Page MenuHome GnuPG

gnupgProject
ActivePublic

Milestones

Subprojects

Members

  • This project does not have any members.
  • View All

Recent Activity

Thu, Nov 25

werner closed T5705: GnuPG: System wide configuration ignored when gpg.conf-2 exists as Resolved.

Not a bug but a limitation of 2.2's option listing: In contrast to 2.3 we can't *show* the used options via gpgconf correcly if there is a conflict between global and local options. However, the actually *used* values are different and correct according to the config. In particular a global forced option overrides any local or command line option.

Thu, Nov 25, 4:11 PM · Not A Bug, gnupg, Restricted Project
werner added a project to T5705: GnuPG: System wide configuration ignored when gpg.conf-2 exists: gpgrt.
Thu, Nov 25, 2:56 PM · Not A Bug, gnupg, Restricted Project
aheinecke triaged T5705: GnuPG: System wide configuration ignored when gpg.conf-2 exists as Normal priority.
Thu, Nov 25, 2:54 PM · Not A Bug, gnupg, Restricted Project
gniibe reopened T5120: Incompatible Ed25519 secret key (no-encryption), a subtask of T5114: GnuPG fails to import back generated and exported EdDSA secret key., as Open.
Thu, Nov 25, 6:14 AM · gnupg, Testing, gpgagent, Bug Report

Tue, Nov 23

werner closed T5120: Incompatible Ed25519 secret key (no-encryption), a subtask of T5114: GnuPG fails to import back generated and exported EdDSA secret key., as Resolved.
Tue, Nov 23, 9:15 AM · gnupg, Testing, gpgagent, Bug Report
werner changed the status of T5598: AppImage of gpg from Open to Testing.
Tue, Nov 23, 9:03 AM · gnupg, Restricted Project, Feature Request
werner added a comment to T5598: AppImage of gpg.

No, too much release work. Better just one AppImage. Or well one VSD (based on 2.2) and one regular (based on 2.3)

Tue, Nov 23, 9:02 AM · gnupg, Restricted Project, Feature Request

Mon, Nov 22

ikloecker placed T5598: AppImage of gpg up for grabs.

Not sure if we want a separate AppImage for gpg & Co. Setting priority to "Needs Triage".

Mon, Nov 22, 11:40 AM · gnupg, Restricted Project, Feature Request

Wed, Nov 17

kwinz added a comment to T1621: Support multiple cards (not just readers).

@werner That is not helpful. I tried 4 or 5 different readers. And the Reiner SCT cyberjack is the one that works best.

Wed, Nov 17, 11:03 PM · gnupg, Feature Request

Sat, Nov 13

werner closed T5685: Clear stale --trusted-key records from the trustdb as Resolved.
Sat, Nov 13, 9:03 PM · gnupg
werner triaged T5685: Clear stale --trusted-key records from the trustdb as Normal priority.
Sat, Nov 13, 8:13 PM · gnupg

Fri, Nov 12

werner added a comment to T1621: Support multiple cards (not just readers).

Do not user Reiner SCT those readers are all buggy and work only on Windows - if at all. Stay away from them and get a real reader and not the incompatible broken stuff from that company. I spent way too much time trying to get those readers working. That time is better invested in support for hardware which is standard compatible or are helpful to get stuff running.

Fri, Nov 12, 12:36 PM · gnupg, Feature Request
kwinz added a comment to T1621: Support multiple cards (not just readers).

Some more info: OpenVPN does not care about the second reader. So a workaround that I just found is to disable the Virtual Smartcard reader first so that only the ReinerSCT smartcard reader with an OpenPGP V3.4 card is present. Make sure to open an SSH connection. Then reconnect the second reader. And reconnect to VPN. After the PIN for the OpenPGP V3.4 card is already cached and a connection established I can also open more SSH connections with the second reader attached and disconnect and reconnect the VPN as you want.

