Page MenuHome GnuPG
Feed All Stories

May 26 2023

werner changed the status of T6135: Agent, P15: Insert Smartcard query uses serial number instead of $DISPSERIALNO from Open to Testing.
May 26 2023, 2:32 PM · gnupg24 (gnupg-2.4.3), scd
werner committed rG2783b786a931: agent: Do not overwrite a key file by a shadow key file. (authored by werner).
agent: Do not overwrite a key file by a shadow key file.
May 26 2023, 2:29 PM
werner committed rGa216e9c028ee: agent: Update key files by first writing to a temp file. (authored by werner).
agent: Update key files by first writing to a temp file.
May 26 2023, 2:29 PM
werner committed rG1d23dc9389a1: agent: Create and use Token entries to track the display s/n. (authored by werner).
agent: Create and use Token entries to track the display s/n.
May 26 2023, 2:29 PM
werner committed rGec0c35d1b8be: common: New function nve_set (authored by werner).
common: New function nve_set
May 26 2023, 2:29 PM
werner added a comment to T6386: gpg-agent 2.2: Command "READKEY --card --no-data -- OPENPGP.1" overwrites protected-private-key with shadowed-private-key.

Due to back porting another change the fix for 2.2 is now also needed in 2.4.

May 26 2023, 2:25 PM · gnupg22 (gnupg-2.2.42), Bug Report
werner committed rG7cf8c5c29158: agent: Fix printed error in findkey. (authored by werner).
agent: Fix printed error in findkey.
May 26 2023, 2:21 PM
aheinecke committed rKLEOPATRA6a1694ddee64: Add a Windows Manifest to kleopatra (authored by werner).
Add a Windows Manifest to kleopatra
May 26 2023, 1:47 PM
aheinecke assigned T6488: Kleopatra: moving decrypted Folder to USB device fails to ikloecker.

So the reason this fails is the same as it was back when T3547 was fixed. MoveFile does not work across directories, and even MoveFileEx that supports this for files does not support this for directories.

May 26 2023, 11:56 AM · kleopatra, Restricted Project
werner edited Description on gnupg24.
May 26 2023, 10:07 AM
werner edited Description on gnupg24.
May 26 2023, 10:06 AM
werner edited Description on gnupg.
May 26 2023, 10:05 AM
werner edited projects for T6250: GPG-Agent doesn't work properly with smart cards and ed25519 keys and SSH Agent, added: gnupg; removed gnupg24.
May 26 2023, 10:03 AM · gnupg, Documentation, ssh
werner edited projects for T6465: Store the ECDH parameters in the key file, added: gnupg26; removed gnupg24.
May 26 2023, 10:00 AM · gnupg26, OpenPGP, scd, Bug Report
gniibe committed rGf15a643a2d45: agent,dirmngr: Shutdown fix for supervised mode. (authored by gniibe).
agent,dirmngr: Shutdown fix for supervised mode.
May 26 2023, 8:32 AM
gniibe committed rGfe881167c5b8: agent,w32: Fix resource leak for a process. (authored by gniibe).
agent,w32: Fix resource leak for a process.
May 26 2023, 3:10 AM
gniibe committed rE6877540eb1fc: Add GNU system support for cross compilation. (authored by gniibe).
Add GNU system support for cross compilation.
May 26 2023, 2:13 AM

May 25 2023

werner committed rGa391d8f4be4e: gpg: Skip keys found via ADSKs. (authored by werner).
gpg: Skip keys found via ADSKs.
May 25 2023, 4:54 PM
werner committed rG09a96c9e1bea: gpg: Skip keys found via ADSKs. (authored by werner).
gpg: Skip keys found via ADSKs.
May 25 2023, 4:50 PM
werner added a comment to T6375: gpg-agent race-condition with parallel clients.

FWIW: I have not done any tests but the comment below is about the case I suspected to be the cuase for your problem:

May 25 2023, 3:13 PM · gnupg24, gpgagent, Bug Report
werner closed T3390: Showing complete OpenPGP key flags as Resolved.

See rG0988e49c45 which implements time and group but not yet the split thing because we are not shure that is good idea to have this w/o any implementation support.

