Page MenuHome GnuPG

aheinecke (Andre Heinecke)
UserAdministrator

Projects

Today

  • Clear sailing ahead.

Tuesday

  • Clear sailing ahead.

User Details

User Since
Mar 27 2017, 4:49 PM (211 w, 6 d)
Roles
Administrator
Availability
Available

Recent Activity

Tue, Apr 13

aheinecke added a comment to T4717: Kleopatra: Changing expiry does not change expiry for subkeys.

Yes I agree it makes sense to have this as an explicit setting to cover both use cases.

Tue, Apr 13, 10:23 AM · kleopatra, gpg4win
aheinecke added a comment to T5336: Kleopatra: Add expiry for certifications in certify dialog.

Yes the other one was a duplicate, somehow my search didnt find this and I thought I had forgotten to open the issue.

Tue, Apr 13, 9:47 AM · kleopatra, Restricted Project
aheinecke merged T5392: Kleopatra: Expiry date for certifications into T5336: Kleopatra: Add expiry for certifications in certify dialog.
Tue, Apr 13, 9:47 AM · kleopatra, Restricted Project
aheinecke merged task T5392: Kleopatra: Expiry date for certifications into T5336: Kleopatra: Add expiry for certifications in certify dialog.
Tue, Apr 13, 9:47 AM · kleopatra, Restricted Project

Mon, Apr 12

aheinecke triaged T5392: Kleopatra: Expiry date for certifications as Wishlist priority.
Mon, Apr 12, 2:49 PM · kleopatra, Restricted Project
aheinecke closed T3498: GPG: Batch keygen has no default expiry date as Resolved.

This was changed in kleopatra some time ago to also generate keys with 2y expiry. So the motivation for this issue is gone.

Mon, Apr 12, 2:44 PM · gnupg
aheinecke raised the priority of T5245: Kleopatra: Add support for trust signatures / trusted introducer from Wishlist to High.

Hi Ingo, If you run out of work you can do this next. Its already something that I'm showing during product presentations and a workflow I would like to recommend.

Mon, Apr 12, 2:43 PM · kleopatra, Restricted Project
aheinecke changed the status of T4717: Kleopatra: Changing expiry does not change expiry for subkeys from Testing to Open.

I noticed when testing the surprising behavior that when I changed the expiry on the primary key (tested with a smartcard) it did not change the explriy on the subkey. I think in the past it must have been different that the subkey did not get the expiry by default.

Mon, Apr 12, 2:40 PM · kleopatra, gpg4win
aheinecke added a comment to T5388: Kleopatra: Search shows all results as uncertified.

Thanks I talked to werner and agree that this is something to work on next. As we are pushing for more LDAP servers used internally which will use the common search and not the WKD discovery mechanisms.

Mon, Apr 12, 2:37 PM · kleopatra, Restricted Project

Fri, Apr 9

aheinecke created T5388: Kleopatra: Search shows all results as uncertified.
Fri, Apr 9, 12:58 PM · kleopatra, Restricted Project

Thu, Apr 8

aheinecke committed rW724c8f23f1c5: Update Kleo (authored by aheinecke).
Update Kleo
Thu, Apr 8, 3:06 PM

Wed, Mar 31

aheinecke added a comment to T5212: Kleopatra: Check if run with elevated privileges and exit in that case.

This is a bit more complex for us. I have often noticed the pattern of Windows users that if something does not work as expected they click "Run as Administrator". When they do that once with our software our backend software gnupg is also started with elevated privileges, it might create lock files with elevated permissions it might create data files. For example a user then generates a new key, but already had some keys the public key will be placed in the existing keyring and the permissions will not be changed. But the new key files created will be created with elevated privileges. Then the user runs Kleopatra again as normal user and reports bugs because he cannot access his newly created key files.

Wed, Mar 31, 1:26 PM · kleopatra

Tue, Mar 30

aheinecke added a comment to T5374: Can't move a signed mail in Outlook from In-Mail folder to any other folder.

Very strange. Both logs show no error.

Tue, Mar 30, 11:06 AM · Bug Report, gpg4win
aheinecke added a comment to T5374: Can't move a signed mail in Outlook from In-Mail folder to any other folder.