Fri, Nov 12, 10:41 AM · gnupg, Feature Request
kwinz added a comment to T1621: Support multiple cards (not just readers).

I am on Windows 10 21H1 and I using gnupg-w32-2.3.3_20211012 from here [1]
Together with win-gpg-agent, which extends gnupg to play nicely with Windows sockets. [2]

Fri, Nov 12, 10:23 AM · gnupg, Feature Request

Wed, Nov 10

ikloecker added a comment to T5598: AppImage of gpg.

I compiled the Appimage with the scripts in Gpg4win and it runs Kleopatra and works :-)

Wed, Nov 10, 6:18 PM · gnupg, Restricted Project, Feature Request
aheinecke added a comment to T5598: AppImage of gpg.

I compiled the Appimage with the scripts in Gpg4win and it runs Kleopatra and works :-)

Wed, Nov 10, 12:31 PM · gnupg, Restricted Project, Feature Request

Nov 2 2021

werner added a comment to T1621: Support multiple cards (not just readers).

Tehre has never been an option "shared-access" in GnuPG. At least not in upstream. In general we suggest the use of the interal ccid driver, but if you want PC/SC you need to use disable-ccid-driver. This is because 2.3 does not feature an automatic fallback to PC/SC anymore. Using pcsc-shared with OpenPGP cards can lead to surprising effects. You may want to try Scute as PCKSC#11 access module.

Nov 2 2021, 8:54 AM · gnupg, Feature Request

Oct 31 2021

sjlongland added a comment to T1621: Support multiple cards (not just readers).

So, I have something working… in the apparent absence of any sort of clear documentation that I could find. I had some time on my hands this afternoon, so had another look.

Oct 31 2021, 7:08 AM · gnupg, Feature Request

Oct 19 2021

bernhard added a comment to T4249: No connection to Keyserver possible.

This has not been set high on the priorities, because keyserver access works for most with Gpg4win (and thus GnuPG) on windows. A recent exception has been occurred about a month ago with Let's encrypt expired root certificate. So currently for Gpg4win 3.1.16 you need to update to a newer GnuPG (Version 2.2.32 at time of writing), by installing the simple installer,e.g. https://gnupg.org/ftp/gcrypt/binary/gnupg-w32-2.2.32_20211006.exe

Oct 19 2021, 10:57 AM · gnupg, dirmngr, Bug Report, gpg4win

Oct 11 2021

onickolay added a comment to T5464: Failure to import Curve25519 ECDH secret subkey to the GnupG..

Fix for this issue landed RNP master, and will be included to the RNP v0.16.0 release.
Within fix:

  • new keys will be generated with correctly tweaked bits
  • using secret key with non-tweaked bits would issue a warning
  • CLI command --edit-key [--check-cv25519-bits | --fix-cv25519-bits] added, allowing to fix older key
Oct 11 2021, 12:35 PM · Support, gnupg, OpenPGP

Oct 10 2021

werner closed T3412: gpg-agent manual page says to always add GPG_TTY to `.bashrc` as Resolved.
Oct 10 2021, 7:02 PM · Not A Bug, gnupg
calestyo added a comment to T5646: indicate wrong passphrase via exit status.

I did in fact check --status-fd before, but I'm not sure whether it gives me the information I wanted.

Oct 10 2021, 5:12 PM · gnupg, FAQ
werner closed T5646: indicate wrong passphrase via exit status as Resolved.

Please use the --status-fd interface. This yields all the info you need. An exit code is not distinct enough for such purpose and you need to check the status lines in any case. For scripting gpgme-tool or gpgme-json might be useful as well because they do all the nitty-gritty parts of using gpg correctly

Oct 10 2021, 4:15 PM · gnupg, FAQ

Oct 8 2021

onickolay added a comment to T3795: Failure to decrypt file, encrypted with multiple passwords.

Argh, sorry for bugging. Clearing comment out - I simply missed fact that my tests are run with random messages, so with 5% probability another password will be interpreted as 'good' for the first SKESK.

