There are reasons why we don't used pcsc-shared by default; for example: Not all OpenPGP cards support reading the current verification state (whether a PIN has already been entered) and thus we use a local cache for this. Other shared applications may change the state behind our back or even switch to another application on the card. Thus we use the safe way.
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Jan 25 2022
Jan 25 2022
• werner committed rG1cf0c407bf2f: doc: Add comments on the legacy status of gpgconf.conf. (authored by • werner).
doc: Add comments on the legacy status of gpgconf.conf.
• werner committed rGb64cae5abba2: doc: Add comments on the legacy status of gpgconf.conf. (authored by • werner).
doc: Add comments on the legacy status of gpgconf.conf.
• ikloecker moved T5795: Kleopatra reader selection and quoting from Restricted Project Column to Restricted Project Column on the Restricted Project board.
Hmm, I looked at the gpg-side a bit. assuan_send_data that's used for returning GETINFO reader_list only does escaping "as required by the Assuan protocol", i.e. percent escaping of certain characters but no plus escaping.
• gniibe committed rC99642f18ccbe: tests: Fix variable initialization for tests. (authored by • gniibe).
tests: Fix variable initialization for tests.
• gniibe committed rC3d353782d84b: Prefer uint64_t for the definition of u64. (authored by • gniibe).
Prefer uint64_t for the definition of u64.
Fix npth_ppoll when !HAVE_PPOLL.
• gniibe committed rC1f299cb16afd: doc: Update more information about FIPS selftests and algorithms (authored by Jakuje).
doc: Update more information about FIPS selftests and algorithms
• gniibe committed rC08f3e0909f8c: mpi: Add missing header file to the tarball (authored by Jakuje).
mpi: Add missing header file to the tarball
Thank you, applied both of two patches.
Thanks, fixed.
Jan 24 2022
Jan 24 2022
• werner committed rGaf2fbd9b01a1: agent: always use hexgrip when storing key password (authored by James Bottomley via Gnupg-devel <gnupg-devel@gnupg.org>).
agent: always use hexgrip when storing key password
doc: Minor typo fixes
• werner committed rWbdb805ce6c30: appimage: Use ~/.gnupg-vsd for GnuPG VS-Desktop (authored by • werner).
appimage: Use ~/.gnupg-vsd for GnuPG VS-Desktop
• werner edited projects for T5795: Kleopatra reader selection and quoting, added: gnupg (gpg22); removed gpgme.
Yes, kleo always maps '+' -> ' '
• ikloecker committed rKLEOPATRA3dbda42804c2: Adjust to interface changes (authored by • ikloecker).
Adjust to interface changes
• ikloecker committed rKLEOPATRA8c455efc4de5: Read/write attribute order from/to configuration (authored by • ikloecker).
Read/write attribute order from/to configuration
• ikloecker committed rKLEOPATRAfa3fe3e65b50: Do not change read-only tooltip settings when loading defaults (authored by • ikloecker).
Do not change read-only tooltip settings when loading defaults
• ikloecker committed rKLEOPATRAd63a8c90be53: Disable UI elements if corresponding config entries are read-only (authored by • ikloecker).
Disable UI elements if corresponding config entries are read-only
• ikloecker committed rKLEOPATRA2d651eed2346: Use KConfigXT for getting/setting the DN attribute order (authored by • ikloecker).
Use KConfigXT for getting/setting the DN attribute order
• ikloecker committed rKLEOPATRA24d0cfcb622a: Actually save the changed UseTags setting (authored by • ikloecker).
Actually save the changed UseTags setting
• ikloecker committed rKLEOPATRA7b5fcff79d11: Set configured DN attribute order on application start (authored by • ikloecker).
Set configured DN attribute order on application start
Bump library version
• ikloecker committed rLIBKLEOd6b810aad543: Do not read/write DN attribute order from/to application config file (authored by • ikloecker).