Just drag and drop it into the input field. There is also a little cloud icon that makes this explicit.

Tue, Mar 30, 10:50 AM · Bug Report, gpg4win
aheinecke added a comment to T5212: Kleopatra: Check if run with elevated privileges and exit in that case.

Sorry, but we are a security software. If you give any application that you run on your system root privileges then that is not a secure behavior. This kind of stuff has been deprecated with Windows Vista. Yes we changed the error to a warning as it was too zealous. I agree. It is not our place to educate users. But users should change your operating procedures. You should not handle protection worthy data on a system without privilege seperation.

Tue, Mar 30, 10:36 AM · kleopatra
aheinecke triaged T5374: Can't move a signed mail in Outlook from In-Mail folder to any other folder as Normal priority.

Mmh, all these issues should be fixed with the most recent versions.

Tue, Mar 30, 10:21 AM · Bug Report, gpg4win

Mon, Mar 29

aheinecke committed rW3910d719f0ab: Package auth-sim-locked for Kleopatra (authored by aheinecke).
Package auth-sim-locked for Kleopatra
Mon, Mar 29, 2:08 PM
aheinecke created T5371: Handle invalid compliance settings.
Mon, Mar 29, 12:29 PM · kleopatra

Fri, Mar 26

aheinecke closed T4864: New scdaemon command to watch device removal as Resolved.

Looks good to me, it no longer returns immediately with the error when there are no readers and the command itself seems to work. Thanks.

Fri, Mar 26, 10:38 AM · Testing, Feature Request, scd, Bug Report

Thu, Mar 25

aheinecke added a comment to T5359: Kleopatra: Loop in DeviceInfoWatcher with GnuPG 2.3 on Windows.

Yes, I think the service not active is the cause of the issue. But I don't really understand where this error is lost, I think this should be investigated because I would also expect it not to have a success on this line:
[3900] org.kde.pim.kleopatra: DeviceInfoWatcher::Worker::poll: context finished with Erfolg (code: 0, source: Quelle nicht angegeben)

Thu, Mar 25, 3:24 PM · kleopatra
aheinecke added a comment to T5363: GnuPG 2.3 Windows localized gpgconf output broken.

Btw this only occurs for some options:

Thu, Mar 25, 3:16 PM · Windows, gnupg
aheinecke triaged T5363: GnuPG 2.3 Windows localized gpgconf output broken as Normal priority.
Thu, Mar 25, 3:14 PM · Windows, gnupg
aheinecke triaged T5362: Kleopatra: Add warning in compilance mode if gnupg version is not compliant as Normal priority.
Thu, Mar 25, 3:09 PM · Restricted Project, kleopatra
aheinecke committed rKLEOPATRA155aebbc58fd: Move tags tab to the back in appearanceconfig (authored by aheinecke).
Move tags tab to the back in appearanceconfig
Thu, Mar 25, 2:37 PM
aheinecke added a comment to T4974: timeout for pinentry too short for key-generation, losing previous entries.

pinentry-timeout is indeed used when it is not set to 0.

Thu, Mar 25, 12:15 PM · pinentry
aheinecke added a comment to T4974: timeout for pinentry too short for key-generation, losing previous entries.

In my opinion this is also a problem. Especially if you think about it for a while. The one minute timeout is too short and pinentry-timeout which I would expect here to be the config value to adjust this is not used.

Thu, Mar 25, 11:53 AM · pinentry
aheinecke reopened T4864: New scdaemon command to watch device removal as "Open".

When testing under Windows "scd devinfo --watch" returns immediately with ERR 100663614 Service is not running <SCD>
Probably also if you would use PC/SC on Linux but I have not tested this.

Thu, Mar 25, 11:07 AM · Testing, Feature Request, scd, Bug Report
aheinecke added a comment to T5359: Kleopatra: Loop in DeviceInfoWatcher with GnuPG 2.3 on Windows.

The difference seems to be that "scd devinfo --watch" returns immediately with "Service not active"

Thu, Mar 25, 10:56 AM · kleopatra
aheinecke triaged T5359: Kleopatra: Loop in DeviceInfoWatcher with GnuPG 2.3 on Windows as High priority.
Thu, Mar 25, 10:42 AM · kleopatra
aheinecke closed T5011: Kleopatra: Make aboutdata more configurable as Resolved.
Thu, Mar 25, 10:17 AM · kleopatra

Mon, Mar 22

aheinecke is attending E854: Weekly Standup.
Mon, Mar 22, 9:55 AM
aheinecke added a comment to E854: Weekly Standup.

