authored by aheinecke).
Ignore deprecated copy warnings
Nov 11 2021, 6:05 PM
ikloecker added a comment to T5638: Make Kleopatra group configuration exportable.

A first version has landed.

Nov 11 2021, 4:35 PM · Restricted Project, Feature Request, kleopatra
ikloecker committed rKLEOPATRA1875d6d383bf: Add user interface markers to some UI elements (authored by ikloecker).
Add user interface markers to some UI elements
Nov 11 2021, 4:25 PM
ikloecker committed rKLEOPATRA2cbbadb43d3f: Fix defaulting to last used directory when importing certificates (authored by ikloecker).
Fix defaulting to last used directory when importing certificates
Nov 11 2021, 4:25 PM
ikloecker committed rKLEOPATRA36e12fc655fe: Don't try to finish if we have to wait for more jobs (authored by ikloecker).
Don't try to finish if we have to wait for more jobs
Nov 11 2021, 4:25 PM
ikloecker committed rKLEOPATRA5c4d3a80d5a9: Allow the export of certificate groups (authored by ikloecker).
Allow the export of certificate groups
Nov 11 2021, 4:25 PM
ikloecker committed rKLEOPATRA532e590d4c84: Show information about new and updated groups after the import (authored by ikloecker).
Show information about new and updated groups after the import
Nov 11 2021, 4:25 PM
ikloecker committed rKLEOPATRA906a1301fb41: Import certificate groups when importing certificates from files (authored by ikloecker).
Import certificate groups when importing certificates from files
Nov 11 2021, 4:25 PM
ikloecker committed rKLEOPATRAe62cb2d3eb53: Rewrite the post-processing of external X.509 certificate imports (authored by ikloecker).
Rewrite the post-processing of external X.509 certificate imports
Nov 11 2021, 4:25 PM
ikloecker committed rKLEOPATRA5381086050c5: Add protocol and type of import to the import results (authored by ikloecker).
Add protocol and type of import to the import results
Nov 11 2021, 4:25 PM
ikloecker committed rKLEOPATRA836adc09f94f: Update the key cache after the import (authored by ikloecker).
Update the key cache after the import
Nov 11 2021, 4:25 PM
ikloecker committed rKLEOPATRAea80bb76e708: Store jobs and ids resp. results and ids together (authored by ikloecker).
Store jobs and ids resp. results and ids together
Nov 11 2021, 4:25 PM
ikloecker committed rKLEOPATRAfdb150a3ae0c: Remove finished jobs from idsByJob map (authored by ikloecker).
Remove finished jobs from idsByJob map
Nov 11 2021, 4:25 PM
ikloecker committed rKLEOPATRA09c1100d4463: Set group config to use by KeyCache (authored by ikloecker).
Set group config to use by KeyCache
Nov 11 2021, 4:25 PM
ikloecker committed rLIBKLEO37cd511569ac: Allow retrieving a group with a certain id from the cache (authored by ikloecker).
Allow retrieving a group with a certain id from the cache
Nov 11 2021, 3:57 PM
ikloecker committed rLIBKLEOa02d98aad215: Bump library version (authored by ikloecker).
Bump library version
Nov 11 2021, 3:57 PM
ikloecker committed rLIBKLEOc7babd924cbe: Add helper for checking if a container contains a certain key (authored by ikloecker).
Add helper for checking if a container contains a certain key
Nov 11 2021, 3:57 PM
ikloecker committed rLIBKLEOad0969fa65cc: Allow suspending the auto-refresh of the key cache (authored by ikloecker).
Allow suspending the auto-refresh of the key cache
Nov 11 2021, 3:57 PM
ikloecker committed rLIBKLEOff118145c6cb: Add helper to get the fingerprints of a bunch of keys (authored by ikloecker).
Add helper to get the fingerprints of a bunch of keys
Nov 11 2021, 3:57 PM
ikloecker committed rLIBKLEOf8d0029b24f9: Set group config to use by KeyCache instead of group config filename (authored by ikloecker).
Set group config to use by KeyCache instead of group config filename
Nov 11 2021, 3:57 PM
ikloecker committed rLIBKLEO7c507f7a0cee: Get multiple keys by their fingerprints (authored by ikloecker).
Get multiple keys by their fingerprints
Nov 11 2021, 3:57 PM
ikloecker committed rLIBKLEO33f060ac5e51: Add helper for converting a QStringList to a vector of std::strings (authored by ikloecker).
Add helper for converting a QStringList to a vector of std::strings
Nov 11 2021, 3:57 PM
ikloecker committed rLIBKLEOee562c9f7792: Factor code reading/writing the group configuration out of KeyCache (authored by ikloecker).
Factor code reading/writing the group configuration out of KeyCache
Nov 11 2021, 3:57 PM
aheinecke changed the status of T5681: GpgOL: Handle GPO settings for readAsPlain from Open to Testing.

