Page MenuHome GnuPG

werner (Werner Koch)
EngineeringAdministrator

Projects

Today

  • Clear sailing ahead.

Tomorrow

  • Clear sailing ahead.

Thursday

  • Clear sailing ahead.

User Details

User Since
Mar 27 2017, 4:48 PM (364 w, 15 h)
Roles
Administrator
Availability
Busy Busy until Feb 11 2030.

Recent Activity

Yesterday

werner moved T7003: 2.2 gpg-agent doesn't allow KEYINFO when restricted (was: gpgme-1.23.2 test failure (t-json)) from Backlog to QA on the gnupg22 board.
Mon, Mar 18, 4:24 PM · gpgagent, gnupg22, gpgme, Gentoo, Bug Report
werner moved T6719: Support Proxy-Authorization: Negotiate on Windows from QA to WiP on the gnupg22 board.
Mon, Mar 18, 4:22 PM · gnupg24, gnupg22, Feature Request, Restricted Project
werner moved T6719: Support Proxy-Authorization: Negotiate on Windows from WiP to QA on the gnupg22 board.
Mon, Mar 18, 4:22 PM · gnupg24, gnupg22, Feature Request, Restricted Project
werner moved T6997: gnupg-2.4.4 breaks dirmngr fetching keys via hkps:// from behind a proxy from WiP to QA on the gnupg22 board.
Mon, Mar 18, 4:22 PM · gnupg24 (gnupg-2.4.5), gnupg22, Bug Report
werner moved T6811: gpgv: Read-only trustedkeys.kbx should not be compressed from WiP to QA on the gnupg22 board.
Mon, Mar 18, 4:22 PM · gnupg24 (gnupg-2.4.5), gnupg22, gpgv, Bug Report
werner moved T7025: --trusted-key and --no-options mismatch from WiP to QA on the gnupg22 board.
Mon, Mar 18, 4:22 PM · gnupg24 (gnupg-2.4.5), Bug Report, gnupg22
werner created T7047: GnuPG release target authenticode signs files double.
Mon, Mar 18, 3:20 PM · Bug Report, gnupg
werner committed rG8a4069527a1f: build: Update nPth configure macros. (authored by werner).
build: Update nPth configure macros.
Mon, Mar 18, 2:55 PM
werner committed rGce1e671cdc35: Update NEWS (authored by werner).
Update NEWS
Mon, Mar 18, 2:02 PM
werner raised the priority of T6354: All VSD and GPD binaries need a proper product name on Windows. from Normal to High.

So, what is the state of this. Did a change already land in Kleopatra and how can we assure that all binaries have a W32INFO_PRODUCTNAME in their rc file?

Mon, Mar 18, 1:19 PM · vsd, kleopatra, Restricted Project, gpd
werner committed rP2d6021d05c0c: build: Add release targets. (authored by werner).
build: Add release targets.
Mon, Mar 18, 12:49 PM
werner committed rP24833c9ef2bf: Release 1.3.0 (authored by werner).
Release 1.3.0
Mon, Mar 18, 12:49 PM
werner committed rP36789a2d1ff6: build: Update autogen.sh (authored by werner).
build: Update autogen.sh
Mon, Mar 18, 12:49 PM
werner committed rP3bc458d48fa9: Post release updates (authored by werner).
Post release updates
Mon, Mar 18, 12:49 PM
werner committed rD204c6afaccb7: swdb: Pinentry 1.3.0 (authored by werner).
swdb: Pinentry 1.3.0
Mon, Mar 18, 12:37 PM
werner closed T7031: New pinentry release for Qt 6 support? as Resolved.

See T7046 for the release info. Note that the mentioned fix for kwallet already landed.

Mon, Mar 18, 12:27 PM · KF6, qt, pinentry, Feature Request
werner renamed T7046: Release Pinentry 1.3.x from Release Pinentry 1.3.0 to Release Pinentry 1.3.x.
Mon, Mar 18, 12:22 PM · pinentry, Release Info
werner renamed T5566: Release Pinentry 1.2.x from Release Pinentry 1.2.0 to Release Pinentry 1.2.x.
Mon, Mar 18, 12:22 PM · Release Info, pinentry
werner added a comment to T5566: Release Pinentry 1.2.x.

