Page MenuHome GnuPG

werner (Werner Koch)
EngineeringAdministrator

Projects

User Details

User Since
Mar 27 2017, 4:48 PM (416 w, 1 d)
Roles
Administrator
Availability
Busy Busy until Sep 9 2030.

Recent Activity

Yesterday

werner committed rM91a59d2a3554: New decrypt flags GPGME_DECRYPT_LISTONLY. (authored by werner).
New decrypt flags GPGME_DECRYPT_LISTONLY.
Tue, Mar 18, 4:26 PM
werner committed rGad8bce774d91: gpgsm: Fix error message if all selected certificates are expired. (authored by Ramón García <ramon.garcia.f@gmail.com>).
gpgsm: Fix error message if all selected certificates are expired.
Tue, Mar 18, 12:22 PM
werner committed rG2869de63b522: gpgsm: Simplify the expiration check. (authored by werner).
gpgsm: Simplify the expiration check.
Tue, Mar 18, 12:22 PM
werner committed rG53f5aad90517: gpgsm: Avoid increasing error count when enumerating an expired cert. (authored by Ramón García <ramon.garcia.f@gmail.com>).
gpgsm: Avoid increasing error count when enumerating an expired cert.
Tue, Mar 18, 12:22 PM
werner committed rG029ac17b40bd: gpgsm: When selecting certs also skip certificates too young. (authored by Ramón García <ramon.garcia.f@gmail.com>).
gpgsm: When selecting certs also skip certificates too young.
Tue, Mar 18, 12:22 PM
werner committed rG4cf83273e84c: gpgsm: select unexpired certificates skipping expired ones (authored by Ramón García <ramon.garcia.f@gmail.com>).
gpgsm: select unexpired certificates skipping expired ones
Tue, Mar 18, 12:22 PM
werner committed rG4f4264c4e8b9: doc: Register DCO for Ramon García F. (authored by werner).
doc: Register DCO for Ramon García F.
Tue, Mar 18, 12:22 PM

Mon, Mar 17

werner committed rGf463586a9617: gpgsm: Extend --learn-card by an optional s/n argument. (authored by werner).
gpgsm: Extend --learn-card by an optional s/n argument.
Mon, Mar 17, 5:34 PM
werner closed T7569: `gpgconf --homedir $x --kill keyboxd` doesn't appear to terminate a running keyboxd as Resolved.
Mon, Mar 17, 10:12 AM · gnupg, keyboxd, Bug Report
werner committed rGe212308ede8e: gpgconf: Fix reload and kill of keyboxd. (authored by werner).
gpgconf: Fix reload and kill of keyboxd.
Mon, Mar 17, 10:11 AM
werner committed rG5420c4ebde0e: gpgconf: Fix reload and kill of keyboxd. (authored by werner).
gpgconf: Fix reload and kill of keyboxd.
Mon, Mar 17, 10:07 AM
werner added a comment to T7569: `gpgconf --homedir $x --kill keyboxd` doesn't appear to terminate a running keyboxd.

FWIW: It does works when using GNUPGHOME instead.

Mon, Mar 17, 9:46 AM · gnupg, keyboxd, Bug Report
werner closed T7570: `gpg --trust-model always --verify` produces incongruous warning "Using untrusted key!" as Resolved.

This has always been the case. git blame shows for check_signatures_trust:

Mon, Mar 17, 9:39 AM · Not A Bug, gnupg

Fri, Mar 14

werner committed rGa7ec3792c5d1: scd,w32: Fix posssible lockup due to lost select results. (authored by werner).
scd,w32: Fix posssible lockup due to lost select results.
Fri, Mar 14, 2:05 PM
werner committed rM926b1f1f1e3e: Add API gpgme_op_random_value. (authored by werner).
Add API gpgme_op_random_value.
Fri, Mar 14, 1:24 PM
werner committed rG95a11baaa2c0: doc: Minor updates (authored by werner).
doc: Minor updates
Fri, Mar 14, 1:22 PM
werner committed rGcc3efe9a7312: gpg: Fix key generation with existing key from card. (authored by gniibe).
gpg: Fix key generation with existing key from card.
Fri, Mar 14, 1:21 PM
werner moved T7457: gpg --full-gen-key doesn't show list of keys on card (regression) from Backlog to QA on the gnupg24 board.