Tested both with the policies key and with the normal key and with HKLM fallback. Works as expected. There was also an issue where the error handling in case setting the HTML body failed did no longer work, probably since the verification preview changes. This was fixed with 76b43345cdd3e932dae7b677e5c021ca52191f8e

Nov 11 2021, 2:09 PM · Restricted Project, gpgol
aheinecke committed rWd55b907bf1d0: Fix pcre download link (authored by aheinecke).
Fix pcre download link
Nov 11 2021, 2:07 PM
Jakuje added a comment to T5636: Run integrity checks + selftests from library constructor in FIPS.

I just wanted to add one more note that i just found out that the tests --disable-hwf or gcry_control GCRYCTL_DISABLE_HWF have no effect in case the global_init() is called from constructor.

Nov 11 2021, 12:08 PM · FIPS, libgcrypt, Bug Report
werner committed rDc15b6ec7cd12: web: Removed franken.de mirror, which is not longer available. (authored by werner).
web: Removed franken.de mirror, which is not longer available.
Nov 11 2021, 11:11 AM
klali created T5682: ed25519 internal authenticate with openpgpcard may send long data over short apdu.
Nov 11 2021, 10:22 AM · Restricted Project, scd, ssh, Bug Report
aheinecke added a project to T5681: GpgOL: Handle GPO settings for readAsPlain: Restricted Project.
Nov 11 2021, 10:00 AM · Restricted Project, gpgol
aheinecke set Version to master on T5681: GpgOL: Handle GPO settings for readAsPlain.
Nov 11 2021, 10:00 AM · Restricted Project, gpgol
aheinecke triaged T5681: GpgOL: Handle GPO settings for readAsPlain as High priority.
Nov 11 2021, 9:59 AM · Restricted Project, gpgol
gniibe committed rC1481607cb9db: tests:pkcs1v2: Skip tests with small keys in FIPS mode. (authored by gniibe).
tests:pkcs1v2: Skip tests with small keys in FIPS mode.
Nov 11 2021, 5:47 AM
gniibe committed rC66119e0c1a02: tests:pubkey: Replace RSA key to one of 2k. (authored by gniibe).
tests:pubkey: Replace RSA key to one of 2k.
Nov 11 2021, 5:47 AM
gniibe committed rM8cd2fe7b3de4: tests: Use GPG_ERROR_MT_LIBS for a test with threads. (authored by gniibe).
tests: Use GPG_ERROR_MT_LIBS for a test with threads.
Nov 11 2021, 2:14 AM

Nov 10 2021

ikloecker added a comment to T5598: AppImage of gpg.

I compiled the Appimage with the scripts in Gpg4win and it runs Kleopatra and works :-)

Nov 10 2021, 6:18 PM · AppImage, gnupg, Restricted Project, Feature Request
Laurent Montel <montel@kde.org> committed rLIBKLEOdb985745c3d6: GIT_SILENT: master is open (authored by Laurent Montel <montel@kde.org>).
GIT_SILENT: master is open
Nov 10 2021, 1:25 PM
aheinecke added a comment to T5598: AppImage of gpg.

I compiled the Appimage with the scripts in Gpg4win and it runs Kleopatra and works :-)

