Page MenuHome GnuPG
Feed All Stories

Nov 1 2021

gniibe added a comment to T5523: jitter entropy RNG update.

Its copyright notice in upstream now refers LICENSE file, which requires some arrangement.

Nov 1 2021, 6:48 AM · FIPS, libgcrypt
bluca created T5674: Place dirmngr.service and gpg-agent.service in session.slice.
Nov 1 2021, 1:19 AM · Feature Request

Oct 31 2021

werner committed rEb1790f4cc71f: argparse: Add support to read values from the Windows Registry. (authored by werner).
argparse: Add support to read values from the Windows Registry.
Oct 31 2021, 7:53 PM
werner committed rE2a32501a561a: core: new internal function _gpgrt_w32_reg_get_string. (authored by werner).
core: new internal function _gpgrt_w32_reg_get_string.
Oct 31 2021, 7:53 PM
ikloecker committed rKLEOPATRAc46725b9dbcd: Readd QDebug operator<< overload for vector of statuslines (authored by ikloecker).
Readd QDebug operator<< overload for vector of statuslines
Oct 31 2021, 5:16 PM
Heiko Becker <heiko.becker@kde.org> committed rKLEOPATRA82e6ec248631: GIT_SILENT Update Appstream for new release (authored by Heiko Becker <heiko.becker@kde.org>).
GIT_SILENT Update Appstream for new release
Oct 31 2021, 11:35 AM
Heiko Becker <heiko.becker@kde.org> committed rKLEOPATRA89812f3b07a1: GIT_SILENT Upgrade release service version to 21.08.3. (authored by Heiko Becker <heiko.becker@kde.org>).
GIT_SILENT Upgrade release service version to 21.08.3.
Oct 31 2021, 11:35 AM
Heiko Becker <heiko.becker@kde.org> committed rKLEOPATRAc769793c4365: GIT_SILENT Update Appstream for new release (authored by Heiko Becker <heiko.becker@kde.org>).
GIT_SILENT Update Appstream for new release
Oct 31 2021, 11:35 AM
sjlongland added a comment to T1621: Support multiple cards (not just readers).

So, I have something working… in the apparent absence of any sort of clear documentation that I could find. I had some time on my hands this afternoon, so had another look.

Oct 31 2021, 7:08 AM · gnupg, Feature Request

Oct 30 2021

ikloecker committed rLIBKLEO844069fe0a62: Make kleo_export.h includes work for users of libkleo (authored by ikloecker).
Make kleo_export.h includes work for users of libkleo
Oct 30 2021, 11:49 PM
ikloecker committed rLIBKLEO3fb8601ca532: Avoid include conflicts with headers of other libraries (authored by ikloecker).
Avoid include conflicts with headers of other libraries
Oct 30 2021, 11:46 PM
ikloecker committed rKLEOPATRA2d0972040bae: Use getReaders() from libkleo to get the list of smart card readers (authored by ikloecker).
Use getReaders() from libkleo to get the list of smart card readers
Oct 30 2021, 5:57 PM
ikloecker committed rKLEOPATRAdc9c7b62e23e: Port to Assuan::send*Command functions in libkleo (authored by ikloecker).
Port to Assuan::send*Command functions in libkleo
Oct 30 2021, 5:57 PM
ikloecker committed rLIBKLEO88576f47900a: Add custom drop down box for configuring the reader-port option (authored by ikloecker).
Add custom drop down box for configuring the reader-port option
Oct 30 2021, 5:42 PM
ikloecker committed rLIBKLEO5b3e58658cd7: Add function for retrieving a list of available smart card readers (authored by ikloecker).
Add function for retrieving a list of available smart card readers
Oct 30 2021, 5:42 PM
ikloecker committed rLIBKLEO34ba6f99cc23: Add a helper for splitting a std::string (authored by ikloecker).
Add a helper for splitting a std::string
Oct 30 2021, 5:42 PM
ikloecker committed rLIBKLEO2846a67e4fdc: Bump library version (authored by ikloecker).
Bump library version
Oct 30 2021, 5:42 PM
ikloecker committed rLIBKLEObe41844d93d7: Add functions for communicating with the GnuPG agent (authored by ikloecker).
Add functions for communicating with the GnuPG agent
Oct 30 2021, 5:42 PM

Oct 29 2021

engel97 added a comment to T5673: Using empty passphrase key pair, gpg2.2.9 fails to decrypt with error "No secret key" on a gpg1.4/2.0 keyring format even though the secret keys migration was successful .