Done

Fri, Mar 14, 1:20 PM · gnupg26, gnupg24, Bug Report
werner added a comment to T6694: Random numbers from gpgme.

BTW, do we really need a C++ API for this? Might make sense due to the need for a context.

Fri, Mar 14, 1:10 PM · gpd5x, gpgpass, gpgme, Feature Request
werner changed the status of T6694: Random numbers from gpgme from Open to Testing.
Fri, Mar 14, 1:09 PM · gpd5x, gpgpass, gpgme, Feature Request

Thu, Mar 13

werner committed rC22e65f6f5b8d: doc: Fix syntax error (authored by werner).
doc: Fix syntax error
Thu, Mar 13, 6:04 PM
werner added a comment to T7547: signatures from revoked or expired keys show up as missing keys.

Well, we also have the gpgme test suite which tests a couple of other things and for obvious reasons we need to keep this stable. Granted, sometimes we had to change the gpgme test suite as well. My personal preference would be your second choice.

Thu, Mar 13, 5:51 PM · gnupg26, gnupg24, Bug Report
werner triaged T7560: GnuPG should learn the certificates when a new card has been seen as Normal priority.
Thu, Mar 13, 11:43 AM · scd, Feature Request, gnupg
werner triaged T7565: Kleopatra: Add tooltips in sign/encrypt window if an encryption type is greyed out as Low priority.
Thu, Mar 13, 11:42 AM · Feature Request, gpd5x, kleopatra
werner committed rG0666a8858faf: gpg: Fix double free of internal data. (authored by werner).
gpg: Fix double free of internal data.
Thu, Mar 13, 11:39 AM
werner committed rGc1b965cd9220: gpg: Fix double free of internal data. (authored by werner).
gpg: Fix double free of internal data.
Thu, Mar 13, 11:37 AM
werner committed rG4be25979a6b3: gpg: Fix double free of internal data. (authored by werner).
gpg: Fix double free of internal data.
Thu, Mar 13, 11:34 AM

Wed, Mar 12

werner added a comment to T7547: signatures from revoked or expired keys show up as missing keys.

I can't replicate your findings here . In a test directory w/o a gpg.conf:

Wed, Mar 12, 4:02 PM · gnupg26, gnupg24, Bug Report
werner added a comment to T7547: signatures from revoked or expired keys show up as missing keys.

Uihhh

Wed, Mar 12, 3:35 PM · gnupg26, gnupg24, Bug Report
werner triaged T7563: gpgpass: password file creation GUI issues as Normal priority.
Wed, Mar 12, 3:30 PM · Bug Report, gpgpass, gpd5x
werner triaged T7562: gpgpass: Restore last window location on next start as Normal priority.
Wed, Mar 12, 3:29 PM · Feature Request, gpgpass, gpd5x
werner committed rGc12b7d047e75: common: Add a flag for left anchored substring match to recsel. (authored by werner).
common: Add a flag for left anchored substring match to recsel.
Wed, Mar 12, 11:12 AM
werner added a comment to T7547: signatures from revoked or expired keys show up as missing keys.

Did you also tried with --no-sig-cache ? That could help to get a better insight into the reason for that difference.

Wed, Mar 12, 9:27 AM · gnupg26, gnupg24, Bug Report
werner triaged T7561: Issues with Okular PGP signature error as Normal priority.
Wed, Mar 12, 9:21 AM · Bug Report, okular

Tue, Mar 11

werner added a comment to T7544: Kleopatra (gnupg, gpgsm) hang on key-creation when x.509 certs are in keystore.

Please test using the latest gpg4win installer (beta145).

Tue, Mar 11, 5:17 PM · gnupg, kleopatra, Bug Report
werner added a comment to T7560: GnuPG should learn the certificates when a new card has been seen.