Oct 8 2021, 12:23 PM · Bug Report, gnupg

Sep 29 2021

bernhard added a comment to T3893: Timeout for receive-keys.

In my understanding, it should be possible to wait for the gpg command pipe from a different process and then terminate the connection on a timeout, kllling the process eventually. So the Enigmail side could implement something. These days I'm not sure what Enigmail uses for OpenPGP support. Thunderbird has moved on to a different implementation and Enigmail stops supporting Thunderbird 68 in two days https://www.enigmail.net/index.php/en/home/news/71-2021-08-31-end-of-support-for-thunderbird

Sep 29 2021, 4:12 PM · Enigmail, FAQ, gnupg
calestyo added a comment to T5594: some possible minor things in the manpage.

Well, as I've said in the comment above, there doesn't seem to be any correction towarads --passphrase-fd not requiring --pinentry-mode loopback (still works withou)... and --no-default-keyring still gives the impression that it would be needed (while --no-keyring works as well).

Sep 29 2021, 12:01 AM · Documentation, gnupg, Bug Report

Sep 28 2021

werner triaged T5594: some possible minor things in the manpage as Low priority.

Please don't, if you really feel like tha tis not resolved please re-open this ticket.

Sep 28 2021, 11:03 PM · Documentation, gnupg, Bug Report
calestyo added a comment to T5594: some possible minor things in the manpage.

@werner shall I open a new ticket for the remaining stuff?

Sep 28 2021, 7:26 PM · Documentation, gnupg, Bug Report
ikloecker added a comment to T5599: Make gpg use the helpers baked into its AppImage.

Works if one puts

rootdir = $APPDIR/usr

in the gpgconf.ctl file.

Sep 28 2021, 9:46 AM · gnupg, Restricted Project, Feature Request

Sep 27 2021

gniibe closed T5568: Use sigdescr_np instead of (deprecated) sys_siglist as Resolved.
Sep 27 2021, 3:24 AM · gnupg

Sep 23 2021

aheinecke triaged T5620: GnuPG, pinentry: Passphrase pattern error / warning does not match new logic as Normal priority.
Sep 23 2021, 12:15 PM · gnupg, Restricted Project

Sep 21 2021

amit added a comment to T5607: Fingerprint signing fails with 'gpg: signing failed: No secret key'.

I'm not really sure which version it worked with earlier. This yubikey setup is quite old now, and I've not signed keys recently. I think the last I signed were at least 2 yrs back, hence the very vague allusion to the setup working previously. Apologies, no definite answer there.

Sep 21 2021, 6:56 PM · Support, Info Needed, gnupg (gpg22)

Sep 20 2021

masteru341 added a comment to T5608: Encryption using python for international characters not working properly.
  1. >>gpg2 --version

gpg (GnuPG) 2.0.30 (Gpg4win 2.3.3)
libgcrypt 1.6.6

Sep 20 2021, 7:50 PM · gnupg (gpg20), Too Old, Python, Bug Report
werner added a comment to T5607: Fingerprint signing fails with 'gpg: signing failed: No secret key'.

@amit: Do you say it used to work with GnuPG 2.2.27 or did it worked with an older version?

Sep 20 2021, 7:43 PM · Support, Info Needed, gnupg (gpg22)
werner added projects to T5608: Encryption using python for international characters not working properly: gnupg, Python.

Which gpg version?
Which Python library? (gnupg is pretty generic)
How does the Python library call gpg?
Are you aware that gpg uses utf8 and not Windows Unicode?

Sep 20 2021, 7:40 PM · gnupg (gpg20), Too Old, Python, Bug Report
William updated the task description for T5609: keydb_get_keyblock failed with cv448 key .
Sep 20 2021, 6:22 PM · Testing, OpenPGP, gnupg (gpg23)
William created T5609: keydb_get_keyblock failed with cv448 key .
Sep 20 2021, 6:20 PM · Testing, OpenPGP, gnupg (gpg23)
ikloecker added a comment to T5607: Fingerprint signing fails with 'gpg: signing failed: No secret key'.