Nov 10 2021, 12:31 PM · AppImage, gnupg, Restricted Project, Feature Request
aheinecke committed rWf479e78e1147: Make compendium compile with latex from bullseye (authored by aheinecke).
Make compendium compile with latex from bullseye
Nov 10 2021, 9:42 AM
aheinecke committed rW202f3f0ec1f1: Also add PCRE checksum in master (authored by aheinecke).
Also add PCRE checksum in master
Nov 10 2021, 9:42 AM
aheinecke committed rW0c943eaca028: Update glib and add PCRE package (authored by aheinecke).
Update glib and add PCRE package
Nov 10 2021, 9:42 AM
aheinecke committed rW2508e682ffa6: Update glib to 2.50 to fix build with gcc 10 (authored by aheinecke).
Update glib to 2.50 to fix build with gcc 10
Nov 10 2021, 9:42 AM
gniibe committed rT27ac2776f323: libtool: Link without -flat_namespace for macOS. (authored by gniibe).
libtool: Link without -flat_namespace for macOS.
Nov 10 2021, 7:33 AM
gniibe committed rTa5042e298d5c: Fix internal API of functions to match declaration. (authored by gniibe).
Fix internal API of functions to match declaration.
Nov 10 2021, 7:33 AM
gniibe committed rAe342b58b6230: libtool: Link without -flat_namespace for macOS. (authored by gniibe).
libtool: Link without -flat_namespace for macOS.
Nov 10 2021, 7:12 AM
gniibe committed rPTH854b3fd1d66c: libtool: Link without -flat_namespace for macOS. (authored by gniibe).
libtool: Link without -flat_namespace for macOS.
Nov 10 2021, 4:32 AM
gniibe committed rG0982c6cb19da: scd: More conservative selection of a card reader. (authored by gniibe).
scd: More conservative selection of a card reader.
Nov 10 2021, 4:01 AM
gniibe committed rC915839abc54a: doc: Fix NEWS entry to refer CVE-2021-40528. (authored by gniibe).
doc: Fix NEWS entry to refer CVE-2021-40528.
Nov 10 2021, 3:49 AM
gniibe committed rCb118681ebc4c: doc: Fix NEWS entry to refer CVE-2021-40528. (authored by gniibe).
doc: Fix NEWS entry to refer CVE-2021-40528.
Nov 10 2021, 3:49 AM
gniibe committed rK0d7a62c355ea: libtool: Link without -flat_namespace for macOS. (authored by gniibe).
libtool: Link without -flat_namespace for macOS.
Nov 10 2021, 3:37 AM
gniibe committed rM50daf3d75d66: libtool: Link without -flat_namespace for macOS. (authored by gniibe).
libtool: Link without -flat_namespace for macOS.
Nov 10 2021, 3:24 AM
gniibe added a project to T5610: macOS 11 or newer support: Update libtool: gpgme.

Also applied to gpgme.

Nov 10 2021, 3:07 AM · gpgme, MacOS, ntbtls, npth, libksba, libassuan, libgcrypt, gpgrt
gniibe added a comment to T5610: macOS 11 or newer support: Update libtool.

Since there is no problem with libgpg-error 1.43, I applied it to other libraries: npth, libassuan, libksba, and ntbtls.

Nov 10 2021, 3:04 AM · gpgme, MacOS, ntbtls, npth, libksba, libassuan, libgcrypt, gpgrt
gniibe added a comment to T5512: Implement service indicators.

I'll fix regressions: failures of pubkey and pkcs1v2.

Nov 10 2021, 2:09 AM · Feature Request, FIPS, libgcrypt
jcross added a comment to T5555: Cannot add existing ECDSA key as a signing subkey.

Friendly ping @werner

Nov 10 2021, 1:32 AM · gnupg24, Bug Report

Nov 9 2021

werner added a comment to T5523: jitter entropy RNG update.

Yes, keep the internal SHA-3.

Nov 9 2021, 11:33 AM · FIPS, libgcrypt
gniibe added a comment to T5636: Run integrity checks + selftests from library constructor in FIPS.

We will have rnd-getentropy.c

Nov 9 2021, 11:16 AM · FIPS, libgcrypt, Bug Report
gniibe claimed T5636: Run integrity checks + selftests from library constructor in FIPS.
Nov 9 2021, 11:08 AM · FIPS, libgcrypt, Bug Report
gniibe moved T5636: Run integrity checks + selftests from library constructor in FIPS from Backlog to Next on the FIPS board.
Nov 9 2021, 11:08 AM · FIPS, libgcrypt, Bug Report
werner committed rD758940e1ad69: drafts,openpgp-webkey-service: Clarify when to use the direct method. (authored by werner).
drafts,openpgp-webkey-service: Clarify when to use the direct method.
Nov 9 2021, 9:09 AM
werner committed rG0c8bc154342b: wks: Do not mark key files as executable (authored by bmwiedemann).
wks: Do not mark key files as executable
Nov 9 2021, 9:06 AM
werner committed rG60be00b0336b: wks: Allow access to newly created dirs (authored by bmwiedemann).
wks: Allow access to newly created dirs
Nov 9 2021, 9:06 AM
werner committed rG46ada6a9bd83: wks: Do not mark key files as executable (authored by bmwiedemann).
wks: Do not mark key files as executable
Nov 9 2021, 9:06 AM
werner committed rGf54feb447000: wks: Allow access to newly created dirs (authored by bmwiedemann).
wks: Allow access to newly created dirs
Nov 9 2021, 9:06 AM
werner committed rG8d6968c52cc8: doc: Minor fix for --http-proxy. (authored by werner).
doc: Minor fix for --http-proxy.
Nov 9 2021, 9:06 AM
werner closed T5680: Optional, larger key sizes for the Blowfish cipher as Wontfix.

