Page MenuHome GnuPG
Feed All Stories

Sep 2 2022

gniibe committed rGd49788ef9f82: tools:gpg-auth: New tool for authentication. (authored by gniibe).
tools:gpg-auth: New tool for authentication.
Sep 2 2022, 7:54 AM
DemiMarie created T6178: es_write_sanitized swallows errors.
Sep 2 2022, 2:20 AM · Not A Bug, gpgrt
DemiMarie created T6177: GnuPG mishandles write errors on status fd and stdout.
Sep 2 2022, 2:15 AM · gnupg

Sep 1 2022

cschramm added a comment to T6176: Crash in ask_for_card.

Applies cleanly and fixes the crash. 👍

Sep 1 2022, 6:06 PM · gpgagent, gnupg (gpg22), Bug Report
werner added a comment to T6176: Crash in ask_for_card.

For master (2.3) the fix is not needed due to another way the code works, but having a more robust function is always good.

Sep 1 2022, 5:47 PM · gpgagent, gnupg (gpg22), Bug Report
werner committed rGcd7570f02efe: common: Make nvc_lookup more robust. (authored by werner).
common: Make nvc_lookup more robust.
Sep 1 2022, 5:45 PM
werner added a comment to T6176: Crash in ask_for_card.

You may try the above commit - if should apply cleanly to 2.2.37.

Sep 1 2022, 5:40 PM · gpgagent, gnupg (gpg22), Bug Report
werner committed rG8c22b00268bf: common: Make nvc_lookup more robust. (authored by werner).
common: Make nvc_lookup more robust.
Sep 1 2022, 5:38 PM
werner added a comment to T6176: Crash in ask_for_card.

You are right. This due to your old binary private key (stubs). Otherwise you would at least have one item ("Key:"). I need to see what do do about the release. Maybe a tool to update the key files would we a good workaround.

Sep 1 2022, 4:04 PM · gpgagent, gnupg (gpg22), Bug Report
werner claimed T6176: Crash in ask_for_card.
Sep 1 2022, 3:53 PM · gpgagent, gnupg (gpg22), Bug Report
werner added a comment to T6176: Crash in ask_for_card.

Oh well, why do I receive such bug reports right after the next release :-(

Sep 1 2022, 3:52 PM · gpgagent, gnupg (gpg22), Bug Report
cschramm created T6176: Crash in ask_for_card.
Sep 1 2022, 3:11 PM · gpgagent, gnupg (gpg22), Bug Report
werner committed rD1c69ef68b81c: Remove the donate button (authored by werner).
Remove the donate button
Sep 1 2022, 1:57 PM
werner closed T6159: Release GnuPG 2.2.38 as Resolved.
Sep 1 2022, 1:54 PM · Release Info, gnupg (gpg22)
werner committed rD1943c5a7ded1: swdb: GnuPG 2.2.38 (authored by werner).
swdb: GnuPG 2.2.38
Sep 1 2022, 1:51 PM
werner committed rW3a688682e8be: Update to GnuPG 2.2.38 (authored by werner).
Update to GnuPG 2.2.38
Sep 1 2022, 1:50 PM
werner committed rG9eb03b722cb6: Post release updates (authored by werner).
Post release updates
Sep 1 2022, 1:36 PM
werner committed rG0b786fde7755: Release 2.2.38 (authored by werner).
Release 2.2.38
Sep 1 2022, 1:36 PM
JoeDoe1000 added a comment to T5926: GPGOL - Leere Nachricht kann nicht signiert werden (empty message email can't be signed or encrypted).

Sorry for the confusion ...
There was no single gpgol-File for deletion.
There were 100.000 other files from other programs.
No idea, why this has interferred with gpgol, but it obviously has.

Sep 1 2022, 10:14 AM · gpgol, Bug Report, gpg4win
aheinecke added a comment to T5926: GPGOL - Leere Nachricht kann nicht signiert werden (empty message email can't be signed or encrypted).

Ok. So I never assumed that you had actually 100 gpgol_enc_number.dat files lying around.

