Page MenuHome GnuPG

kristianf (Kristian Fiskerstrand)
User

Projects

User Details

User Since
Mar 27 2017, 4:47 PM (365 w, 3 d)
Availability
Available

Recent Activity

Apr 23 2019

kristianf added a comment to T4459: libgpg-error build issue with gawk 5.0.0.

For reference our downstream tracker of this is https://bugs.gentoo.org/683254 including patches

Apr 23 2019, 12:07 AM · Gentoo, gpgrt, MacOS, Bug Report
kristianf added a project to T4459: libgpg-error build issue with gawk 5.0.0: Gentoo.
Apr 23 2019, 12:05 AM · Gentoo, gpgrt, MacOS, Bug Report

Feb 9 2019

kristianf closed T4354: dirmngr should send "fingerprint=on" to keyservers as Resolved.

So, the keyserver operator had thrown in a hockeypuck server in the pool, causing this.. While the keyserver remains in the exclude list until confirmation it has been resolved, that explains the behavior and it has been made clear that separate software needs to use different names in the future.

Feb 9 2019, 8:43 PM · dirmngr, Keyserver, Bug Report

Oct 9 2018

kristianf added a comment to T4175: HTTP 5xx should fail over to the next server.

I believe this would be a good improvement in user experience

Oct 9 2018, 8:06 PM · dirmngr, Feature Request

Oct 1 2018

kristianf added a comment to T4163: hkps://hkps.pool.sks-keyservers.net has to many bad servers to be a good default.

hkps pool really should be the most responsive, and it already requires clustered only servers for a couple of weeks to try to increase the responsiveness. Experience has shown that any keyserver with less than 3 nodes in a cluster should not be used towards end-users. But do you have any more debugging output as to the problem at hand?

Oct 1 2018, 10:19 AM · gnupg, Keyserver

May 15 2018

kristianf added a member for Gentoo: mgorny.
May 15 2018, 12:11 PM
kristianf added a member for Gentoo: alonbl.
May 15 2018, 12:11 PM
kristianf added a member for Gentoo: EvaSDK.
May 15 2018, 12:11 PM

Feb 1 2018

kristianf added a comment to T3331: gpg: Address family not supported by protocol if kernel doesn't support ipv6.

The patch is available in our downstream bugtracker as attachment to https://bugs.gentoo.org/646194

Feb 1 2018, 2:16 PM · gnupg (gpg22), dirmngr, Bug Report

Sep 24 2017

kristianf added a watcher for Keyserver: kristianf.
Sep 24 2017, 6:46 PM

Sep 22 2017

kristianf added a comment to T3392: keyserver default should include pool onionbalance hkp://jirk5u4osbsr34t5.onion.

Thanks, that is interesting info, I need to look into that.

Sep 22 2017, 7:45 PM · Keyserver, Feature Request, dirmngr

Sep 21 2017

kristianf added a comment to T3392: keyserver default should include pool onionbalance hkp://jirk5u4osbsr34t5.onion.

I'm not entirely sure whether it is due to low usage or little problems with the service, but it seems to work pretty OK. My primary concern is that as opposed to DNS based system, the onionbalance system requires my node to be running and available and as such constitutes a SPOF. Although I've cleaned up my scripts sufficiently, e.g network outage will make this service unavailable whereby the hkps pool will continue to function.

Sep 21 2017, 4:27 PM · Keyserver, Feature Request, dirmngr

Aug 14 2017

kristianf added a comment to T3331: gpg: Address family not supported by protocol if kernel doesn't support ipv6.

If you don't have a TCP enabled OS, you can use configure --disable-dirmngr.

Aug 14 2017, 11:22 AM · gnupg (gpg22), dirmngr, Bug Report

Jul 24 2017

kristianf added a comment to T3279: Release pinentry 1.1.0.

I'm not sure if this post ever made it into a bug report, but has master been tested with tiling WM like awesome to see if issue is fixed? https://lists.gnupg.org/pipermail/gnupg-devel/2017-February/032608.html (if not I'm sure robbat2 is helpful enough with that if picking up the thread)

Jul 24 2017, 12:49 PM · pinentry

Jul 23 2017

kristianf added a comment to T3295: homedir path needs sanitation .

as a quick fix something like the attached seems to avoid the immediate issue{F166535}

Jul 23 2017, 6:06 PM · Bug Report
kristianf created T3295: homedir path needs sanitation .
Jul 23 2017, 4:09 PM · Bug Report

Jun 26 2017

kristianf closed T3219: Regression in 2.1.21: Creates (local) signature on other public keyblock using signing subkey when certification key is not available as Resolved.
Jun 26 2017, 7:20 PM · scd, Bug Report

Jun 23 2017

kristianf added a comment to T3219: Regression in 2.1.21: Creates (local) signature on other public keyblock using signing subkey when certification key is not available.

Issue seems to be gone in gpg (GnuPG) 2.1.22-beta75

Jun 23 2017, 9:32 PM · scd, Bug Report
kristianf added a project to T3219: Regression in 2.1.21: Creates (local) signature on other public keyblock using signing subkey when certification key is not available: scd.
Jun 23 2017, 8:36 PM · scd, Bug Report
kristianf added a comment to T3219: Regression in 2.1.21: Creates (local) signature on other public keyblock using signing subkey when certification key is not available.