Do not read/write DN attribute order from/to application config file
Laurent Montel <montel@kde.org> committed rLIBKLEOeb20ad10fab7: Fix install headers (authored by Laurent Montel <montel@kde.org>).
Fix install headers
Thanks. Looks good to me.
struct thread_creation {
void (*compute) (void *arg);
void *arg;
void (*create_done) (gcry_kdf_handle_t *hd, void *tid);
};Laurent Montel <montel@kde.org> committed rLIBKLEOb76c3fa0b0ab: GIT_SILENT: compile without deprecated methods (authored by Laurent Montel <montel@kde.org>).
GIT_SILENT: compile without deprecated methods
Laurent Montel <montel@kde.org> committed rKLEOPATRA14c805f86e2d: GIT_SILENT: compile without deprecated methods (authored by Laurent Montel <montel@kde.org>).
GIT_SILENT: compile without deprecated methods
Jan 22 2022
Jan 22 2022
• werner placed T5593: Gpg4Win displayed 'PATH env variable too big' error during setup up for grabs.
• werner triaged T5593: Gpg4Win displayed 'PATH env variable too big' error during setup as Wishlist priority.
• werner changed the edit policy for T5593: Gpg4Win displayed 'PATH env variable too big' error during setup.
Policy assigned T5593: Gpg4Win displayed 'PATH env variable too big' error during setup to • werner.
DANE has been an experimental thing and is imho dead.
jukivili committed rCa35ac62ee7b5: Fix building GCM when GCM_USE_ARM_NEON defined but GCM_USE_ARM_PMULL not (authored by jukivili).
Fix building GCM when GCM_USE_ARM_NEON defined but GCM_USE_ARM_PMULL not
jukivili committed rCe9e723d5e320: tests/t-kdf: fix format string argument type mismatch (authored by jukivili).
tests/t-kdf: fix format string argument type mismatch
• werner triaged T5492: Kleopatra does not report error when calculating checksums and checksum file can not be written as Normal priority.
Implemented extended headers for filenames and linknames (on Unix).
• werner added projects to T5796: libgcrypt-1.9.4 build failure on ARM without NEON: libgcrypt, arm.
Thanks for report. I got similar report earlier this week from gentoo user through email and made following patch for them to test. I'll push it to master soon.
Jan 21 2022
Jan 21 2022
• werner triaged T5793: gpgsm: Wrong length when parsing octetstring in constructed encoding + definite length as Normal priority.
• ikloecker committed rKLEOPATRAc5d6bd1b73d6: Ensure that key stubs are created for all keys on a smartcard (authored by joeyberkovitz).
Ensure that key stubs are created for all keys on a smartcard
thgoebel added a comment to T5793: gpgsm: Wrong length when parsing octetstring in constructed encoding + definite length.
Sorry about that! Maybe consider adding a line "Check that the issue persists in the latest version" to the "How to file a bug". I was going through this list, so it would have caught me.
This looks like a missing escaping issue in the sender (scdaemon?) or an unwanted unescaping issue in the receiver of the string (which uses Kleo::hexdecode()).
geigerzaehler changed Version from 2.2.21 to 2.2.32 on T5794: Cannot add ed25519 SSH key with empty comment.
Jan 20 2022
Jan 20 2022
doc: Fixed type of an object member
Thanks
• werner closed T5738: The ref and unref operation is confusing while using gpg_key_t and gpg_xxx_result_t as Wontfix.
gpgme_key_t is a different kind of object than a gpgme_foo_result_t and thus has different properties.
• werner closed T5793: gpgsm: Wrong length when parsing octetstring in constructed encoding + definite length as Resolved.
Please try again with a recent version of GnuPG (2.2.33 or 2.3.4) and libksba (1.6.0) and reopen this bug if the problem persists.
• werner renamed T5764: Broken umlauts in the new Windows Terminal from Broken umlauts to Broken umlauts in the new Windows Terminal.