Noteworthy changes in version 1.2.1 (2022-08-24)

Mon, Mar 18, 12:20 PM · Release Info, pinentry
werner triaged T7046: Release Pinentry 1.3.x as Normal priority.
Mon, Mar 18, 12:16 PM · pinentry, Release Info
werner committed rG759adb249310: gpgconf: Check readability of some files with -X (authored by werner).
gpgconf: Check readability of some files with -X
Mon, Mar 18, 11:32 AM
werner committed rG5ccfc2101a34: gpgconf: Check readability of some files with -X (authored by werner).
gpgconf: Check readability of some files with -X
Mon, Mar 18, 11:32 AM
werner closed T7032: mailserver misconfigured, rejects on non-existing SPF record as Resolved.

AFAICS the bounce is correctly reported. You get the 550 at the mail from so that there won't be a need for several SPF checks if a sender wants to send to several recipients.

Mon, Mar 18, 8:55 AM
werner triaged T7044: Deadlock on Windows in sdaemon as High priority.
Mon, Mar 18, 8:48 AM · Bug Report, Windows, gnupg24

Fri, Mar 15

werner committed rW90be12c88d08: Fix quoting of the AUTHENTICODE_sign macro (authored by werner).
Fix quoting of the AUTHENTICODE_sign macro
Fri, Mar 15, 3:04 PM

Thu, Mar 14

werner changed the status of T7042: AEAD mode does not properly handle modified cipher text from Open to Testing.
Thu, Mar 14, 9:55 PM · gnupg26, Bug Report
werner committed rG82b39fe25470: gpg: Make sure a DECRYPTION_OKAY is never issued for a bad OCB tag. (authored by werner).
gpg: Make sure a DECRYPTION_OKAY is never issued for a bad OCB tag.
Thu, Mar 14, 9:54 PM
werner committed rG122803bf1ac9: gpg: Make sure a DECRYPTION_OKAY is never issued for a bad OCB tag. (authored by werner).
gpg: Make sure a DECRYPTION_OKAY is never issued for a bad OCB tag.
Thu, Mar 14, 9:52 PM
werner triaged T7042: AEAD mode does not properly handle modified cipher text as High priority.
Thu, Mar 14, 9:48 PM · gnupg26, Bug Report
werner added a project to T7042: AEAD mode does not properly handle modified cipher text: gnupg26.

Thanks for reporting this. Returning error codes to upper layers is not always easy because the original logic is that we have a global error counter to decide whether an operation succeeded. My fix to check the error code before emitting the DECRYPTION_OKAY status,

Thu, Mar 14, 9:48 PM · gnupg26, Bug Report
werner committed rG50e81ad38d2b: gpg: Make sure a DECRYPTION_OKAY is never issued for a bad OCB tag. (authored by werner).
gpg: Make sure a DECRYPTION_OKAY is never issued for a bad OCB tag.
Thu, Mar 14, 9:42 PM
werner committed rGf78501c54532: gpg: new list-option store-x509-notations. (authored by werner).
gpg: new list-option store-x509-notations.
Thu, Mar 14, 8:59 PM

Wed, Mar 13

werner committed rG509d0f76cedd: gpg-check-pattern: Consider an empty pattern file as valid (authored by werner).
gpg-check-pattern: Consider an empty pattern file as valid
Wed, Mar 13, 3:32 PM
werner committed rGc27534de9553: gpg-check-pattern: Consider an empty pattern file as valid (authored by werner).
gpg-check-pattern: Consider an empty pattern file as valid
Wed, Mar 13, 3:32 PM
werner added a project to T7039: Kleopatra: Configuration dialog doesn't work: KF6.
Wed, Mar 13, 9:35 AM · KF6, kleopatra, Restricted Project, Bug Report
werner created KF6.
Wed, Mar 13, 9:35 AM
werner added a comment to T7041: Yubikey (PGP + PIV) --pcsc-shared: PIN requires every time.

But only if you can figure out in a transaction or locked sytate whether the card needs a verify. Otherwise we have a race between changing the PIN and verifying a PIN.