The key was generated without a passphrase.
Removing the pinentry-mode loopback parameter did not result in any popup at all but just gave me the below result:

Oct 29 2021, 10:08 PM · gnupg (gpg22), Bug Report
thesamesam added a watcher for MacOS: thesamesam.
Oct 29 2021, 8:04 PM
thesamesam added a member for Gentoo: thesamesam.
Oct 29 2021, 7:59 PM
werner added a comment to T5673: Using empty passphrase key pair, gpg2.2.9 fails to decrypt with error "No secret key" on a gpg1.4/2.0 keyring format even though the secret keys migration was successful .

Does the key have a passsphrase or somehow the empty string as passphrase?
If you don't use lookback mode: does the pinentry pop up?

Oct 29 2021, 6:49 PM · gnupg (gpg22), Bug Report
engel97 added a comment to T5673: Using empty passphrase key pair, gpg2.2.9 fails to decrypt with error "No secret key" on a gpg1.4/2.0 keyring format even though the secret keys migration was successful .

Thanks for responding to this issue. The GnuPG2.29 is the version of GnuPG that came with the RHEL8.2 server provided for by our server engineer team(might be part of an RPM package the installed). Do you know if this issue got fixed in the later versions after that?

Oct 29 2021, 6:27 PM · gnupg (gpg22), Bug Report
werner added a comment to T5673: Using empty passphrase key pair, gpg2.2.9 fails to decrypt with error "No secret key" on a gpg1.4/2.0 keyring format even though the secret keys migration was successful .

(I edited the report to make it readable, but did not yet looked at it in detail)
I wonder why you are using a decent libgcrypt but a 3 years old GnuPG version?

Oct 29 2021, 12:08 PM · gnupg (gpg22), Bug Report
werner updated the task description for T5673: Using empty passphrase key pair, gpg2.2.9 fails to decrypt with error "No secret key" on a gpg1.4/2.0 keyring format even though the secret keys migration was successful .
Oct 29 2021, 12:05 PM · gnupg (gpg22), Bug Report
gniibe added a comment to T5523: jitter entropy RNG update.

I work on gniibe/jitterent branch.
I realized that full featured jitterentropy now requires pthread. Timer-less mode uses threads for entropy. This is not good for libgcrypt use.

Oct 29 2021, 8:05 AM · FIPS, libgcrypt
gniibe committed rC34d55589b7d9: mpi: Allow opaque MPI with zero length. (authored by gniibe).
mpi: Allow opaque MPI with zero length.
Oct 29 2021, 6:08 AM
gniibe committed rC7f2fbbcdce46: mpi: Allow opaque MPI with zero length. (authored by gniibe).
mpi: Allow opaque MPI with zero length.
Oct 29 2021, 6:08 AM
gniibe committed rG99e00ec6db33: scd: Fix the previous commit. (authored by gniibe).
scd: Fix the previous commit.
Oct 29 2021, 4:48 AM
gniibe added projects to T5359: Kleopatra: Loop in DeviceInfoWatcher with GnuPG 2.3 on Windows: scd, Restricted Project.
Oct 29 2021, 4:19 AM · Restricted Project, scd, Restricted Project, kleopatra
gniibe moved T5359: Kleopatra: Loop in DeviceInfoWatcher with GnuPG 2.3 on Windows from Restricted Project Column to Restricted Project Column on the Restricted Project board.
Oct 29 2021, 4:18 AM · Restricted Project, scd, Restricted Project, kleopatra
gniibe added a comment to T5359: Kleopatra: Loop in DeviceInfoWatcher with GnuPG 2.3 on Windows.

Sorry, I have been confused and it took time to understand issues.
Indeed, there are (at least) four issues.

