Page MenuHome GnuPG
People werner

werner (Werner Koch)
EngineeringAdministrator

Projects

User Details

User Since
Mar 27 2017, 4:48 PM (485 w, 1 d)
Roles
Administrator
Availability
Busy Busy until Sep 9 2030.

Recent Activity
View All

Today

• werner changed the status of T8344: gpg: Fix edit-key bkuptocard, a subtask of T8339: Draft: Kleopatra: Add option to generate a new key on card using a sk_keyID.gpg backup file to restore the encrypt key, from Open to Testing.
Wed, Jul 15, 10:55 AM · gnupg, gpd5x, kleopatra
• werner changed the status of T8344: gpg: Fix edit-key bkuptocard from Open to Testing.

Restoring an encryption subkey is now easy if you have an sk_KEYID.gpg backup:

Wed, Jul 15, 10:55 AM · Bug Report, gnupg26
• werner committed rGa95da9e25362: gpg: Add option primary to the --card-edit generate command. (authored by • werner).
gpg: Add option primary to the --card-edit generate command.
Wed, Jul 15, 10:51 AM
• werner added a comment to T8344: gpg: Fix edit-key bkuptocard.

Please see the rGf103eaee63f702278824967365de16b9757ecc83 for detailed comment on the (solved) problem.

Wed, Jul 15, 10:31 AM · Bug Report, gnupg26
• werner committed rGf103eaee63f7: gpg: Fix long standing regression of "bkuptocard" (authored by • werner).
gpg: Fix long standing regression of "bkuptocard"
Wed, Jul 15, 10:03 AM

Yesterday

• werner committed rC6ccf1f25d435: doc: Fix a bunch of doubled articles (authored by • werner).
doc: Fix a bunch of doubled articles
Tue, Jul 14, 8:56 PM
• werner committed rG204d02da018e: doc: Improve comment on one function (authored by • werner).
doc: Improve comment on one function
Tue, Jul 14, 10:47 AM

Mon, Jul 13

• werner moved T8344: gpg: Fix edit-key bkuptocard from Backlog to WIP on the gnupg26 board.
Mon, Jul 13, 5:37 PM · Bug Report, gnupg26
• werner added a comment to T8338: Better error string for wrong passphrase.

Here is how we use the passphrase error codes:

Mon, Jul 13, 3:24 PM · gnupg

Fri, Jul 10

• werner committed rEad87550c8246: doc: some comment updates (authored by • werner).
doc: some comment updates
Fri, Jul 10, 2:35 PM
• werner committed rEe516225da25e: po: Update Portuguese Translation. (authored by Daniel Cerqueira <dan.git@lispclub.com>).
po: Update Portuguese Translation.
Fri, Jul 10, 2:35 PM
• werner committed rG3913f7b16739: po: Update Portuguese Translation. (authored by Daniel Cerqueira <dan.git@lispclub.com>).
po: Update Portuguese Translation.
Fri, Jul 10, 1:49 PM
• werner triaged T8344: gpg: Fix edit-key bkuptocard as High priority.
Fri, Jul 10, 9:46 AM · Bug Report, gnupg26

Thu, Jul 9

• werner committed rD44c69775f5eb: ids:openpgp-webkey-service: Replace some "see below" by section numbers. (authored by • werner).
ids:openpgp-webkey-service: Replace some "see below" by section numbers.
Thu, Jul 9, 12:01 PM
• werner committed rDb3bb75654326: ids: Updated openpgp-webkey-service (authored by • werner).
ids: Updated openpgp-webkey-service
Thu, Jul 9, 11:38 AM
• werner added a comment to T8293: Okular: OpenPGP certificate export should create the same files as with Kleopatra.

underscores usual I'd say. There is no semantic in the format of the file name.

Thu, Jul 9, 9:04 AM · Bug Report, gpd5x, okular
• werner added a comment to T8331: scd: Support Nitrokey 3.

Wouldn't it be an idea to use a short delay and a retry count limit?

Thu, Jul 9, 9:00 AM · gnupg, scd, Feature Request

Wed, Jul 8

• werner edited projects for T8334: Only one recipient shown in decryption feedback for files S/MIME encrypted for multiple recipients, added: kleopatra; removed gnupg26.