Wed, Mar 13, 9:25 AM · scd, Bug Report

Tue, Mar 12

werner committed rG14c1b73093e3: gpg: new list-option show-x509-notations (authored by werner).
gpg: new list-option show-x509-notations
Tue, Mar 12, 6:00 PM
werner committed rG4485930f9fd9: Merge branch 'STABLE-BRANCH-2-4' (authored by werner).
Merge branch 'STABLE-BRANCH-2-4'
Tue, Mar 12, 4:25 PM
werner committed rG81536535f815: card: Use xstrdup for module names. (authored by werner).
card: Use xstrdup for module names.
Tue, Mar 12, 4:25 PM
werner added a comment to T7040: Make it possible to install GnuPG VSD and GPD in parallel.

We need to see whether we can use the gpgconf.ctl feature also for Windows here. Registry entries for gpd and vsd also require a change.

Tue, Mar 12, 1:11 PM · Restricted Project, vsd33
werner committed rD374aab1e08d1: web: Release announcement (authored by werner).
web: Release announcement
Tue, Mar 12, 9:51 AM

Mon, Mar 11

werner committed rD2e4fe9012bd6: swdb: gpg4win 4.3.1 (authored by werner).
swdb: gpg4win 4.3.1
Mon, Mar 11, 4:05 PM
werner committed rW8168cb9e5fdf: Post release updates (authored by werner).
Post release updates
Mon, Mar 11, 3:46 PM
werner committed rWb73021f36d47: Release 4.3.1 (authored by werner).
Release 4.3.1
Mon, Mar 11, 3:44 PM
werner committed rW218b33806f0a: Update Kleopatra (authored by werner).
Update Kleopatra
Mon, Mar 11, 3:44 PM
werner closed T7038: gpg --recv-key return code is 0 as Wontfix.

It could have been discussed whether this makes sense. However, we can't change it anymore because it would change the behaviour. Consider a cron job which looks into a directory with keyids and imports them from a keyserver. It is totally fine if the script returns success if no keys are available.

Mon, Mar 11, 1:03 PM · Not A Bug, gnupg, Bug Report
werner committed rP069c21922345: gnome3: prefer gcr-4 (authored by Yaakov Selkowitz via Gnupg-devel <gnupg-devel@gnupg.org>).
gnome3: prefer gcr-4
Mon, Mar 11, 12:35 PM
werner reopened T7032: mailserver misconfigured, rejects on non-existing SPF record as "Open".

Your above excerpt for the log is not a bounce. Can you please give me an example from a rejected bounce? Noet that BATV is also in use.

Mon, Mar 11, 9:05 AM

Sun, Mar 10

werner closed T7032: mailserver misconfigured, rejects on non-existing SPF record as Resolved.

That is on purpose. Please add an SPF record to your site. If there is really really a problem for you with that, write me off tracker.

Sun, Mar 10, 1:05 PM
werner closed T7033: I can't recover my password. as Invalid.

See T7034

Sun, Mar 10, 1:02 PM · kleopatra, Bug Report
werner closed T7034: I can't recover my password. as Invalid.

Sorry, this is not a help line but a bug tracker. If you lost or forgot your password you are screwed up.

Sun, Mar 10, 1:02 PM · Support, Bug Report, gpg4win

Fri, Mar 8

werner committed rW916f5670606f: build: Avoid problems with automake and the AUTHENTICODE_FILES. (authored by werner).
build: Avoid problems with automake and the AUTHENTICODE_FILES.
Fri, Mar 8, 1:49 PM
werner committed rD67efd76b2f35: Fix typo on the signature key page (authored by werner).
Fix typo on the signature key page
Fri, Mar 8, 11:40 AM