Last week:

Mon, Mar 22, 9:52 AM

Mar 19 2021

aheinecke committed rO1b1df36ef93b: Update protected headers structure (authored by aheinecke).
Update protected headers structure
Mar 19 2021, 5:03 PM

Mar 10 2021

aheinecke added a comment to T5336: Kleopatra: Add expiry for certifications in certify dialog.

Yes. I know that this is annyoing but I don't think we have a quick command for something like that yet. So editinteractor it is :-/

Mar 10 2021, 10:34 AM · kleopatra, Restricted Project

Mar 5 2021

aheinecke created T5336: Kleopatra: Add expiry for certifications in certify dialog.
Mar 5 2021, 9:32 AM · kleopatra, Restricted Project

Mar 4 2021

aheinecke reassigned T4524: Kleopatra: CRL check configuration available multiple times and out of sync from aheinecke to ikloecker.

Ingo, as you are currently working on the config dialog, maybe you could also fix this issue on the way.

Mar 4 2021, 11:09 AM · Restricted Project, Bug Report, gpg4win, kleopatra

Mar 3 2021

aheinecke created T5335: GpgOL: Ignore unknown PR_SECURTIY_FLAGS.
Mar 3 2021, 8:47 AM · gpgol

Mar 2 2021

aheinecke added a comment to T5334: Kleopatra: Add more support for WKS / WKD.

I thought about this a bit regarding the search dialog.

Mar 2 2021, 9:53 AM · kleopatra, Restricted Project

Mar 1 2021

aheinecke created T5334: Kleopatra: Add more support for WKS / WKD.
Mar 1 2021, 11:23 AM · kleopatra, Restricted Project
aheinecke reassigned T5283: GpgOL: Add mixed mode for S/MIME and OpenPGP to libkleo newkeyresolver from aheinecke to ikloecker.

Hi Ingo,

Mar 1 2021, 10:59 AM · kleopatra, Restricted Project, gpgol
aheinecke added a comment to T5175: Kleopatra: Add support for custom groups.

I am happy with the result, this seems very workable. Especially the Group Details dialog is a nice touch to inspect a group.

Mar 1 2021, 10:01 AM · Restricted Project, kleopatra
aheinecke created T5333: Kleopatra: Add Group dialog action to Certificate selection dialog.
Mar 1 2021, 9:57 AM · kleopatra, Restricted Project
aheinecke created T5332: Kleopatra: Certificate selection dialog only offers CSR generation.
Mar 1 2021, 9:54 AM · kleopatra, Restricted Project
aheinecke added a comment to T4040: Kleopatra: Add support for groups.

This issue has been overlooked when we opened T5175 and T5175 was where all the work was done.

Mar 1 2021, 9:48 AM · gpg4win, kleopatra
aheinecke merged task T4040: Kleopatra: Add support for groups into T5175: Kleopatra: Add support for custom groups.
Mar 1 2021, 9:48 AM · gpg4win, kleopatra
aheinecke merged T4040: Kleopatra: Add support for groups into T5175: Kleopatra: Add support for custom groups.
Mar 1 2021, 9:48 AM · Restricted Project, kleopatra

Feb 25 2021

aheinecke added a comment to T4777: Pinentry sometimes mixes languages.

Start from scratch on a german system, even when you do a gpg --version it shows it is in german. Then import a PKCS#12 container and the dialog is in english.

Feb 25 2021, 5:16 PM · gnupg (gpg23), S/MIME, gpgagent

Feb 24 2021

aheinecke added a comment to T5239: Add UI for managing groups.

Hi, thanks I'll give it a spin tomorrow.

Feb 24 2021, 3:45 PM · Restricted Project, kleopatra
aheinecke created T5326: Kleopatra: Redisplay can cause CRL check failed certificates to show as valid again.
Feb 24 2021, 12:33 PM · kleopatra

Feb 22 2021

aheinecke closed T5164: GpgOL: Check that verify errors still show a decrypted message on decrypt & verify as Resolved.