Blowfish is not part of OpenPGP and according to its creator not the best cipher. Sorry to say no. You may nevertheless be interested in the recent discussion threads on PQC on the cryptography ML.

Nov 9 2021, 8:06 AM · Feature Request
gniibe added a comment to T5512: Implement service indicators.

Applied and pushed symmetric algo for basic.

Nov 9 2021, 7:37 AM · Feature Request, FIPS, libgcrypt
gniibe committed rCfb931073707e: tests: Explicit FIPS checking for symmetric algorithms. (authored by Jakuje).
tests: Explicit FIPS checking for symmetric algorithms.
Nov 9 2021, 7:37 AM
gniibe committed rC2a899b5b8458: tests: Benchmark also larger RSA keys in FIPS mode (authored by Jakuje).
tests: Benchmark also larger RSA keys in FIPS mode
Nov 9 2021, 7:37 AM
gniibe added a comment to T5636: Run integrity checks + selftests from library constructor in FIPS.

Let me clean up rndlinux.c for current use case, at first.

Nov 9 2021, 7:07 AM · FIPS, libgcrypt, Bug Report
gniibe added a comment to T5523: jitter entropy RNG update.

I decided to use 3.3.0 disabling pthread feature.

Nov 9 2021, 6:41 AM · FIPS, libgcrypt
Heino created T5680: Optional, larger key sizes for the Blowfish cipher.
Nov 9 2021, 6:35 AM · Feature Request

Nov 8 2021

Heiko Becker <heiko.becker@kde.org> committed rLIBKLEO49e32463f364: GIT SILENT Change BRANCH_GROUP to stable-kf5-qt5 (authored by Heiko Becker <heiko.becker@kde.org>).
GIT SILENT Change BRANCH_GROUP to stable-kf5-qt5
Nov 8 2021, 10:46 PM
Heiko Becker <heiko.becker@kde.org> committed rKLEOPATRAa7abeea92d99: GIT SILENT Change BRANCH_GROUP to stable-kf5-qt5 (authored by Heiko Becker <heiko.becker@kde.org>).
GIT SILENT Change BRANCH_GROUP to stable-kf5-qt5
Nov 8 2021, 10:44 PM
Heiko Becker <heiko.becker@kde.org> committed rKLEOPATRA42c9be0d72a5: GIT_SILENT Upgrade release service version to 22.03.70. (authored by Heiko Becker <heiko.becker@kde.org>).
GIT_SILENT Upgrade release service version to 22.03.70.
Nov 8 2021, 8:57 PM
Heiko Becker <heiko.becker@kde.org> committed rKLEOPATRA4c38902471a4: GIT_SILENT Upgrade release service version to 21.11.80. (authored by Heiko Becker <heiko.becker@kde.org>).
GIT_SILENT Upgrade release service version to 21.11.80.
Nov 8 2021, 8:26 PM
nsauter added a comment to T4513: dirmngr should try the configured keyservers anyway even if they are all dead.

Any news here? Is this issue going to be fixed or not? It's really annoying.

Nov 8 2021, 1:05 PM · Feature Request, Keyserver, dirmngr
ikloecker claimed T5638: Make Kleopatra group configuration exportable.
Nov 8 2021, 9:43 AM · Restricted Project, Feature Request, kleopatra
ikloecker changed the status of T5677: Kleopatra: Do not offer deprecated gpg/keyserver option in GnuPG System configuration dialog from Open to Testing.
Nov 8 2021, 9:41 AM · Restricted Project, kleopatra, Feature Request
ikloecker renamed T5677: Kleopatra: Do not offer deprecated gpg/keyserver option in GnuPG System configuration dialog from Kleopatra: Do not offer "invisible" options in GnuPG System configuration dialog to Kleopatra: Do not offer deprecated gpg/keyserver option in GnuPG System configuration dialog.
Nov 8 2021, 9:41 AM · Restricted Project, kleopatra, Feature Request
Jakuje added a comment to T5512: Implement service indicators.