May 25 2023, 12:49 PM · gnupg24, patch, Feature Request
werner closed T6179: gnupg 2.3.7 broke YubiKey support: DBG: Curve with OID not supported: 2b06010401da470f01 as Resolved.
May 25 2023, 12:44 PM · gnupg24, scd, Bug Report
werner removed a project from T5930: Use the FIPS-compatible digest&sign API: gnupg24.
May 25 2023, 12:41 PM · FIPS, Feature Request
werner archived gnupg24 (gnupg-2.4.1).
May 25 2023, 12:39 PM
werner edited projects for T6234: Implement access to smartcards via a generic pkcs#11 interface, added: gnupg26; removed gnupg24.
May 25 2023, 12:37 PM · Restricted Project, gnupg26, Feature Request, scd
werner closed T6504: Adding an ADSK to several keys may fail with Wrong Key Usage. as Resolved.

The fix actually does the same as my suggested workaround.

May 25 2023, 12:03 PM · gnupg24 (gnupg-2.4.2), OpenPGP, Bug Report
werner moved T6504: Adding an ADSK to several keys may fail with Wrong Key Usage. from Backlog to gnupg-2.4.2 on the gnupg24 board.
May 25 2023, 12:03 PM · gnupg24 (gnupg-2.4.2), OpenPGP, Bug Report
werner committed rGe9dd47d789e8: gpg: Fix searching for the ADSK key when adding an ADSK. (authored by werner).
gpg: Fix searching for the ADSK key when adding an ADSK.
May 25 2023, 12:01 PM
werner lowered the priority of T6504: Adding an ADSK to several keys may fail with Wrong Key Usage. from High to Normal.

There is an easy workaround: Append an exclamation mark to the adsk key. This way gpg will only search for this subkey.
An example with my test keys:

May 25 2023, 11:21 AM · gnupg24 (gnupg-2.4.2), OpenPGP, Bug Report
werner moved T6503: Do not make use of the VirtualStore under Windows from Backlog to QA on the gnupg22 board.
May 25 2023, 11:11 AM · gnupg22 (gnupg-2.2.42), gnupg24 (gnupg-2.4.2), Bug Report, kleopatra
werner committed rG625fb548998f: w32: Add missing manifests and set a requestedExecutionLevel. (authored by werner).
w32: Add missing manifests and set a requestedExecutionLevel.
May 25 2023, 11:10 AM
werner added a comment to T2820: GPGME: Allow to set the keyring for a context.

secring.gpg is only used by unsupported legacy versions of GnuPG. Since 2.1 it is not anymore used.

May 25 2023, 9:43 AM · Won't Fix, gpgme, Feature Request
gniibe added a comment to T6487: libassuan: Clear semantics for assuan_get_pid and improve use cases for process control.

Since it's ABI change, I created a branch: https://dev.gnupg.org/source/libassuan/history/gniibe%252Ft6487/

May 25 2023, 7:05 AM · libassuan, Memo
gniibe committed rA3bccb33ccd90: Add new pipe functions to control its server process. (authored by gniibe).
Add new pipe functions to control its server process.
May 25 2023, 7:03 AM
gniibe committed rG39a437378015: po: Update Japanese Translation. (authored by gniibe).
po: Update Japanese Translation.
May 25 2023, 6:44 AM
gniibe committed rG6984ddc6ebf5: common,w32: Fix gnupg_process_release. (authored by gniibe).
common,w32: Fix gnupg_process_release.
May 25 2023, 6:44 AM
l10n daemon script <scripty@kde.org> committed rKLEOPATRA6e2f3f385028: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
May 25 2023, 3:51 AM

May 24 2023

sfought added a comment to T2820: GPGME: Allow to set the keyring for a context.

So if I have \MyDirectory\pubring.pgp and MyDirectory\secring.pgp files, how do I use the --homedir option to access those?