Oct 29 2021, 4:09 AM · Restricted Project, scd, Restricted Project, kleopatra
gniibe committed rG48e824b6ea69: scd: Modify DEVINFO behavior to support looping forever. (authored by gniibe).
scd: Modify DEVINFO behavior to support looping forever.
Oct 29 2021, 3:59 AM

Oct 28 2021

ikloecker changed the status of T5672: Kleopatra: Improve Kleopatras detection of keyservers from Open to Testing.

Kleopatra now checks both keyserver options. Previously, Kleopatra checked only one of them depending on the version of gpg (< 2.3.0 vs. >= 2.3.0). Note that the automatic lookup is only done if the keyserver option specifies an LDAP server, i.e. if it starts with "ldap".

Oct 28 2021, 2:55 PM · Restricted Project, scd, kleopatra
ikloecker committed rKLEOPATRA9121c3fdea00: Use improved helper from libkleo to check for directory servers (authored by ikloecker).
Use improved helper from libkleo to check for directory servers
Oct 28 2021, 12:32 PM
ikloecker committed rKLEOPATRA1e45d02a23fd: Use keyserver() helper to check for configured LDAP keyserver (authored by ikloecker).
Use keyserver() helper to check for configured LDAP keyserver
Oct 28 2021, 12:32 PM
ikloecker committed rLIBKLEOa9940a026d9e: Bump library version (authored by ikloecker).
Bump library version
Oct 28 2021, 12:24 PM
ikloecker committed rLIBKLEO5a5185493187: Add helper for checking if X.509 directory servers are configured (authored by ikloecker).
Add helper for checking if X.509 directory servers are configured
Oct 28 2021, 12:24 PM
ikloecker committed rLIBKLEOf9cc52bb1c08: Add helper returning the configured keyserver (authored by ikloecker).
Add helper returning the configured keyserver
Oct 28 2021, 12:24 PM
ikloecker committed rLIBKLEOc891fe0adde2: Add convenience helper for getting url list crypto config entry (authored by ikloecker).
Add convenience helper for getting url list crypto config entry
Oct 28 2021, 12:24 PM
ikloecker moved T5672: Kleopatra: Improve Kleopatras detection of keyservers from Restricted Project Column to Restricted Project Column on the Restricted Project board.
Oct 28 2021, 10:07 AM · Restricted Project, scd, kleopatra
ikloecker added a project to T5672: Kleopatra: Improve Kleopatras detection of keyservers: Restricted Project.
Oct 28 2021, 10:07 AM · Restricted Project, scd, kleopatra

Oct 27 2021

jukivili committed rCecd4d348ac87: tests/bench-slope: avoid divide by zero (authored by jukivili).
tests/bench-slope: avoid divide by zero
Oct 27 2021, 7:35 PM
jukivili committed rC5881114e0860: md: clear context with wipememory to avoid false warning (authored by jukivili).
md: clear context with wipememory to avoid false warning
Oct 27 2021, 7:35 PM
jukivili committed rCe4ce7ad0ecf6: poly1305: fix building with 'arm-linux-gnueabihf-gcc-11 -O3' (authored by jukivili).
poly1305: fix building with 'arm-linux-gnueabihf-gcc-11 -O3'
Oct 27 2021, 7:35 PM
jukivili committed rC6333cdeee5c1: cipher/sha512: fix 'accessing 64 bytes in a region of size 8' warnings (authored by jukivili).
cipher/sha512: fix 'accessing 64 bytes in a region of size 8' warnings
Oct 27 2021, 7:35 PM
engel97 added a comment to T5673: Using empty passphrase key pair, gpg2.2.9 fails to decrypt with error "No secret key" on a gpg1.4/2.0 keyring format even though the secret keys migration was successful .