A comment in gpgsm shows the problem:

Wed, Jul 8, 11:14 AM · kleopatra, S/MIME, Bug Report, gpd5x
• werner triaged T8299: gpgol/web: Attaching .eml files mangles the content as High priority.
Wed, Jul 8, 10:07 AM · gpgol2
• werner triaged T8301: gpgol/web: Replys to (and forwards of) encrypted mails default to empty in outlook as Normal priority.
Wed, Jul 8, 10:06 AM · mimetreeparser, gpgol2
• werner triaged T8302: gpgol/web: Warn when sending unencrypted reply/forward to encrypted message as Normal priority.
Wed, Jul 8, 10:05 AM · Feature Request, gpgol2
• werner triaged T8306: BUG: gpgsm: gpgsm rejects valid X.509 chain when P-521/ECDSA CA certificate signs with SHA-384 as Normal priority.
Wed, Jul 8, 10:05 AM · S/MIME, gnupg26, Bug Report
• werner triaged T8312: bkuptocard additionally imports the key locally as High priority.
Wed, Jul 8, 9:58 AM · vsd34, gnupg22
• werner triaged T8319: gpgol/web / mimetreeparser: Duplicate display of signatures covering encapuslated messages as Normal priority.
Wed, Jul 8, 9:58 AM · mimetreeparser, gpgol2
• werner triaged T8324: Kleopatra: do not create a S/MIME signed file when signing and encrypting folders (S/MIME or mixed) as High priority.
Wed, Jul 8, 9:58 AM · Bug Report, gpd5x, kleopatra
• werner closed T8328: double keydb_release() in error handling path of g10/import.c : import_revoke_cert as Resolved.
Wed, Jul 8, 9:58 AM · gnupg26, Bug Report
• werner triaged T8331: scd: Support Nitrokey 3 as Normal priority.
Wed, Jul 8, 9:57 AM · gnupg, scd, Feature Request
• werner triaged T8333: Kleopatra: S/MIME decryption fails for certs with crl check problems as Normal priority.
Wed, Jul 8, 9:56 AM · gnupg26, gpgme, S/MIME, gpd5x, Bug Report
• werner triaged T8334: Only one recipient shown in decryption feedback for files S/MIME encrypted for multiple recipients as Normal priority.
Wed, Jul 8, 9:56 AM · kleopatra, S/MIME, Bug Report, gpd5x