Released with gpg4win-3.1.15

Feb 22 2021, 12:11 PM · Info Needed, gpgol

Feb 17 2021

aheinecke edited projects for T5304: Main certificate view does not keep selected column width, added: Bug Report; removed Feature Request.

werner this would really be a bug because we have code in Kleopatra to both save the selected coloumns, their widths and the sorting state.

Feb 17 2021, 10:50 AM · Bug Report, kleopatra, gpg4win

Feb 15 2021

aheinecke committed rW04b60b0b6f87: doc: Add imagemagick for convert dependency (authored by aheinecke).
doc: Add imagemagick for convert dependency
Feb 15 2021, 8:23 AM
aheinecke closed T5303: make fails: README.zh.txt -> no files found. as Resolved.

Merged your fix. Thanks for the contribution. Commit should show up here in a second.

Feb 15 2021, 8:16 AM · Bug Report, gpg4win
aheinecke changed the status of T5302: autogen.sh --build-w32 fails with "configure: convert is missing" from Wontfix to Resolved.

Thanks, I try to keep the README always up to date with the debian depenencies as I find this useful myself without running configure multiple times to find all the dependencies.

Feb 15 2021, 8:15 AM · toolchain, gpg4win

Feb 8 2021

aheinecke created T5288: Kleopatra: Check that KeyCache::findBestByMailBox is in sync with GnuPG and maybe move it.
Feb 8 2021, 3:32 PM · gpgol, kleopatra, Restricted Project

Feb 4 2021

aheinecke triaged T5285: GnuPG: 8Bit filenames can no longer be provided on the command line as Wishlist priority.
Feb 4 2021, 12:46 PM · gnupg
aheinecke reopened T5285: GnuPG: 8Bit filenames can no longer be provided on the command line as "Open".

I have to leave this as open as this describes a clear issue users expirience in our software. I assign it to me to keep an eye on the issue. Werner and me discussed this issue at length verbally and there won't be a quick fix for the stable branch but we will address this some time in the future, but then not only for 8bit but for full unicode.

Feb 4 2021, 12:46 PM · gnupg

Feb 3 2021

aheinecke created T5285: GnuPG: 8Bit filenames can no longer be provided on the command line.
Feb 3 2021, 9:34 AM · gnupg

Feb 1 2021

aheinecke reopened T5280: gnupg.org webpage advertises the use of insecure git:// protocol at various places as "Open".

Anyhow. Let us unrelate this from personal issues and just to be clean respect the content of the issue. Git links should not be promoted and cbiedl asked me today why we disagree because plain text protocols are really not state of the art. Cbiedl: You should be able to fix this it would be in the gnupg-doc branch afaik. If you have permission problems please let me know. I'll assign this to you.

Feb 1 2021, 6:41 PM · gpgweb
aheinecke added a comment to T5279: Buffer Overread in selftest_pbkdf2() in kdf.c/libgcrypt.

For what it is worth we have also just tasked someone from our team to reinstate our buildbot / CI but this would likely not have helped in the current case of the libgcrypt buffer error as only ASAN with large hashtests would have found this. Still we have the general infrastructure for such tests we are just lacking resources. That is why we publish everything and encourage the community to at least help us with testing.

Feb 1 2021, 6:34 PM · Duplicate, Bug Report
aheinecke added a comment to T5279: Buffer Overread in selftest_pbkdf2() in kdf.c/libgcrypt.

the issue regarding this self test was immediately found after release. Our development is completely open and everyone is free to run tests with our software on any platform at any time. We would respect and fix all those bug reports. None about this reached us during the development phase.
As this is not happening as it should during development we release and test on our platforms and build systems. When after the release others test, too we immediately fix the issues as happened with 1.9.1 in libgcrypt.