Sep 1 2022, 9:50 AM · gpgol, Bug Report, gpg4win
gniibe committed rGd1490c6df991: po: Update Japanese Translation. (authored by gniibe).
po: Update Japanese Translation.
Sep 1 2022, 7:54 AM
gniibe committed rGc26393a2cb7c: po: Update Japanese Translation. (authored by gniibe).
po: Update Japanese Translation.
Sep 1 2022, 7:49 AM
eliz added a comment to T5897: Fix MinGW compilation error with 'struct _stat32' in common/sysutils.c from gnupg-2.3.4.

Should be OK for mingw.org's MinGW. I cannot test the MinGW64 bits, but I trust that you did.

Sep 1 2022, 7:16 AM · gnupg24, toolchain, Feature Request, patch
gniibe added a comment to T5897: Fix MinGW compilation error with 'struct _stat32' in common/sysutils.c from gnupg-2.3.4.

I encountered this issue of struct stat when compiling for x86_64 of Windows.
I'm considering this patch:

diff --git a/common/sysutils.c b/common/sysutils.c
index c30f9a0ce..bbed309a8 100644
--- a/common/sysutils.c
+++ b/common/sysutils.c
@@ -1237,10 +1237,20 @@ int
 gnupg_stat (const char *name, struct stat *statbuf)
 {
 # ifdef HAVE_W32_SYSTEM
+#  if __MINGW32_MAJOR_VERSION > 3
+    /* mingw.org's MinGW */
+#   define STRUCT_STAT _stat
+#  elif defined(_USE_32BIT_TIME_T)
+    /* MinGW64 for i686 */
+#   define STRUCT_STAT _stat32
+#  else
+    /* MinGW64 for x86_64 */
+#   define STRUCT_STAT _stat64i32
+#  endif
   if (any8bitchar (name))
     {
       wchar_t *wname;
-      struct _stat32 st32;
+      struct STRUCT_STAT st32;
       int ret;
Sep 1 2022, 6:27 AM · gnupg24, toolchain, Feature Request, patch
orbea added a comment to T6136: build failure with slibtool - error: undefined symbol: QGpgME::RevokeKeyJob::staticMetaObject.

Thanks, I really appreciate having this fixed in gpgrt-config! I backported the commit to gentoo and can confirm that fixes the build issue with slibtool.

Sep 1 2022, 4:31 AM · gpgrt, gpgme, Bug Report
gniibe closed T5898: Two fixes for the gnupg-2.3.4 test suite when running on MS-Windows as Resolved.

Thank you for reporting, and sorry for late handling of this report.

Sep 1 2022, 3:26 AM · Windows, gnupg (gpg23), Bug Report

Aug 31 2022

werner updated the task description for T6159: Release GnuPG 2.2.38.
Aug 31 2022, 6:32 PM · Release Info, gnupg (gpg22)
werner updated the task description for T6159: Release GnuPG 2.2.38.
Aug 31 2022, 6:31 PM · Release Info, gnupg (gpg22)
werner triaged T6175: Release GnuPG 2.2.39 as Low priority.
Aug 31 2022, 6:29 PM · gnupg (gpg22), Release Info
werner committed rGea34325c54a2: dirmngr: New option --debug-cache-expired-certs. (authored by werner).
dirmngr: New option --debug-cache-expired-certs.
Aug 31 2022, 6:14 PM
werner committed rG17073c9abcfb: dirmngr: New option --debug-cache-expired-certs. (authored by werner).
dirmngr: New option --debug-cache-expired-certs.
Aug 31 2022, 6:12 PM
werner committed rGa95a31cd2f03: gpg: Add descriptions for --auto-key-import and --include-key-import (authored by werner).
gpg: Add descriptions for --auto-key-import and --include-key-import
Aug 31 2022, 6:07 PM
werner closed T6174: Option --require-comliance does not work in sign+encrypt mode as Resolved.
Aug 31 2022, 5:46 PM · Restricted Project, OpenPGP, Bug Report, gnupg
werner committed rG0b91fa0f13fd: common,w32: Fix an encoding problem of the printed timezone. (authored by werner).
common,w32: Fix an encoding problem of the printed timezone.
Aug 31 2022, 5:33 PM
JoeDoe1000 added a comment to T5926: GPGOL - Leere Nachricht kann nicht signiert werden (empty message email can't be signed or encrypted).