When you sign data, then the signing subkey is used

ssb>  rsa4096/0xEB0B4DFC657EF670 2016-04-01 [S]
Sep 20 2021, 6:15 PM · Support, Info Needed, gnupg (gpg22)
amit added a comment to T5607: Fingerprint signing fails with 'gpg: signing failed: No secret key'.

Just noting that the logs were captured by enabling debug logs for the agent:

eval $(gpg-agent --daemon --debug-all --log-file /var/tmp/gpgagent.log)
Sep 20 2021, 5:16 PM · Support, Info Needed, gnupg (gpg22)
amit created T5607: Fingerprint signing fails with 'gpg: signing failed: No secret key'.
Sep 20 2021, 5:15 PM · Support, Info Needed, gnupg (gpg22)
onickolay added a comment to T5464: Failure to import Curve25519 ECDH secret subkey to the GnupG..

Thanks for clarification, indeed attempt to decrypt data returns an error afterwards.

Sep 20 2021, 4:19 PM · Support, gnupg, OpenPGP
werner added a comment to T5464: Failure to import Curve25519 ECDH secret subkey to the GnupG..

Well, while importing you get the warning:

Sep 20 2021, 4:08 PM · Support, gnupg, OpenPGP
werner added a comment to T5464: Failure to import Curve25519 ECDH secret subkey to the GnupG..

Yes, for migration from GnuPG 2.0 reasons, a batch import delays the key checking (i.e. converting from OpenPGP to GnuPG internal format) to the first use. Thus you don't see an error immediately. But if you encrypt something , you won't be able to decrypt it again:

Sep 20 2021, 4:00 PM · Support, gnupg, OpenPGP
onickolay added a comment to T5464: Failure to import Curve25519 ECDH secret subkey to the GnupG..

Thanks, Werner.
During further work on this got another issue:

Sep 20 2021, 3:48 PM · Support, gnupg, OpenPGP

Sep 17 2021

werner added a comment to T5599: Make gpg use the helpers baked into its AppImage.

The actual patch is rGd4768bb982adb5c8410303334ee8d82ba0d71f3b (our parser in dev.gnupg.org missed to pick up the bug-id due to teh use of scissor lines in the commit message).

Sep 17 2021, 5:58 PM · gnupg, Restricted Project, Feature Request
calestyo added a comment to T5594: some possible minor things in the manpage.

The changes do not seem to touch anything I've mentoned in (1)?

Sep 17 2021, 2:59 PM · Documentation, gnupg, Bug Report
mid-kid added a comment to T5551: gpg-agent: DISPLAY is not set when calling pinentry-qt.

I see, I wasn't aware of this. Thanks for fixing!

Sep 17 2021, 12:22 PM · qt, pinentry, gnupg
werner closed T5551: gpg-agent: DISPLAY is not set when calling pinentry-qt as Resolved.

Thanks for commenting. I close this bug then.

Sep 17 2021, 8:07 AM · qt, pinentry, gnupg

Sep 16 2021

gouttegd added a comment to T5551: gpg-agent: DISPLAY is not set when calling pinentry-qt.

Your proposed fix (in your first comment) has actually already been applied (commit 1305baf0994059f458b1d5ca28a355c12932fab3 in master, backported to the -2.2 branch in 455ba49071dea7588c9de11785b3092e45e4560b). It is part of gnupg-2.2.31 released today. :)

Sep 16 2021, 11:11 PM · qt, pinentry, gnupg
mid-kid added a comment to T5551: gpg-agent: DISPLAY is not set when calling pinentry-qt.

The Qt upstream bug report has just been rejected. I hope something can be done here...

Sep 16 2021, 4:31 PM · qt, pinentry, gnupg