Just adding this note because a next step I'm also evaluating in my current T5593 configuration status it to temporarily create a new Gpg4win 3.1.16 hybrid configuration by also adding latest GnuPG v2.2.31 to see if all issues I reported here are still present (which is also quite probable).
Also because of T5593 it would just be quite interesting to see if GnuPG v2.2.31 too might experience same T5593 path related error.

Oct 12 2021, 6:13 PM · gnupg (gpg22), UI, Not A Bug, gpg4win

• werner committed rGd7d26eff851a: Post release updates (authored by • werner).

Post release updates

Oct 12 2021, 6:11 PM

• werner committed rG9470d0338364: Release 2.3.3 (authored by • werner).

Release 2.3.3

Oct 12 2021, 6:11 PM

• werner committed rG10f52f9bf3bc: speedo: Put the keyboxd into the Windows installer (authored by • werner).

speedo: Put the keyboxd into the Windows installer

Oct 12 2021, 6:11 PM

• werner committed rGbcd5feec0e91: tests: New way to make use of gpgconf.ctl in tests. (authored by • werner).

tests: New way to make use of gpgconf.ctl in tests.

Oct 12 2021, 6:11 PM

• werner triaged T5654: Release GnuPG 2.3.4 as Low priority.

Oct 12 2021, 6:09 PM · gnupg (gpg23), Release Info

swimmerm added a project to T5626: 'GPGCONF --list-dirs' command option on-screen displayed results show '%3a' unexpected and unneeded characters in each line displaying a C: drive path instead of simpler expected '...:C:\...' sub-strings with only valid ':' ('colon') characters present: UI.

Oct 12 2021, 6:08 PM · gnupg (gpg22), UI, Not A Bug, gpg4win

swimmerm added a project to T5621: No '%ProgramData%\GNU', '%ProgramData%\GNU\etc', '%ProgramData%\GNU\etc\gnupg' or '%ProgramData%\GNU\etc\gnupg\trusted-certs' or '%ProgramData%\GNU\etc\gnupg\extra-certs' get created after setup: Documentation.

Oct 12 2021, 5:22 PM · Documentation, Not A Bug, gpg4win

swimmerm reopened T5621: No '%ProgramData%\GNU', '%ProgramData%\GNU\etc', '%ProgramData%\GNU\etc\gnupg' or '%ProgramData%\GNU\etc\gnupg\trusted-certs' or '%ProgramData%\GNU\etc\gnupg\extra-certs' get created after setup as "Open".

Hi Werner,

Oct 12 2021, 5:20 PM · Documentation, Not A Bug, gpg4win

• werner triaged T5653: de-vs and GnuPG 2.3.3 error as Normal priority.

Oct 12 2021, 4:56 PM · Restricted Project, gnupg (gpg23), kleopatra

rupor-github added a comment to T3883: Add Win32-OpenSSH support to gpg-agent's ssh-agent.

@bernhard Sorry for the delayed answer, was on sabbatical.

Oct 12 2021, 4:56 PM · Not A Bug, workaround, gnupg24, Windows, ssh

• werner triaged T5652: Show the GnuPG version in Kleopatra as Normal priority.

Oct 12 2021, 4:44 PM · Restricted Project, gpg4win, Feature Request, kleopatra

gc100 added a comment to T5634: Failure with: make DESTDIR=xxx install .

Excellent thank you.

Oct 12 2021, 2:49 PM · Bug Report

• werner added a comment to T5634: Failure with: make DESTDIR=xxx install .

I won't anymore follow the path of first doing a test install. That is way to hairy in respect to "make distcheck". Change is already in my working directory.

Oct 12 2021, 2:38 PM · Bug Report

• werner added a comment to T5590: OpenPGP: Curve 448, modernize?.

Is that really required? Should we wait what the conlusion of the WG will be?

Oct 12 2021, 2:35 PM · rationale, gnupg, OpenPGP

• werner added a comment to T5616: asn1-parse.y:861:20: error: 'yytoknum' undeclared.

Bison used to be the de-facto standard yacc ;-)

Oct 12 2021, 2:33 PM · toolchain, libksba, Bug Report

• gniibe added a comment to T5590: OpenPGP: Curve 448, modernize?.

I'm reading RFC5297, which says:

SIV can be used as a drop-in replacement for any specification that uses [RFC3394] or [RFC3217], including the aforementioned use. It is a more general purpose solution as it allows for associated data to be specified.

Oct 12 2021, 1:35 PM · rationale, gnupg, OpenPGP

• gniibe claimed T5616: asn1-parse.y:861:20: error: 'yytoknum' undeclared.

I think that a simple way is defining a table (string -> token) by ourselves in yylex, not enabling %token-table.
(Then, we don't need to depend on the feature of string with %token, which is not supported by POSIX yacc.)

Oct 12 2021, 9:50 AM · toolchain, libksba, Bug Report

• werner added a comment to T5644: Heuristic for default reader detection.

On my new Windows 10 laptop I see a "Windows Hello for Business 1". Thus put everything with "Windows Hello" at the end of the list or skip unless a reader-port is set. IIRC there are device with "virtual" or "Virtual" in their name, they don't make sense for us either. I would also put devices with "SCM" or "Identiv" to the top of the list. In particular the substrings "SPR532" seems to identify the Identiv SPR332 which is what we use here and actualay a suggested reader for GnUPG VS-Desktop.

