Feed All Stories
Oct 11 2023
Oct 11 2023
• aheinecke committed rKLEOPATRAa7739c78fd30: Add raise and activateWindow for mail dialog (authored by • aheinecke).
Add raise and activateWindow for mail dialog
• aheinecke committed rKLEOPATRAe69b2f5b3612: Do not use applyWindowID for ViewEMailFilesDialog (authored by • aheinecke).
Do not use applyWindowID for ViewEMailFilesDialog
• ikloecker committed rKLEOPATRA3ae84d9273ea: Don't create .so symlinks for libkleopatraclientgui and libkleopatraclientcore (authored by Christophe Marin <christophe@krop.fr>).
Don't create .so symlinks for libkleopatraclientgui and libkleopatraclientcore
• werner committed rG4e47639af0dd: scd:openpgp: Allow the reading the key by keygrip. (authored by • werner).
scd:openpgp: Allow the reading the key by keygrip.
• werner committed rGc45a8b034c5e: scd:openpgp: Use a special compare for the serialno. (authored by • werner).
scd:openpgp: Use a special compare for the serialno.
• werner committed rG92528476461b: scd:openpgp: Extend KEYPAIRINFO with an algorithm string. (authored by • werner).
scd:openpgp: Extend KEYPAIRINFO with an algorithm string.
• werner committed rG10f8bb167138: scd:openpgp: Use shared fucntion for the dispserialno. (authored by • werner).
scd:openpgp: Use shared fucntion for the dispserialno.
fse added a comment to T6755: libgcrypt: KEM API.
Our own internal function signatures is not necessarily a good refernce. The main objection to all what you list above is the lack of explicit length information. For each uint8_t* there should also be a size_t ...len in my opinion. Otherwise the API will be highly prone to memory access errors.
mlaurent committed rLIBKLEO3f1766827939: Rename as foo.in => This fixes QtCreator trying to parse it as cmake code (authored by mlaurent).
Rename as foo.in => This fixes QtCreator trying to parse it as cmake code
mlaurent committed rMTPf3b6fa0191fd: Rename as foo.in => This fixes QtCreator trying to parse it as cmake code (authored by mlaurent).
Rename as foo.in => This fixes QtCreator trying to parse it as cmake code
mlaurent committed rKLEOPATRAb2a12f53098c: Rename as foo.in => This fixes QtCreator trying to parse it as cmake code (authored by mlaurent).
Rename as foo.in => This fixes QtCreator trying to parse it as cmake code
• gniibe added a comment to T6755: libgcrypt: KEM API.
@fse Thank you for your comment (quick ! :-).
l10n daemon script <scripty@kde.org> committed rLIBKLEOf2092b571c58: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
l10n daemon script <scripty@kde.org> committed rKLEOPATRA08e670209ce7: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
l10n daemon script <scripty@kde.org> committed rMTP4d2d41497ba6: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
l10n daemon script <scripty@kde.org> committed rLIBKLEO5684449ed757: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
l10n daemon script <scripty@kde.org> committed rKLEOPATRA2bff62de94fe: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
l10n daemon script <scripty@kde.org> committed rMTP8c1ce02f66a0: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
l10n daemon script <scripty@kde.org> committed rLIBKLEO75fc6b99cd6b: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
l10n daemon script <scripty@kde.org> committed rKLEOPATRA9cbb2f1f3179: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
Oct 10 2023
Oct 10 2023
ajaja renamed T6758: gpg-agent doesn't cache passwords in loopback pinentry mode from gpg-agent doesn't cache passwords in pinentry-mode loopback to gpg-agent doesn't cache passwords in loopback pinentry mode.
lecris updated the task description for T6757: gpgsm 2.4 Fails to import P12 certificate/key.
• werner committed rGacda0a3f3377: scd: Add handling of "Algorithm Information" DO. (authored by • gniibe).
scd: Add handling of "Algorithm Information" DO.
scd:openpgp: Some comment updates
scd: Add handling of Ed448 key.
scd:openpgp: New KEY-STATUS attribute.
• werner committed rG216f3fc96ac2: scd:openpgp: Add attribute "UIF" for convenience. (authored by • werner).
scd:openpgp: Add attribute "UIF" for convenience.
• werner committed rGb262a21c617d: scd:openpgp: Support the ecdh-params arg for writing keys. (authored by • werner).
scd:openpgp: Support the ecdh-params arg for writing keys.
• werner committed rGd25e96065268: scd:openpgp: Handle wrong error return code of Yubikey. (authored by • werner).
scd:openpgp: Handle wrong error return code of Yubikey.
scd: Fix description string.
• werner committed rG7666a4583007: scd:openpgp: Support UIF changing command. (authored by • gniibe).
scd:openpgp: Support UIF changing command.
• werner committed rG9e3b7e26a9f9: scd:openpgp: Small speedup reading card properties. (authored by • werner).
scd:openpgp: Small speedup reading card properties.
