@colemickens We don't maintain any ccid udev rules in GnuPG. What do you refer?
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
May 3 2021
May 3 2021
• gniibe added a comment to T5409: scdaemon: 'Operation not supported by device' error under macOS after upgrading to 2.3.1.
May 2 2021
May 2 2021
Laurent Montel <montel@kde.org> committed rKLEOPATRAb84aba26685c: Modernize code (authored by Laurent Montel <montel@kde.org>).
Modernize code
May 1 2021
May 1 2021
l10n daemon script <scripty@kde.org> committed rLIBKLEO0e3414b661a7: SVN_SILENT made messages (.desktop file) - always resolve ours (authored by l10n daemon script <scripty@kde.org>).
SVN_SILENT made messages (.desktop file) - always resolve ours
Apr 30 2021
Apr 30 2021
colemickens added a comment to T5416: [windows] Smartcards are less reliable under 2.3.1 (requires restarting gpg-agent.exe).
To note, this is in contrast to my experience with gpg-2.2 (provided by gpg4win). With gpg-2.2, I was reliably using my Yubikey for a variety of things, and it handled hotplugging perfectly, as one would expect.
• ikloecker moved T5359: Kleopatra: Loop in DeviceInfoWatcher with GnuPG 2.3 on Windows from Restricted Project Column to Restricted Project Column on the Restricted Project board.
• ikloecker reopened T5359: Kleopatra: Loop in DeviceInfoWatcher with GnuPG 2.3 on Windows as "Testing".
• ikloecker closed T5359: Kleopatra: Loop in DeviceInfoWatcher with GnuPG 2.3 on Windows as Resolved.
I have disabled this on Windows. Once "SCD DEVINFO --watch" works reliably on Windows, we can reenable the DeviceInfoWatcher on Windows.
• ikloecker committed rKLEOPATRAf87b256d66e3: Disable DeviceInfoWatcher on Windows (authored by • ikloecker).
Disable DeviceInfoWatcher on Windows
• aheinecke committed rKLEOPATRAfb90ce069227: PKCS#15: Update readerstatus after import (authored by • aheinecke).
PKCS#15: Update readerstatus after import
Also let me know if there are any daemons I have to kill/restart when switching between GnuPG versions by changing the $PATH. Whenever I have problems with my YubiKey, I run gpgconf --kill gpg-agent, which I also executed when I switched from version 2.2.27 back to 2.3.1 but I have no idea whether this is required or sufficient.
$ gpg --version gpg (GnuPG) 2.3.1 libgcrypt 1.9.3 $ gpg --debug ipc --card-status gpg: reading options from '/Users/user/.gnupg/gpg.conf' gpg: reading options from '[cmdline]' gpg: enabled debug flags: ipc gpg: DBG: chan_3 <- OK Pleased to meet you, process 15218 gpg: DBG: connection to the gpg-agent established gpg: DBG: chan_3 -> RESET gpg: DBG: chan_3 <- OK gpg: DBG: chan_3 -> OPTION ttyname=/dev/ttys007 gpg: DBG: chan_3 <- OK gpg: DBG: chan_3 -> OPTION ttytype=xterm-256color gpg: DBG: chan_3 <- OK gpg: DBG: chan_3 -> OPTION lc-ctype=en_US.UTF-8 gpg: DBG: chan_3 <- OK gpg: DBG: chan_3 -> OPTION lc-messages=en_US.UTF-8 gpg: DBG: chan_3 <- OK gpg: DBG: chan_3 -> GETINFO version gpg: DBG: chan_3 <- D 2.3.1 gpg: DBG: chan_3 <- OK gpg: DBG: chan_3 -> OPTION allow-pinentry-notify gpg: DBG: chan_3 <- OK gpg: DBG: chan_3 -> OPTION agent-awareness=2.1.0 gpg: DBG: chan_3 <- OK gpg: DBG: chan_3 -> SCD GETINFO version gpg: DBG: chan_3 <- D 2.3.1 gpg: DBG: chan_3 <- OK gpg: DBG: chan_3 -> SCD SERIALNO gpg: DBG: chan_3 <- ERR 100696144 Operation not supported by device <SCD> gpg: selecting card failed: Operation not supported by device gpg: OpenPGP card not available: Operation not supported by device gpg: secmem usage: 0/32768 bytes in 0 blocks
• ikloecker moved T5359: Kleopatra: Loop in DeviceInfoWatcher with GnuPG 2.3 on Windows from Restricted Project Column to Restricted Project Column on the Restricted Project board.