Additional info: I tried setting up a reproducer without using a smartcard, and it fails with no secret key similar to earlier versions

Jun 23 2017, 8:28 PM · scd, Bug Report
kristianf updated the task description for T3219: Regression in 2.1.21: Creates (local) signature on other public keyblock using signing subkey when certification key is not available.
Jun 23 2017, 8:20 PM · scd, Bug Report
kristianf created T3219: Regression in 2.1.21: Creates (local) signature on other public keyblock using signing subkey when certification key is not available.
Jun 23 2017, 8:19 PM · scd, Bug Report

Jun 19 2017

kristianf added a watcher for Gentoo: kristianf.
Jun 19 2017, 1:08 PM
kristianf added a member for Gentoo: kristianf.
Jun 19 2017, 1:08 PM

Sep 1 2016

kristianf added a comment to T2451: _hkp_tcp SRV record doesn't work.

How about _pgpkey-http._tcp. record?

Sep 1 2016, 7:15 PM · gnupg, Bug Report, dirmngr

Apr 23 2016

kristianf added a comment to T2325: rijndael error during make.

The downstream issue does not persist in gcc 4.9.3 but triggers for 4.8.5

Apr 23 2016, 8:14 PM · Assembler, Bug Report, libgcrypt
kristianf added a comment to T2325: rijndael error during make.

Fwiw we're tracking this downstream as "dev-libs/libgcrypt-1.7.0: impossible
constraints on 'asm' operand" - https://bugs.gentoo.org/show_bug.cgi?id=580270

Apr 23 2016, 7:37 PM · Assembler, Bug Report, libgcrypt

Dec 19 2015

kristianf added a comment to T2197: --disable-tofu seems to also disable gnutls.

Thanks, I can confirm that this solves it.

Dec 19 2015, 11:40 AM · Bug Report, gnupg
kristianf closed T2197: --disable-tofu seems to also disable gnutls as Resolved.
Dec 19 2015, 11:40 AM · Bug Report, gnupg
kristianf removed a project from T2197: --disable-tofu seems to also disable gnutls: Restricted Project.
Dec 19 2015, 11:40 AM · Bug Report, gnupg

Dec 15 2015

kristianf added a project to T2197: --disable-tofu seems to also disable gnutls: Bug Report.
Dec 15 2015, 10:09 PM · Bug Report, gnupg

Nov 18 2015

kristianf added a comment to T1845: sending large keys to keyserver push fails with silent hang and "assuan_inquire failed: Too much data for IPC layer".

As an additional point, the client max body size in nginx defaults to 1 MiB[0].
Currently no checking is done for larger request bodies for inclusion in the
keyserver pools. Apache does not have such a limit by default.

Reference:
[0] http://nginx.org/en/docs/http/ngx_http_core_module.html#client_max_body_size

Nov 18 2015, 5:24 PM · gnupg, gnupg (gpg21), Debian, Bug Report

Oct 2 2015

kristianf closed T2105: Pinentry: Configure flag to specify Qt4 or Qt5 as Resolved.
Oct 2 2015, 2:10 PM · Bug Report, pinentry
kristianf removed a project from T2105: Pinentry: Configure flag to specify Qt4 or Qt5: Restricted Project.
Oct 2 2015, 2:10 PM · Bug Report, pinentry
kristianf added a comment to T2105: Pinentry: Configure flag to specify Qt4 or Qt5.

looks good to me

Oct 2 2015, 10:44 AM · Bug Report, pinentry
kristianf added a comment to T2105: Pinentry: Configure flag to specify Qt4 or Qt5.

Thanks, but I'm afraid that's not sufficient; the issue of the whitespace after
have_qt5_libs still exists after that commit for bash.

See the following test case: $ cat ./test.sh
#!/bin/bash
have_qt5_libs="no";
echo ${have_qt5_libs}

have_qt5_libs2 = "no";
echo ${have_qt5_libs2}

$ ./test.sh
no
./test.sh: line 5: have_qt5_libs2: command not found

The good news is that besides this buglet I've now pushed the updated revision
to our testing repository and have yet to get any bug reports. The patch I've
pushed is
https://gitweb.gentoo.org/repo/gentoo.git/tree/app-crypt/pinentry/files/pinentry-0.9.6-add-disable-pinentry-qt5-option.patch#n38
which doesn't experience this issue.

Oct 2 2015, 10:09 AM · Bug Report, pinentry

Sep 29 2015

kristianf added a comment to T2105: Pinentry: Configure flag to specify Qt4 or Qt5.

"+ have_qt5_libs = no;" result in command not found issues in configure so I
changed this to "+ have_qt5_libs="no";".

I've done some preliminary packaging tests and things seems to be working as
expected, will give it some more local testing before pushing it onto users in
testing

Sep 29 2015, 9:00 PM · Bug Report, pinentry

Sep 25 2015

kristianf added a comment to T2105: Pinentry: Configure flag to specify Qt4 or Qt5.

Thank you, that is exactly the kind of mechanism I was looking for. I'll give it
a try to packaging over the next few days.

Sep 25 2015, 7:35 PM · Bug Report, pinentry

Sep 18 2015

kristianf added projects to T2105: Pinentry: Configure flag to specify Qt4 or Qt5: pinentry, Bug Report.
Sep 18 2015, 11:32 PM · Bug Report, pinentry

Jul 29 2014

kristianf added projects to T1676: libgcrypt segfaults on x32 ABI: libgcrypt, Bug Report.
Jul 29 2014, 8:34 PM · Bug Report, libgcrypt