By the way he is the version details of gpg2.2.9_rhe8 that I used:
fubar:testingGPG2.2.9-> gpg2.2.9_rhel8 --homedir gnupg2.0 --version --verbose
gpg: WARNING: unsafe permissions on homedir 'TESTING_GPG2.2.9/gnupg2.0'
gpg (GnuPG) 2.2.9
libgcrypt 1.9.4
Copyright (C) 2018 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later https://gnu.org/licenses/gpl.html
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Oct 27 2021, 6:15 PM · gnupg (gpg22), Bug Report
engel97 created T5673: Using empty passphrase key pair, gpg2.2.9 fails to decrypt with error "No secret key" on a gpg1.4/2.0 keyring format even though the secret keys migration was successful .
Oct 27 2021, 6:02 PM · gnupg (gpg22), Bug Report
werner updated the task description for T5672: Kleopatra: Improve Kleopatras detection of keyservers.
Oct 27 2021, 4:21 PM · Restricted Project, scd, kleopatra
werner triaged T5672: Kleopatra: Improve Kleopatras detection of keyservers as High priority.
Oct 27 2021, 4:18 PM · Restricted Project, scd, kleopatra
werner triaged T5607: Fingerprint signing fails with 'gpg: signing failed: No secret key' as Low priority.

Sure there are logs, see the options log-file and debug in the man pages.
To sign using specific subkey or the main key, use the fingerprint of the key and append an exclamation mark.
For example

Oct 27 2021, 1:12 PM · Support, Info Needed, gnupg (gpg22)
werner changed the status of T5656: Error emitted: gpg: error reading symlink '/proc/curproc/file': No such file or directory from Open to Testing.

I think we can close this bug. The warning will now only be printed as part of the the regression test and after all it is just a warning.

Oct 27 2021, 1:02 PM · gnupg (gpg23), MacOS, Bug Report
werner added a parent task for T5671: (MYPROC_SELF_EXE): Support illumos and Solaris: T5656: Error emitted: gpg: error reading symlink '/proc/curproc/file': No such file or directory.
Oct 27 2021, 12:58 PM · Bug Report
werner added a subtask for T5656: Error emitted: gpg: error reading symlink '/proc/curproc/file': No such file or directory: T5671: (MYPROC_SELF_EXE): Support illumos and Solaris.
Oct 27 2021, 12:58 PM · gnupg (gpg23), MacOS, Bug Report
werner closed T5671: (MYPROC_SELF_EXE): Support illumos and Solaris as Resolved.

Will go into 2.3.4 which will also silence the noise of not being able to read it. The major reason for this code is to allow building an AppImage.

Oct 27 2021, 12:57 PM · Bug Report
werner committed rG50e43af3f108: common: Support MYPROC_SELF_EXE for Solaris (authored by werner).
common: Support MYPROC_SELF_EXE for Solaris
Oct 27 2021, 12:55 PM
werner added a comment to T5671: (MYPROC_SELF_EXE): Support illumos and Solaris.

Thanks for the patch. That is sufficent. I added you to the Contributor group, though.

Oct 27 2021, 12:52 PM · Bug Report
werner added a member for Contributor: omnios.
Oct 27 2021, 12:51 PM
Jakuje closed T5669: Run continuous random test in FIPS mode as Invalid.

OK. Sorry for the noise. I got a clarification that the test is no longer needed so closing this issue.

Oct 27 2021, 11:48 AM · libgcrypt, FIPS, Bug Report
omnios created T5671: (MYPROC_SELF_EXE): Support illumos and Solaris.
Oct 27 2021, 11:17 AM · Bug Report
ikloecker moved T5666: Create dropdown box for the reader-port option. from Restricted Project Column to Restricted Project Column on the Restricted Project board.
Oct 27 2021, 9:34 AM · Restricted Project, kleopatra, Feature Request
gniibe added a comment to T5574: Doubled characters in Windows console output.

I think that this is due to support of UTF-8 codepage problem by console.

Oct 27 2021, 4:34 AM · gnupg, Windows, Bug Report

Oct 26 2021

ikloecker changed the status of T5362: Kleopatra: Add warning in compliance mode if gnupg version is not compliant from Open to Testing.
Oct 26 2021, 6:03 PM · Restricted Project, kleopatra
ikloecker changed the status of T5653: de-vs and GnuPG 2.3.3 error, a subtask of T5362: Kleopatra: Add warning in compliance mode if gnupg version is not compliant, from Open to Testing.
Oct 26 2021, 6:03 PM · Restricted Project, kleopatra
ikloecker changed the status of T5653: de-vs and GnuPG 2.3.3 error from Open to Testing.

Fixed. See parent task for details.