• ikloecker added a project to T5359: Kleopatra: Loop in DeviceInfoWatcher with GnuPG 2.3 on Windows: Restricted Project.
• werner added a project to T5415: YubiKey no longer recognized in GnuPG 2.3.1 on macOS 10.15.7: MacOS.
Run gpg --debug ipc --card-status to quickly see the communication with the scdaemon.
• aheinecke raised the priority of T5359: Kleopatra: Loop in DeviceInfoWatcher with GnuPG 2.3 on Windows from High to Unbreak Now!.
Hi Ingo,
Apr 29 2021
Apr 29 2021
• aheinecke committed rKLEOPATRA1e77bdf6df5c: Search PKCS#15 keys on ldap servers (authored by • aheinecke).
Search PKCS#15 keys on ldap servers
• aheinecke committed rKLEOPATRAb5398c4e3217: Import keystubs for PKCS#15 cards (authored by • aheinecke).
Import keystubs for PKCS#15 cards
scd:p15: Update from current GnuPG 2.3
• werner committed rG96577e2e46e4: scd: Rewrite READKEY to allow for compressed points. (authored by • werner).
scd: Rewrite READKEY to allow for compressed points.
• werner committed rG5b8593135fa6: common: Extend the openpgp_curve_to_oid function. (authored by • werner).
common: Extend the openpgp_curve_to_oid function.
• werner committed rGf3c98b8cb5ad: common: New module to compute openpgp fingerprints (authored by • werner).
common: New module to compute openpgp fingerprints
• werner committed rGc825117c5fa5: common: New function to uncompress an ECC public key. (authored by • werner).
common: New function to uncompress an ECC public key.
common: New function cmp_canon_sexp.
• werner committed rG72a7d45a230b: scd: Extend an internal function to also return the algo. (authored by • werner).
scd: Extend an internal function to also return the algo.
• werner committed rG0eed0ced9bcd: scd: New function send_keyinfo to assist in backporting. (authored by • werner).
scd: New function send_keyinfo to assist in backporting.
scd: New function for iso7816 PSO_CSV.
• werner committed rG3db99b8861a7: scd: Minor changes to assist in backporting from 2.3 (authored by • werner).
scd: Minor changes to assist in backporting from 2.3
scd: Add new status codes.
scd: Extend iso7816_select_path
• werner committed rGec9e8e0d6a1f: scd: Extend ISO binary and record reading functions. (authored by • werner).
scd: Extend ISO binary and record reading functions.
Can you help me, please?
• ikloecker moved T5245: Kleopatra: Add support for trust signatures / trusted introducer from Restricted Project Column to Restricted Project Column on the Restricted Project board.
scd: Fix PC/SC removed card problem
l10n daemon script <scripty@kde.org> committed rLIBKLEO2e3675836957: SVN_SILENT made messages (.desktop file) - always resolve ours (authored by l10n daemon script <scripty@kde.org>).
SVN_SILENT made messages (.desktop file) - always resolve ours
Apr 28 2021
Apr 28 2021
colemickens added a comment to T5409: scdaemon: 'Operation not supported by device' error under macOS after upgrading to 2.3.1.
@gniibe can you provide any commentary on why the gnupg ccid udev rule is so much smaller than the one debian maintains? Is the debian one considered authoritative these days?
hwf-x86: fix use of wrong operand type
scd:p15: Fix the name of a card.
• werner committed rG178e4eb6555e: build: Allow running sign-release target from the dist dir. (authored by • werner).
build: Allow running sign-release target from the dist dir.
• werner committed rGbb8e3996e44f: scd: Fix problem with reader list becoming empty. (authored by • werner).
scd: Fix problem with reader list becoming empty.