Thu, Mar 7

werner moved T6997: gnupg-2.4.4 breaks dirmngr fetching keys via hkps:// from behind a proxy from QA to gnupg-2.4.5 on the gnupg24 board.
Thu, Mar 7, 3:26 PM · gnupg24 (gnupg-2.4.5), gnupg22, Bug Report
werner moved T6811: gpgv: Read-only trustedkeys.kbx should not be compressed from QA to gnupg-2.4.5 on the gnupg24 board.
Thu, Mar 7, 3:26 PM · gnupg24 (gnupg-2.4.5), gnupg22, gpgv, Bug Report
werner moved T6946: gpgv: Help automatic reject too short keys from QA to gnupg-2.4.5 on the gnupg24 board.
Thu, Mar 7, 3:25 PM · gnupg24 (gnupg-2.4.5), Feature Request, gpgv
werner moved T6425: improve pinentry behavior and texts in smart card context from WiP to gnupg-2.4.5 on the gnupg24 board.
Thu, Mar 7, 3:25 PM · gnupg24 (gnupg-2.4.5), scd, Bug Report, Restricted Project
werner moved T7000: Take derive usage into account for pkcs#15 cards. from WiP to gnupg-2.4.5 on the gnupg24 board.
Thu, Mar 7, 3:24 PM · gnupg24 (gnupg-2.4.5), Bug Report, scd
werner moved T7025: --trusted-key and --no-options mismatch from WiP to gnupg-2.4.5 on the gnupg24 board.
Thu, Mar 7, 3:24 PM · gnupg24 (gnupg-2.4.5), Bug Report, gnupg22
werner closed T6960: Release GnuPG 2.4.5 as Resolved.
Thu, Mar 7, 3:23 PM · gnupg24, Release Info
werner committed rWa41bb2d7f195: Update to GnuPG 2.4.5 (authored by werner).
Update to GnuPG 2.4.5
Thu, Mar 7, 3:22 PM
werner committed rD67d407e1c6bb: swdb: gnupg 2.4.5 (authored by werner).
swdb: gnupg 2.4.5
Thu, Mar 7, 3:13 PM
werner committed rGcbff323b3b24: Release 2.4.5 (authored by werner).
Release 2.4.5
Thu, Mar 7, 3:10 PM
werner committed rG609b1ec0c6ff: Post release updates (authored by werner).
Post release updates
Thu, Mar 7, 3:10 PM
werner committed rG348de4a8291a: po: msgmerge (authored by werner).
po: msgmerge
Thu, Mar 7, 3:10 PM
werner committed rG3ffcd533d422: po: Fix a fuzzy in the German, Polish and Japanese translation (authored by werner).
po: Fix a fuzzy in the German, Polish and Japanese translation
Thu, Mar 7, 3:10 PM
werner triaged T7030: Release GnuPG 2.4.6 as Low priority.
Thu, Mar 7, 3:09 PM · Release Info, gnupg24
werner committed rG09431d1762bd: scd: Improve code reability of ccid-driver.c (authored by werner).
scd: Improve code reability of ccid-driver.c
Thu, Mar 7, 1:45 PM
werner committed rG1682ca9f012a: scd: Add support for ACR-122U (authored by werner).
scd: Add support for ACR-122U
Thu, Mar 7, 1:45 PM
werner committed rGa1ea3b13e0c7: scd: Let the CCID module auto detach the kernel driver. (authored by werner).
scd: Let the CCID module auto detach the kernel driver.
Thu, Mar 7, 1:45 PM

Wed, Mar 6

werner committed rAdc86ec3749f0: Post release updates (authored by werner).
Post release updates
Wed, Mar 6, 4:25 PM
werner committed rAcc2f776904e0: Release 2.5.7 (authored by werner).
Release 2.5.7
Wed, Mar 6, 4:25 PM
werner committed rA11e9d822cf6f: build: Change the default for --with-libtool-modification. (authored by gniibe).
build: Change the default for --with-libtool-modification.
Wed, Mar 6, 4:25 PM
werner committed rAf845dffa7d25: build: New configure option --with-libtool-modification. (authored by gniibe).
build: New configure option --with-libtool-modification.
Wed, Mar 6, 4:25 PM
werner committed rAf884bb136811: build: Update libtool-patch.sed from libgpg-error. (authored by gniibe).
build: Update libtool-patch.sed from libgpg-error.
Wed, Mar 6, 4:25 PM
werner committed rWb0ec9d34c9c6: Update to libassuan 2.5.7 and 64bit DLL names (authored by werner).
Update to libassuan 2.5.7 and 64bit DLL names
Wed, Mar 6, 4:00 PM
werner committed rWfc13acb761be: Fix filename for shield.ico. (authored by werner).
Fix filename for shield.ico.
Wed, Mar 6, 4:00 PM
werner committed rW4348461c8439: Fix for the new READ_AUTOGEN stuff. (authored by werner).
Fix for the new READ_AUTOGEN stuff.
Wed, Mar 6, 4:00 PM
werner committed rG79d0e52b2d89: gpg: Fix a possible segv due to an uninitialized gcrypt context. (authored by werner).
gpg: Fix a possible segv due to an uninitialized gcrypt context.
Wed, Mar 6, 3:50 PM
werner committed rD3ff750ae225d: swdb: libassuan 2.5.7 (authored by werner).
swdb: libassuan 2.5.7
Wed, Mar 6, 3:25 PM
werner updated the task description for T6542: Release libassuan 2.5.6.
Wed, Mar 6, 2:42 PM · Release Info, libassuan
werner updated the task description for T7028: Release Libassuan 2.5.7.
Wed, Mar 6, 2:41 PM · libassuan, Release Info
werner added projects to T7028: Release Libassuan 2.5.7: Release Info, libassuan.
Wed, Mar 6, 2:41 PM · libassuan, Release Info
werner renamed T7028: Release Libassuan 2.5.7 from Release Libassaun 2.5.7 to Release Libassuan 2.5.7.
Wed, Mar 6, 2:40 PM · libassuan, Release Info
werner triaged T7028: Release Libassuan 2.5.7 as Normal priority.
Wed, Mar 6, 2:40 PM · libassuan, Release Info
werner moved T7026: GnuPG Icon missing in the msi installer from Restricted Project Column to Restricted Project Column on the Restricted Project board.
Wed, Mar 6, 2:15 PM · Restricted Project
werner added a comment to P44 (An Untitled Masterwork).