I had a look into my \AppData\Local\Temp and found some 10,000 Files/Folders (nearly 100,000 files in total) with over 10 GB.
After deleting most of them, GPG4WIN 4.0.3 is working!

Aug 31 2022, 4:56 PM · gpgol, Bug Report, gpg4win
werner added a comment to T6173: Invalid signing-key when doing a signature-check of GnuPG installer-packages, signed by Werner Koch's signing-key in de-vs Mode (aka VS-NfD Mode).

Small correction: We don't have replicas of our code signing key. I mistook this with out Authenticode signing key.

Aug 31 2022, 4:55 PM · Restricted Project, workaround, gnupg
werner committed rGe05fb5ca3711: gpg: Emit STATUS_FAILURE for --require-compliance errors (authored by werner).
gpg: Emit STATUS_FAILURE for --require-compliance errors
Aug 31 2022, 3:34 PM
werner committed rGe1169e8f8ac7: scd: Add npth_unprotect/npth_protect for blocking operations. (authored by gniibe).
scd: Add npth_unprotect/npth_protect for blocking operations.
Aug 31 2022, 3:34 PM
werner committed rG14ccabe7f82f: dirmngr: Reject certificate which is not valid into cache. (authored by gniibe).
dirmngr: Reject certificate which is not valid into cache.
Aug 31 2022, 3:34 PM
SPYazdani added a comment to T5926: GPGOL - Leere Nachricht kann nicht signiert werden (empty message email can't be signed or encrypted).

It's strange that the problem only occurs locally on one machine. I set up a test bench and did not experience the same errors as before.

Aug 31 2022, 2:52 PM · gpgol, Bug Report, gpg4win
aheinecke added a comment to T5926: GPGOL - Leere Nachricht kann nicht signiert werden (empty message email can't be signed or encrypted).

Thanks a lot. Due to your log I have tried with a long username and umlauts and a dot in my username. My test name was Längül!ödiföäada.dad which is the longest that Windows allows. But It still works for me. Even if I create one or two gpgol_enc.dat files in %TEMP% It still works:

Aug 31 2022, 2:37 PM · gpgol, Bug Report, gpg4win
werner committed rGaa0c942521d8: gpg: Fix assertion failure due to errors in encrypt_filter. (authored by werner).
gpg: Fix assertion failure due to errors in encrypt_filter.
Aug 31 2022, 1:59 PM
werner committed rG15cf36f6a84d: gpg: Rename a function. (authored by werner).
gpg: Rename a function.
Aug 31 2022, 1:59 PM
werner committed rGf88cb12f8e3c: gpg: Make --require-compliance work for -se (authored by werner).
gpg: Make --require-compliance work for -se
Aug 31 2022, 1:59 PM
werner committed rG5b24c41ba72c: gpg: Very minor cleanup in decrypt_data. (authored by werner).
gpg: Very minor cleanup in decrypt_data.
Aug 31 2022, 1:59 PM
werner committed rGe92812a4752e: g10/decrypt-data: disable output estream buffering to reduce overhead (authored by jukivili).
g10/decrypt-data: disable output estream buffering to reduce overhead
Aug 31 2022, 1:59 PM
aheinecke committed rKLEOPATRA43f95b163406: Properly close child handles in winproc device (authored by aheinecke).
Properly close child handles in winproc device
Aug 31 2022, 12:48 PM
aheinecke added a comment to T6139: Kleopatra: Encrypting two files in an archive on a mounted network share on windows with one CPU never finishes.

The fix did not work, the hangs occured later in testing again. After further debugging we found the issue to be that we did not Close the handles we inherited to the child.