Thu, Jul 2

• werner committed rD0d4b9419ff9b: web: Annoucne 2.5.21 and move older news. (authored by • werner).
web: Annoucne 2.5.21 and move older news.
Thu, Jul 2, 4:42 PM
• werner committed rW231443b31f4c: Update GnuPG to 2.5.21 (authored by • werner).
Update GnuPG to 2.5.21
Thu, Jul 2, 4:25 PM
• werner closed T8303: Heap OOB reads in dirmngr DNS CERT/DANE parsing as Resolved.
Thu, Jul 2, 3:55 PM · gnupg26, Keyserver, dns, Security, Bug Report
• werner changed the status of T8029: IPC error on batch import of secret kyber cert from Open to Testing.
Thu, Jul 2, 3:55 PM · gpd5x (gpd-5.1.0), gnupg26, Bug Report, kleopatra
• werner closed T8281: scd: Have a limit for data object handling as Resolved.
Thu, Jul 2, 3:54 PM · scd, gnupg, Security, Bug Report
• werner changed the status of T8188: gpgsm: No error/warning on verification or decryption in case of trusted but not VS-compliant certificate from Open to Testing.
Thu, Jul 2, 3:53 PM · gnupg22 (gnupg-2.2.54), vsd33 (vsd-3.3.7), vsd, gnupg26
• werner closed T8277: Potential use-after-free in keygen when handling keyserver option as Resolved.
Thu, Jul 2, 3:52 PM · gnupg26, Bug Report, Security
• werner closed T8252: Use RECP_FPR subpacket for standalone designated revocations. as Resolved.
Thu, Jul 2, 3:51 PM · OpenPGP, gnupg26, Feature Request
• werner closed T8252: Use RECP_FPR subpacket for standalone designated revocations., a subtask of T8189: GnuPG: Bad signature on import of designated revokation certificate, as Resolved.
Thu, Jul 2, 3:51 PM · Bug Report, gnupg26
• werner closed T7873: Decrypt to foo.gpg.part files and rename as Resolved.
Thu, Jul 2, 3:51 PM · Feature Request, gnupg26
• werner renamed T8320: Release GnuPG 2.5.22 from Release GnuPG 2.5.23 to Release GnuPG 2.5.22.
Thu, Jul 2, 3:49 PM · gnupg, Release Info
• werner renamed T8320: Release GnuPG 2.5.22 from Release GnuPG 2.5.22 to Release GnuPG 2.5.23.
Thu, Jul 2, 3:47 PM · gnupg, Release Info
• werner updated the task description for T8262: Release GnuPG 2.5.21.
Thu, Jul 2, 3:47 PM · Release Info, gnupg
• werner updated the task description for T8262: Release GnuPG 2.5.21.
Thu, Jul 2, 3:46 PM · Release Info, gnupg
• werner updated the task description for T8320: Release GnuPG 2.5.22.
Thu, Jul 2, 3:45 PM · gnupg, Release Info
• werner committed rDb30bf9bc156a: swdb: GnuPG 2.5.21 (authored by • werner).
swdb: GnuPG 2.5.21
Thu, Jul 2, 3:33 PM
• werner committed rG2e63cacae4b6: Post release updates (authored by • werner).
Post release updates
Thu, Jul 2, 3:21 PM
• werner committed rG363096d9c9a9: Release 2.5.21 (authored by • werner).
Release 2.5.21
Thu, Jul 2, 3:21 PM
• werner committed rG0db60ee25e8f: po: Update German translation (authored by • werner).
po: Update German translation
Thu, Jul 2, 3:21 PM
• werner committed rGb8b694d04f20: po: msgmerge (authored by • werner).
po: msgmerge
Thu, Jul 2, 3:21 PM
• werner updated the task description for T8320: Release GnuPG 2.5.22.
Thu, Jul 2, 3:18 PM · gnupg, Release Info
• werner triaged T8320: Release GnuPG 2.5.22 as Normal priority.
Thu, Jul 2, 3:16 PM · gnupg, Release Info
• werner committed rP41d6ee3a7d7e: w32: Improve foreground window activation. (authored by mfilippov).
w32: Improve foreground window activation.
Thu, Jul 2, 11:14 AM

Wed, Jul 1

• werner committed rW2d06a625a7c9: Udpate pinentry to 1.3.3 (authored by • werner).
Udpate pinentry to 1.3.3
Wed, Jul 1, 3:35 PM
• werner committed rD0f974969b219: swdb: pinentry 1.3.3. (authored by • werner).
swdb: pinentry 1.3.3.
Wed, Jul 1, 3:32 PM
• werner added a comment to T8315: pinentry: Add `--focus=ok` option to `CONFIRM` command.

Released with pinentry 1.3.3

Wed, Jul 1, 3:31 PM · gpgagent, gnupg26, pinentry, Bug Report
• werner committed rP252303487e0e: Post release updates (authored by • werner).
Post release updates
Wed, Jul 1, 3:29 PM
• werner committed rP9a7b78e9882b: Release 1.3.3. (authored by • werner).
Release 1.3.3.
Wed, Jul 1, 3:28 PM
• werner committed rPfe06e2d8eefb: w32: Modernize dialog for Windows Vista and later. (authored by mfilippov).
w32: Modernize dialog for Windows Vista and later.
Wed, Jul 1, 3:28 PM
• werner committed rPcab5d7bb8943: Fix for m4 macro only available in newer autoconf versions. (authored by • werner).
Fix for m4 macro only available in newer autoconf versions.
Wed, Jul 1, 3:28 PM
• werner moved T7339: Kleopatra: Cannot decrypt packets with hybrid cipher without using symmetric passphrase from WIP to QA on the gpd5x board.
Wed, Jul 1, 2:18 PM · gpd5x (gpd-5.1.0), gnupg26, kleopatra, Bug Report
• werner changed the status of T7339: Kleopatra: Cannot decrypt packets with hybrid cipher without using symmetric passphrase from Open to Testing.

GPGME was released mid-May this year and the gpg fix is also long released.