The problem is that it may take really long to read the certificates form a card and some card applications even require to give a PIN for reading the certs. A background operation may thus surprisingly lock up the box

Tue, Mar 11, 5:15 PM · scd, Feature Request, gnupg
werner committed rWde2286385ab4: Move snapshot directory to gnupg.net (authored by werner).
Move snapshot directory to gnupg.net
Tue, Mar 11, 4:56 PM
werner committed rWd2148fbe831d: Unify packages list to include all possible gnupg branches. (authored by werner).
Unify packages list to include all possible gnupg branches.
Tue, Mar 11, 2:56 PM
werner changed the status of T7547: signatures from revoked or expired keys show up as missing keys, a subtask of T7527: Keyring/keybox denial of service, from Testing to Open.
Tue, Mar 11, 11:00 AM · OpenPGP, gnupg, Bug Report
werner changed the status of T7547: signatures from revoked or expired keys show up as missing keys from Testing to Open.
Tue, Mar 11, 11:00 AM · gnupg26, gnupg24, Bug Report

Mon, Mar 10

werner committed rE0f08f4aa8058: Re-fix logic for finding the beta version number (authored by werner).
Re-fix logic for finding the beta version number
Mon, Mar 10, 4:01 PM
werner added a reverting change for rE542b6fce1390: Fix logic for finding the beta version number: rE0f08f4aa8058: Re-fix logic for finding the beta version number.
Mon, Mar 10, 4:01 PM
werner committed rDdea932b29ef5: Add new news entry and move old news to the archive (authored by werner).
Add new news entry and move old news to the archive
Mon, Mar 10, 3:47 PM
werner committed rGe5555a40e633: Update autogen.sh from upstream to version 2025-03-10 (authored by werner).
Update autogen.sh from upstream to version 2025-03-10
Mon, Mar 10, 3:00 PM
werner committed rW26f7e428f651: Update autogen.sh from upstream to version 2025-03-10 (authored by werner).
Update autogen.sh from upstream to version 2025-03-10
Mon, Mar 10, 2:58 PM
werner committed rGd6ee7adebe9c: card: Add command "ll" (authored by werner).
card: Add command "ll"
Mon, Mar 10, 1:56 PM
werner committed rW91b92743a3e7: New option --release to run a complete build cycle. (authored by werner).
New option --release to run a complete build cycle.
Mon, Mar 10, 11:58 AM
werner committed rW13163b8dc769: Fix download directory for the gnupg-w32*xz tarball. (authored by werner).
Fix download directory for the gnupg-w32*xz tarball.
Mon, Mar 10, 11:36 AM
werner committed rWbd3dcffb5dbd: Always use the mimetreeparser patch (authored by werner).
Always use the mimetreeparser patch
Mon, Mar 10, 11:11 AM

Fri, Mar 7

werner closed T7530: Release GnuPG 2.5.5 as Resolved.
Fri, Mar 7, 3:37 PM · Release Info, gnupg
werner committed rD98e09067725c: swdb: gnupg 2.5.5 (authored by werner).
swdb: gnupg 2.5.5
Fri, Mar 7, 3:35 PM
werner updated the task description for T7530: Release GnuPG 2.5.5.
Fri, Mar 7, 3:09 PM · Release Info, gnupg
werner committed rG865adcaa7041: Post release updates (authored by werner).
Post release updates
Fri, Mar 7, 3:00 PM
werner committed rW61ed17718c23: Fix Makefile dist files. (authored by werner).
Fix Makefile dist files.
Fri, Mar 7, 2:57 PM
werner committed rW8e650b106c94: Update to gnupg 2.5.5 and latest Kleo et al. (authored by werner).
Update to gnupg 2.5.5 and latest Kleo et al.
Fri, Mar 7, 2:49 PM
werner committed rGabcefe3a8c89: po: msgmerge (authored by werner).
po: msgmerge
Fri, Mar 7, 2:01 PM
werner committed rG5b8c5f71908b: Release 2.5.5 (authored by werner).
Release 2.5.5
Fri, Mar 7, 2:01 PM
werner committed rG8cfd261100cd: po: Update German translation (authored by werner).
po: Update German translation
Fri, Mar 7, 2:01 PM
werner committed rGf29c8dba743e: Typo fix and add missing prototype. (authored by werner).
Typo fix and add missing prototype.
Fri, Mar 7, 2:01 PM
werner committed rG0f0e0a732c59: build: Update Libassuan M4 macros (authored by werner).
build: Update Libassuan M4 macros
Fri, Mar 7, 9:32 AM
werner committed rW1d2e3bee9b82: New option --no-sign for build.sh (authored by werner).
New option --no-sign for build.sh
Fri, Mar 7, 9:27 AM
werner added a reverting change for rWcec85eb35ccc: Switch download script from wget to curl: rW59085bec8d88: Revert "Switch download script from wget to curl".
Fri, Mar 7, 9:27 AM
werner committed rW59085bec8d88: Revert "Switch download script from wget to curl" (authored by werner).
Revert "Switch download script from wget to curl"
Fri, Mar 7, 9:27 AM