Feb 1 2021, 6:32 PM · Duplicate, Bug Report
aheinecke merged T4989: Gpg4win-4.0.0 into T5273: Release Gpg4win 4.
Feb 1 2021, 11:07 AM · Restricted Project, gpg4win, Release Info
aheinecke merged task T4989: Gpg4win-4.0.0 into T5273: Release Gpg4win 4.
Feb 1 2021, 11:07 AM · gpg4win, Release Info
aheinecke added a subtask for T4814: GpgOL: Send multiple E-Mails for BCC recipients: T5273: Release Gpg4win 4.
Feb 1 2021, 11:06 AM · Restricted Project, gpgol
aheinecke added a parent task for T5273: Release Gpg4win 4: T4814: GpgOL: Send multiple E-Mails for BCC recipients.
Feb 1 2021, 11:06 AM · Restricted Project, gpg4win, Release Info
aheinecke moved T4814: GpgOL: Send multiple E-Mails for BCC recipients from Restricted Project Column to Restricted Project Column on the Restricted Project board.
Feb 1 2021, 11:06 AM · Restricted Project, gpgol
aheinecke changed the status of T4814: GpgOL: Send multiple E-Mails for BCC recipients from Open to Testing.

I think this works now with error handling. At least it works for me, but needs some more testing of course.

Feb 1 2021, 11:05 AM · Restricted Project, gpgol
aheinecke committed rO66ab6d830ade: Add error handling and closing for split mails (authored by aheinecke).
Add error handling and closing for split mails
Feb 1 2021, 10:54 AM
aheinecke added a comment to T4735: Please provide an option to make --verify accept only signatures from specific trusted UID.

I'm slightly against a backport as this is a behavior change for example KMail and GpgOL which use the --sender option might get different results after this change. I don't think it would be problematic but as said I have a slight preference against backporting because changing behavior of existing calls is better something for the new major release which is in its final steps for release anyway.

Feb 1 2021, 10:47 AM · gnupg (gpg23), Feature Request
aheinecke added a subtask for T5283: GpgOL: Add mixed mode for S/MIME and OpenPGP to libkleo newkeyresolver: T5228: GpgOL: Combined S/MIME and OpenPGP operation.
Feb 1 2021, 9:02 AM · kleopatra, Restricted Project, gpgol
aheinecke added a parent task for T5228: GpgOL: Combined S/MIME and OpenPGP operation: T5283: GpgOL: Add mixed mode for S/MIME and OpenPGP to libkleo newkeyresolver.
Feb 1 2021, 9:02 AM · Restricted Project, gpgol
aheinecke created T5283: GpgOL: Add mixed mode for S/MIME and OpenPGP to libkleo newkeyresolver.
Feb 1 2021, 9:01 AM · kleopatra, Restricted Project, gpgol
aheinecke added a comment to E846: Weekly Standup.

Last week:

  • Some minor Kleopatra changes
  • Finally picked up my GpgOL multi mail changes and refactored them to work more robust with the possibility of proper error handling. This is for T4814 T5228
Feb 1 2021, 8:56 AM
aheinecke is attending E846: Weekly Standup.
Feb 1 2021, 8:52 AM
aheinecke closed T4675: Accented characters not displayed correctly as Resolved.

Thanks for the feedback. I sadly forgot to include the italian translations of GpgOL in the installer. So they will only be part of the next relase.

Feb 1 2021, 8:52 AM · i18n, Bug Report, gpg4win

Jan 29 2021

aheinecke added a comment to T5181: Kleopatra: Simplify newkey generation.

There is a question for me here if we should make the behavior of rKLEOPATRA5639dc833f92 the default.