May 24 2023, 10:15 PM · Won't Fix, gpgme, Feature Request
werner committed rEc62157c615a6: core: Add hurd-amd64 support (authored by Samuel Thibault <samuel.thibault@ens-lyon.org>).
core: Add hurd-amd64 support
May 24 2023, 4:59 PM
werner committed rE7a42ff0ec971: core: New mode flag "sequential" for gpgrt_fopen. (authored by werner).
core: New mode flag "sequential" for gpgrt_fopen.
May 24 2023, 4:59 PM
werner renamed Spammer-TomDavise from TomDavise to Spammer-TomDavise.
May 24 2023, 4:19 PM
werner committed rG000b82ade7ad: gpg: Return ERROR status for --quick-sign-key. (authored by werner).
gpg: Return ERROR status for --quick-sign-key.
May 24 2023, 4:05 PM
werner committed rG8295fb3f0b4f: w32: Add missing supportedOS Ids for Windows-10 (authored by werner).
w32: Add missing supportedOS Ids for Windows-10
May 24 2023, 2:17 PM
werner moved T6503: Do not make use of the VirtualStore under Windows from Backlog to QA on the gnupg24 board.
May 24 2023, 1:47 PM · gnupg22 (gnupg-2.2.42), gnupg24 (gnupg-2.4.2), Bug Report, kleopatra
werner committed rG3a438a1cc350: w32: Add missing manifests and set a requestedExecutionLevel. (authored by werner).
w32: Add missing manifests and set a requestedExecutionLevel.
May 24 2023, 12:18 PM
werner committed rG42bea7de16e9: common,w32: Set a proper error code when creating an output file. (authored by werner).
common,w32: Set a proper error code when creating an output file.
May 24 2023, 12:18 PM
werner committed rG7e681da1b217: sm: Emit STATUS_FAILURE for non-implemented commands. (authored by werner).
sm: Emit STATUS_FAILURE for non-implemented commands.
May 24 2023, 12:18 PM
werner committed rG097701e69835: gpgtar: Emit FAILURE status line. (authored by werner).
gpgtar: Emit FAILURE status line.
May 24 2023, 12:18 PM
werner committed rGfaf0a97b2e0b: gpg: Improve error code for file already exists. (authored by werner).
gpg: Improve error code for file already exists.
May 24 2023, 12:18 PM
mgorny added a comment to T6500: Keyserver access via http-proxy isn't attempted when using standard-resolver.

For the record, we've removed the SRV record for keys.gentoo.org for now, to work around the problem. Without the SRV record, everything works as expected.

May 24 2023, 10:03 AM · dns, gnupg24, Bug Report
gniibe committed rA8d83aea214a1: Allow use of global system hooks with API version 2. (authored by gniibe).
Allow use of global system hooks with API version 2.
May 24 2023, 7:35 AM
gniibe added a comment to T6487: libassuan: Clear semantics for assuan_get_pid and improve use cases for process control.

I conclude that adding two public functions for pipe connection of client will be useful (and solve the pid_t issue, by successfully hiding those use cases).

May 24 2023, 7:32 AM · libassuan, Memo
l10n daemon script <scripty@kde.org> committed rKLEOPATRA4c578f9094e3: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
May 24 2023, 5:28 AM
l10n daemon script <scripty@kde.org> committed rKLEOPATRAe61794f476f9: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
May 24 2023, 3:56 AM
gniibe added a comment to T6481: BEGIN_ENCRYPTION status output happens later in 2.4.1 (breaks Emacs's EasyPG).

I pushed the change which keeps old status report behavior to master.
Let me test the change.

May 24 2023, 3:48 AM · Emacs, gnupg, Bug Report
gniibe committed rG2f872fa68c65: gpg: Report BEGIN_* status before examining the input. (authored by gniibe).
gpg: Report BEGIN_* status before examining the input.
May 24 2023, 3:48 AM
gniibe added a comment to T6481: BEGIN_ENCRYPTION status output happens later in 2.4.1 (breaks Emacs's EasyPG).

looks simpler to me.

May 24 2023, 3:24 AM · Emacs, gnupg, Bug Report

May 23 2023

werner closed T6501: Check use of write in gpgme's Python bindings as Resolved.

Should be fixed now; see commit above.

May 23 2023, 4:45 PM · Python, Bug Report, gpgme
werner committed rM36a68bc5308c: python: Fix wrong use of write. (authored by werner).
python: Fix wrong use of write.
May 23 2023, 4:32 PM
werner added a comment to T6501: Check use of write in gpgme's Python bindings.

FWIW: WriteFile and write are more different than in using a HANDLE vs. a libc file descriptor. Despite that a HANDLE might be a 64 bit pointer, it is guaranteed that the value fits into a 32 bit variable. But they still index different objects. The return code and error values are also different.

May 23 2023, 3:59 PM · Python, Bug Report, gpgme
werner added a comment to T6501: Check use of write in gpgme's Python bindings.