Thu, Mar 6

werner moved T7547: signatures from revoked or expired keys show up as missing keys from Backlog to QA on the gnupg24 board.
Thu, Mar 6, 5:58 PM · gnupg26, gnupg24, Bug Report
werner changed the status of T7547: signatures from revoked or expired keys show up as missing keys, a subtask of T7527: Keyring/keybox denial of service, from Open to Testing.
Thu, Mar 6, 5:58 PM · OpenPGP, gnupg, Bug Report
werner changed the status of T7547: signatures from revoked or expired keys show up as missing keys from Open to Testing.
Thu, Mar 6, 5:58 PM · gnupg26, gnupg24, Bug Report
werner committed rG1e581619bf53: gpg: Fix regression for the recent malicious subkey DoS fix. (authored by werner).
gpg: Fix regression for the recent malicious subkey DoS fix.
Thu, Mar 6, 5:22 PM
werner committed rGd3d7713c1799: gpg: Fix regression for the recent malicious subkey DoS fix. (authored by werner).
gpg: Fix regression for the recent malicious subkey DoS fix.
Thu, Mar 6, 5:17 PM
werner claimed T7547: signatures from revoked or expired keys show up as missing keys.
Thu, Mar 6, 2:56 PM · gnupg26, gnupg24, Bug Report
werner added a comment to T7544: Kleopatra (gnupg, gpgsm) hang on key-creation when x.509 certs are in keystore.

rG25d48663f9 seems to fix this for me. However in my test cases I got a hang in dirmngr simply by running several gpgsm instances to get the details of an X.509 key. I had different logging options enabled, though.

Thu, Mar 6, 11:27 AM · gnupg, kleopatra, Bug Report
werner lowered the priority of T7547: signatures from revoked or expired keys show up as missing keys from Unbreak Now! to High.

Please use "unbreak now" only for *released* software with a criticial bug.

Thu, Mar 6, 11:23 AM · gnupg26, gnupg24, Bug Report
werner committed rG25d48663f9ed: dirmngr: Use the same thread init strategy as gpg-agent et al. (authored by werner).
dirmngr: Use the same thread init strategy as gpg-agent et al.
Thu, Mar 6, 11:19 AM
werner committed rG73f6c2dd4d3e: w32: On socket nonce mismatch close the socket. (authored by werner).
w32: On socket nonce mismatch close the socket.
Thu, Mar 6, 11:18 AM
werner triaged T7555: gpg --batch does not block all interactivity (e.g. prompting for passwords still happens) as Normal priority.
Thu, Mar 6, 8:57 AM · Documentation, gnupg

Wed, Mar 5

werner committed rG41cf76b8c142: Log the Windows system error code at more places. (authored by werner).
Log the Windows system error code at more places.
Wed, Mar 5, 10:33 AM
werner closed T7550: master branch fails to build without `./configure --disable-ldap` as Invalid.

master is development and you can't expect that it always build on all platforms.

Wed, Mar 5, 8:57 AM · gnupg

Tue, Mar 4

werner closed T7542: Subscribing to lists supported at https://lists.gnupg.org/mailman/listinfo/ seems not working as Resolved.
Tue, Mar 4, 10:52 AM
werner triaged T7548: Kleopatra: Wrong error message when unblocking PIN as Normal priority.
Tue, Mar 4, 10:51 AM · gpd5x
werner added a comment to T7548: Kleopatra: Wrong error message when unblocking PIN.

We do not have an error code for Admin PINs. The Admin PIN is also an OpenPGP card specific termm and other cards use different terms. For example a NKS has no Admin PIN at all but an alternative PIN.

Tue, Mar 4, 10:51 AM · gpd5x
werner added a subtask for T7527: Keyring/keybox denial of service: T7547: signatures from revoked or expired keys show up as missing keys.
Tue, Mar 4, 10:47 AM · OpenPGP, gnupg, Bug Report
werner added a parent task for T7547: signatures from revoked or expired keys show up as missing keys: T7527: Keyring/keybox denial of service.
Tue, Mar 4, 10:47 AM · gnupg26, gnupg24, Bug Report

Wed, Feb 26

werner committed rM0a64c7d0c6d0: Add API gpgme_op_random_bytes. (authored by werner).
Add API gpgme_op_random_bytes.
Wed, Feb 26, 2:35 PM
werner committed rM2e21919a1b26: Remove now unused functions. (authored by werner).
Remove now unused functions.
Wed, Feb 26, 2:35 PM
werner added a comment to T6694: Random numbers from gpgme.