Thank you for merging the important parts of the patches and implementing similar stuff for DSA. You are right that DSA is supported in the 140-3 specs so it is fine to keep it enabled with the keylength constraints.

Nov 8 2021, 9:02 AM · Feature Request, FIPS, libgcrypt
gniibe added a comment to T5512: Implement service indicators.

Applied parts except part 2.
The part 3 are modified version, so that memory can be released correctly.

Nov 8 2021, 6:58 AM · Feature Request, FIPS, libgcrypt
gniibe committed rCdf66bd94e6e3: dsa: Add checks in FIPS mode. (authored by gniibe).
dsa: Add checks in FIPS mode.
Nov 8 2021, 6:54 AM
gniibe committed rC1f45fec20822: tests: Add 2k RSA key working in FIPS mode. (authored by Jakuje).
tests: Add 2k RSA key working in FIPS mode.
Nov 8 2021, 6:54 AM
gniibe committed rC1b29be8e7e49: tests: Fix basic.c:check_pubkey. (authored by gniibe).
tests: Fix basic.c:check_pubkey.
Nov 8 2021, 6:54 AM
gniibe committed rCcc3571a1f224: tests: Expect errors from algorithms not supported in FIPS mode. (authored by gniibe).
tests: Expect errors from algorithms not supported in FIPS mode.
Nov 8 2021, 6:54 AM
gniibe committed rC40d63d09b2d0: rsa: Check keylen constraints for key operations. (authored by Jakuje).
rsa: Check keylen constraints for key operations.
Nov 8 2021, 6:54 AM
gniibe committed rCff5ab6a80934: cipher: Respect the disabled flag of pubkey algorithms (authored by Jakuje).
cipher: Respect the disabled flag of pubkey algorithms
Nov 8 2021, 6:54 AM

Nov 7 2021

Laurent Montel <montel@kde.org> committed rLIBKLEOcf27ab5f08d8: GIT_SILENT: prepare 5.19.0beta1 (authored by Laurent Montel <montel@kde.org>).
GIT_SILENT: prepare 5.19.0beta1
Nov 7 2021, 5:25 PM
Laurent Montel <montel@kde.org> committed rKLEOPATRA297ccea15127: GIT_SILENT: prepare 5.19.0beta1 (authored by Laurent Montel <montel@kde.org>).
GIT_SILENT: prepare 5.19.0beta1
Nov 7 2021, 5:23 PM

Nov 6 2021

werner closed T5544: Kleopatra: Ensure that file encryption dialogs has shortcuts on all actions, a subtask of T5535: Kleopatra: Check that accessibility is also supported for VS-NfD, as Resolved.
Nov 6 2021, 4:42 PM · Restricted Project, kleopatra
werner closed T5544: Kleopatra: Ensure that file encryption dialogs has shortcuts on all actions as Resolved.

Closing. In case the audit will request more, we can re-open this task.

Nov 6 2021, 4:42 PM · kleopatra, Restricted Project
werner closed T5535: Kleopatra: Check that accessibility is also supported for VS-NfD as Resolved.

I think we can close this. In January we will have an external audit (BITV) which hopefully will confirm our tests. They auditor will also provide a list of things to improve (if any).

Nov 6 2021, 4:40 PM · Restricted Project, kleopatra

Nov 5 2021

Jakuje added a comment to T5512: Implement service indicators.

Implicit indicators mean that we need to go through the all algorithms and verify that they work if they have approved key sizes/parameters and do not work when they do not.

Nov 5 2021, 2:27 PM · Feature Request, FIPS, libgcrypt
ikloecker committed rKLEOPATRA7a043fd5e570: GIT_SILENT: Minor code cleanup (authored by ikloecker).
GIT_SILENT: Minor code cleanup
Nov 5 2021, 12:51 PM
ikloecker committed rKLEOPATRA0b7978d55049: Import certificates from files containing OpenPGP and X.509 certificates (authored by ikloecker).
Import certificates from files containing OpenPGP and X.509 certificates
Nov 5 2021, 12:51 PM