Wed, Jul 1, 2:18 PM · gpd5x (gpd-5.1.0), gnupg26, kleopatra, Bug Report

Tue, Jun 30

• werner committed rD25d37e6d9e8a: swdb: Minor gpgme update for Windows. (authored by • werner).
swdb: Minor gpgme update for Windows.
Tue, Jun 30, 12:15 PM
• werner committed rWffa1c4bab05d: Update gpgme to 2.1.2 (authored by • werner).
Update gpgme to 2.1.2
Tue, Jun 30, 12:04 PM
• werner committed rM5a36cb33a2c0: Post release updates (authored by • werner).
Post release updates
Tue, Jun 30, 12:01 PM
• werner committed rM34eaa0a69c12: Release 2.1.2 (authored by • werner).
Release 2.1.2
Tue, Jun 30, 12:01 PM
• werner added a comment to T8269: Release GPGME 2.1.1.

Noteworthy changes in version 2.1.2 (2026-06-30)

Tue, Jun 30, 12:00 PM · gpgme, Release Info
• werner renamed T8311: Release GPGME 2.1.3 from Release GPGME 2.1.2 to Release GPGME 2.1.3.
Tue, Jun 30, 11:59 AM · gpgme, Release Info
• werner committed rG8716b4dac4a7: speedo: Create a pkgversioninfo.txt file (authored by • werner).
speedo: Create a pkgversioninfo.txt file
Tue, Jun 30, 11:24 AM

Mon, Jun 29

• werner committed rG7af73849a5db: speedo: Fix passing configure args to w32 builds (authored by • werner).
speedo: Fix passing configure args to w32 builds
Mon, Jun 29, 7:04 PM
• werner committed rG4fca79b67bba: agent: Make batch import of Kyber keys work (authored by • werner).
agent: Make batch import of Kyber keys work
Mon, Jun 29, 12:27 PM
• werner committed rGbf808091534f: common: Prepare to get rid of map_w32_to_errno. (authored by • werner).
common: Prepare to get rid of map_w32_to_errno.
Mon, Jun 29, 12:27 PM
• werner added a comment to T8029: IPC error on batch import of secret kyber cert.

You are right. I forgot that for composite keys (i.e. Kyber) we already use a GnuPG specific export mode which does not need require that gpg-agent knows about *PGP formats. Thanks for bringing this up again.

Mon, Jun 29, 9:10 AM · gpd5x (gpd-5.1.0), gnupg26, Bug Report, kleopatra

Thu, Jun 25

• werner committed rD384ef1944956: swdb: gpgme 2.1.1 (authored by • werner).
swdb: gpgme 2.1.1
Thu, Jun 25, 6:04 PM
• werner committed rMd4c6f065cbd5: Post release updates (authored by • werner).
Post release updates
Thu, Jun 25, 4:10 PM
• werner committed rMdf6c94f136e5: w32: Use gpgrt_w32_set_errno if gpgrt is new enough. (authored by • werner).
w32: Use gpgrt_w32_set_errno if gpgrt is new enough.
Thu, Jun 25, 4:10 PM
• werner committed rMc68741376b55: Release 2.1.1 (authored by • werner).
Release 2.1.1
Thu, Jun 25, 4:10 PM
• werner committed rW52137f8409cc: Update gpgme to 2.1.1 (authored by • werner).
Update gpgme to 2.1.1
Thu, Jun 25, 4:08 PM
• werner closed T8287: GpgME: No error on key export to invalid ldap keyserver url as Resolved.
Thu, Jun 25, 4:06 PM · Unknown Object (Project), Bug Report, gpgme
• werner closed T8263: gpgme:json:w32: CRLF problem with t-export.out.json as Resolved.
Thu, Jun 25, 4:06 PM · Windows, gpgme
• werner updated the task description for T8269: Release GPGME 2.1.1.
Thu, Jun 25, 4:05 PM · gpgme, Release Info
• werner triaged T8311: Release GPGME 2.1.3 as Low priority.
Thu, Jun 25, 3:51 PM · gpgme, Release Info
• werner added a comment to T8305: gpg randomly loses ownertrust for private keys.

I can't see any commits pertaining to gpg betweem 2.5.19 and .20 which could cause this. I would say, we need to bisect this but w/o a reliable reproducer this will take too long.