New API gpgme_op_random_bytes is now in master (gpgme 2.0). Use tests/run-genrandom --help for testing. Extra features will come soon.

Wed, Feb 26, 2:22 PM · gpd5x, gpgpass, gpgme, Feature Request
werner added a comment to T7542: Subscribing to lists supported at https://lists.gnupg.org/mailman/listinfo/ seems not working.

Please try again. This was due to a change in the RBL we use. Might be fixed now.

Wed, Feb 26, 2:20 PM

Tue, Feb 25

werner triaged T7540: Kleopatra: Wrong tab order in smart card window as Normal priority.
Tue, Feb 25, 4:33 PM · gpd5x, kleopatra
werner added a comment to T7434: Kleopatra: Initial keylisting hangs for ~60 seconds (gpg-agent: Socket ...S.gpg-agent cannot be bound).

Looks like scdaemon which I experienced today also but without having enabled scdaemon logging.

Tue, Feb 25, 3:48 PM · gnupg, kleopatra

Mon, Feb 24

werner committed rGc68eca636375: tools: Add envvar GPG_AUTHCODE_SIGN_MODE to disable signing. (authored by werner).
tools: Add envvar GPG_AUTHCODE_SIGN_MODE to disable signing.
Mon, Feb 24, 10:56 AM
werner closed T7508: GPGME gpgme_pubkey_algo_string Returns "unknown" for RSA Keys as Resolved.
Mon, Feb 24, 10:37 AM · gpgme, Bug Report
werner closed T7539: validating an OpenPGP `Signed Message` with a text-mode signature and binary-mode literal data packet as Resolved.

I don't see a bug here and any change in this domain disks a regression with existing data. BTW, the mode byte was not even part of the signed data before signature version 5.

Mon, Feb 24, 9:56 AM · Not A Bug, gnupg
werner closed T7106: Trailing newline trouble in clearsigned message generation and verification as Resolved.

My comment from a year ago still holds true; you may want to fix your testing framework and re-openig this bug iff you can show that there will be no regression with PGP 7 and later.

Mon, Feb 24, 9:51 AM · Not A Bug, gnupg

Fri, Feb 21

werner committed rGfdcc69c29de2: dirmngr: Prepare for new command KS_DEL. (authored by werner).
dirmngr: Prepare for new command KS_DEL.
Fri, Feb 21, 2:43 PM
werner committed rGdb7141d462ed: dirmngr: Factor a common command parsing code out. (authored by werner).
dirmngr: Factor a common command parsing code out.
Fri, Feb 21, 2:43 PM
werner committed rG75667050dc34: build: Update autogen.sh to the current version. (authored by werner).
build: Update autogen.sh to the current version.
Fri, Feb 21, 12:59 PM
werner committed rGbec71fdbe57b: speedo: Do not build gpgme anymore. (authored by werner).
speedo: Do not build gpgme anymore.
Fri, Feb 21, 12:56 PM
werner closed T7527: Keyring/keybox denial of service as Resolved.

Also fixed for 2.4

Fri, Feb 21, 12:24 PM · OpenPGP, gnupg, Bug Report
werner committed rGda0164efc7f3: gpg: Fix a verification DoS due to a malicious subkey in the keyring. (authored by werner).
gpg: Fix a verification DoS due to a malicious subkey in the keyring.
Fri, Feb 21, 12:24 PM
werner committed rG9cd371b12d80: gpg: Remove a signature check function wrapper. (authored by werner).
gpg: Remove a signature check function wrapper.
Fri, Feb 21, 12:24 PM
werner lowered the priority of T7527: Keyring/keybox denial of service from High to Normal.

This has been fixed in master with rG48978ccb4e:

Fri, Feb 21, 12:18 PM · OpenPGP, gnupg, Bug Report
werner committed rG48978ccb4e20: gpg: Fix a verification DoS due to a malicious subkey in the keyring. (authored by werner).
gpg: Fix a verification DoS due to a malicious subkey in the keyring.
Fri, Feb 21, 12:15 PM