The patch references the following bug:
• ikloecker added a comment to T5283: GpgOL: Add mixed mode for S/MIME and OpenPGP to libkleo newkeyresolver.
Should be mostly done. What's missing is selection of groups in the approval dialog. Groups are not (yet) supported by the KeySelectionCombo.
• ikloecker closed T5397: GpgOL: Add support for groups with S/MIME keys, a subtask of T5283: GpgOL: Add mixed mode for S/MIME and OpenPGP to libkleo newkeyresolver, as Resolved.
• ikloecker moved T5397: GpgOL: Add support for groups with S/MIME keys from Restricted Project Column to Restricted Project Column on the Restricted Project board.
Remove obsolete function
Update documentation
Update copyright information
Clean up headers
when I insert: gpg --verify -v Bisq-64bit-1.6.2.exe.asc at the command line (at windows), I get the answer:
gpg: cannot open "Bisq-64bit-1.6.2.exe.asc": No such file or directory
gpg: verify signatures failed: No such file or directory
• ikloecker committed rLIBKLEOc43b69027c10: Take groups into account when resolving signing keys (authored by • ikloecker).
Take groups into account when resolving signing keys
• ikloecker committed rLIBKLEO265662200481: Log warning if test key was not found to catch typos and c&p bugs in tests (authored by • ikloecker).
Log warning if test key was not found to catch typos and c&p bugs in tests
• ikloecker committed rLIBKLEO50bea92e5c0b: Simplify adding signing key to result (authored by • ikloecker).
Simplify adding signing key to result
• ikloecker committed rLIBKLEOfde4ff96a3a4: Resolve encryption groups only if encryption keys are needed (authored by • ikloecker).
Resolve encryption groups only if encryption keys are needed
Please try to verify on the command line (cmd.exe):
colemickens added a comment to T5409: scdaemon: 'Operation not supported by device' error under macOS after upgrading to 2.3.1.
Thanks @gniibe, that's very helpful advice and pointers. Very appreciated, cheers.
Thank you all for the help. I thought this was a bug with pinentry itself but appears to be dbus related based on the above command.
• gniibe added a comment to T5409: scdaemon: 'Operation not supported by device' error under macOS after upgrading to 2.3.1.
Perhaps, if a distro haven't offered setting of USB, it would be better to configure GnuPG build with --disable-ccid-driver and only support scdaemon with PC/SC. GPG for Windows does so.
• gniibe added a comment to T5409: scdaemon: 'Operation not supported by device' error under macOS after upgrading to 2.3.1.
- It's a breaking change for system with both of PC/SC and CCID. T4673 due to T3300
- If you configure with no libusb, users don't need 'disable-ccid' option.
- I don't know how "wide".
- In Debian, it is maintained here: https://salsa.debian.org/debian/gnupg2/-/blob/debian/main/debian/scdaemon.udev
- Yes.
To set DISPLAY, dbus-update-activation-environment is your friend.
FYI, for me, on a machine with Debian GNU/Linux, I use Sway, it works fine with pinentry-gnome3.
Backported in rC3f48e3ea37ad: ecc: Check the input length for the point..
I have installed the Gnome keyring prompter and there seems to be a problem using the Wayland display
Apr 27 2021
Apr 27 2021
• ikloecker moved T5397: GpgOL: Add support for groups with S/MIME keys from Restricted Project Column to Restricted Project Column on the Restricted Project board.
• ikloecker committed rLIBKLEO729cdb3e475a: Resolve groups after overrides but before keys (authored by • ikloecker).
Resolve groups after overrides but before keys
Improve cleanup after tests
• ikloecker committed rLIBKLEO68fda099d430: Improve group support in key resolver (authored by • ikloecker).
Improve group support in key resolver
• ikloecker committed rLIBKLEO1b9f9eb11095: Replace bool arguments needSign and needEncrypt with KeyUsage enum (authored by • ikloecker).