Much simpler: write is only used in the callbacks and over there gpgme_io_writen[n] shall be used anyway.

May 23 2023, 3:53 PM · Python, Bug Report, gpgme
mlaurent committed rLIBKLEO8c8517350086: GIT_SILENT: disable BUILD_TESTING in release (authored by mlaurent).
GIT_SILENT: disable BUILD_TESTING in release
May 23 2023, 3:47 PM
mlaurent committed rKLEOPATRA65bb0c0b0cd9: GIT_SILENT: disable BUILD_TESTING in release (authored by mlaurent).
GIT_SILENT: disable BUILD_TESTING in release
May 23 2023, 3:44 PM
werner updated the task description for T6504: Adding an ADSK to several keys may fail with Wrong Key Usage..
May 23 2023, 3:18 PM · gnupg24 (gnupg-2.4.2), OpenPGP, Bug Report
werner triaged T6504: Adding an ADSK to several keys may fail with Wrong Key Usage. as High priority.
May 23 2023, 3:18 PM · gnupg24 (gnupg-2.4.2), OpenPGP, Bug Report
werner added a comment to T6481: BEGIN_ENCRYPTION status output happens later in 2.4.1 (breaks Emacs's EasyPG).

Hmm, for the latter this:

May 23 2023, 3:03 PM · Emacs, gnupg, Bug Report
gniibe added a comment to T6481: BEGIN_ENCRYPTION status output happens later in 2.4.1 (breaks Emacs's EasyPG).

Orthogonally, here is possible change for GnuPG, if we need to support the workaround of compress-level 0 in ~/.gnupg/gpg.conf.

May 23 2023, 2:11 PM · Emacs, gnupg, Bug Report
werner updated the task description for T6488: Kleopatra: moving decrypted Folder to USB device fails.
May 23 2023, 1:25 PM · kleopatra, Restricted Project
mlaurent committed rLIBKLEOa2b918b8a92c: Merge remote-tracking branch 'origin' into kf6 (authored by mlaurent).
Merge remote-tracking branch 'origin' into kf6
May 23 2023, 1:25 PM
werner updated the task description for T6488: Kleopatra: moving decrypted Folder to USB device fails.
May 23 2023, 1:25 PM · kleopatra, Restricted Project
werner added a comment to T6503: Do not make use of the VirtualStore under Windows.

Kleopatra test case (similar to gpg):

May 23 2023, 1:22 PM · gnupg22 (gnupg-2.2.42), gnupg24 (gnupg-2.4.2), Bug Report, kleopatra
werner renamed T6499: Kleopatra: no error if trying to write decrypted file to write-protected folder from Do not make use of the VirtualStore under Windows. to Kleopatra: no error if trying to write decrypted file to write-protected folder.
May 23 2023, 1:17 PM · vsd33, kleopatra, Restricted Project
werner triaged T6503: Do not make use of the VirtualStore under Windows as High priority.
May 23 2023, 1:15 PM · gnupg22 (gnupg-2.2.42), gnupg24 (gnupg-2.4.2), Bug Report, kleopatra
werner renamed T6499: Kleopatra: no error if trying to write decrypted file to write-protected folder from Kleopatra: no error if trying to write decrypted file to write-protected folder to Do not make use of the VirtualStore under Windows..
May 23 2023, 12:44 PM · vsd33, kleopatra, Restricted Project
werner triaged T6499: Kleopatra: no error if trying to write decrypted file to write-protected folder as High priority.
May 23 2023, 12:43 PM · vsd33, kleopatra, Restricted Project
werner added a comment to T6499: Kleopatra: no error if trying to write decrypted file to write-protected folder.
May 23 2023, 12:42 PM · vsd33, kleopatra, Restricted Project
ebo updated the task description for T6499: Kleopatra: no error if trying to write decrypted file to write-protected folder.
May 23 2023, 10:48 AM · vsd33, kleopatra, Restricted Project
gniibe added a comment to T6481: BEGIN_ENCRYPTION status output happens later in 2.4.1 (breaks Emacs's EasyPG).

OK, here is my changes which always use make-temp-file (to avoid confusion between data input and passphrase input).