Jan 29 2021, 10:29 AM · kleopatra

Jan 28 2021

aheinecke committed rO48aa002f3a96: Implement BCC splits of Mails (authored by aheinecke).
Implement BCC splits of Mails
Jan 28 2021, 1:50 PM
aheinecke moved T5228: GpgOL: Combined S/MIME and OpenPGP operation from Restricted Project Column to Restricted Project Column on the Restricted Project board.
Jan 28 2021, 10:43 AM · Restricted Project, gpgol
aheinecke added a subtask for T4702: Deadline for the GnuPG 2.3.0 release: T5273: Release Gpg4win 4.
Jan 28 2021, 10:41 AM · Restricted Project, gpg4win, gnupg
aheinecke added parent tasks for T5273: Release Gpg4win 4: T4702: Deadline for the GnuPG 2.3.0 release, T5066: Multiple smartcard (reader) / app support in Kleopatra.
Jan 28 2021, 10:41 AM · Restricted Project, gpg4win, Release Info
aheinecke added a subtask for T5066: Multiple smartcard (reader) / app support in Kleopatra: T5273: Release Gpg4win 4.
Jan 28 2021, 10:41 AM · kleopatra
aheinecke committed rXdf289bb41652: Fix CreateProcess call of GpgEX (authored by aheinecke).
Fix CreateProcess call of GpgEX
Jan 28 2021, 10:41 AM
aheinecke added parent tasks for T5273: Release Gpg4win 4: T5272: GpgEx: Incorrect spawn of UI Server can cause a c:\Program.exe to be executed, T5241: Allow selection of groups as recipients for file encryption, T5240: Allow selection of groups implicitly defined by tags, T5239: Add UI for managing groups, T5228: GpgOL: Combined S/MIME and OpenPGP operation, T5216: Kleopatra: Fix handling of UNC paths, T5217: Kleopatra: Adapt to config changes in GnuPG master.
Jan 28 2021, 10:39 AM · Restricted Project, gpg4win, Release Info
aheinecke added a subtask for T5216: Kleopatra: Fix handling of UNC paths: T5273: Release Gpg4win 4.
Jan 28 2021, 10:39 AM · kleopatra
aheinecke added a subtask for T5217: Kleopatra: Adapt to config changes in GnuPG master: T5273: Release Gpg4win 4.
Jan 28 2021, 10:39 AM · Restricted Project, kleopatra
aheinecke added a subtask for T5272: GpgEx: Incorrect spawn of UI Server can cause a c:\Program.exe to be executed: T5273: Release Gpg4win 4.
Jan 28 2021, 10:39 AM · gpgex
aheinecke added a subtask for T5228: GpgOL: Combined S/MIME and OpenPGP operation: T5273: Release Gpg4win 4.
Jan 28 2021, 10:39 AM · Restricted Project, gpgol
aheinecke added a subtask for T5241: Allow selection of groups as recipients for file encryption: T5273: Release Gpg4win 4.
Jan 28 2021, 10:39 AM · Restricted Project, kleopatra
aheinecke added a subtask for T5240: Allow selection of groups implicitly defined by tags: T5273: Release Gpg4win 4.
Jan 28 2021, 10:39 AM · Restricted Project, kleopatra
aheinecke added a subtask for T5239: Add UI for managing groups: T5273: Release Gpg4win 4.
Jan 28 2021, 10:39 AM · Restricted Project, kleopatra
aheinecke created T5273: Release Gpg4win 4.
Jan 28 2021, 10:38 AM · Restricted Project, gpg4win, Release Info
aheinecke created T5272: GpgEx: Incorrect spawn of UI Server can cause a c:\Program.exe to be executed.
Jan 28 2021, 8:45 AM · gpgex

Jan 27 2021

aheinecke committed rOcc107675b042: Use RecipientManager in CryptController (authored by aheinecke).
Use RecipientManager in CryptController
Jan 27 2021, 5:08 PM
aheinecke committed rO2fbfc91d7de8: Add RecipientManager class (authored by aheinecke).
Add RecipientManager class
Jan 27 2021, 5:08 PM
aheinecke committed rO1ef30a2dda75: Add isNull for Recipient objects (authored by aheinecke).
Add isNull for Recipient objects
Jan 27 2021, 5:08 PM
aheinecke committed rOb173a9581151: Fix displayname for recipients without name (authored by aheinecke).
Fix displayname for recipients without name
Jan 27 2021, 5:08 PM
aheinecke committed rO2d71d605a6d3: Avoid callbacks to track copied mail object (authored by aheinecke).
Avoid callbacks to track copied mail object
Jan 27 2021, 5:08 PM
aheinecke committed rOb45b1b54e80d: Add new unique id helpers (authored by aheinecke).
Add new unique id helpers
Jan 27 2021, 5:08 PM
aheinecke committed rOea835ddbac2e: Add reset parameter to set uuid (authored by aheinecke).
Add reset parameter to set uuid
Jan 27 2021, 5:08 PM
aheinecke added a comment to T5241: Allow selection of groups as recipients for file encryption.

Thanks, I already tested it this morning before your last commit and it worked as expected with my configured groups. Even the autocompletion worked nicely.

Jan 27 2021, 2:00 PM · Restricted Project, kleopatra