Thu, Jun 25, 10:17 AM · Bug Report, gnupg26

Wed, Jun 24

• werner committed rEe5148b954928: w32: New function gpgrt_w32_set_errno. (authored by • werner).
w32: New function gpgrt_w32_set_errno.
Wed, Jun 24, 1:37 PM

Tue, Jun 23

• werner committed rG11750ac881d6: build: Update ldap.m4 for POSIX with no LDAP_DEPRECATED. (authored by • gniibe).
build: Update ldap.m4 for POSIX with no LDAP_DEPRECATED.
Tue, Jun 23, 4:42 PM
• werner lowered the priority of T8303: Heap OOB reads in dirmngr DNS CERT/DANE parsing from Unbreak Now! to High.

An OOB-Read in dirmngr is not very critical. dirmngr has no confidential data which can be leaked except maybe for an LDAP password in memory. Thus I lower the priority.

Tue, Jun 23, 1:42 PM · gnupg26, Keyserver, dns, Security, Bug Report

Mon, Jun 22

• werner committed rM8dad6c1d1ccd: Let gpgme_op_export also return operational errors. (authored by • werner).
Let gpgme_op_export also return operational errors.
Mon, Jun 22, 6:13 PM
• werner moved T8287: GpgME: No error on key export to invalid ldap keyserver url from Backlog to WiP on the gpgme board.
Mon, Jun 22, 4:16 PM · Unknown Object (Project), Bug Report, gpgme
• werner shifted T8287: GpgME: No error on key export to invalid ldap keyserver url from the Restricted Space space to the S1 Public space.
Mon, Jun 22, 4:06 PM · Unknown Object (Project), Bug Report, gpgme

Thu, Jun 18

• werner committed rGab2395daeb27: gpgsm: Require a minimum tag length for GCM decryption. (authored by • werner).
gpgsm: Require a minimum tag length for GCM decryption.
Thu, Jun 18, 10:48 AM
• werner committed rG4c7e68cf3d33: gpgsm: Require a minimum tag length for GCM decryption. (authored by • werner).
gpgsm: Require a minimum tag length for GCM decryption.
Thu, Jun 18, 10:47 AM

Wed, Jun 17

• werner committed rWd70fc54a2a36: Update the distdisgkey for download.sh. (authored by • werner).
Update the distdisgkey for download.sh.
Wed, Jun 17, 2:43 PM
• werner committed rW8e737eaab806: Prepare for 3.3.8 (authored by • werner).
Prepare for 3.3.8
Wed, Jun 17, 2:37 PM
• werner committed rW96e25e9f409a: Update Libassuan to the current version 3.0.2 (authored by • werner).
Update Libassuan to the current version 3.0.2
Wed, Jun 17, 2:37 PM

Jun 11 2026

• werner committed rGa9c9435cd447: gpg-authcode-sign: Avoid syntax error if input file does not exist. (authored by • werner).
gpg-authcode-sign: Avoid syntax error if input file does not exist.
Jun 11 2026, 1:28 PM

Jun 10 2026

• werner updated the task description for T7136: libgcrypt: Implement constant-time RSA decryption (Marvin attack fix).
Jun 10 2026, 10:06 AM · libgcrypt, Bug Report

Jun 9 2026

• werner committed rGa5d504370321: po: Clarify German description of max-cache-ttl (authored by • werner).
po: Clarify German description of max-cache-ttl
Jun 9 2026, 2:24 PM
• werner committed rGb0e110955c7d: po: Clarify German description of max-cache-ttl (authored by • werner).
po: Clarify German description of max-cache-ttl
Jun 9 2026, 2:19 PM
• werner committed rWc00349e1c7bb: Make signing of MSI installer work again (authored by • werner).
Make signing of MSI installer work again
Jun 9 2026, 12:31 PM

Jun 8 2026

• werner committed rW83c40b263f86: Update GnuPG to 2.5.20 and Libgcrypt 1.12.2 (authored by • werner).
Update GnuPG to 2.5.20 and Libgcrypt 1.12.2
Jun 8 2026, 10:07 AM
• werner added a comment to T8060: Release Gpg4win 5.0.1.

Noteworthy changes in Version 5.0.2 (2026-03-16)

Jun 8 2026, 9:46 AM · gpg4win, Release Info