In T5444#146395, @werner wrote:

You should anyway use --quick-gen-key.

This is still broken on 2.5.5.

Gpg4win is a community version and we may or may not apply Authenticode signatures. You can do that yourself, after having checked our OpenPGP release signature. You may however be interested in GnuPG Desktop, which comes with full support and also Authenticode signature.

This is resolved in the final Beta15.

Unfortunately, the attempt on my end still fails. The MSI package was successfully built; however, testing installing it on a Windows host resulted in garbled UI text and a bunch of errors.

Possibly related upstream bug:

light.exe : error LGHT0216 : An unexpected Win32 exception with error code 0x65B occurred: Function failed

Forgot a screenshot:

Yes. I did only one test though, with an inline PGP mail sent with Claws.

Yes it does. I even tested it yesterday.

Looks like plain old inline PGP. Does GpgOL even support inline PGP?

POSIX specifies and requires grep -E, but only mentions egrep as old.

https://flowcrypt.com/
They use OpenPGP.js according to https://flowcrypt.com/docs/getting-started/overview/openpgp-compatibility.html
They have a cooperation with Google.

What is FlowCrypt?

Removing egrep from a Unix system will break all kind of stuff. I am not even sure whether old Unices support grep -E.

And, one more update, to fix win32 builds under --disable-npth. This is a roll-up patch that i think covers everything, you can disregard the earlier patches posted here.

Hm, we probably should avoid gpgv linking to npth as well, as that's also a sticking point in debian. This updated patch (also targeting the 2.4 branch) also has gpgv building against libcommon instead of libcommonpth, which appears to remove the dependency for me.

This patch avoids the unnecessary libassuan linkage by creating a set of stub functions to handle the keydb formats while avoiding potential callouts to keyboxd:

I tried to apply crude patches. Since _POSIX_C_SOURCE is defined when <string.h> is included (in pre-compiled source I see

That error code is actually not an error code but it is the ERROR state from the Kleo SFM. We have seen that yesterday already.

this exact case is fixed in VS-Desktop-3.3.90.12-Beta
Adding further UIDs and making more certifications still works, too.

For reference the related MRs for upstream:
https://invent.kde.org/plasma/breeze/-/merge_requests/540 (pending)

For reference the related MRs for upstream:
https://invent.kde.org/frameworks/kguiaddons/-/merge_requests/170 (merged)
https://invent.kde.org/frameworks/kcolorscheme/-/merge_requests/43 (pending)

Very likely this bug exists since 2017 when support for promotion of local certifications to exportable certifications was added.

Fixed in gpgmepp for gpd5x. I think for VSD 3.3 we'll add a patch to gpg4win.

yeah, I did not have exactly the same setting for the tests in the different versions… so no regression

After further investigation it looks like this bug exists since quite some time.

turns out that this seems to be a timing issue/race condition and disappears if more debug output is added

Well, I could not reproduce this at any time but tested decryption with long file paths to be sure nothing broke and it worked fine.