Oct 26 2021, 6:03 PM · Restricted Project, gnupg (gpg23), kleopatra
ikloecker added a comment to T5362: Kleopatra: Add warning in compliance mode if gnupg version is not compliant.

Result of self-test with failed compliance:

Oct 26 2021, 6:01 PM · Restricted Project, kleopatra
ikloecker committed rKLEOPATRAc770b6e52e58: Restrict the background color to the push button (authored by ikloecker).
Restrict the background color to the push button
Oct 26 2021, 5:45 PM
ikloecker committed rKLEOPATRA2238fed43a3d: Inform user if signing/encrypting is not possible due to non-compliance (authored by ikloecker).
Inform user if signing/encrypting is not possible due to non-compliance
Oct 26 2021, 5:45 PM
ikloecker committed rKLEOPATRA879224193690: Show an error message when signing/encrypting with non-compliant GnuPG (authored by ikloecker).
Show an error message when signing/encrypting with non-compliant GnuPG
Oct 26 2021, 5:45 PM
ikloecker committed rKLEOPATRAb823dc581954: Add a self-test checking de-vs compliance of GnuPG (authored by ikloecker).
Add a self-test checking de-vs compliance of GnuPG
Oct 26 2021, 5:45 PM
ikloecker renamed T5362: Kleopatra: Add warning in compliance mode if gnupg version is not compliant from Kleopatra: Add warning in compilance mode if gnupg version is not compliant to Kleopatra: Add warning in compliance mode if gnupg version is not compliant.
Oct 26 2021, 12:07 PM · Restricted Project, kleopatra

Oct 25 2021

werner added a comment to T5670: gpgconf --query-swdb incorrectly handles pre-release version numbers.

The thing is that any n.m.k-something version should behave versionwise the same as n.m.k. That is okay, because beta versions etc are not considered to be released. This is required to allow testing beta version _before_ doing the release.

Oct 25 2021, 11:14 PM · gpg4win, Bug Report
dslaz updated dslaz.
Oct 25 2021, 10:19 PM
ikloecker committed rKLEOPATRAda7567ea797a: Make de-vs compliance checks more rigid (authored by ikloecker).
Make de-vs compliance checks more rigid
Oct 25 2021, 6:10 PM
ikloecker committed rKLEOPATRA83dbedefc12b: Show de-vs compliance in status bar if de-vs compliance is configured (authored by ikloecker).
Show de-vs compliance in status bar if de-vs compliance is configured
Oct 25 2021, 6:10 PM
ikloecker committed rLIBKLEOf4af96a161ca: Bump library version (authored by ikloecker).
Bump library version
Oct 25 2021, 6:01 PM
ikloecker committed rLIBKLEOa556440db222: Make de-vs compliance checks more rigid (authored by ikloecker).
Make de-vs compliance checks more rigid
Oct 25 2021, 6:01 PM
ikloecker committed rLIBKLEOd430be63ab30: Add new helpers for checking de-vs compliance of GnuPG (authored by ikloecker).
Add new helpers for checking de-vs compliance of GnuPG
Oct 25 2021, 6:01 PM
ikloecker committed rLIBKLEO09c7841a81b0: Handle NULL config and invalid component names (authored by ikloecker).
Handle NULL config and invalid component names
Oct 25 2021, 6:01 PM
ikloecker committed rLIBKLEO60be5b04ec28: Return correct config entry for entries other than gpg/compliance (authored by ikloecker).
Return correct config entry for entries other than gpg/compliance
Oct 25 2021, 6:01 PM
ikloecker committed rLIBKLEOb13310007a17: Add the possibility to fake int crypto config entries in tests (authored by ikloecker).
Add the possibility to fake int crypto config entries in tests
Oct 25 2021, 6:01 PM
Jakuje added a comment to T5669: Run continuous random test in FIPS mode.