Replace bool arguments needSign and needEncrypt with KeyUsage enum
• werner renamed T5411: After upgrading from gpg4win 3.1.13 to gpg4win 3.1.15 GpgOL does not load, Outlook crashes. from After upgrading from gpg4win 3.1.13 to gpg4win 3.1.15 GnuOL does not load, Outlook crashes. to After upgrading from gpg4win 3.1.13 to gpg4win 3.1.15 GpgOL does not load, Outlook crashes..
• werner added a comment to T5412: Getting "Invalid digest algorithm", when trying to generate ECDH keys, in batch mode.
The curve is not defined to be used for ECDH (encryption); in fact it should in general only be used with the EdDSA
algorithm. You need to use "Key-Type: eddsa". Note that the EdDSA signing algorithm is different than the commonly used ECDSA signing algorithm.
Can you please port this also to 1.8?
• gniibe committed rGf209d7d2db0e: scd: Fix unblock PIN by a Reset Code with KDF. (authored by kirelagin).
scd: Fix unblock PIN by a Reset Code with KDF.
masoudbahar added a comment to T5412: Getting "Invalid digest algorithm", when trying to generate ECDH keys, in batch mode.
Thanks for the quick response Werner. I knew I could use it with quick-gen-key and I’ve updated my config file to have it as default.
But, just for my understanding, is there a reason ed25519 cannot be used with full-gen-key and gen-key in batch mode?
• gniibe committed rC060c378c050e: ecc: Check the input length for the point. (authored by • gniibe).
ecc: Check the input length for the point.
• werner edited projects for T5412: Getting "Invalid digest algorithm", when trying to generate ECDH keys, in batch mode, added: gnupg, FAQ; removed gnupg (gpg23), Bug Report.
You can't use ecdh with ed25519.
tps800 renamed T5411: After upgrading from gpg4win 3.1.13 to gpg4win 3.1.15 GpgOL does not load, Outlook crashes. from After upgrading from gpg4win 3.1.13 to gpg4win 3.1.15 to After upgrading from gpg4win 3.1.13 to gpg4win 3.1.15 GnuOL does not load, Outlook crashes..
Apr 26 2021
Apr 26 2021
colemickens added a comment to T5409: scdaemon: 'Operation not supported by device' error under macOS after upgrading to 2.3.1.
Hi, as a contributor to NixOS I'd also like some guidance. I'm testing the 2.3 upgrade ahead of 2.4, and it "breaks" Yubikey UX that I know many of us use. This might be because we appear to not yet install gnupg's CCID udev rules installed. A few questions:
jukivili committed rCeb96baf28473: hash_buffers: add output length param for XOF support (authored by jukivili).
hash_buffers: add output length param for XOF support
jukivili committed rCe866c01e645d: keccak: add hash_buffers functions for SHAKE128 & SHAKE256 (authored by jukivili).
keccak: add hash_buffers functions for SHAKE128 & SHAKE256
jukivili committed rC580ae61db5fe: md: remove hash_buffer function from algorithms (authored by jukivili).
md: remove hash_buffer function from algorithms
jukivili committed rCf53d541d0947: Add XOF output support for internal _gcry_md_hash_buffers (authored by jukivili).
Add XOF output support for internal _gcry_md_hash_buffers
jukivili committed rC4770ad72607f: Use memset for constant length wipememory2 (authored by jukivili).
Use memset for constant length wipememory2
• werner committed rCa208f6af5033: doc: Clarify gcry_md_setkey for keyed BLAKE hashes. (authored by • werner).
doc: Clarify gcry_md_setkey for keyed BLAKE hashes.
Update kde-l10n and gpg4win-tools
• aheinecke committed rW0a2650c6ea24: Fix libkleo-lower-cmake-requirement patch (authored by • aheinecke).
Fix libkleo-lower-cmake-requirement patch
Remove gpgwrap installation
• werner committed rG99db4b0c7fd1: gpg: Do not use import-clean for LDAP keyserver imports. (authored by • werner).
gpg: Do not use import-clean for LDAP keyserver imports.
• werner committed rG4fcfac6feb2a: gpg: Fix mailbox based search via AKL keyserver method. (authored by • werner).
gpg: Fix mailbox based search via AKL keyserver method.