• werner triaged T5765: gnupg2 weird memory fault on NetBSD Loongson/mips64el N32 as Normal priority.
The bug with the long filenames has been fixed but it is not yet released. Release will be in gpg4win 4.0.1 See T5754.
• ikloecker renamed T5791: Kleopatra: Make settings read-only if corresponding GnuPG config entries or KConfigXT entries are read-only from Kleopatra: Make settings read-only if corresponding GnuPG config entries are read-only to Kleopatra: Make settings read-only if corresponding GnuPG config entries or KConfigXT entries are read-only.
• ikloecker committed rKLEOPATRA852439e5a4af: Do not change read-only settings when loading defaults (authored by • ikloecker).
Do not change read-only settings when loading defaults
• ikloecker committed rKLEOPATRAa6550aec6bee: Do not change read-only settings when loading defaults (authored by • ikloecker).
Do not change read-only settings when loading defaults
• ikloecker committed rKLEOPATRA9b0d60eb49ae: Convert missed copyright to SPDX format (authored by • ikloecker).
Convert missed copyright to SPDX format
• ikloecker committed rKLEOPATRA24a43181585c: Disable UI elements if corresponding config entries are read-only (authored by • ikloecker).
Disable UI elements if corresponding config entries are read-only
• ikloecker committed rKLEOPATRA4c026aea04bb: Use KConfigXT for getting/setting the default checksum definition (authored by • ikloecker).
Use KConfigXT for getting/setting the default checksum definition
• werner triaged T5782: Kleopatra: Smartcard unusable secret key until used via command line as Normal priority.
scrypt: Fix the last step of SCRYPT.
• gniibe committed rC535a4d345872: fips: Recover test cases for selftest, add skipping in FIPS mode. (authored by • gniibe).
fips: Recover test cases for selftest, add skipping in FIPS mode.
Test cases are recovered in rC535a4d345872: fips: Recover test cases for selftest, add skipping in FIPS mode..
Hi gniibe,
Unfortunately, gdb session log and ktrace log don't have enough information to locate the cause/problem.
Jan 19 2022
Jan 19 2022
• ikloecker committed rKLEOPATRA794e082c4436: Disable UI elements if refresh interval setting is immutable (authored by • ikloecker).
Disable UI elements if refresh interval setting is immutable
• ikloecker committed rKLEOPATRA002ce80d51d3: Tell the key cache to use the configured refresh interval (authored by • ikloecker).
Tell the key cache to use the configured refresh interval
• ikloecker committed rLIBKLEO4c4a4ee37f3e: Do not allow editing of read-only keyserver settings via double click (authored by • ikloecker).
Do not allow editing of read-only keyserver settings via double click
While trying to test the X.509 directory server configuration in Kleopatra, I stumbled over difference between 2.2 and 2.3 and a possible regression in 2.2.
Sorry, it's my misunderstanding.
_gcry_fips_run_selftest can be run by GCRYCTL_SELFTEST.
I was confused by the function name. Perhaps, it is good to change the name of function to _gcry_run_selftest.
@werner Those removed tests are selftests which are only invoked by FIPS mode for its requirement of selftests.
web: It's gnupg.org and not gnupg.com
• werner committed rDcb7a44a71b46: web: Add a separate signature_key.asc file (authored by • werner).
web: Add a separate signature_key.asc file
Remove dead code
• ikloecker committed rKLEOPATRAf7e4efff8e00: Disable UI elements if corresponding config entries are read-only (authored by • ikloecker).
Disable UI elements if corresponding config entries are read-only
• ikloecker committed rKLEOPATRAf7241ec6bd39: Add a helper class for managing a QWidget with associated QLabel (authored by • ikloecker).
Add a helper class for managing a QWidget with associated QLabel
AFAICS, the last commit removes some tests. We should never remove a test just because FIPS does not allow it. The old tests need to be run in non-fips mode.