From the FIPS Certs draft for RHEL 8.5, I have the following sentence:

Oct 25 2021, 3:04 PM · libgcrypt, FIPS, Bug Report
ikloecker moved T4950: pinentry: Add warning when capslock is on from Restricted Project Column to Restricted Project Column on the Restricted Project board.
Oct 25 2021, 11:47 AM · Restricted Project, Restricted Project, pinentry
ikloecker moved T5239: Add UI for managing groups from Restricted Project Column to Restricted Project Column on the Restricted Project board.
Oct 25 2021, 11:46 AM · Restricted Project, kleopatra
ikloecker moved T5241: Allow selection of groups as recipients for file encryption from Restricted Project Column to Restricted Project Column on the Restricted Project board.
Oct 25 2021, 11:46 AM · Restricted Project, kleopatra
ikloecker moved T5336: Kleopatra: Add expiry for certifications in certify dialog from Restricted Project Column to Restricted Project Column on the Restricted Project board.
Oct 25 2021, 11:46 AM · kleopatra, Restricted Project
bernhard added a comment to T5670: gpgconf --query-swdb incorrectly handles pre-release version numbers.

Thanks for creating the issue.

Oct 25 2021, 11:45 AM · gpg4win, Bug Report
ikloecker moved T5283: GpgOL: Add mixed mode for S/MIME and OpenPGP to libkleo newkeyresolver from Restricted Project Column to Restricted Project Column on the Restricted Project board.
Oct 25 2021, 11:44 AM · kleopatra, Restricted Project, gpgol
ikloecker moved T5465: Kleopatra: Improve configuration of LDAP servers for X.509 from Restricted Project Column to Restricted Project Column on the Restricted Project board.
Oct 25 2021, 11:44 AM · Restricted Project, kleopatra
ikloecker moved T5535: Kleopatra: Check that accessibility is also supported for VS-NfD from Restricted Project Column to Restricted Project Column on the Restricted Project board.
Oct 25 2021, 11:44 AM · Restricted Project, kleopatra
ikloecker moved T5543: pinentry-qt: Accessibility switch to repeat on enter from Restricted Project Column to Restricted Project Column on the Restricted Project board.
Oct 25 2021, 11:43 AM · pinentry, Restricted Project
ikloecker moved T5544: Kleopatra: Ensure that file encryption dialogs has shortcuts on all actions from Restricted Project Column to Restricted Project Column on the Restricted Project board.
Oct 25 2021, 11:43 AM · kleopatra, Restricted Project
ikloecker added a comment to T5663: Kleopatra's "Check for updates" does not work.

Kleopatra now also handles a version like Gpg4win-3.1.16-beta15, but gpgconf --query-swdb seems to ignore pre-release identifiers:

$ gpgconf --query-swdb gpg4win 3.1.15-beta16
gpg4win:3.1.15-beta16:u::0:20211012T161328:20211019T103252:3.1.16:20210611T000000:0::
Oct 25 2021, 11:39 AM · Restricted Project, gpg4win, kleopatra
ikloecker created T5670: gpgconf --query-swdb incorrectly handles pre-release version numbers.
Oct 25 2021, 11:38 AM · gpg4win, Bug Report
werner reassigned T5523: jitter entropy RNG update from werner to gniibe.
Oct 25 2021, 11:25 AM · FIPS, libgcrypt
werner edited projects for T5512: Implement service indicators, added: Feature Request; removed Bug Report.

We are currently using "implict" service indicators but eventually we may change Libgcrypt to support explicit indicators.

Oct 25 2021, 11:23 AM · Feature Request, FIPS, libgcrypt
ikloecker added a comment to rLIBKLEO3a04f6a635c9: Add helper returning the version number of the Gpg4win release.

Good point. I have added support for semantic versioning to Kleo::gpg4winVersionNumber().

Oct 25 2021, 11:22 AM
ikloecker committed rLIBKLEOe8947019630c: Improve extraction of actual version number of Gpg4win release (authored by ikloecker).
Improve extraction of actual version number of Gpg4win release
Oct 25 2021, 11:20 AM
werner lowered the priority of T5512: Implement service indicators from High to Normal.
Oct 25 2021, 11:20 AM · Feature Request, FIPS, libgcrypt
gniibe moved T5665: libgcrypt : Restrict message digest use for FIPS 140-3 from Backlog to Next on the FIPS board.
Oct 25 2021, 11:09 AM · FIPS, Bug Report, libgcrypt