Aug 31 2022, 12:47 PM · kleopatra, Restricted Project
mlaurent committed rLIBKLEO8e3344a3571e: GIT_SILENT: it compiles fine without deprecated method (authored by mlaurent).
GIT_SILENT: it compiles fine without deprecated method
Aug 31 2022, 9:17 AM
mlaurent committed rKLEOPATRA8a295dd6ccb7: GIT_SILENT: it compiles fine without deprecated method (authored by mlaurent).
GIT_SILENT: it compiles fine without deprecated method
Aug 31 2022, 9:14 AM
gniibe committed rAe3b1e3857e00: Drop WindowsCE support. (authored by gniibe).
Drop WindowsCE support.
Aug 31 2022, 9:03 AM
JoeDoe1000 added a comment to T5926: GPGOL - Leere Nachricht kann nicht signiert werden (empty message email can't be signed or encrypted).

... Logging active, standard, with email content and meta information

Aug 31 2022, 8:29 AM · gpgol, Bug Report, gpg4win
JoeDoe1000 added a comment to T5926: GPGOL - Leere Nachricht kann nicht signiert werden (empty message email can't be signed or encrypted).

I have produced a log using 4.0.3.
See attached.

Aug 31 2022, 8:27 AM · gpgol, Bug Report, gpg4win
ffontaine added a comment to T6165: gpgme: build failure without threads.

GnuPG requires threads but not gpgme.
We already had the same discussion about threads and libgpg-error more than one year ago: https://dev.gnupg.org/T5296

Aug 31 2022, 8:25 AM · Info Needed, gpgme, Bug Report
gniibe added projects to T6170: libassuan: Drop WindowsCE support: libassuan, Restricted Project.

Push the change.

Aug 31 2022, 7:31 AM · libassuan
gniibe triaged T6165: gpgme: build failure without threads as Low priority.

Thank you for your report. Next time, please include information of your target and configuration in the report.

Aug 31 2022, 3:15 AM · Info Needed, gpgme, Bug Report

Aug 30 2022

werner triaged T6174: Option --require-comliance does not work in sign+encrypt mode as High priority.
Aug 30 2022, 6:53 PM · Restricted Project, OpenPGP, Bug Report, gnupg
werner edited projects for T6173: Invalid signing-key when doing a signature-check of GnuPG installer-packages, signed by Werner Koch's signing-key in de-vs Mode (aka VS-NfD Mode), added: workaround, Restricted Project; removed gpg4win.

In general I use my standard ed25519 signing token for all software. However, GnuPG VS-Desktop is signed using a Brainpool key named GnuPG.com (stored on a smartcard with 2 replicas) for the simple reason that it does not raise questions when ppl update their GnuPG VS-Desktop and run into a non-compliant key.

Aug 30 2022, 5:19 PM · Restricted Project, workaround, gnupg
aheinecke closed T6171: Kleopatra: Handle --require-compliance by preventing non compliant actions as Wontfix.

After internal discussion this will be moved to Wontfix.

Aug 30 2022, 3:44 PM · Restricted Project, kleopatra
vitusb triaged T6173: Invalid signing-key when doing a signature-check of GnuPG installer-packages, signed by Werner Koch's signing-key in de-vs Mode (aka VS-NfD Mode) as Normal priority.
Aug 30 2022, 2:57 PM · Restricted Project, workaround, gnupg
ikloecker added a comment to T6149: Kleopatra: Fix (accessibility) issues found while testing with NVDA.

I found the following issues while testing with NVDA:

  1. In the Certificate Details dialog NVDA does not read the labels associated to the key properties when a property gets focus, e.g. it reads the expiration date, but it does not read the label "Valid until".
  2. In the Certify dialog the "Advanced" expander lacks a focus indicator.
  3. In the Certify dialog the explicitly shown tool tips are not read.
  4. In the Certify dialog the explicitly shown tool tips are immediately closed if the mouse pointer is over them or if the mouse is moved a short distance.
  5. When a dialog is opened, then a label that has initial input focus lacks a focus indicator.
Aug 30 2022, 2:15 PM · kleopatra, Restricted Project
aheinecke created P14 (An Untitled Masterwork).
Aug 30 2022, 2:05 PM
werner triaged T6172: Kleopatra: Crash when pulling card during key generation as Normal priority.
Aug 30 2022, 12:17 PM · kleopatra, Bug Report
aheinecke closed T5776: Kleopatra: Add possibility to copy fingerprints without spaces as Resolved.
Aug 30 2022, 11:44 AM · kleopatra, Restricted Project
aheinecke triaged T6171: Kleopatra: Handle --require-compliance by preventing non compliant actions as Wishlist priority.
Aug 30 2022, 10:31 AM · Restricted Project, kleopatra
ikloecker committed rLIBKLEO23fe13c5ecdc: Use the same text for display and accessibility tools (authored by ikloecker).
Use the same text for display and accessibility tools
Aug 30 2022, 10:01 AM
werner added a project to T4779: GpgSM: "Invalid Object" error when importing .p12 certs with wrong passphrase: Info Needed.