• werner committed rGb2363c1dd97d: scd: Allow standard keyref scheme for app-openpgp. (authored by • werner).
scd: Allow standard keyref scheme for app-openpgp.
• werner committed rG57bfad2c39f5: scd:openpgp: Allow reading and writing user certs for keys 1 and 2 (authored by • werner).
scd:openpgp: Allow reading and writing user certs for keys 1 and 2
• werner committed rG3d368c1a7d1c: scd:openpgp: Support GET DATA response with no header for DO 0x00FA. (authored by • gniibe).
scd:openpgp: Support GET DATA response with no header for DO 0x00FA.
• werner committed rG03aa4e66515e: scd:openpgp: Replace assert by log_assert. (authored by • werner).
scd:openpgp: Replace assert by log_assert.
• werner committed rGc4eada078794: scd:openpgp: Pass arg ctrl to more functions. (authored by • werner).
scd:openpgp: Pass arg ctrl to more functions.
• werner committed rGa942986f1737: scd:openpgp: Fix computing fingerprint for ECC with SOS. (authored by • gniibe).
scd:openpgp: Fix computing fingerprint for ECC with SOS.
scd:openpgp: Very minor refactoring
• werner committed rG7f8cac5cec22: scd:openpgp: Rename an internal variable. (authored by • werner).
scd:openpgp: Rename an internal variable.
• ikloecker added a comment to T6325: Kleopatra: Prevent OpenPGP Cert and CSR creation for RSA-2048 in de-vs mode.
KEYPAIRINFO in 2.2 lacks the algorithm (and the fingerprint time). Kleopatra uses the algorithm to check if the algorithm is allowed in VSD.
memeplex updated the task description for T6756: max-cache-ttl-ssh overrides max-cache-ttl.
memeplex updated the task description for T6756: max-cache-ttl-ssh overrides max-cache-ttl.
mlaurent committed rKLEOPATRA532526dfb9e3: Merge remote-tracking branch 'origin/kf5' (authored by mlaurent).
Merge remote-tracking branch 'origin/kf5'
mlaurent committed rLIBKLEO8a2fb9f99481: Merge remote-tracking branch 'origin/kf5' (authored by mlaurent).
Merge remote-tracking branch 'origin/kf5'
wenzehan added a comment to T6752: New minip12 does not import from Firefox anymore.
115.3.1esr
• ikloecker committed rKLEOPATRA98632caf8860: Inline the QDebug stream operator for std::string (authored by • ikloecker).
Inline the QDebug stream operator for std::string
Remove the key helpers
• werner committed rG5601f5db9862: gpgsm: Improvements for NDEF in the pkcs#12 parser (authored by • werner).
gpgsm: Improvements for NDEF in the pkcs#12 parser
Bump library version
• ikloecker committed rLIBKLEOd31f6deab20b: Add all key helpers from kleopatra (authored by • ikloecker).
Add all key helpers from kleopatra
Fix deprecation warning
• clara167 added a comment to T6711: Okular: Reload signed PDF instead of opening another window.
• werner added a comment to T6752: New minip12 does not import from Firefox anymore.
Yes, there is clearly a problem with the handling of NDEF. I have a fix for that but there are other oddities in that pkcs12 object. Do you have the Firefox version you used to create this?
• ebo added a comment to T6325: Kleopatra: Prevent OpenPGP Cert and CSR creation for RSA-2048 in de-vs mode.
Well, neither OpenPGP certifcate nor CSR creation from a key on a card is offered for any of the cards I tried.
But that is not only for RSA2048, but for all types of keys.
• ikloecker added a comment to T6753: Kleopatra: Review usage of Key::canEncrypt and replace with hasEncrypt where appropriate.
The changes are best reviewed by a developer to check that I didn't make a mistake when I replaced usage of the canSign, canEncrypt, etc. methods with the new hasSign, hasEncrypt, etc. methods or the corresponding compatibility helpers keyHasSign, etc..
fse added a comment to T6755: libgcrypt: KEM API.
The API that you quote at the end is indeed what is comonly understood as how a KEM functions and is exactly what fits to ML-KEM.
mlaurent committed rKLEOPATRA37000c26f753: GIT_SILENT: we depend against c++17: Q_FALLTHROUGH => [[fallthrough]] (authored by mlaurent).
GIT_SILENT: we depend against c++17: Q_FALLTHROUGH => [[fallthrough]]
mlaurent committed rLIBKLEOb12a6dfeb613: GIT_SILENT: we depend against c++17: Q_FALLTHROUGH => [[fallthrough]] (authored by mlaurent).
GIT_SILENT: we depend against c++17: Q_FALLTHROUGH => [[fallthrough]]
darkthread.gpg added a comment to T6741: gpg 2.3+ may display garbled characters for date and time in non-English Windows.