May 23 2023, 10:47 AM · Emacs, gnupg, Bug Report
gniibe claimed T6481: BEGIN_ENCRYPTION status output happens later in 2.4.1 (breaks Emacs's EasyPG).

I use epg.el with the change of removing the wait:

May 23 2023, 9:23 AM · Emacs, gnupg, Bug Report
ebo added a comment to T6499: Kleopatra: no error if trying to write decrypted file to write-protected folder.

At least the first part seems to be identical behavior to that described in T6488 for USB devices.

May 23 2023, 8:43 AM · vsd33, kleopatra, Restricted Project
mlaurent committed rKLEOPATRAe12b2546fa43: not necessary to define it as slots (authored by mlaurent).
not necessary to define it as slots
May 23 2023, 8:29 AM
mlaurent committed rKLEOPATRA7aca9019a079: Initialize pointer to nullptr (authored by mlaurent).
Initialize pointer to nullptr
May 23 2023, 8:12 AM
l10n daemon script <scripty@kde.org> committed rLIBKLEOa6dcac17bcff: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
May 23 2023, 7:13 AM
l10n daemon script <scripty@kde.org> committed rKLEOPATRA16fba56103ce: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
May 23 2023, 7:10 AM
l10n daemon script <scripty@kde.org> committed rLIBKLEO688eafd33473: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
May 23 2023, 4:43 AM
l10n daemon script <scripty@kde.org> committed rKLEOPATRA2b622ff24f7c: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
May 23 2023, 4:42 AM
Angel added a comment to T6501: Check use of write in gpgme's Python bindings.

it's not hard to fix that header to actually provide a sensible write(), avoiding the issue listed on the mailing list, where there was no return to check:

May 23 2023, 3:04 AM · Python, Bug Report, gpgme

May 22 2023

werner committed rD66d4623e5861: ids: Add published draft-koch-openpgp-webkey-service-16.txt (authored by werner).
ids: Add published draft-koch-openpgp-webkey-service-16.txt
May 22 2023, 5:14 PM
werner committed rD87110c5ddfb8: web: Improve CSS for footnotes. (authored by werner).
web: Improve CSS for footnotes.
May 22 2023, 5:14 PM
werner committed rDe5174f234f90: ids: Prepare draft-koch-openpgp-webkey-service-16 (authored by werner).
ids: Prepare draft-koch-openpgp-webkey-service-16
May 22 2023, 5:14 PM
aheinecke created P23 (An Untitled Masterwork).
May 22 2023, 4:04 PM
ebo created T6502: Kleopatra: display implicit expiry date.
May 22 2023, 2:54 PM · kleopatra, Restricted Project
werner added a project to T6501: Check use of write in gpgme's Python bindings: Python.
May 22 2023, 10:38 AM · Python, Bug Report, gpgme
werner triaged T6501: Check use of write in gpgme's Python bindings as High priority.
May 22 2023, 10:37 AM · Python, Bug Report, gpgme
werner added projects to T6500: Keyserver access via http-proxy isn't attempted when using standard-resolver: gnupg24, dns.

Seems it gets a record but is not able to parse it (gnupg/dirmngr/dns-stuff.c:getsrv-standard) in your setup. Not sure why it loops - need to debug it.

May 22 2023, 9:25 AM · dns, gnupg24, Bug Report
mgorny added a comment to T6500: Keyserver access via http-proxy isn't attempted when using standard-resolver.

Ok, it seems that my reproducer isn't correct after all. The user just confirmed that the SRV lookup succeeds on their system, so it seems GPG hits some loop repeating that for no apparent reason.

May 22 2023, 7:51 AM · dns, gnupg24, Bug Report
mgorny created T6500: Keyserver access via http-proxy isn't attempted when using standard-resolver.
May 22 2023, 7:09 AM · dns, gnupg24, Bug Report

May 21 2023

mlaurent committed rKLEOPATRAa45ed988e7b5: It builds against not deprecated kf6 methods (authored by mlaurent).
It builds against not deprecated kf6 methods
May 21 2023, 8:04 PM
mlaurent committed rLIBKLEO74265c6499cb: It compiles without kf6 deprecated methods (authored by mlaurent).
It compiles without kf6 deprecated methods
May 21 2023, 7:57 PM
l10n daemon script <scripty@kde.org> committed rKLEOPATRA74d08f603b66: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
May 21 2023, 3:53 AM