I try it. See T7026

Wed, Mar 6, 2:14 PM
werner added a comment to T6843: after enable kdf-setup impossible change user/admin pin.

See also rG40b85d8e8cecadf35e51e84b30de4fac820d714b for gnupg 2.4.

Wed, Mar 6, 12:34 PM · gnupg22, scd, yubikey
werner added a project to T6963: Trust system's root CA for checking CRL issuers: gnupg24 (gnupg-2.4.5).
Wed, Mar 6, 12:26 PM · gnupg24 (gnupg-2.4.5), gnupg22 (gnupg-2.2.43), Feature Request
werner moved T6961: On Windows the gpgtar --status-fd 2 does not show the gpg status lines from done to gnupg-2.4.5 on the gnupg24 board.
Wed, Mar 6, 12:24 PM · gnupg24 (gnupg-2.4.5), Bug Report
werner created gnupg24 (gnupg-2.4.5).
Wed, Mar 6, 12:20 PM
werner added a comment to T6757: gpgsm 2.4 Fails to import P12 certificate/key.

Sorry, for not following up earlier. Can you please do me a favor and run the last tests again, this time adding -v and --debug 1 to the invocation? Feel free to forward the output to my private address is that is easier (wk at gnupg.org).

Wed, Mar 6, 12:19 PM · gnupg24 (gnupg-2.4.4), S/MIME, Bug Report
werner committed rG00b877ecda43: doc: Typo fix in comment (authored by werner).
doc: Typo fix in comment
Wed, Mar 6, 11:53 AM
werner changed the status of T6719: Support Proxy-Authorization: Negotiate on Windows from Open to Testing.
Wed, Mar 6, 11:49 AM · gnupg24, gnupg22, Feature Request, Restricted Project
werner changed the status of T6719: Support Proxy-Authorization: Negotiate on Windows, a subtask of T5768: Dirmngr: Use windows proxy settings if system proxy settings should be used, from Open to Testing.
Wed, Mar 6, 11:49 AM · Feature Request, gnupg, Restricted Project
werner changed the status of T7000: Take derive usage into account for pkcs#15 cards., a subtask of T7001: Support D-TRUST ECC cards, from Open to Testing.
Wed, Mar 6, 11:47 AM · gnupg, scd
werner changed the status of T7000: Take derive usage into account for pkcs#15 cards. from Open to Testing.
Wed, Mar 6, 11:47 AM · gnupg24 (gnupg-2.4.5), Bug Report, scd
werner committed rG5999d95e04c4: wks: Make gpg-wks-client --mirror work w/o args. (authored by werner).
wks: Make gpg-wks-client --mirror work w/o args.
Wed, Mar 6, 11:44 AM
werner committed rG37cc255e4942: wks: Make gpg-wks-client --mirror work w/o args. (authored by werner).
wks: Make gpg-wks-client --mirror work w/o args.
Wed, Mar 6, 10:03 AM