This looks like a different but not too uncommon problem. For T6169 we need to get a PKCS#12 file to be able to replicate the problems - obviously that PKCS#12 should hold only test keys/certs.

Aug 30 2022, 9:59 AM · gnupg24 (gnupg-2.4.3), Restricted Project, gnupg (gpg23), S/MIME
liaomd added a comment to T6169: Issues caused for importing private certificates.

This issue happens even if a user enters the correct password for the private certificate.

Aug 30 2022, 9:20 AM · S/MIME, Bug Report
aheinecke merged T6169: Issues caused for importing private certificates into T4779: GpgSM: "Invalid Object" error when importing .p12 certs with wrong passphrase.
Aug 30 2022, 9:03 AM · gnupg24 (gnupg-2.4.3), Restricted Project, gnupg (gpg23), S/MIME
aheinecke merged task T6169: Issues caused for importing private certificates into T4779: GpgSM: "Invalid Object" error when importing .p12 certs with wrong passphrase.
Aug 30 2022, 9:03 AM · S/MIME, Bug Report
aheinecke added a comment to T6169: Issues caused for importing private certificates.

I think this is a duplicate of T4779 I am merging them because if it is not a duplicate T4779 is still the right issue because we need better error messages for PKCS #12 import

Aug 30 2022, 9:03 AM · S/MIME, Bug Report
aheinecke added a comment to T5926: GPGOL - Leere Nachricht kann nicht signiert werden (empty message email can't be signed or encrypted).

strange, I have not received one. Did it bounce somewhere maybe because of size? Encryption should compress this though.

Aug 30 2022, 9:01 AM · gpgol, Bug Report, gpg4win
gniibe added a project to T6169: Issues caused for importing private certificates: S/MIME.

To identify/locate the issue, you can try command line:

Aug 30 2022, 8:37 AM · S/MIME, Bug Report
gniibe added a comment to T6142: On Windows, gpg 2.3.7 thinks the certificates of major keyservers have expired.

In the situation of a certificate about to be expired in the cache:

Aug 30 2022, 8:31 AM · workaround, gnupg, Keyserver, Bug Report
dkg added a comment to T6142: On Windows, gpg 2.3.7 thinks the certificates of major keyservers have expired.

Thanks, @gniibe -- i agree that this change to put_cert should be helpful, when encountering a certificate that is already invalid.

Aug 30 2022, 8:04 AM · workaround, gnupg, Keyserver, Bug Report
gniibe triaged T6170: libassuan: Drop WindowsCE support as Wishlist priority.
Aug 30 2022, 8:03 AM · libassuan
gniibe claimed T6127: FIPS 140-3 final review comments.
Aug 30 2022, 7:40 AM · FIPS, libgcrypt, Bug Report
gniibe added a comment to T5870: libgcrypt: AEAD API for FIPS 140 (in future).

TLS 1.3 requires much changes for NTBTLS.

Aug 30 2022, 7:39 AM · Feature Request, FIPS, libgcrypt
gniibe added a parent task for T4873: Enable AES GCM in FIPS mode: T5870: libgcrypt: AEAD API for FIPS 140 (in future).
Aug 30 2022, 7:35 AM · FIPS, libgcrypt, Feature Request
gniibe added a subtask for T5870: libgcrypt: AEAD API for FIPS 140 (in future): T4873: Enable AES GCM in FIPS mode.
Aug 30 2022, 7:35 AM · Feature Request, FIPS, libgcrypt
gniibe claimed T4873: Enable AES GCM in FIPS mode.
Aug 30 2022, 7:34 AM · FIPS, libgcrypt, Feature Request
gniibe moved T4873: Enable AES GCM in FIPS mode from Next to Ready for release on the FIPS board.
Aug 30 2022, 7:34 AM · FIPS, libgcrypt, Feature Request
gniibe moved T6048: Test suite fixes with --enable-pubkey-ciphers=ecc from Next to Ready for release on the FIPS board.
Aug 30 2022, 7:33 AM · FIPS, libgcrypt
gniibe moved T6039: FIPS: Allow salt=NULL (or shorter salt) for HKDF from Next to Ready for release on the FIPS board.
Aug 30 2022, 7:33 AM · backport, libgcrypt, FIPS
gniibe added a comment to T6127: FIPS 140-3 final review comments.