I think ".UTF8" is always better than LC_TIME="" if the display string contains non-English Unicode chars.
l10n daemon script <scripty@kde.org> committed rKLEOPATRAf30ac103b0c5: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
l10n daemon script <scripty@kde.org> committed rKLEOPATRAdef24fd57d32: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
l10n daemon script <scripty@kde.org> committed rMTP1faf767b512f: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
l10n daemon script <scripty@kde.org> committed rKLEOPATRAdc2db2cda0dc: GIT_SILENT Sync po/docbooks with svn (authored by l10n daemon script <scripty@kde.org>).
GIT_SILENT Sync po/docbooks with svn
Oct 9 2023
Oct 9 2023
• ikloecker added a comment to T6750: Kleopatra: Offer only compliant algorithms for key generation on smart cards in VSD.
It isn't a duplicate. See T6325#176719.
• ikloecker added a comment to T6325: Kleopatra: Prevent OpenPGP Cert and CSR creation for RSA-2048 in de-vs mode.
This task is about the creation of OpenPGP certificates or S/MIME CSR from existing card keys. In particular, it isn't about the creation of card keys.
• ebo added a comment to T6750: Kleopatra: Offer only compliant algorithms for key generation on smart cards in VSD.
This is probably a duplicate of T6325
• ebo closed T6298: Kleopatra: Possible problem when trying to import UTF-16 encoded files as Resolved.
works
• ebo added a comment to T5183: Kleopatra: Generate S/MIME CSR for OpenPGP card key.
related to T6325
• ebo moved T5183: Kleopatra: Generate S/MIME CSR for OpenPGP card key from Restricted Project Column to Restricted Project Column on the Restricted Project board.
• ebo changed the status of T5183: Kleopatra: Generate S/MIME CSR for OpenPGP card key, a subtask of T5123: Kleopatra: Generate OpenPGP pubkey S/MIME CSR from existing card, from Testing to Open.
• ebo changed the status of T5183: Kleopatra: Generate S/MIME CSR for OpenPGP card key from Testing to Open.
For Yubikey it looks the same for me, the CSRs creation buttons are always greyed out (checked for RSA 2048, 3072, brainpool)
• ebo changed the status of T6325: Kleopatra: Prevent OpenPGP Cert and CSR creation for RSA-2048 in de-vs mode from Testing to Open.
On Yubikey and OpenPGP card, OpenPGP creation is possible for RSA2048, too.
Key creation on Yubikey with Curve25519 fails with "General error", it is not disabled in Kleo.
On the Zeitcontrol OpenPGP card it is not offered (but it does not have the capability, anyway, AFAIK)
As I have installed several test versions on Windows since and did never notice a self test during usage, this obviously works
• ebo closed T6346: Kleopatra: Run self test only at the first start on windows, a subtask of T6259: Kleopatra: Improve startup performance , as Resolved.
• ebo added a comment to T6277: Kleopatra: Support NetKey v15.
TeleSec NetKey v3 cards are accepted, for NetKey v2 you get the error message "NetKey v2 cards are not supported".
mlaurent committed rKLEOPATRAdd6abe848745: Merge remote-tracking branch 'origin/kf5' (authored by mlaurent).
Merge remote-tracking branch 'origin/kf5'
Add new GUIDS
• aheinecke committed rWaf5b3b8cf8e0: MSI: Fix parseability of qtbase dependency (authored by • aheinecke).
MSI: Fix parseability of qtbase dependency
Update frontend packages
• ikloecker committed rLIBKLEOe18ef83d2070: Use new key flags to check for sign and encryption capability (authored by • ikloecker).
Use new key flags to check for sign and encryption capability
• ikloecker committed rKLEOPATRA55d683fe117e: Use new key flags to check for certify capability (authored by • ikloecker).
Use new key flags to check for certify capability
• ikloecker committed rKLEOPATRA513030f91f51: Use new key flags to check for sign capability (authored by • ikloecker).
Use new key flags to check for sign capability
• ikloecker committed rKLEOPATRA6aa95909c6d0: Remove unused namespace usage and unused include (authored by • ikloecker).
Remove unused namespace usage and unused include
• ikloecker committed rKLEOPATRA5ed6e8b6a491: Remove obsolete code for setting recipients (authored by • ikloecker).
Remove obsolete code for setting recipients
Simplify code
Simplify code
• ikloecker committed rKLEOPATRA4262ff99cbc1: Use new key flags to check for sign and encryption capability (authored by • ikloecker).
Use new key flags to check for sign and encryption capability
• ikloecker committed rKLEOPATRA20d9415dce1b: Don't filter out expired signing/encryption certificates (authored by • ikloecker).
Don't filter out expired signing/encryption certificates
• ikloecker updated the task description for T6753: Kleopatra: Review usage of Key::canEncrypt and replace with hasEncrypt where appropriate.