Oct 12 2021, 8:44 AM · Restricted Project, Feature Request, gnupg (gpg22)

• gniibe added a comment to T5550: Fix check_binary_integrity.

Now configure with
--enable-hmac-binary-check="I know engineers. They love to change things." works.

Oct 12 2021, 8:25 AM · FIPS, libgcrypt

• gniibe added a project to T5550: Fix check_binary_integrity: Restricted Project.

Oct 12 2021, 8:24 AM · FIPS, libgcrypt

• gniibe committed rC10e02b90f65f: build: Support specifying HMAC key by --enable-hmac-binary-check. (authored by • gniibe).

build: Support specifying HMAC key by --enable-hmac-binary-check.

Oct 12 2021, 8:24 AM

• gniibe added a comment to T5644: Heuristic for default reader detection.

Please tell me reader names to skip.

Oct 12 2021, 7:23 AM · Restricted Project, Feature Request, gnupg (gpg22)

Oct 11 2021

smlx added a comment to T5555: Cannot add existing ECDSA key as a signing subkey.

Note that I'm referring to file based keys, not card based.

Oct 11 2021, 7:52 PM · gnupg24, Bug Report

smlx reopened T5555: Cannot add existing ECDSA key as a signing subkey as "Open".

I tested this on 2.3, and it doesn't seem to be fixed. When adding an existing ECDSA subkey I don't get the option to choose whether to make it a signing or encrypting subkey. Instead it only allows me to choose an encrypting subkey.

Oct 11 2021, 7:45 PM · gnupg24, Bug Report

Laurent Montel <montel@kde.org> committed rLIBKLEOd6fbbb96d3ea: USe std::unique_ptr here (authored by Laurent Montel <montel@kde.org>).

USe std::unique_ptr here

Oct 11 2021, 7:26 PM

• werner raised the priority of T5616: asn1-parse.y:861:20: error: 'yytoknum' undeclared from Normal to High.

Thanks for your findings. I recall that I read this in the announcement and cursed about this new tendency in GNU to break long standing APIs.

Oct 11 2021, 5:49 PM · toolchain, libksba, Bug Report

• werner renamed T5649: Issue better error message for invalid OpenPGP RSA keys from GnuPG randomly generates invalid RSA signatures if secret key has P > Q. to Issue better error message for invalid OpenPGP RSA keys.

Oct 11 2021, 5:45 PM · gnupg24, OpenPGP, Feature Request

• werner triaged T5649: Issue better error message for invalid OpenPGP RSA keys as Normal priority.

OpenPGP requires the P < U property and gpg does also. In some parts of the GnuPG we re-calculate the CRT parameters but not in these code paths. Right, a better error message would be appropriate. I'll turn this into a feature request.

Oct 11 2021, 5:45 PM · gnupg24, OpenPGP, Feature Request

• werner triaged T5650: Check problems with gpgconf and global config files as High priority.

Oct 11 2021, 5:39 PM · Restricted Project, gnupg (gpg22)

ikloecker committed rKLEOPATRA7479e2713e32: Re-add possibility to set RELEASE_SERVICE_VERSION when running cmake (authored by ikloecker).

Re-add possibility to set RELEASE_SERVICE_VERSION when running cmake

Oct 11 2021, 4:47 PM

onickolay created T5649: Issue better error message for invalid OpenPGP RSA keys.

Oct 11 2021, 12:52 PM · gnupg24, OpenPGP, Feature Request

onickolay added a comment to T5464: Failure to import Curve25519 ECDH secret subkey to the GnupG..

Fix for this issue landed RNP master, and will be included to the RNP v0.16.0 release.
Within fix:

new keys will be generated with correctly tweaked bits
using secret key with non-tweaked bits would issue a warning
CLI command --edit-key [--check-cv25519-bits | --fix-cv25519-bits] added, allowing to fix older key

Oct 11 2021, 12:35 PM · Support, gnupg, OpenPGP

• gniibe moved T5645: RSA/DSA keygen modification for FIPS/ACVP testing from Backlog to Next on the FIPS board.

Oct 11 2021, 11:06 AM · libgcrypt, FIPS, Bug Report

• gniibe claimed T5645: RSA/DSA keygen modification for FIPS/ACVP testing.

Oct 11 2021, 10:57 AM · libgcrypt, FIPS, Bug Report

• gniibe added a comment to T5550: Fix check_binary_integrity.

I push a change: rC070935965763: build: Use KEY_FOR_BINARY_CHECK for --enable-hmac-binary-check..

Oct 11 2021, 10:34 AM · FIPS, libgcrypt

• gniibe committed rC070935965763: build: Use KEY_FOR_BINARY_CHECK for --enable-hmac-binary-check. (authored by • gniibe).

build: Use KEY_FOR_BINARY_CHECK for --enable-hmac-binary-check.

Oct 11 2021, 10:32 AM

adrianvovk added a comment to T5616: asn1-parse.y:861:20: error: 'yytoknum' undeclared.