Applied to master and 1.10 branch.

Aug 30 2022, 7:32 AM · FIPS, libgcrypt, Bug Report
SPYazdani added a comment to T5926: GPGOL - Leere Nachricht kann nicht signiert werden (empty message email can't be signed or encrypted).

Ok, email sent

Aug 30 2022, 4:39 AM · gpgol, Bug Report, gpg4win

Aug 29 2022

niknetniko added a comment to T5426: [Pinentry]: add remeber password checkbox in pinentry-qt..

Could this be reconsidered, as a way to support "allow-external-cache" in pinentry-qt? I am trying to use pinentry-kwallet, which saves the passphrase in kwallet, but there is no checkbox if the underlying pinentry is pinentry-qt.

Aug 29 2022, 7:47 PM · Feature Request
liaomd added a comment to T6169: Issues caused for importing private certificates.

I believe that this error is caused by a software bug of Gpg4win. Please get back to me if you need additional details about this issue, thanks

Aug 29 2022, 6:53 PM · S/MIME, Bug Report
liaomd created T6169: Issues caused for importing private certificates.
Aug 29 2022, 6:51 PM · S/MIME, Bug Report
aheinecke committed rW3dbe2694ae42: Add patch to show sysinfo in report bug (authored by aheinecke).
Add patch to show sysinfo in report bug
Aug 29 2022, 6:26 PM
aheinecke committed rWb4ab1c3a4e66: Update Kleopatra and translations again (authored by aheinecke).
Update Kleopatra and translations again
Aug 29 2022, 6:26 PM
aheinecke committed rKLEOPATRA1fa150672f83: Fix bug report url for signed Windows versions (authored by aheinecke).
Fix bug report url for signed Windows versions
Aug 29 2022, 5:56 PM
aheinecke added a comment to T5926: GPGOL - Leere Nachricht kann nicht signiert werden (empty message email can't be signed or encrypted).

Please, Last chance to add a log with Included file names (Include data checkbox) before the next release. Me and a colleague reviewed the function and don't find an issue with it. Otherwise I will only add a MessageBox error in that case for the next release.

Aug 29 2022, 4:48 PM · gpgol, Bug Report, gpg4win
werner added a comment to rG203dcc19eb48: common: New common option no-autostart..

It turned out that this is pretty important if you use a current version of scute; That one uses gpg-connect-agent to list all smartcards. And gpg-connect-agent will start and take over a remote socket used for the card.

Aug 29 2022, 4:08 PM
ebo created T6168: GpgOL: naming of saved attachments.
Aug 29 2022, 2:06 PM · kleopatra, Restricted Project, gpgol
aheinecke committed rWc6794dd8996d: Another l10n update (authored by aheinecke).
Another l10n update
Aug 29 2022, 1:17 PM
ebo created T6167: GpgOL: Window resize on forwarding.
Aug 29 2022, 1:04 PM · Too Old, Restricted Project, gpgol
aheinecke committed rW4deb6701c1b5: Fix kxmlgui l10n stow (authored by aheinecke).
Fix kxmlgui l10n stow
Aug 29 2022, 12:47 PM
aheinecke committed rW5c59e4f17b2c: Fix l10n summit packaging (authored by aheinecke).
Fix l10n summit packaging
Aug 29 2022, 11:59 AM
aheinecke committed rWffc7ead653af: Update kde-l10n packaging (authored by aheinecke).
Update kde-l10n packaging
Aug 29 2022, 11:46 AM